Industrial Internet data asset security management platform and method

Abstract

The present invention relates to the technical field of data asset security management, and discloses an industrial Internet data asset security management platform and method, including: an initial information construction unit, which is used to construct a common text library and a digital code library, and the number of codes in the digital code library and the number of characters in the common text library are both t; a corresponding relationship generator, which is used to determine the correspondence between characters and codes in the common text library and the digital code library. When encrypting the transmission text of an enterprise, the present invention selects the correspondence between characters and codes with the highest security according to the correspondence between characters and codes used by the enterprise. It can be seen that the correspondence between characters and codes is not unique, which can avoid the phenomenon that all ciphertexts are cracked due to the cracking of the ciphertext of a certain transmission text, and significantly improves the security of the enterprise's encryption of the transmission text.

Description

Technical Field

[0001] The present invention relates to the field of data asset security management technology, and more specifically, to an industrial Internet data asset security management platform and method. Background Art

[0002] In today's wave of digital transformation, the Industrial Internet has achieved ubiquitous connection and efficient collaboration among production equipment, information systems, products and people by integrating advanced technologies such as advanced manufacturing technology, cloud computing, big data, and artificial intelligence, greatly improving production efficiency and innovation capabilities.

[0003] However, in the daily operation of an enterprise, data assets ranging from production parameters, operating status to a wide range of customer information are not only valuable resources for enterprise decision-making optimization, fault prediction, and energy efficiency management, but also constitute part of the core competitiveness of the enterprise. Therefore, with the rapid expansion of the scale of the industrial Internet, the security management of data assets has become a key issue that needs to be urgently addressed. Summary of the invention

[0004] The present invention provides an industrial Internet data asset security management platform and method to solve the technical problem of secure management of Internet data assets in related technologies.

[0005] The present invention provides an industrial Internet data asset security management platform, including:

[0006] An initial information construction unit, which is used to construct a common text library and a digital code library, wherein the number of codes in the digital code library and the number of characters in the common text library are both t;

[0007] A correspondence generator, which is used to determine the correspondence between characters and codes in a common text library and a digital code library;

[0008] The encoding and compression module is used to encrypt the transmission text according to the information of the corresponding relationship generator, generate ciphertext, and then compress it;

[0009] A decoder, which is used to decode the ciphertext according to the correspondence between characters and codes used by the enterprise sending the ciphertext and calculate the correspondence with the highest security;

[0010] t is a custom parameter.

[0011] Further, the correspondence generator includes a correspondence arrangement unit and a correspondence selection unit;

[0012] The correspondence arrangement unit is used to arrange all correspondences between characters and codes in the commonly used text library and digital code library, generate several relationship pairs, and sort each relationship pair; the correspondence selection unit is used to screen out a relationship pair with the highest security based on the relationship pairs that the enterprise has used.

[0013] Furthermore, the specific steps for screening the most secure relationship pairs are as follows:

[0014] Step S211, screening the relationship pairs that have been used by the enterprise, and deleting these relationship pairs in the corresponding relationship arrangement unit;

[0015] Step S212, preset a relationship pair security threshold, use reverse logarithm to calculate the difference between the remaining similar pairs and the relationship pairs that the enterprise has used, and calculate its security score based on the difference;

[0016] Step S213, excluding the relationship pairs whose similarity is lower than the relationship pair safety threshold;

[0017] Step S214, if the similar pairs after being eliminated in step S213 have continuous serial numbers, select the similar pair in the middle of the longest segment as the relationship pair with the highest security; if there are no continuous serial numbers, lower the relationship pair security threshold and proceed to step S213;

[0018] The relationship pair security threshold is a custom parameter.

[0019] Further, the safety score S(P new ) is calculated as follows:

[0020]

[0021] In the formula, D(P old , P new ) indicates the relationship that the enterprise has used to P oid and never used relationship to P new The difference between them; N represents the maximum difference; N is a custom parameter.

[0022] Furthermore, D(P old , P new ) is calculated as follows:

[0023] D(P old , P new )=|{(i,j)|P old (i) <P new (j)∧P new (i)>P old (j)}|;

[0024] Where P old (i) and P old (j) respectively represent the relationship between P and oid The corresponding positions of the i-th and j-th characters in P new (i) and P new (j) respectively represent the relationship that the enterprise has never used before. new The corresponding positions of the i-th and j-th characters in .

