SMS signature title real-name automation method and system

Abstract

The present application relates to the field of identity authentication technology, and discloses a method and system for automating the real-name signature title of a short message. The method comprises: performing character set verification on the short message signature title input by the user to obtain a valid character string that complies with the character set specification of the target language; performing unified encoding conversion on the valid character string to obtain a standardized unified encoding character string; performing multi-factor authentication on the identity information provided by the user to obtain a user identity authentication result; performing security assessment on the user identity authentication result to obtain a user identity credibility index; performing correlation processing on the unified encoding character string and the user identity credibility index to obtain a signature title authentication data packet; encrypting and storing the signature title authentication data packet to obtain an encrypted signature title data record. The present application realizes efficient verification, secure storage and rapid retrieval of the short message signature title, thereby effectively improving the credibility and security of short message communication.

Description

Technical Field

[0001] The present application relates to the field of identity authentication technology, and in particular to a method and system for automating the real-name signature title of a short message. Background Art

[0002] SMS is an important way to spread information. However, SMS fraud, spam and other issues have seriously affected users' information security and communication experience. In order to standardize the use of SMS and improve the credibility of SMS, real-name authentication of SMS signatures is required. However, traditional SMS signature authentication methods often have problems such as low efficiency, insufficient security, and lack of multi-language support.

[0003] At present, the multi-language processing capability of SMS signature titles is put forward to a higher level. At the same time, with the continuous escalation of network attack methods, a single identity authentication method can no longer meet the increasingly stringent security requirements. In addition, the storage and management of massive SMS signature data also faces huge challenges. How to improve storage efficiency and retrieval speed while ensuring data security has become an urgent problem to be solved. Summary of the invention

[0004] The present application provides a method and system for automating the real-name verification of SMS signature titles, so as to achieve efficient verification, secure storage and rapid retrieval of SMS signature titles, thereby effectively improving the credibility and security of SMS communications.

[0005] In a first aspect, the present application provides a method for automating the real-name signature title of a short message, the method comprising:

[0006] Perform character set verification on the SMS signature title input by the user to obtain a valid character string that conforms to the character set specification of the target language;

[0007] Performing Unicode conversion on the valid character string to obtain a standardized Unicode character string;

[0008] Perform multi-factor authentication on the identity information provided by the user to obtain the user identity authentication result;

[0009] Performing a security assessment on the user identity authentication result to obtain a user identity credibility index;

[0010] Associating the unified encoding string with the user identity credibility index to obtain a signature title authentication data packet;

[0011] The signature title authentication data packet is encrypted and stored to obtain an encrypted signature title data record.

[0012] In a second aspect, the present application provides a short message signature title real-name automation system, the short message signature title real-name automation system comprising:

[0013] The verification module is used to verify the character set of the SMS signature title input by the user to obtain a valid character string that meets the character set specification of the target language;

[0014] A conversion module, used for performing Unicode conversion on the valid character string to obtain a standardized Unicode character string;

[0015] The authentication module is used to perform multi-factor authentication on the identity information provided by the user and obtain the user identity authentication result;

[0016] An evaluation module, used to perform a security evaluation on the user identity authentication result to obtain a user identity credibility index;

[0017] An association module, used for associating the unified encoding string with the user identity credibility index to obtain a signature title authentication data packet;

[0018] The encryption module is used to encrypt and store the signature title authentication data packet to obtain an encrypted signature title data record.

[0019] In the technical solution provided by the present application, by performing character set verification and unified encoding conversion on the SMS signature title input by the user, effective support for multiple languages ​​is achieved, and multi-factor authentication technology is used to verify the user identity and perform security assessment, which greatly improves the reliability of identity authentication and the overall security of the system. By performing hash processing, digital signature and integrity verification on the signature title authentication data packet, the integrity and non-tamperability of the data during transmission and storage are ensured. By adopting data decentralized storage strategy and redundant coding technology, the data storage method is optimized, the storage efficiency and data fault tolerance are improved. The threshold cryptographic algorithm is used to split and reorganize the encryption key, the security of the key is enhanced, and a flexible key recovery mechanism is provided. By performing block processing, parallel encryption and decentralized storage on the data, the processing speed and concurrency of the system are improved. By encrypting and storing user identity information and signature title data, user privacy and sensitive information are effectively protected. By generating an authentication data packet containing a timestamp and a unique identifier, by evaluating the storage node status information and performing intelligent allocation, the rational use of storage resources is achieved, and the overall efficiency of the system is improved. It achieves efficient verification, secure storage and fast retrieval of SMS signature titles, thereby effectively improving the credibility and security of SMS communications. BRIEF DESCRIPTION OF THE DRAWINGS

[0020] In order to more clearly illustrate the technical solutions of the embodiments of the present invention, the accompanying drawings required for use in the description of the embodiments will be briefly introduced below. Obviously, the accompanying drawings described below are some embodiments of the present invention. For ordinary technicians in this field, other accompanying drawings can be obtained based on these accompanying drawings without paying creative work.

[0021] Figure 1 This is a schematic diagram of an embodiment of the method for automating the real-name signature title of a short message in an embodiment of the present application;

[0022] Figure 2 This is a schematic diagram of an embodiment of the SMS signature title real-name automation system in the embodiment of the present application. DETAILED DESCRIPTION

[0023] The embodiments of the present application provide a method and system for automating the real-name of a text message signature title. The terms "first", "second", "third", "fourth", etc. (if any) in the specification and claims of the present application and the above-mentioned drawings are used to distinguish similar objects, and are not necessarily used to describe a specific order or sequence. It should be understood that the data used in this way can be interchangeable where appropriate, so that the embodiments described herein can be implemented in an order other than that illustrated or described herein. In addition, the terms "including" or "having" and any variations thereof are intended to cover non-exclusive inclusions, for example, a process, method, system, product or device that includes a series of steps or units is not necessarily limited to those steps or units that are clearly listed, but may include other steps or units that are not clearly listed or inherent to these processes, methods, products or devices.

[0024] For ease of understanding, the specific process of the embodiment of the present application is described below. Figure 1 , an embodiment of the SMS signature title real-name automation method in the embodiment of the present application includes:

[0025] Step S101, performing character set verification on the SMS signature title input by the user to obtain a valid character string that complies with the character set specification of the target language;

[0026] It is understandable that the execution subject of the present application can be a text message signature title real-name automation system, or a terminal or a server, which is not limited here. The present application embodiment is described by taking a server as the execution subject as an example.

[0027] Specifically, the character segmentation is performed on the SMS signature title input by the user, and the entire signature title is decomposed into independent character units to obtain a character sequence. Character matching is performed on the character sequence according to a preset multilingual character set library to obtain the language attribute of each character. The language attribute of each character is statistically analyzed to obtain the target language type of the entire signature title. The statistical analysis can be performed by calculating the frequency of occurrence of characters in each language, and the language with the highest frequency of use is determined as the target language type. According to the target language type, the corresponding target language character set specification is retrieved from the preset character set specification library to ensure that the subsequent processing is based on the correct language specification. Each character in the character sequence is compared with the target language character set specification one by one to obtain the character compliance mark of each character. For characters marked as non-compliant, replacement suggestion generation processing is performed to obtain a character replacement suggestion list. The character replacement suggestion generation processing relies on a preset replacement rule library, and one or more replacement suggestions are generated for each non-compliant character according to these rules. According to the character replacement suggestion list, the non-compliant characters are automatically replaced to obtain a preliminarily corrected character sequence. Characters that do not conform to the target language specification are replaced with characters that conform to the specification to improve the compliance of the signature title. Perform semantic integrity analysis on the initially revised character sequence, and obtain a semantic integrity score by checking the contextual relationship, vocabulary and grammatical structure of the character sequence. Adjust the initially revised character sequence based on the semantic integrity score to ensure that the revised character sequence is not only compliant with the character set specification, but also semantically coherent and accurate. Splice the optimized character sequence to obtain a valid character string that finally complies with the target language character set specification. Reassemble the adjusted and optimized character sequence into a complete SMS signature title.

