Data security protection management and control system based on cloud computing

Abstract

The present invention relates to the field of data security protection technology, and in particular to a data security protection management and control system based on cloud computing, which is used to solve the problem that the existing system cannot perform intelligent analysis on storage nodes before data storage, nor can it perform intelligent monitoring on storage nodes after data storage. Once a storage node has a security problem, the user will face the risk of data loss, and the storage security of the user data cannot be guaranteed. The system includes a user login module, a security management and control platform, a data acquisition module, an information analysis module, a cloud computing storage module, and a storage management module. The system can not only protect the data security of the user, but also effectively prevent security risks such as data leakage, tampering or illegal access, protect the legitimate rights and interests of the user, and can also improve the access speed and transmission efficiency of data, bringing a better user experience to the user. At the same time, the system also has the characteristics of easy implementation, high efficiency and reliability, and is suitable for cloud computing environments of various sizes.

Description

Technical Field

[0001] The present invention relates to the technical field of data security protection, and in particular to a data security protection management and control system based on cloud computing. Background Art

[0002] With the rapid development of cloud computing technology, more and more companies and individuals choose to store data in the cloud. However, data security and privacy issues in the cloud computing environment are becoming increasingly prominent. How to ensure the security of data during storage and transfer has become an urgent problem to be solved. Therefore, the patent with publication number CN111917761A discloses a data security protection method based on blockchain cloud computing, which belongs to the field of blockchain technology and includes the following steps: setting access rights for data holders to customize on the cloud computing storage server, and the server calculates the data uploaded by the holder after passing the access rights; by forming a blockchain sub-chain with various storage servers distributed in the cloud computing, a server operation log will be generated during each data update process, and the operation log will be saved in the blockchain parent chain in chronological order In the block; the server records the identity information of the data holder who updates the data, and encrypts the operation log stored in the block through the public key. The server in the cloud computing system generates an operation log of data update during the data storage process, and saves the operation log through the immutability of the blockchain, so that when the data is damaged, it can be restored to the latest update node with the help of the operation log, which increases the security of data storage. However, there are still the following shortcomings: it is impossible to perform intelligent analysis on the storage nodes before data storage and select excellent storage nodes for storage, and it is also impossible to perform intelligent monitoring on the storage nodes after data storage and transfer data before the storage nodes fail. Once the storage nodes have security problems, users will face the risk of data loss, and the storage security of user data cannot be guaranteed. Therefore, it is necessary to develop a data security protection management and control system based on cloud computing to improve the security of data storage, which is of great significance. Summary of the invention

[0003] In order to overcome the above-mentioned technical problems, the purpose of the present invention is to provide a data security protection management and control system based on cloud computing, which solves the existing problem that it is impossible to perform intelligent analysis on storage nodes before data storage, and it is impossible to perform intelligent monitoring on storage nodes after data storage. Once a storage node has a security problem, the user will face the risk of data loss, and the storage security of user data cannot be guaranteed.

[0004] The purpose of the present invention can be achieved through the following technical solutions:

[0005] The data security protection management and control system based on cloud computing includes:

[0006] The user login module is used for users to log in with their account and password, and then upload user data and send it to the security management and control platform;

[0007] The security management and control platform is used to obtain the data to be stored, generate node analysis instructions, and send the node analysis instructions to the data acquisition module;

[0008] A data acquisition module is used to obtain a blockchain node after receiving a node analysis instruction, obtain node preference information of the blockchain node, and send the node preference information to the information analysis module; wherein the node preference information includes capacity information, rate information, and missing information;

[0009] An information analysis module is used to obtain a preferred coefficient based on node preferred information and send the preferred coefficient to the security management and control platform;

[0010] The specific process of the information analysis module obtaining the optimization coefficient is as follows:

[0011] The capacity information, rate information and missing information are quantified, and the values ​​of the capacity information, rate information and missing information are extracted according to the formula The optimal coefficient is obtained, which is recorded as YXj, where κ is the preset error adjustment factor, κ=1.115, x1, x2 and x3 are the preset weight factors corresponding to capacity information, rate information and missing information respectively, x1, x2 and x3 satisfy 1.652<x2<x1<x3, and x1=2.21, x2=1.82, x3=2.67;

[0012] Send the optimization coefficient to the security management and control platform;

[0013] The security management and control platform is used to obtain the selected storage node according to the optimization coefficient and send the selected storage node to the cloud computing storage module;

[0014] The cloud computing storage module is used to store the data to be stored in the selected storage node.