[0025] Further, the encoding and compression module includes an encryption executor and a ciphertext compression unit;

[0026] The encryption executor is used to convert the transmission text into ciphertext according to the relationship pairs selected by the corresponding relationship selection unit; the ciphertext compression unit compresses the ciphertext by using Huffman coding.

[0027] Furthermore, the step of determining the correspondence between characters and codes in the commonly used text library and the digital code library includes:

[0028] Step S221, constructing a relational arrangement data set according to the commonly used character library and the digital code library, and sorting the data, recording the relational arrangement that the enterprise has used as the first relational arrangement data, and recording other relational arrangements as the second relational arrangement data;

[0029] Step S222, inputting the first relationship arrangement data and the second relationship arrangement data into the corresponding relationship security analysis model, and outputting the security score of each second relationship arrangement data;

[0030] Step S223, presetting a corresponding relationship security threshold, and deleting the second relationship arrangement data whose security score is lower than the corresponding relationship security threshold;

[0031] Step S224, if the remaining second relationship arrangement data have continuous sequence numbers, select the second relationship arrangement data with the longest middle sequence number as the corresponding relationship with the highest security; if not, lower the corresponding relationship security threshold and proceed to step S223;

[0032] The corresponding relationship security threshold is a custom parameter.

[0033] Furthermore, the corresponding relationship security analysis model is constructed based on the deep learning network.

[0034] Furthermore, the training samples used to train the corresponding relationship security analysis model include:

[0035] Preset m relationship arrangement data as the relationship arrangement data that the enterprise has used, and randomly generate a relationship arrangement data that the enterprise has not used as a sample data for training the corresponding relationship security analysis model;

[0036] Based on the above samples, the enumeration method is used to list the relationship arrangement data with the highest similarity to the relationship arrangement data used by the enterprise from high to low. When matching the sample data, the amount of the listed relationship arrangement data is counted;

[0037] Then, according to the amount of relational arrangement data listed when all the unused relational arrangement data of enterprises are matched, the security of the unused relational arrangement data of each enterprise is marked from high to low, and the security of the unused relational arrangement data of the enterprise is used as the sample label of the corresponding sample data.

[0038] The present invention also provides a management method for an industrial Internet data asset security management platform, comprising the following steps:

[0039] Step S501, constructing a common character library and a digital code library;

[0040] Step S502, calculating and screening the correspondence between characters and codes with the highest security;

[0041] Step S503, encrypting the transmission text according to the correspondence between the characters with the highest security and the codes;

[0042] Step S504, using the same method as step S502 to select the correspondence between the characters and codes with the highest security, and decrypt the ciphertext based on it.

[0043] The beneficial effect of the present invention is that when encrypting the transmission text of an enterprise, the correspondence between characters and codes with the highest security is screened according to the correspondence between characters and codes that the enterprise has used before. It can be seen that the correspondence between characters and codes is not unique, which can avoid the phenomenon that all ciphertexts are cracked due to the ciphertext of a certain transmission text being cracked, and significantly improve the security of the enterprise's encryption of transmission text. In addition, the calculation method for selecting the correspondence between characters and codes with the highest security is relatively complicated, which further improves the security of the present invention. BRIEF DESCRIPTION OF THE DRAWINGS

[0044] Figure 1 It is the overall flow chart of the present invention;

[0045] Figure 2 It is a flowchart of screening the highest security relationship pair of the present invention;

[0046] Figure 3 is a flowchart of a second embodiment of the present invention;

[0047] Figure 4 It is a flowchart of the third embodiment of the present invention.

[0048] In the figure: 10, initial information construction unit; 20, correspondence generator; 30, encoding compression module; 40, decoder;

[0049] 201, a correspondence arrangement unit; 202, a correspondence selection unit. DETAILED DESCRIPTION

[0050] The subject matter described herein will now be discussed with reference to example embodiments. It should be understood that the discussion of these embodiments is only to enable those skilled in the art to better understand and implement the subject matter described herein, and the functions and arrangements of the elements discussed may be changed without departing from the scope of protection of the contents of this specification. Each example may omit, replace or add various processes or components as needed. In addition, the features described relative to some examples may also be combined in other examples.

[0051] It should be noted that, unless otherwise defined, the technical terms or scientific terms used in one or more embodiments of the present invention should be understood by people with ordinary skills in the field to which the present invention belongs. The words "first", "second" and similar words used in one or more embodiments of the present invention do not indicate any order, quantity or importance, but are only used to distinguish different components. "Include" or "comprise" and similar words mean that the elements or objects appearing before the word include the elements or objects listed after the word and their equivalents, without excluding other elements or objects. "Connect" or "connected" and similar words are not limited to physical or mechanical connections, but may include electrical connections, whether direct or indirect. "Up", "down", "left", "right" and the like are only used to indicate relative positional relationships. When the absolute position of the described object changes, the relative positional relationship may also change accordingly.