[0028] Step S102, performing Unicode conversion on the valid character string to obtain a standardized Unicode character string;

[0029] Specifically, character encoding detection is performed on the valid character string to identify the encoding format currently used by the valid character string and obtain the original encoding type. According to the original encoding type, a corresponding conversion rule is selected from a preset encoding conversion rule library to obtain a target conversion rule set. Each character in the valid character string is converted one by one according to the target conversion rule set to obtain a preliminary conversion character sequence. The one-by-one conversion process ensures that each character can be accurately converted according to the rule set, avoiding encoding errors caused by character mismatch. Redundant encoding check is performed on the preliminary conversion character sequence to identify redundant characters that may be generated during the conversion process and obtain a list of character positions to be optimized. According to the list of character positions to be optimized, encoding optimization is performed on the corresponding characters to obtain a first character sequence. Encoding optimization aims to eliminate redundant characters and ensure that each character is accurately converted. Byte order marking is performed on the first character sequence to ensure the correctness of the character sequence when it is transmitted in different systems to obtain a second character sequence. The second character sequence is normalized to ensure that the character sequence complies with the Unicode standard. Normalization adjusts the character encoding so that it uniformly follows the Unicode standard to avoid encoding compatibility issues between different systems. Perform encoding consistency verification on strings that conform to the Unicode standard to check whether there are inconsistent encodings during the encoding conversion process and obtain an encoding consistency report. According to the encoding consistency report, correct the inconsistent encodings to obtain a corrected Unicode string. The correction process ensures that all characters conform to the unified encoding standard and eliminates the problem of inconsistent encodings. Compress the corrected Unicode string to reduce the overhead of data storage and transmission and obtain a standardized unified encoding string.

[0030] Step S103: Perform multi-factor authentication on the identity information provided by the user to obtain a user identity authentication result;

[0031] Specifically, the identity information provided by the user is classified and processed to obtain a multi-dimensional identity feature set. By classifying the identity information into different categories, such as name, ID number, mobile phone number, address, etc., it is ensured that the identity features of the user are fully covered. Dynamic verification factors are generated according to the multi-dimensional identity feature set to obtain a personalized authentication scheme. The personalized authentication scheme designs verification factors suitable for each user according to the identity features of different users to ensure the security and accuracy of the authentication process. Under the guidance of the personalized authentication scheme, the password entered by the user is hashed and salted to obtain an encrypted password string. The hashing and salting process increases the complexity and security of the password by adding random data (salt) to the password and then performing a hash operation to prevent the password from being easily cracked. At the same time, a time synchronization code is generated for the user device according to a preset time window to obtain a dynamic password. The dynamic password is a dynamically changing password based on time synchronization, which improves the security of authentication. The biometric data provided by the user is subjected to feature extraction processing to obtain a biometric vector. The biometric data may include fingerprints, facial recognition, iris scanning, etc. Through feature extraction, the biometrics are converted into a computable vector form. Multimodal fusion processing is performed based on the encrypted password string, dynamic password and biometric feature vector to obtain the fusion authentication index. Threshold comparison processing is performed on the fusion authentication index to obtain the preliminary authentication result. The threshold comparison compares and judges the fusion authentication index through the preset standard value to preliminarily determine whether the authentication is passed. The preliminary authentication result is weighted and adjusted according to the user's historical behavior data to obtain a weighted authentication score. The user's historical behavior data includes the user's previous login records, transaction behaviors, etc. By adjusting the weight of the preliminary authentication result and combining it with historical data, the authentication result is made more accurate. Risk assessment processing is performed on the weighted authentication score to obtain the identity credibility level. Risk assessment calculates the risk factors that may exist in the authentication process and gives the authentication result a credibility level, indicating the credibility of the user's identity. A digital signature containing the authentication details is generated according to the identity credibility level to obtain the user identity authentication result. The digital signature is a complete record of the authentication process, generated by encryption technology, to ensure the security and non-tamperability of the authentication information.

[0032] Step S104: Perform security assessment on the user identity verification result to obtain a user identity credibility index;

[0033] Specifically, the user identity authentication result is parsed to obtain a multi-dimensional verification feature set. The multi-dimensional verification feature set includes data in multiple dimensions such as the user's identity information, authentication method, login time, and geographic location. The multi-dimensional verification feature set is weighted and calculated according to a preset feature weight model to obtain an initial security score. The feature weight model ensures the accuracy and scientificity of the scoring process by assigning different weights to different features. The user's historical behavior data is analyzed in time series to obtain the user's behavior pattern characteristics. Time series analysis identifies the user's behavior pattern characteristics by analyzing the user's behavior data, such as login time, frequency, and operation mode. According to the user's behavior pattern characteristics, the initial security score is dynamically adjusted to obtain an adjusted security score. The user's geographic location information is detected for anomalies to obtain a location risk coefficient. The location risk coefficient evaluates the risk of the geographic location by detecting anomalies in the user's current geographic location, such as the user suddenly appearing in an uncommon geographic location or the location changes too frequently. According to the location risk coefficient, the adjusted security score is corrected to obtain a location-sensitive security score. The user's device information is evaluated for credibility to obtain a device credibility index. The device credibility index ensures the credibility of the user's device by evaluating the security of the device, such as the device's usage history, the presence of malware, the device's hardware information, etc. A comprehensive security index is obtained by comprehensive calculation based on the device credibility index and the location-sensitive security score. The comprehensive security index combines multiple factors such as user identity authentication results, geographic location risks, and device credibility. Fuzzy logic reasoning is performed on the comprehensive security index to obtain the user identity credibility level. Fuzzy logic reasoning gives the user identity credibility level by reasoning and judging the comprehensive security index. Based on the user identity credibility level, a digital certificate containing multi-dimensional evaluation results is generated to obtain the user identity credibility index.

[0034] Step S105, performing association processing on the unified encoding character string and the user identity credibility index to obtain a signature title authentication data packet;

[0035] Specifically, the unified encoding string is hashed to obtain a string summary. The hashing process generates a fixed-length string summary by inputting the unified encoding string into the hash function. The summary is the unique representation of the original string, ensuring its integrity and non-tamperability. A digital signature is generated according to the user identity credibility index to obtain a credibility certificate. The digital signature uses the user's private key to encrypt the identity credibility index, providing a method for verifying the user's identity and data integrity. The string summary and the credibility certificate are spliced ​​to obtain initial associated data. The current timestamp is obtained according to the preset timestamp server to obtain the authentication time mark. The timestamp is a mark that records the current time, ensuring that each authentication has a unique time record. The initial associated data and the authentication time mark are combined to obtain time-sensitive associated data. A unique identifier is generated according to a preset random number generation algorithm to obtain a data packet sequence number. The unique identifier ensures that each data packet has a unique sequence number through a random number generation algorithm to avoid data packet duplication or confusion. The time-sensitive associated data and the data packet sequence number are encoded to obtain encoded associated data. The encoding process converts the data into a standardized format through a specific algorithm to facilitate subsequent storage and transmission. In order to ensure the integrity of the data, the encoded associated data is checked and calculated according to the preset data integrity check algorithm to obtain the integrity check code. The check code is a check value generated by a specific algorithm calculation on the data, which is used to verify the integrity and consistency of the data during transmission. The encoded associated data and the integrity check code are packaged to obtain the original authentication data packet. The original authentication data packet is formatted according to the preset data structure specification to obtain the signature header authentication data packet. The formatting process ensures the standardization and consistency of the data packet by organizing the data packet according to a specific structure, which is convenient for the system to parse and verify it.

[0036] Step S106: Encrypt and store the signature title authentication data packet to obtain an encrypted signature title data record.

[0037] Specifically, the signature header authentication data packet is segmented to obtain multiple data blocks. A random key is generated according to a preset key generation algorithm to obtain a data encryption key. The data encryption key is a secret key used to encrypt data blocks, and its randomness and security are ensured by a random generation algorithm. The data encryption key is segmented to obtain multiple key fragments, thereby improving the security of the key. By splitting the key into multiple parts, the difficulty of recovering the key is increased. The multiple key fragments are reorganized according to a preset threshold cryptographic algorithm to obtain a key reconstruction scheme. The threshold cryptographic algorithm is a method of dividing a key into several parts and setting a minimum number of parts required to recover the key. Through the reorganization scheme, the complete key is reconstructed under certain conditions to ensure the security and recoverability of the key. Each data block is symmetrically encrypted using the data encryption key to obtain an encrypted data block sequence. Symmetric encryption is an encryption method that uses the same key for encryption and decryption. In this method, data blocks can be encrypted quickly and efficiently. The encrypted data block sequence is allocated according to a preset data dispersion storage strategy to obtain a storage location mapping table. The data dispersion storage strategy reduces the risks brought by data centralized storage by distributing the encrypted data blocks in different locations, thereby improving the security and reliability of data. The key reconstruction scheme and the storage location mapping table are combined to obtain a metadata package. The metadata package is asymmetrically encrypted according to the preset public key infrastructure to obtain encrypted metadata. Asymmetric encryption uses a pair of public and private keys for encryption and decryption. The data encrypted by the public key can only be decrypted by the corresponding private key. The encrypted data block sequence and the encrypted metadata are assembled to obtain a complete encrypted data package. In order to facilitate fast search and access of data, the complete encrypted data package is indexed according to the preset database index structure to obtain the encrypted signature header data record. The database index structure makes it more efficient and faster to store and retrieve data by establishing indexes.