[0015] As a further solution of the present invention: the specific process of the data acquisition module acquiring capacity information is as follows:

[0016] After receiving the node analysis instruction, each storage server distributed in the cloud computing storage module is marked as a blockchain node in turn, and represented by the symbol Jj, j = 1, ..., m, where j = 1, 2, 3, ..., m, m is a positive integer, m represents the total number of storage servers, and j is the serial number of any storage server;

[0017] Obtain the total storage capacity and remaining total capacity of the blockchain node, and mark them as storage value and remaining value, respectively, and represent them with symbols CR and YR, quantify the storage value and remaining value, extract the values ​​of storage value and remaining value, and substitute them into the formula for calculation. The capacity information is obtained and represented by the symbol RL, where e is a mathematical constant, r1 and r2 are preset proportional coefficients corresponding to the storage capacity and the residual capacity, respectively, and r1 and r2 satisfy r1+r2=1, 0<r1<r2<1, and r1=0.33 and r2=0.67.

[0018] As a further solution of the present invention: the specific process of the data acquisition module acquiring the rate information is as follows:

[0019] Obtain the data storage transmission rate and network download rate of the blockchain node, and mark them as transmission value and download value respectively, and represent them with symbols CS and XZ respectively. Quantify the transmission value and download value, extract the values ​​of the transmission value and download value, and substitute them into the formula for calculation. According to the formula The rate information is obtained and represented by the symbol SL, where e is a mathematical constant, s1 and s2 are preset proportional coefficients corresponding to the transmission value and the download value respectively, s1 and s2 satisfy s1+s2=1, 0<s2<s1<1, and s1=0.58 and s2=0.42.

[0020] As a further solution of the present invention: the specific process of the data acquisition module acquiring missing information is as follows:

[0021] Obtain the total amount and total bytes of data stored per unit time of the blockchain node, and mark them as post-quantity value and post-node value, obtain the total amount and total bytes of the stored data before storage, and mark them as pre-quantity value and pre-node value, obtain the difference between the pre-quantity value and the post-quantity value, and mark it as quantity difference value, and represent it with the symbol LC, obtain the difference between the pre-node value and the post-node value, and mark it as node difference value, and represent it with the symbol JC, quantify the quantity difference value and node difference value, extract the numerical value of the quantity difference value and the node difference value, and substitute them into the formula for calculation, according to the formula The missing information is obtained and represented by the symbol QS, where e is a mathematical constant, q1 and q2 are preset proportional coefficients corresponding to the quantity difference value and the node difference value, respectively, q1 and q2 satisfy q1+q2=1, 0<q1<q2<1, and q1=0.44 and q2=0.56.

[0022] As a further solution of the present invention: the specific process of the security management and control platform obtaining the selected storage node is as follows:

[0023] All blockchain nodes are sorted in descending order according to the optimization coefficient, the blockchain node at the top is marked as the selected storage node, and the selected storage node is sent to the cloud computing storage module.

[0024] As a further solution of the present invention: the data security protection management and control system based on cloud computing also includes:

[0025] The storage management module is used to receive storage management instructions to monitor the status of blockchain nodes, obtain node abnormality information of blockchain nodes, and send the node abnormality information to the information analysis module; wherein the node abnormality information includes temperature and humidity information, frequency and sound information; it is also used to transfer user data in the transfer node to the spare blockchain node for storage.

[0026] As a further solution of the present invention: the specific process of the storage management module obtaining temperature and humidity information is as follows:

[0027] After receiving the storage management instruction, the blockchain node is monitored, the real-time temperature and humidity of the blockchain node are obtained, and they are marked as the actual temperature value and the actual humidity value, represented by the symbols SW and SS respectively, and the actual temperature value and the actual humidity value are quantified, and the values ​​of the actual temperature value and the actual humidity value are extracted according to the formula The temperature and humidity information is obtained, denoted as WS, where w1 and w2 are the preset proportional coefficients corresponding to the actual temperature value and the actual humidity value respectively, w1 and w2 satisfy w1+w2=1, 0<w1<w2<1, and w1=0.41 and w2=0.59.