[0052] like Figure 1-Figure 2 As shown, the first embodiment of the present invention is that, since the common encryption method relies on converting the ciphertext into a string of codes to achieve the encryption effect according to the correspondence between the codes in the key and the text, and this method has too strong regularity and is easy to be cracked, has low security, and has high requirements for the custody of the key, therefore, an industrial Internet data asset security management platform is provided, which includes: an initial information construction unit 10, a correspondence generator 20, a coding compression module 30 and a decoder 40.

[0053] First, according to the needs of the enterprise itself, it is necessary to build a database containing commonly used characters in daily production, research and development, and communication, and set codes corresponding to the number to meet the needs of encryption. Therefore, the initial information construction unit 10 is used to construct a commonly used character library and a digital code library. The number of codes in the digital code library and the number of characters in the commonly used character library are both t, where t is a custom parameter. For example, if there are 3,000 characters in the commonly used character library, then 3,000 codes can be generated in the digital code library, and as the number of characters increases or decreases, the number of codes can increase and decrease accordingly, avoiding the phenomenon that there is no correspondence between characters and codes.

[0054] Secondly, if a fixed correspondence is used to match characters in the commonly used text library with codes in the digital code library, if it is obtained, it is likely to be cracked, and the security is not enough to meet the needs of enterprises to protect their own trade secrets. Therefore, the correspondence generator 20 is used to determine the correspondence between characters and codes in the commonly used text library and the digital code library;

[0055] The correspondence generator 20 includes a correspondence arrangement unit 201 and a correspondence selection unit 202;

[0056] The correspondence arrangement unit 201 is used to arrange all correspondences between characters and codes in the commonly used text library and digital code library, generate several relationship pairs, and sort each relationship pair; the correspondence selection unit 202 is used to select a relationship pair with the highest security based on the relationship pairs used by the enterprise.

[0057] The specific steps for screening the most secure relationship pairs are as follows:

[0058] Step S211, screening the relationship pairs that have been used by the enterprise, and deleting these relationship pairs in the corresponding relationship arrangement unit 201, so that as the amount of transmission text sent by the enterprise increases, the amount of calculation can be gradually reduced;

[0059] Step S212, preset a relationship pair security threshold, use reverse logarithm to calculate the difference between the remaining similar pairs and the relationship pairs that the enterprise has used, and calculate its security score based on the difference;

[0060] Step S213, excluding the relationship pairs whose similarity is lower than the relationship pair safety threshold;

[0061] Step S214, if the similar pairs after being excluded in step S213 have continuous serial numbers, select the similar pair in the middle of the longest segment as the relationship pair with the highest security; if there are no continuous serial numbers, reduce the relationship pair security threshold and proceed to step S213; preferably, the initial value of the relationship pair security threshold is set to 0.9, and is reduced by 0.1 each time;

[0062] The relationship pair security threshold is a custom parameter.

[0063] Calculate the safety score S(P new ) is calculated as follows:

[0064]

[0065] In the formula, D(P old , P new ) indicates the relationship that the enterprise has used to P oid and never used relationship to P new The difference between them; N represents the maximum difference; N is a custom parameter;

[0066] D(P old , P new ) is calculated as follows:

[0067] D(P old , P new )=|{(i,j)|P old (i) <P new (j)∧P new (i)>P old (j)}|;

[0068] Where P old (i) and P old (j) respectively represent the relationship between P and oid The corresponding positions of the i-th and j-th characters in P new (i) and P new (j) respectively represent the relationship that the enterprise has never used before. new The corresponding positions of the i-th and j-th characters in .

[0069] Finally, after obtaining the highest security relationship pair, the transmission text needs to be encrypted according to the relationship pair. Therefore, the encoding and compression module 30 is used to encrypt the transmission text according to the information of the corresponding relationship generator 20, generate ciphertext, and then compress it;

[0070] Among them, the encoding compression module 30 includes an encryption executor and a ciphertext compression unit;

[0071] The encryption executor is used to convert the transmission text into ciphertext according to the relationship pairs selected by the corresponding relationship selection unit 202; the ciphertext compression unit compresses the ciphertext using Huffman coding, which belongs to the existing technology and will not be described in detail here.