[0038] The data encryption key is converted into binary to obtain a binary key sequence. The binary key sequence is padded according to the preset key length requirement to obtain a normalized key sequence. By adding necessary padding bits to the binary sequence, it meets the standard key length requirement and ensures the consistency of the key during encryption and decryption. The normalized key sequence is segmented to obtain an initial key fragment set. A key sharing polynomial is created according to a preset random polynomial generation algorithm to obtain a polynomial coefficient set. The key sharing polynomial is the core of the threshold cipher algorithm. By generating a polynomial and calculating its coefficient, a corresponding value is generated for each key fragment. According to the polynomial coefficient set, each fragment in the initial key fragment set is calculated to obtain an encryption key fragment set. The calculation process converts each initial key fragment into an encryption key fragment through polynomial operation to ensure that it has good recovery during the reorganization process. The encryption key fragment set is grouped according to the preset threshold parameter to obtain multiple subkey groups. The threshold parameter sets the minimum number of key fragments required for reorganization. Grouping can ensure that the key can be successfully reconstructed under the threshold condition. Based on the Lagrange interpolation algorithm, each subkey group is reconstructed and verified to obtain a reconstruction feasibility report. The Lagrange interpolation algorithm is a mathematical method that reconstructs a polynomial through a small number of known points to verify the reconstruction capability of the key fragment. According to the reconstruction feasibility report, the subkey groups that do not meet the requirements are adjusted to obtain an optimized key fragment distribution scheme. The adjustment process ensures that all subkey groups can meet the reorganization conditions and improves the success rate of key reconstruction. The optimized key fragment distribution scheme is encoded to obtain a key reconstruction instruction set. The encoding process converts the distribution scheme into specific operation instructions to facilitate subsequent execution and verification. According to the key reconstruction instruction set, a complete process including reconstruction steps and verification mechanism is generated to obtain a key reconstruction scheme.

[0039] Each data block is padded to ensure that all data blocks reach a uniform length and obtain standardized data blocks of equal length. By adding appropriate padding values, all data blocks have the same length, which is convenient for subsequent encryption processing. An initialization vector is generated according to the data encryption key to obtain the initial state of encryption. The initialization vector provides a unique starting state for each encryption operation by combining the data encryption key, thereby increasing the security of encryption. After the initial state of encryption is determined, each standardized data block is encrypted based on the block cipher algorithm to obtain a preliminary encrypted data block. The block cipher algorithm is a commonly used symmetric encryption method that effectively improves the efficiency and security of encryption by grouping data. The preliminary encrypted data block is subjected to an XOR operation and chaining to obtain a chained encrypted data block. The XOR operation and chaining form a chained structure by performing an XOR operation on each encrypted data block with the previous encrypted block, thereby enhancing the security and integrity of the data. The chained encrypted data block is subjected to integrity protection processing according to a preset message authentication code algorithm to obtain an authenticated encrypted data block. The message authentication code algorithm generates an authentication code for the data block to ensure that the data has not been tampered with during transmission and storage. The authentication encrypted data block is serialized to obtain an encrypted data block sequence. The serialization process arranges the data blocks in a certain order to facilitate subsequent storage and management. The available storage resources are evaluated according to the preset storage node status information to obtain a storage resource distribution map. The storage resource distribution map analyzes the status of the storage node to determine the available storage space and health status of each node, providing a basis for the allocation of data blocks. The encrypted data block sequence is redundantly encoded to obtain a coded data block with error correction capability. Redundant encoding adds redundant information so that even if part of the data is lost or damaged during storage and transmission, it can be restored through the error correction mechanism. The coded data blocks are allocated according to the storage resource distribution map to obtain a preliminary storage location mapping relationship. The allocation process reduces the risk of centralized data storage and improves the security and reliability of the data by distributing the coded data blocks on different storage nodes. Encryption processing is performed based on the preliminary storage location mapping relationship to obtain a storage location mapping table. The storage location mapping table records the specific storage location of each coded data block and protects its security through encryption to prevent unauthorized access.

[0040] In the embodiment of the present application, by performing character set verification and unified encoding conversion on the SMS signature title input by the user, effective support for multiple languages ​​is achieved, and multi-factor authentication technology is used to verify the user identity and perform security assessment, which greatly improves the reliability of identity authentication and the overall security of the system. By performing hash processing, digital signature and integrity verification on the signature title authentication data packet, the integrity and non-tamperability of the data during transmission and storage are ensured. By adopting data decentralized storage strategy and redundant coding technology, the data storage method is optimized, and the storage efficiency and data fault tolerance are improved. The encryption key is divided and reorganized using the threshold cryptographic algorithm, the security of the key is enhanced, and a flexible key recovery mechanism is provided. By performing block processing, parallel encryption and decentralized storage on the data, the processing speed and concurrency of the system are improved. By encrypting and storing the user identity information and signature title data, the user privacy and sensitive information are effectively protected. By generating an authentication data packet containing a timestamp and a unique identifier, by evaluating the storage node status information and performing intelligent allocation, the rational use of storage resources is achieved, and the overall efficiency of the system is improved. It achieves efficient verification, secure storage and fast retrieval of SMS signature titles, thereby effectively improving the credibility and security of SMS communications.

[0041] In a specific embodiment, the process of executing step S101 may specifically include the following steps:

[0042] Perform character segmentation on the SMS signature title input by the user to obtain a character sequence, and perform character matching on the character sequence according to a preset multilingual character set library to obtain the language attribute of each character;

[0043] Perform statistical analysis on the language attribute of each character to obtain the target language type, and retrieve the corresponding target language character set specification from a preset character set specification library according to the target language type;

[0044] Compare each character in the character sequence with the target language character set specification one by one to obtain a character compliance mark;

[0045] Performing replacement suggestion generation processing on characters marked as non-compliant to obtain a character replacement suggestion list, and automatically replacing the non-compliant characters according to the character replacement suggestion list to obtain a preliminarily corrected character sequence;

[0046] Performing semantic integrity analysis on the initially corrected character sequence to obtain a semantic integrity score, and adjusting the initially corrected character sequence according to the semantic integrity score to obtain an optimized character sequence;

[0047] The optimized character sequences are concatenated to obtain a valid character string that conforms to the target language character set specification.

[0048] Specifically, the SMS signature title string input by the user is segmented character by character to obtain a character sequence. The character sequence is matched according to the preset multilingual character set library to determine the language attribute of each character. The multilingual character set library contains character information of multiple languages. Through character matching operations, the language to which each character belongs is identified. The language attribute of each character is statistically analyzed to obtain the target language type. The statistical analysis determines the language type with the largest proportion by calculating the frequency of characters of each language in the character sequence. According to the target language type, the corresponding target language character set specification is retrieved from the preset character set specification library. For example, for the English character set specification, all legal English characters and their combination rules are included. Each character in the character sequence is compared one by one with the target language character set specification to obtain a character compliance mark. The one-to-one comparison operation compares each character in the character sequence with the target language character set specification to determine whether the character complies with the specification. For characters marked as non-compliant, replacement suggestion generation processing is performed to obtain a character replacement suggestion list. The replacement suggestion generation process provides one or more replacement suggestions based on the context information of the characters and the target language character set specification. After obtaining the replacement suggestion list, the non-compliant characters are automatically replaced according to the list to obtain a preliminary corrected character sequence. The preliminary corrected character sequence is subjected to semantic integrity analysis to obtain a semantic integrity score. The semantic integrity analysis calculates a score by checking the contextual coherence and grammatical structure of the character sequence. For example, using the formula:

[0049] ;

[0050] Where SIS stands for semantic integrity score, represents the semantic weight of the i-th character, Represents the contextual consistency score of the i-th character, and n represents the total number of characters. For the initially revised character sequence, the semantic weight and contextual consistency score of each character are calculated to obtain the SIS value. The initially revised character sequence is adjusted according to the semantic integrity score. For example, if the score is low, the characters are further adjusted according to the replacement suggestion list to obtain an optimized character sequence. Through the adjustment, a more coherent character sequence that conforms to the semantics of the target language is obtained. The optimized character sequence is spliced ​​to obtain a valid character string that conforms to the target language character set specification.