[0028] As a further solution of the present invention: the specific process of the storage management module acquiring the audio and video information is as follows:

[0029] Obtain the maximum vibration frequency and maximum sound intensity of the blockchain node per unit time, and mark them as the most frequent value and the most audible value, represented by symbols ZP and ZY respectively. Quantify the most frequent value and the most audible value, extract the values ​​of the most frequent value and the most audible value, and use the formula The frequency information is obtained, recorded as PY, where p1 and p2 are preset proportional coefficients corresponding to the most frequent value and the most audible value respectively, and p1 and p2 satisfy p1+p2=1, 0<p2<p1<1, and p1=0.72 and p2=0.28 are taken.

[0030] As a further solution of the present invention: the information analysis module is further used to obtain an abnormality coefficient according to the node abnormality information, and send the abnormality coefficient to the security management and control platform; the specific process of the information analysis module obtaining the abnormality coefficient is as follows:

[0031] The temperature and humidity information and the frequency and sound information are quantified and the values ​​of the temperature and humidity information and the frequency and sound information are extracted according to the formula The abnormal coefficient is obtained, which is recorded as YC, where η is the preset error adjustment factor, η=0.949, e is a mathematical constant, t1 and t2 are the preset weight factors corresponding to the temperature and humidity information and the frequency and sound information, respectively, t1 and t2 satisfy t1>t2>1.338, and t1=2.16 and t2=1.68;

[0032] Send the abnormal coefficient to the security management and control platform.

[0033] As a further solution of the present invention: the security control platform is further used to obtain a transfer node according to the abnormal coefficient, and send the transfer node to the storage management module; the specific process of the security control platform obtaining the transfer node is as follows:

[0034] Compare the anomaly coefficient with the preset anomaly threshold:

[0035] If the abnormal coefficient is ≥ the abnormal threshold, the blockchain node corresponding to the abnormal coefficient is marked as a transfer node, and the transfer node is sent to the storage management module.

[0036] Beneficial effects of the present invention:

[0037] The data security protection management and control system based on cloud computing of the present invention collects data from blockchain nodes to obtain node preference information during the process of storing user data. The preference coefficient obtained based on the node preference information can comprehensively measure the quality of the blockchain nodes. The larger the preference coefficient, the higher the quality, and the more preferentially the nodes are selected for data storage. The blockchain nodes that have stored user data are then collected to obtain node abnormality information. The abnormality coefficient obtained based on the node abnormality information can comprehensively measure the abnormality of the blockchain nodes. The larger the abnormality coefficient, the higher the abnormality, indicating that the blockchain nodes are prone to failures, resulting in user data storage errors. Finally, data transfer and storage are performed.

[0038] The advantage of the present invention is that, through data collection and data analysis technology, data security storage and efficient node selection are achieved, the node with the best status is selected for data storage, and the node after storage is further monitored, and data can be transferred when an abnormality occurs in the node. Therefore, the data security protection and control system of the present invention can not only protect the user's data security, but also effectively prevent security risks such as data leakage, tampering or illegal access, protect the user's legitimate rights and interests, and improve data access speed and transmission efficiency, bringing better user experience. At the same time, the system also has the characteristics of easy implementation, high efficiency and reliability, and is suitable for cloud computing environments of various sizes. BRIEF DESCRIPTION OF THE DRAWINGS

[0039] The present invention will be further described below in conjunction with the accompanying drawings.

[0040] Figure 1 It is a principle block diagram of the data security protection management and control system based on cloud computing in the present invention;

[0041] Figure 2 It is the working method of the data security protection management and control system based on cloud computing in the present invention. DETAILED DESCRIPTION

[0042] The following will be combined with the embodiments of the present invention to clearly and completely describe the technical solutions in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0043] Embodiment 1:

[0044] See also Figure 1 As shown, this embodiment is a data security protection management and control system based on cloud computing, which includes the following modules: user login module, security management and control platform, data acquisition module, information analysis module, cloud computing storage module and storage management module;

[0045] The user login module is used for users to log in using their account and password, and then upload user data and send the user data to the security management and control platform;