[0072] It should be noted that the transmission of ciphertext adopts common communication methods. In order to facilitate the operation of computer programs, the ciphertext is converted into binary form during the transmission of the ciphertext, and then compressed using Huffman coding.

[0073] In addition, after the transmission text is encrypted, it needs to be decrypted, otherwise the encryption operation will be meaningless. Moreover, when the enterprise is the recipient of the ciphertext, it also needs to decrypt it. Therefore, the decoder 40 is used to decode according to the correspondence between the characters and codes used by the enterprise sending the ciphertext and calculate the correspondence with the highest security.

[0074] like Figure 3 As shown, the purpose of the second embodiment of the present invention is to use a neural network model to select the correspondence with the highest security in addition to the reverse logarithm. Therefore, the step of determining the correspondence between characters and codes in the commonly used text library and the digital code library includes:

[0075] Step S221, constructing a relational arrangement data set according to the commonly used character library and the digital code library, and sorting the data, recording the relational arrangement that the enterprise has used as the first relational arrangement data, and recording other relational arrangements as the second relational arrangement data;

[0076] Step S222, inputting the first relationship arrangement data and the second relationship arrangement data into the corresponding relationship security analysis model, and outputting the security score of each second relationship arrangement data;

[0077] Step S223, presetting a corresponding relationship security threshold, and deleting the second relationship arrangement data whose security score is lower than the corresponding relationship security threshold;

[0078] Step S224, if the remaining second relationship arrangement data have continuous sequence numbers, select the second relationship arrangement data with the longest middle sequence number as the corresponding relationship with the highest security; if not, lower the corresponding relationship security threshold and proceed to step S223;

[0079] The corresponding relationship security threshold is a custom parameter; preferably, the initial value of the corresponding relationship security threshold is set to 0.9 and is reduced by 0.1 each time.

[0080] The corresponding relationship security analysis model is constructed based on a deep learning network. Preferably, the deep learning network adopts a long short-term memory network. In addition, a transformer or graph neural network can also be used.

[0081] Before the corresponding relationship security analysis model is put into use, it needs to be trained to ensure the accuracy of its output. Therefore, the training samples used to train the corresponding relationship security analysis model include:

[0082] Preset m relationship arrangement data as the relationship arrangement data that the enterprise has used, and randomly generate a relationship arrangement data that the enterprise has not used as a sample data for training the corresponding relationship security analysis model;

[0083] Based on the above samples, the enumeration method is used to list the relationship arrangement data with the highest similarity to the relationship arrangement data used by the enterprise from high to low. When matching the sample data, the amount of the listed relationship arrangement data is counted;

[0084] Then, according to the amount of relational arrangement data listed when all the unused relational arrangement data of enterprises are matched, the security of the unused relational arrangement data of each enterprise is marked from high to low, and the security of the unused relational arrangement data of the enterprise is used as the sample label of the corresponding sample data.

[0085] like Figure 4 As shown, the third embodiment of the present invention is to provide a management method for an industrial Internet data asset security management platform, comprising the following steps:

[0086] Step S501, constructing a common character library and a digital code library;

[0087] Step S502, calculating and screening the correspondence between characters and codes with the highest security;

[0088] Step S503, encrypting the transmission text according to the correspondence between the characters with the highest security and the codes;

[0089] Step S504, using the same method as step S502 to select the correspondence between the characters and codes with the highest security, and decrypt the ciphertext based on it.

[0090] The above describes an embodiment of the present embodiment, but the present embodiment is not limited to the above-mentioned specific implementation methods. The above-mentioned specific implementation methods are merely illustrative and not restrictive. Under the guidance of the present embodiment, ordinary technicians in this field can also make many forms, all of which are within the protection of the present embodiment.