[0051] In a specific embodiment, the process of executing step S102 may specifically include the following steps:

[0052] Perform character encoding detection on the valid character string to obtain the original encoding type, and select the corresponding conversion rule from the preset encoding conversion rule library according to the original encoding type to obtain the target conversion rule set;

[0053] Each character in the valid character string is converted one by one according to the target conversion rule set to obtain a preliminary conversion character sequence, and a redundant encoding check is performed on the preliminary conversion character sequence to obtain a list of character positions to be optimized;

[0054] According to the character position list to be optimized, encoding of corresponding characters is optimized to obtain a first character sequence, and byte order marking is performed on the first character sequence to obtain a second character sequence;

[0055] Normalizing the second character sequence to obtain a string that complies with the Unicode standard, and performing encoding consistency verification on the string that complies with the Unicode standard to obtain an encoding consistency report;

[0056] According to the encoding consistency report, the inconsistent encoding is corrected to obtain a corrected Unicode string, and the corrected Unicode string is compressed and encoded to obtain a standardized unified encoding string.

[0057] Specifically, perform character encoding detection on the input string to determine its original encoding type. By traversing common encoding types and trying to decode the string. For example, assuming that the input string is a text containing characters in multiple languages, it can be determined through detection that its encoding type is UTF-8. According to the detected original encoding type, select the corresponding conversion rule from the preset encoding conversion rule library to obtain the target conversion rule set. For example, assuming that the original encoding type is UTF-8 and the target encoding type is Unicode, select the conversion rule from UTF-8 to Unicode from the conversion rule library. The target conversion rule set contains a series of character conversion mappings to ensure that each character can be correctly converted to the target encoding. Convert each character in the valid string one by one according to the target conversion rule set to obtain a preliminary conversion character sequence. The one-by-one conversion process ensures that the character is correctly converted to the target encoding by finding the corresponding mapping of each character in the conversion rule set. Let the original string be ,in Indicates characters, the converted character sequence is ,in Indicates the converted characters. Perform redundant coding check on the preliminary conversion character sequence to obtain a list of character positions to be optimized. Redundant coding check identifies and marks redundant characters in the preliminary conversion character sequence, such as repeated characters or unnecessary padding characters, to determine the positions that need to be optimized. Suppose the redundant character detection function is , returns a list of character positions to be optimized ,in Represents the character position to be optimized. According to the list of character positions to be optimized, the corresponding characters are encoded and optimized to obtain the first character sequence. Encoding optimization ensures the compactness and accuracy of the character sequence by adjusting or removing redundant characters. Suppose the optimization function is , the optimized character sequence is . Perform byte order marking on the first character sequence to obtain the second character sequence. The byte order mark adds a special mark byte at the beginning of the character sequence to indicate the order of the byte order (such as big endian or little endian), ensuring that the byte order of the characters can be correctly interpreted when transmitted and stored between different systems. Let the byte order mark function be , the character sequence after marking is . The second character sequence is normalized to obtain a string that conforms to the Unicode standard. Normalization converts the character sequence into a unified encoding format to eliminate the differences in encoding and ensure that the characters are consistent in various applications and platforms. For example, Unicode provides a variety of normalization forms (such as NFC, NFD, NFKC, and NFKD). The character sequence is normalized by selecting an appropriate normalization form. Let the normalization function be , the normalized character sequence is . Perform encoding consistency verification on strings that conform to the Unicode standard and obtain an encoding consistency report. Encoding consistency verification ensures that characters are not damaged or lost during the conversion process by checking the integrity and consistency of the character sequence. For example, consistency checking can be performed by calculating the checksum of the string or using a specific verification algorithm. Suppose the consistency verification function is , returns a consistency report . According to the encoding consistency report, the inconsistent encoding is corrected to obtain the corrected Unicode string. If inconsistencies or errors are found in the character encoding during the consistency verification process, these encoding problems can be corrected through correction processing to restore the correct representation of the characters. The corrected Unicode string is compressed and encoded to obtain a standardized unified encoding string. Compression encoding reduces the space overhead of storage and transmission by reducing redundant information in the string.

[0058] In a specific embodiment, the process of executing step S103 may specifically include the following steps:

[0059] The identity information provided by the user is classified and processed to obtain a multi-dimensional identity feature set, and a dynamic verification factor is generated based on the multi-dimensional identity feature set to obtain a personalized authentication solution;

[0060] Based on the personalized authentication scheme, the password entered by the user is hashed and salted to obtain an encrypted password string, and a time synchronization code is generated for the user's device according to the preset time window to obtain a dynamic password;

[0061] Perform feature extraction processing on the biometric data provided by the user to obtain a biometric vector, and perform multi-modal fusion processing based on the encrypted password string, dynamic password and biometric vector to obtain a fusion authentication index;

[0062] Perform threshold comparison processing on the fusion authentication indicators to obtain a preliminary authentication result, and adjust the weight of the preliminary authentication result according to the user's historical behavior data to obtain a weighted authentication score;

[0063] The weighted authentication score is subjected to risk assessment processing to obtain an identity credibility level, and a digital signature containing authentication details is generated based on the identity credibility level to obtain a user identity authentication result.

[0064] Specifically, the user's identity information is collected and classified. This information may include name, ID number, telephone number, email address, home address, work unit, etc. By classifying this information, multi-dimensional identity features are extracted, and each dimension represents a different aspect of the user's identity. After obtaining the multi-dimensional identity feature set, dynamic verification factors are generated based on these features to formulate a personalized authentication scheme. Based on the personalized authentication scheme, the password entered by the user is hashed and salted to obtain an encrypted password string. Hash salting generates a secure encrypted password string by adding a random salt value to the password and hashing it together with the password. Suppose the password entered by the user is , the random salt value is , the hash function is , then the encrypted password string It can be expressed as:

[0065] ;

[0066] Generate a time synchronization code for the user device according to the preset time window to obtain a dynamic password. The time synchronization code is generated based on the time window to ensure that the dynamic password in each time window is unique, which increases the security of authentication. Suppose the time window is , the current time is , then the dynamic password It can be expressed as:

[0067] ;

[0068] Perform feature extraction on the biometric data provided by the user to obtain a biometric vector. Biometric data can include fingerprints, iris scans, facial recognition, etc. Through feature extraction algorithms, these data are converted into numerical vectors for subsequent processing. Suppose the user's biometric data is , the feature extraction function is , then the biometric vector It can be expressed as:

[0069] ;

[0070] According to the encrypted password string, dynamic password and biometric feature vector, multimodal fusion processing is performed to obtain the fusion authentication index. Multimodal fusion processing improves the accuracy and security of authentication by combining multiple authentication factors. Suppose the fusion function is , then the fusion authentication index It can be expressed as:

[0071] ;

[0072] Perform threshold comparison on the fusion authentication indicators to obtain preliminary authentication results. Threshold comparison compares the fusion authentication indicators with the preset threshold to determine whether the authentication is passed. Set the threshold as , then the preliminary certification result It can be expressed as:

[0073] ;

[0074] The weight of the initial authentication result is adjusted according to the user's historical behavior data to obtain a weighted authentication score. The historical behavior data includes the user's previous login records, operating habits, etc. The reliability of authentication is improved through weight adjustment. Assume that the historical behavior data is , the weight adjustment function is , then the weighted certification score It can be expressed as:

[0075] ;

[0076] The weighted authentication score is subjected to risk assessment to obtain the identity credibility level. Risk assessment scores the user's identity credibility by analyzing the risk factors in the authentication process. Suppose the risk assessment function is , then the identity credibility level It can be expressed as:

[0077] ;

[0078] The weighted authentication score is subjected to risk assessment to obtain the identity credibility level. Risk assessment scores the user's identity credibility by analyzing the risk factors in the authentication process. Suppose the risk assessment function is , then the identity credibility level It can be expressed as:

[0079] ;

[0080] A digital signature containing authentication details is generated according to the identity credibility level to obtain the user identity authentication result. The digital signature ensures the integrity and non-tamperability of the authentication information by encrypting the detailed records of the authentication process. Suppose the digital signature function is , the user authentication result It can be expressed as:

[0081] ;

[0082] In a specific embodiment, the process of executing step S104 may specifically include the following steps:

[0083] Parse the user identity verification results to obtain a multi-dimensional verification feature set, and perform weighted calculation on the multi-dimensional verification feature set according to a preset feature weight model to obtain an initial security score;

[0084] Perform time series analysis on the user's historical behavior data to obtain the user's behavior pattern characteristics, and dynamically adjust the initial security score based on the user's behavior pattern characteristics to obtain the adjusted security score;

[0085] Perform anomaly detection on the user's geographic location information to obtain a location risk coefficient, and modify the adjusted security score based on the location risk coefficient to obtain a location-sensitive security score;

[0086] Conduct a credibility assessment on the user's device information to obtain a device credibility index, and perform a comprehensive calculation based on the device credibility index and the location-sensitive security score to obtain a comprehensive security index;

[0087] Fuzzy logic reasoning is performed on the comprehensive security index to obtain the user identity credibility level, and a digital certificate containing multi-dimensional evaluation results is generated based on the user identity credibility level to obtain the user identity credibility index.

[0088] Specifically, the user identity verification results are parsed to obtain a multi-dimensional verification feature set. The multi-dimensional verification feature set includes multiple features such as the user's login time, device type, login location, and login method. Each feature has a different weight in the security assessment, and these weights can be defined by a preset feature weight model. The setting of the weight model can be based on historical data and the experience of security experts. For example, assuming there is a feature set and the corresponding weights , initial safety score The calculation formula is:

[0089] ;

[0090] in, Indicates The value of a feature, Indicates Through this formula, the various features are combined to obtain the initial safety score. . Perform time series analysis on the user's historical behavior data to obtain the user's behavior pattern characteristics. User behavior pattern characteristics include the user's activity frequency, operating habits, abnormal behavior, etc. in different time periods. Time series analysis can use a variety of algorithms, such as moving average, time series decomposition, etc. According to the behavior pattern characteristics, the initial security score is dynamically adjusted. For example, if the user's current behavior is consistent with the historical behavior pattern, it means that the risk is low and the security score can be improved; otherwise, the security score is reduced. Adjusted security score It can be expressed as:

[0091] ;

[0092] in, Indicates the adjustment coefficient of the behavior pattern characteristics. According to the different characteristics of user behavior patterns, It can be a positive value (increase the score) or a negative value (decrease the score). Perform anomaly detection on the user's geographic location information to obtain the location risk coefficient The location risk factor reflects the risk level of the user's current login location. For example, if the user jumps from one country to another in a short period of time, the risk is higher; if the user always logs in in the same city, the risk is lower. The location risk factor can be calculated by the geolocation anomaly detection algorithm. According to the location risk factor, the adjusted security score is corrected to obtain the location sensitive security score.

[0093] ;

[0094] in, is a value between 0 and 1, indicating the risk factor of the location. Indicates a higher risk, thus lowering the security score. Perform a credibility assessment on the user's device information to obtain the device credibility index The device trustworthiness index reflects the security of the user's device, such as whether the device is jailbroken, whether the latest security patch is installed, etc. The device trustworthiness index can be obtained through device security assessment tools or algorithms. Based on the device trustworthiness index and location-sensitive security score, a comprehensive calculation is performed to obtain the comprehensive security index.

[0095] ;

[0096] in, It is also a value between 0 and 1, indicating the trustworthiness of the device. Indicates that the device is highly secure, thus improving the comprehensive security index. Perform fuzzy logic reasoning on the comprehensive security index to obtain the user identity credibility level. Fuzzy logic reasoning can handle uncertainty and ambiguity, and map the comprehensive security index to a credibility level. The credibility level can be divided into multiple levels, such as high, medium, and low. Based on the user identity credibility level, a digital certificate containing multi-dimensional evaluation results is generated to obtain the user identity credibility index. Digital certificates can be used in a variety of scenarios such as access control and transaction verification to ensure the security of the system and the credibility of users.

[0097] In a specific embodiment, the process of executing step S105 may specifically include the following steps:

[0098] Perform hash processing on the unified encoding string to obtain the string summary, and generate a digital signature based on the user identity credibility index to obtain a credibility certificate;

[0099] Concatenate the string summary and the credibility certificate to obtain the initial associated data;

[0100] Obtain the current timestamp from the preset timestamp server to obtain the authentication time tag, and merge the initial associated data and the authentication time tag to obtain time-sensitive associated data;

[0101] Generate a unique identifier according to a preset random number generation algorithm to obtain a data packet sequence number, and encode the time-sensitive associated data and the data packet sequence number to obtain encoded associated data;

[0102] The encoded associated data is verified and calculated according to a preset data integrity verification algorithm to obtain an integrity verification code;

[0103] The encoded associated data and integrity check code are packaged to obtain an original authentication data packet, and the original authentication data packet is formatted according to a preset data structure specification to obtain a signature title authentication data packet.

[0104] Specifically, the unified encoding string is hashed to obtain a string digest. Hashing is the process of converting an input of any length into an output of a fixed length through a hash algorithm. This output is called a digest. For example, using the SHA-256 algorithm, the unified encoding string The summary can be obtained by the following formula

[0105] ;

[0106] in, Represents a unified encoding string, and SHA-256 represents a hash algorithm. Through this step, the uniqueness and immutability of the original string are ensured. A digital signature is generated based on the user identity credibility index to obtain a credibility certificate. The user identity credibility index (such as the comprehensive security index mentioned earlier) can be used to generate a digital signature to ensure the credibility of the data source. Assume that the user's identity credibility index is , then the digital signature It can be generated by the following formula:

[0107] ;

[0108] Among them, Sign represents the digital signature algorithm, is a string digest, Is the identity credibility indicator. Through this step, a credibility certificate is generated . Concatenate the string summary and the credibility certificate to obtain the initial associated data . Initial association data It can be expressed as:

[0109] ;

[0110] in, Indicates a concatenation operation. Combines the string summary and the credibility certificate into a whole. Obtains the current timestamp from the preset timestamp server and obtains the authentication time stamp The timestamp server provides the current time information, which is used to record the generation time of the data. Get the current timestamp The steps are as follows:

[0111] Timestamp Server();

[0112] Timestamp Server indicates the timestamp server. and authentication timestamp Perform merging processing to obtain time-sensitive related data

[0113] ;

[0114] Add time information to the initial associated data to form time-sensitive associated data. Generate a unique identifier based on the preset random number generation algorithm to obtain the data packet sequence number. . The random number generation algorithm can ensure the uniqueness and unpredictability of the unique identifier. Time-sensitive associated data and packet sequence number Perform encoding processing to obtain the encoded associated data . The encoded associated data is checked according to the preset data integrity check algorithm Perform checksum calculation to obtain integrity check code . The integrity check code can ensure that the data has not been tampered with during transmission. The encoded associated data and integrity check code are packaged to obtain the original authentication data packet. The original authentication data packet is formatted according to the preset data structure specification to obtain a signature header authentication data packet. The formatting process can include adding metadata, defining the data packet structure, etc. Through this step, a signature header authentication data packet that meets the specifications is generated.

[0115] In a specific embodiment, the process of executing step S106 may specifically include the following steps:

[0116] Segmenting the signature header authentication data packet to obtain multiple data blocks, and generating a random key according to a preset key generation algorithm to obtain a data encryption key;

[0117] The data encryption key is divided into multiple key fragments, and the multiple key fragments are reorganized according to a preset threshold cryptographic algorithm to obtain a key reconstruction scheme;

[0118] Symmetrically encrypt each data block using a data encryption key to obtain an encrypted data block sequence, and distribute the encrypted data block sequence according to a preset data dispersion storage strategy to obtain a storage location mapping table;

[0119] The key reconstruction scheme and the storage location mapping table are combined to obtain a metadata package, and the metadata package is asymmetrically encrypted according to a preset public key infrastructure to obtain encrypted metadata;

[0120] The encrypted data block sequence and the encrypted metadata are assembled to obtain a complete encrypted data packet, and the complete encrypted data packet is indexed according to a preset database index structure to obtain an encrypted signature header data record.