Claims

1. Industrial Internet data asset security management platform, characterized by: include: An initial information construction unit (10) is used to construct a common text library and a digital code library, wherein the number of codes in the digital code library and the number of characters in the common text library are both t; A correspondence generator (20) is used to determine the correspondence between characters and codes in a common text library and a digital code library; The correspondence generator (20) comprises a correspondence arrangement unit (201) and a correspondence selection unit (202); The corresponding relationship arrangement unit (201) is used to arrange all corresponding relationships between characters and codes in the commonly used character library and the digital code library, generate a plurality of relationship pairs, and sort each relationship pair; The corresponding relationship selection unit (202) is used to select a relationship pair with the highest security according to the relationship pairs that have been used by the enterprise; The specific steps for screening the most secure relationship pairs are as follows: Step S211, screening the relationship pairs that have been used by the enterprise, and deleting these relationship pairs in the corresponding relationship arrangement unit (201); Step S212, preset a relationship pair security threshold, use reverse logarithm to calculate the difference between the remaining similar pairs and the relationship pairs that the enterprise has used, and calculate its security score based on the difference; Step S213, excluding the relationship pairs whose similarity is lower than the relationship pair safety threshold; Step S214, if the similar pairs after being eliminated in step S213 have continuous serial numbers, select the similar pair in the middle of the longest segment as the relationship pair with the highest security; if there are no continuous serial numbers, lower the relationship pair security threshold and proceed to step S213; The relationship pair security threshold is a custom parameter; An encoding and compression module (30) is used to encrypt the transmission text according to the information of the corresponding relationship generator (20), generate ciphertext, and then compress it; A decoder (40) is used to decode the ciphertext according to the correspondence between characters and codes used by the enterprise sending the ciphertext and calculate the correspondence with the highest security; t is a custom parameter.

2. The industrial Internet data asset security management platform according to claim 1 is characterized in that: Calculate the safety score of the relationship pair The calculation formula is as follows: ； In the formula, Indicates the relationship pairs that the enterprise has used and unused relationships The difference between the values; Indicates the maximum difference value; is a custom parameter.

3. The industrial Internet data asset security management platform according to claim 2 is characterized in that: The calculation formula is as follows: ； In the formula, and Represents the relationship pairs that the enterprise has used The corresponding positions of the i-th and j-th characters in ; and Represents the relationship pairs that the enterprise has never used The corresponding positions of the i-th and j-th characters in .

4. The industrial Internet data asset security management platform according to claim 1, characterized in that: The coding and compression module (30) comprises an encryption executor and a ciphertext compression unit; The encryption executor is used to convert the transmission text into ciphertext according to the relationship pairs selected by the corresponding relationship selection unit (202); the ciphertext compression unit compresses the ciphertext using Huffman coding.

5. The industrial Internet data asset security management platform according to claim 1, characterized in that: The steps of determining the correspondence between characters and codes in the commonly used text library and digital code library include: Step S221, constructing a relational arrangement data set according to the commonly used character library and the digital code library, and sorting the data, recording the relational arrangement that the enterprise has used as the first relational arrangement data, and recording other relational arrangements as the second relational arrangement data; Step S222, inputting the first relationship arrangement data and the second relationship arrangement data into the corresponding relationship security analysis model, and outputting the security score of each second relationship arrangement data; Step S223, presetting a corresponding relationship security threshold, and deleting the second relationship arrangement data whose security score is lower than the corresponding relationship security threshold; Step S224, if the remaining second relationship arrangement data have continuous sequence numbers, select the second relationship arrangement data with the longest middle sequence number as the corresponding relationship with the highest security; if not, lower the corresponding relationship security threshold and proceed to step S223; The corresponding relationship security threshold is a custom parameter.

6. The industrial Internet data asset security management platform according to claim 5 is characterized in that: The corresponding relationship security analysis model is built based on the deep learning network.

7. The industrial Internet data asset security management platform according to claim 5, characterized in that: The training samples used to train the corresponding relationship security analysis model include: Preset m relationship arrangement data as the relationship arrangement data that the enterprise has used, and randomly generate a relationship arrangement data that the enterprise has not used as a sample data for training the corresponding relationship security analysis model; Based on the above samples, the enumeration method is used to list the relationship arrangement data with the highest similarity to the relationship arrangement data used by the enterprise from high to low. When matching the sample data, the amount of the listed relationship arrangement data is counted; Then, according to the amount of relational arrangement data listed when all the unused relational arrangement data of enterprises are matched, the security of the unused relational arrangement data of each enterprise is marked from high to low, and the security of the unused relational arrangement data of the enterprise is used as the sample label of the corresponding sample data.

8. A management method for implementing the industrial Internet data asset security management platform according to any one of claims 1 to 7, characterized in that: The steps include: Step S501, constructing a common character library and a digital code library; Step S502, calculating and screening the correspondence between characters and codes with the highest security; Step S503, encrypting the transmission text according to the correspondence between the characters with the highest security and the codes; Step S504, using the same method as step S502 to select the correspondence between the characters and codes with the highest security, and decrypt the ciphertext based on it.

Images