[0121] Specifically, the signature header authentication data packet is segmented. By segmenting the data packet, the large data packet is divided into several small data blocks for subsequent encryption and storage. Assume that the signature header authentication data packet is , whose length is , the length of each data block is , then the number of data blocks It can be expressed as:

[0122] ;

[0123] in, represents the rounding function. The segmented data block set can be expressed as ,in Indicates data blocks. Generate a random key according to the preset key generation algorithm to obtain the data encryption key. The random key generation algorithm uses a random number generator to ensure that each generated key is unique and secure. Suppose the random number generation function is , then the data encryption key It can be expressed as:

[0124] ();

[0125] Assuming that the AES-256 algorithm is used, the length of the generated random key is 256 bits. The data encryption key is split to obtain multiple key fragments. Key splitting decomposes the original key into multiple fragments, making it impossible to restore the original key by each fragment alone. Suppose the number of key fragments is , then the key fragment set can be expressed as ,in Indicates According to the preset threshold cryptographic algorithm, multiple key fragments are reorganized to obtain the key reconstruction scheme. The threshold cryptographic algorithm sets a reconstruction threshold. , so that only at least The original key can be reconstructed by the key fragments. Suppose the threshold cipher algorithm is , then the key reconstruction scheme It can be expressed as:

[0126] ;

[0127] in, . Assuming the number of key fragments is 5 and the reconstruction threshold is 3, the reconstruction scheme can ensure the reconstruction of the original key in the case of any 3 key fragments. Symmetrically encrypt each data block using the data encryption key to obtain an encrypted data block sequence. Symmetric encryption ensures data security by using the same key for encryption and decryption. Assume that the symmetric encryption algorithm is AES and the data encryption function is , then the encrypted data block sequence It can be expressed as:

[0128] ;

[0129] in, Indicates encrypted data blocks. The encrypted data block sequence is allocated according to the preset data distributed storage strategy to obtain a storage location mapping table. Data distributed storage improves data security and reliability by storing encrypted data blocks on different storage nodes. Suppose the storage node set is , the allocation function is , then the storage location mapping table It can be expressed as:

[0130] ;

[0131] in, Indicates that the Encrypted data blocks Assigned to a collection of storage nodes A node in . The key reconstruction scheme and the storage location mapping table are merged to obtain a metadata package. The metadata package forms a complete metadata record by merging the key reconstruction scheme and the storage location mapping table. Let the merging function be , then the metadata package It can be expressed as:

[0132] ;

[0133] The metadata package is asymmetrically encrypted according to the preset public key infrastructure to obtain encrypted metadata. Asymmetric encryption ensures the secure transmission and storage of metadata packages by using public key encryption and private key decryption. Let the public key be , the asymmetric encryption function is , then encrypt the metadata It can be expressed as:

[0134] ;

[0135] The encrypted data block sequence and the encrypted metadata are assembled to obtain a complete encrypted data packet. The complete encrypted data packet is formed by combining the encrypted data block and the encrypted metadata together. Let the assembly function be , then the complete encrypted data packet It can be expressed as:

[0136] ;

[0137] The complete encrypted data packet is indexed according to the preset database index structure to obtain the encrypted signature title data record. Indexing creates an index for the data packet to facilitate fast retrieval and access. Suppose the indexing function is , then the encrypted and signed header data record It can be expressed as:

[0138] ;

[0139] In a specific embodiment, the execution step divides the data encryption key to obtain multiple key fragments, and the multiple key fragments are reorganized according to a preset threshold cryptographic algorithm to obtain a key reconstruction scheme. The process may specifically include the following steps:

[0140] Perform binary conversion on the data encryption key to obtain a binary key sequence, and fill the binary key sequence according to the preset key length requirement to obtain a normalized key sequence;

[0141] Segment the normalized key sequence to obtain an initial key fragment set, and create a key sharing polynomial according to a preset random polynomial generation algorithm to obtain a polynomial coefficient set;

[0142] Calculating each fragment in the initial key fragment set according to the polynomial coefficient set to obtain an encryption key fragment set, and grouping the encryption key fragment set according to a preset threshold parameter to obtain multiple subkey groups;

[0143] Based on the Lagrange interpolation algorithm, each subkey group is reconstructed and verified to obtain a reconstruction feasibility report. According to the reconstruction feasibility report, the subkey groups that do not meet the requirements are adjusted to obtain an optimized key fragment distribution scheme.

[0144] The optimized key fragment distribution scheme is encoded to obtain a key reconstruction instruction set, and a complete process including reconstruction steps and verification mechanism is generated according to the key reconstruction instruction set to obtain a key reconstruction scheme.

[0145] Specifically, the data encryption key is converted into binary. Assuming that the data encryption key is a 256-bit AES key, it can be represented as a 256-bit binary sequence. The binary key sequence is padded according to the preset key length requirement to obtain a normalized key sequence. Assuming that the key length requirement is 512 bits, if the original key sequence is less than 512 bits, the length requirement is met by padding with 0 or other specific characters. For example, if the original key sequence is 256 bits, 256 bits need to be padded. The normalized key sequence is segmented to obtain an initial key fragment set. Assuming that each fragment is 128 bits long, the normalized key sequence will be divided into 4 fragments. Let each fragment be , the initial key fragment set It can be expressed as

[0146] ;

[0147] Create a key sharing polynomial according to the preset random polynomial generation algorithm to obtain a polynomial coefficient set. The random polynomial generation algorithm can use the Shamir secret sharing algorithm in the secret sharing scheme. Assume that the random polynomial is:

[0148] ;

[0149] in is the threshold value, is the key, and the other coefficients is a random number. The set of polynomial coefficients is:

[0150] ;

[0151] Calculate each fragment in the initial key fragment set according to the polynomial coefficient set to obtain the encryption key fragment set. Let the key fragment The calculation result is , then the encryption key fragment set It can be expressed as:

[0152] ;

[0153] in, . The encryption key fragment set is grouped according to the preset threshold parameter to obtain multiple subkey groups. Assuming the threshold parameter is 3, the encryption key fragment set can be divided into multiple subkey groups, each group contains at least 3 fragments. Suppose the subkey group is , then the subkey group set It can be expressed as:

[0154] ;

[0155] Based on the Lagrange interpolation algorithm, each sub-key group is reconstructed and verified to obtain a reconstruction feasibility report. The Lagrange interpolation algorithm can reconstruct the original key by interpolating the key fragments. Let the reconstruction function be , then reconstruct the key It can be expressed as:

[0156] ;

[0157] in, is a sub-key group. The reconstruction feasibility report evaluates the feasibility of key reconstruction based on the reconstruction results. According to the reconstruction feasibility report, the sub-key groups that do not meet the requirements are adjusted to obtain the optimized key fragment distribution scheme. If the reconstruction results of some sub-key groups are incorrect, they need to be adjusted, such as replacing some fragments or increasing the number of fragments to ensure the success rate of reconstruction. The optimized key fragment distribution scheme is encoded to obtain a key reconstruction instruction set. The key reconstruction instruction set contains all the information required to reconstruct the key, including the distribution of key fragments and reconstruction steps. According to the key reconstruction instruction set, a complete process including reconstruction steps and verification mechanism is generated to obtain a key reconstruction scheme. The complete process includes the collection of key fragments, the execution of reconstruction steps and the verification of reconstruction results.

[0158] In a specific embodiment, the execution step symmetrically encrypts each data block using a data encryption key to obtain an encrypted data block sequence, and allocates the encrypted data block sequence according to a preset data dispersion storage strategy to obtain a storage location mapping table. The process may specifically include the following steps:

[0159] Each data block is padded to obtain a normalized data block of equal length, and an initialization vector is generated according to the data encryption key to obtain the encryption initial state;

[0160] Encrypting each normalized data block based on a block cipher algorithm to obtain a preliminary encrypted data block, and performing an XOR operation and linking on the preliminary encrypted data block to obtain a chained encrypted data block;

[0161] Performing integrity protection processing on the chained encrypted data block according to a preset message authentication code algorithm to obtain an authenticated encrypted data block, and performing serialization processing on the authenticated encrypted data block to obtain an encrypted data block sequence;

[0162] Evaluate available storage resources according to preset storage node status information to obtain a storage resource distribution map, and perform redundant encoding on the encrypted data block sequence to obtain an encoded data block with error correction capability;

[0163] The coded data blocks are allocated according to the storage resource distribution map to obtain a preliminary storage location mapping relationship, and encryption processing is performed based on the preliminary storage location mapping relationship to obtain a storage location mapping table.

[0164] Specifically, the data blocks are normalized to make them of the same length. Suppose there is a set of data blocks , the length of each data block may be different. By padding, the length of all data blocks is unified to a predetermined length For example, if the predetermined length is 128 bytes, and a data block If the length of is less than 128 bytes, it is filled with 0 or specific characters to make it 128 bytes long. The normalized data block set can be expressed as ,in After normalization data blocks. Generate an initialization vector (IV) based on the data encryption key to obtain the initial state of encryption. The initialization vector is used for the initial setting of the block cipher algorithm to ensure that the result of each encryption is different, even if the plaintext is the same. Assume that the data encryption key is , the initialization vector generation function is ), then the initialization vector IV can be expressed as:

[0165] IV ;

[0166] Assume that the AES-256 algorithm is used and the length of the generated initialization vector is 128 bits. Encrypt each normalized data block based on the block cipher algorithm to obtain a preliminary encrypted data block. The block cipher algorithm divides the data into several fixed-size blocks and encrypts them block by block. Assume that the block cipher algorithm is AES and the data encryption function is , then the initial encrypted data block It can be expressed as:

[0167] , IV);

[0168] in, For the The preliminary encrypted data blocks are XORed and linked to obtain chained encrypted data blocks. Chained encryption is performed by XORing the encryption result of the current data block with the next data block and then encrypting it to enhance the encryption strength. Let the chained encryption function be , then the chain encrypted data block It can be expressed as:

[0169] ;

[0170] in, Represents an exclusive OR operation. The chained encrypted data block is integrity protected according to the preset message authentication code algorithm to obtain an authenticated encrypted data block. The message authentication code performs a hash operation on the data to ensure that the data has not been tampered with during transmission. Suppose the message authentication code algorithm is HMAC and the authentication function is , then the authentication encrypted data block It can be expressed as:

[0171] ;

[0172] in, For the The authenticated encrypted data blocks are serialized to obtain a sequence of encrypted data blocks. Serialization is performed by converting the data blocks into a format suitable for storage or transmission. Let the serialization function be , then the encrypted data block sequence . Evaluate the available storage resources according to the preset storage node status information to obtain the storage resource distribution map. The storage resource distribution map determines the storage location of the data block by evaluating the availability and health status of each storage node. Suppose the storage node set is , the storage resource evaluation function is , then the storage resource distribution map It can be expressed as:

[0173] ;

[0174] Redundant encoding is performed on the encrypted data block sequence to obtain a coded data block with error correction capability. Redundant encoding improves the reliability and damage resistance of data by adding redundant information. The coded data blocks are allocated according to the storage resource distribution map to obtain a preliminary storage location mapping relationship. Allocation improves the security and availability of data by allocating the coded data blocks to different storage nodes. Encryption processing is performed based on the preliminary storage location mapping relationship to obtain a storage location mapping table. The storage location mapping table ensures its security by encrypting the preliminary storage location mapping relationship.

[0175] The above describes the SMS signature title real-name automation method in the embodiment of the present application. The following describes the SMS signature title real-name automation system in the embodiment of the present application. Figure 2 In the embodiment of the present application, an embodiment of the SMS signature title real-name automation system includes:

[0176] Verification module 201, used to perform character set verification on the SMS signature title input by the user to obtain a valid character string that complies with the target language character set specification;

[0177] The conversion module 202 is used to convert the valid character string into a unified code to obtain a standardized unified code character string;

[0178] Authentication module 203, used to perform multi-factor authentication on the identity information provided by the user and obtain a user identity authentication result;

[0179] Evaluation module 204, used to perform security evaluation on the user identity authentication result to obtain a user identity credibility index;

[0180] The association module 205 is used to associate the unified encoding string with the user identity credibility index to obtain a signature title authentication data packet;

[0181] The encryption module 206 is used to encrypt and store the signature title authentication data packet to obtain an encrypted signature title data record.

[0182] Through the cooperation of the above components, the system can effectively support multiple languages ​​by verifying the character set and converting the uniform encoding of the SMS signature title input by the user. It can also verify the user identity by using multi-factor authentication technology and conduct security assessment, which greatly improves the reliability of identity authentication and the overall security of the system. The integrity and non-tamperability of data during transmission and storage are ensured by hashing, digitally signing and checking the integrity of the signature title authentication data packet. The data storage method is optimized by adopting the data decentralized storage strategy and redundant coding technology, and the storage efficiency and data fault tolerance are improved. The encryption key is segmented and reorganized by using the threshold cryptographic algorithm, which enhances the security of the key and provides a flexible key recovery mechanism. The processing speed and concurrency of the system are improved by processing the data in blocks, encrypting in parallel and storing in a decentralized manner. The user's privacy and sensitive information are effectively protected by encrypting and storing the user's identity information and signature title data. The storage data packet containing the timestamp and unique identifier is generated, and the storage node status information is evaluated and intelligently allocated, which realizes the rational use of storage resources and improves the overall efficiency of the system. It achieves efficient verification, secure storage and fast retrieval of SMS signature titles, thereby effectively improving the credibility and security of SMS communications.

[0183] Those skilled in the art can clearly understand that, for the convenience and brevity of description, the specific working processes of the above-described systems, systems and units can refer to the corresponding processes in the aforementioned method embodiments and will not be repeated here.

[0184] If the integrated unit is implemented in the form of a software functional unit and sold or used as an independent product, it can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of the present application is essentially or the part that contributes to the prior art or all or part of the technical solution can be embodied in the form of a software product. The computer software product is stored in a storage medium, including several instructions to enable a computer device (which can be a personal computer, server, or network device, etc.) to execute all or part of the steps of the method described in each embodiment of the present application. The aforementioned storage medium includes: U disk, mobile hard disk, read-only memory (ROM), random access memory (RAM), disk or optical disk, etc., various media that can store program codes.

[0185] As described above, the above embodiments are only used to illustrate the technical solutions of the present application, rather than to limit them. Although the present application has been described in detail with reference to the aforementioned embodiments, those skilled in the art should understand that they can still modify the technical solutions described in the aforementioned embodiments, or make equivalent replacements for some of the technical features therein. However, these modifications or replacements do not deviate the essence of the corresponding technical solutions from the spirit and scope of the technical solutions of the embodiments of the present application.

Claims

1. A method for automating the real-name signature of a short message, characterized in that: The SMS signature title real-name automation method comprises: Performing character set verification on the SMS signature title input by the user to obtain a valid character string that complies with the target language character set specification; specifically comprising: performing character segmentation on the SMS signature title input by the user to obtain a character sequence, and performing character matching on the character sequence according to a preset multilingual character set library to obtain the language attribute of each character; performing statistical analysis on the language attribute of each character to obtain the target language type, and retrieving the corresponding target language character set specification from the preset character set specification library according to the target language type; comparing each character in the character sequence with the target language character set specification one by one to obtain a character compliance mark; performing replacement suggestion generation processing on the characters marked as non-compliant to obtain a character replacement suggestion list, and automatically replacing the non-compliant characters according to the character replacement suggestion list to obtain a preliminarily corrected character sequence; performing semantic integrity analysis on the preliminarily corrected character sequence to obtain a semantic integrity score, and adjusting the preliminarily corrected character sequence according to the semantic integrity score to obtain an optimized character sequence; performing splicing processing on the optimized character sequence to obtain a valid character string that complies with the target language character set specification; Performing Unicode conversion on the valid character string to obtain a standardized Unicode character string; Perform multi-factor authentication on the identity information provided by the user to obtain the user identity authentication result; Performing a security assessment on the user identity authentication result to obtain a user identity credibility index; Associating the unified encoding string with the user identity credibility index to obtain a signature title authentication data packet; The signature title authentication data packet is encrypted and stored to obtain an encrypted signature title data record.

2. The method for automating the real-name signature of a short message according to claim 1, characterized in that: The step of converting the valid character string into a unified code to obtain a standardized unified code character string includes: Performing character encoding detection on the valid character string to obtain an original encoding type, and selecting a corresponding conversion rule from a preset encoding conversion rule library according to the original encoding type to obtain a target conversion rule set; Convert each character in the valid character string one by one according to the target conversion rule set to obtain a preliminary conversion character sequence, and perform a redundant encoding check on the preliminary conversion character sequence to obtain a character position list to be optimized; According to the character position list to be optimized, encoding of corresponding characters is optimized to obtain a first character sequence, and byte order marking is performed on the first character sequence to obtain a second character sequence; Normalizing the second character sequence to obtain a string that complies with the Unicode standard, and performing encoding consistency verification on the string that complies with the Unicode standard to obtain an encoding consistency report; The inconsistent encoding is corrected according to the encoding consistency report to obtain a corrected Unicode string, and the corrected Unicode string is compressed and encoded to obtain a standardized unified encoding string.

3. The method for automating the real-name signature of a short message according to claim 1, characterized in that: The multi-factor authentication is performed on the identity information provided by the user to obtain the user identity authentication result, including: Classify and process the identity information provided by the user to obtain a multi-dimensional identity feature set, and generate a dynamic verification factor based on the multi-dimensional identity feature set to obtain a personalized authentication solution; Based on the personalized authentication scheme, the password input by the user is hashed and salted to obtain an encrypted password string, and a time synchronization code is generated for the user device according to a preset time window to obtain a dynamic password; Performing feature extraction processing on the biometric data provided by the user to obtain a biometric vector, and performing multimodal fusion processing based on the encrypted password string, the dynamic password and the biometric vector to obtain a fusion authentication index; Performing threshold comparison processing on the fusion authentication indicator to obtain a preliminary authentication result, and performing weight adjustment processing on the preliminary authentication result according to the user's historical behavior data to obtain a weighted authentication score; The weighted authentication score is subjected to risk assessment processing to obtain an identity credibility level, and a digital signature containing authentication details is generated according to the identity credibility level to obtain a user identity authentication result.

4. The method for automating the real-name signature of a short message according to claim 3, characterized in that: The security assessment of the user identity authentication result to obtain a user identity credibility index includes: Parsing the user identity verification result to obtain a multi-dimensional verification feature set, and performing weighted calculation on the multi-dimensional verification feature set according to a preset feature weight model to obtain an initial security score; Performing a time series analysis on the user's historical behavior data to obtain user behavior pattern characteristics, and dynamically adjusting the initial security score according to the user behavior pattern characteristics to obtain an adjusted security score; Performing anomaly detection on the user's geographic location information to obtain a location risk coefficient, and correcting the adjusted security score according to the location risk coefficient to obtain a location sensitive security score; Performing a credibility assessment on the user's device information to obtain a device credibility index, and performing a comprehensive calculation based on the device credibility index and the location sensitive security score to obtain a comprehensive security index; The comprehensive security index is subjected to fuzzy logic reasoning to obtain a user identity credibility level, and a digital certificate including multi-dimensional evaluation results is generated according to the user identity credibility level to obtain a user identity credibility index.

5. The method for automating the real-name signature of a short message according to claim 1, characterized in that: The step of associating the unified encoding string with the user identity credibility indicator to obtain a signature title authentication data packet includes: Performing hash processing on the uniformly encoded string to obtain a string summary, and generating a digital signature according to the user identity credibility index to obtain a credibility certificate; Concatenating the character string summary and the credibility certificate to obtain initial associated data; Obtaining a current timestamp from a preset timestamp server to obtain an authentication time stamp, and merging the initial associated data and the authentication time stamp to obtain time-sensitive associated data; Generate a unique identifier according to a preset random number generation algorithm to obtain a data packet sequence number, and encode the time-sensitive associated data and the data packet sequence number to obtain encoded associated data; Performing verification and calculation on the encoded associated data according to a preset data integrity verification algorithm to obtain an integrity verification code; The encoded associated data and the integrity check code are packaged to obtain an original authentication data packet, and the original authentication data packet is formatted according to a preset data structure specification to obtain a signature title authentication data packet.

6. The method for automating the real-name signature of a short message according to claim 1, characterized in that: The step of encrypting and storing the signature title authentication data packet to obtain an encrypted signature title data record includes: Segmenting the signature header authentication data packet to obtain a plurality of data blocks, and generating a random key according to a preset key generation algorithm to obtain a data encryption key; The data encryption key is divided into multiple key fragments, and the multiple key fragments are reorganized according to a preset threshold cryptographic algorithm to obtain a key reconstruction scheme; Symmetrically encrypt each data block using the data encryption key to obtain an encrypted data block sequence, and distribute the encrypted data block sequence according to a preset data dispersion storage strategy to obtain a storage location mapping table; The key reconstruction scheme and the storage location mapping table are combined to obtain a metadata package, and the metadata package is asymmetrically encrypted according to a preset public key infrastructure to obtain encrypted metadata; The encrypted data block sequence and the encrypted metadata are assembled to obtain a complete encrypted data packet, and the complete encrypted data packet is indexed according to a preset database index structure to obtain an encrypted signature header data record.

7. The method for automating the real-name signature of a short message according to claim 6, characterized in that: The data encryption key is divided to obtain a plurality of key fragments, and the plurality of key fragments are reorganized according to a preset threshold cryptographic algorithm to obtain a key reconstruction scheme, including: Performing binary conversion on the data encryption key to obtain a binary key sequence, and padding the binary key sequence according to a preset key length requirement to obtain a normalized key sequence; Segmenting the normalized key sequence to obtain an initial key fragment set, and creating a key sharing polynomial according to a preset random polynomial generation algorithm to obtain a polynomial coefficient set; Calculating each fragment in the initial key fragment set according to the polynomial coefficient set to obtain an encryption key fragment set, and grouping the encryption key fragment set according to a preset threshold parameter to obtain a plurality of subkey groups; Reconstruction verification is performed on each subkey group based on the Lagrange interpolation algorithm to obtain a reconstruction feasibility report, and subkey groups that do not meet the requirements are adjusted according to the reconstruction feasibility report to obtain an optimized key fragment distribution scheme; The optimized key fragment distribution scheme is encoded to obtain a key reconstruction instruction set, and a complete process including reconstruction steps and a verification mechanism is generated according to the key reconstruction instruction set to obtain a key reconstruction scheme.

8. The method for automating the real-name signature of a short message according to claim 6, characterized in that: The method of symmetric encrypting each data block using the data encryption key to obtain an encrypted data block sequence, and distributing the encrypted data block sequence according to a preset data dispersion storage strategy to obtain a storage location mapping table includes: Fill each data block to obtain a normalized data block of equal length, and generate an initialization vector according to the data encryption key to obtain an encryption initial state; Encrypting each normalized data block based on a block cipher algorithm to obtain a preliminary encrypted data block, and performing an XOR operation and linking on the preliminary encrypted data block to obtain a chained encrypted data block; Performing integrity protection processing on the chained encrypted data block according to a preset message authentication code algorithm to obtain an authenticated encrypted data block, and performing serialization processing on the authenticated encrypted data block to obtain an encrypted data block sequence; Evaluate available storage resources according to preset storage node status information to obtain a storage resource distribution map, and perform redundant encoding on the encrypted data block sequence to obtain an encoded data block with error correction capability; The coded data blocks are allocated according to the storage resource distribution map to obtain a preliminary storage location mapping relationship, and encryption processing is performed based on the preliminary storage location mapping relationship to obtain a storage location mapping table.

9. A real-name automation system for SMS signature titles, characterized in that: Used to execute the SMS signature title real-name automation method according to any one of claims 1 to 8, the SMS signature title real-name automation system comprises: A verification module is used to perform character set verification on the SMS signature title input by the user to obtain a valid character string that meets the target language character set specification; specifically includes: performing character segmentation on the SMS signature title input by the user to obtain a character sequence, and performing character matching on the character sequence according to a preset multilingual character set library to obtain the language attribute of each character; performing statistical analysis on the language attribute of each character to obtain the target language type, and retrieving the corresponding target language character set specification from the preset character set specification library according to the target language type; comparing each character in the character sequence with the target language character set specification one by one to obtain a character compliance mark; performing replacement suggestion generation processing on the characters marked as non-compliant to obtain a character replacement suggestion list, and automatically replacing the non-compliant characters according to the character replacement suggestion list to obtain a preliminarily corrected character sequence; performing semantic integrity analysis on the preliminarily corrected character sequence to obtain a semantic integrity score, and adjusting the preliminarily corrected character sequence according to the semantic integrity score to obtain an optimized character sequence; splicing the optimized character sequence to obtain a valid character string that meets the target language character set specification; A conversion module, used for performing Unicode conversion on the valid character string to obtain a standardized Unicode character string; The authentication module is used to perform multi-factor authentication on the identity information provided by the user and obtain the user identity authentication result; An evaluation module, used to perform a security evaluation on the user identity authentication result to obtain a user identity credibility index; An association module, used for associating the unified encoding string with the user identity credibility index to obtain a signature title authentication data packet; The encryption module is used to encrypt and store the signature title authentication data packet to obtain an encrypted signature title data record.

Images