[0046] The security management and control platform is used to obtain the data to be stored, generate node analysis instructions, and send the node analysis instructions to the data acquisition module; it is also used to obtain the selected storage node according to the optimization coefficient, and send the selected storage node to the cloud computing storage module; it is also used to obtain the transfer node according to the abnormal coefficient, and send the transfer node to the storage management module;

[0047] The data acquisition module is used to obtain the blockchain node after receiving the node analysis instruction, obtain the node preference information of the blockchain node, and send the node preference information to the information analysis module; wherein the node preference information includes capacity information, rate information and missing information;

[0048] The information analysis module is used to obtain the optimal coefficient according to the node optimal information, and send the optimal coefficient to the security management and control platform; it is also used to obtain the abnormal coefficient according to the node abnormal information, and send the abnormal coefficient to the security management and control platform;

[0049] The cloud computing storage module is used to store the data to be stored in the selected storage node, generate a storage management instruction after the storage is completed, and send the storage management instruction to the storage management module;

[0050] Among them, the storage management module is used to receive storage management instructions to monitor the status of blockchain nodes, obtain node abnormality information of blockchain nodes, and send the node abnormality information to the information analysis module; wherein the node abnormality information includes temperature and humidity information, frequency and sound information; it is also used to transfer user data in the transfer node to the spare blockchain node for storage.

[0051] Embodiment 2:

[0052] See also Figure 2 As shown, this embodiment is a working method of a data security protection management and control system based on cloud computing, comprising the following steps:

[0053] Step a1: The user logs in to the user login module using his account and password, then uploads the user data and sends the user data to the security management and control platform;

[0054] Step a2: The security management and control platform obtains the data to be stored, generates a node analysis instruction, and sends the node analysis instruction to the data acquisition module;

[0055] Step a3: After receiving the node analysis instruction, the data acquisition module obtains the blockchain node and obtains the node preference information of the blockchain node, wherein the node preference information includes capacity information, rate information and missing information, and sends the node preference information to the information analysis module;

[0056] Step a4: The information analysis module obtains the optimization coefficient according to the node optimization information, and sends the optimization coefficient to the security management and control platform;

[0057] Step a5: The security management and control platform obtains the selected storage node according to the optimization coefficient, and sends the selected storage node to the cloud computing storage module;

[0058] Step a6: the cloud computing storage module stores the data to be stored in the selected storage node, generates a storage management instruction after the storage is completed, and sends the storage management instruction to the storage management module;

[0059] Step a7: the storage management module receives the storage management instruction, performs status monitoring on the blockchain node, obtains node abnormality information of the blockchain node, wherein the node abnormality information includes temperature and humidity information and frequency and sound information, and sends the node abnormality information to the information analysis module;

[0060] Step a8: The information analysis module obtains an abnormality coefficient according to the node abnormality information, and sends the abnormality coefficient to the security management and control platform;

[0061] Step a9: the security management and control platform obtains the transfer node according to the abnormality coefficient and sends the transfer node to the storage management module;

[0062] Step a10: The storage management module transfers the user data in the transfer node to the spare blockchain node for storage.

[0063] Embodiment 3:

[0064] Based on any of the above embodiments, Embodiment 3 of the present invention is a user login module. The function of the user login module is to upload user data. The specific process is as follows:

[0065] The user login module allows users to log in using their account and password, then upload user data and send it to the security management and control platform.

[0066] Embodiment 4:

[0067] Based on any of the above embodiments, Embodiment 4 of the present invention is a security management and control platform, which has three functions:

[0068] One of them is to generate node analysis instructions. The specific process is as follows:

[0069] The security management and control platform sorts the received user data in chronological order, marks the user data at the top as data to be stored, generates a node analysis instruction, and sends the node analysis instruction to the data acquisition module;

[0070] The second function is to obtain the selected storage node. The specific process is as follows:

[0071] The security management and control platform sorts all blockchain nodes in descending order according to the optimization coefficient, marks the blockchain node at the top as the selected storage node, and sends the selected storage node to the cloud computing storage module;

[0072] The third function is to obtain the transfer node. The specific process is as follows:

[0073] The security control platform compares the anomaly coefficient with the preset anomaly threshold:

[0074] If the abnormal coefficient is ≥ the abnormal threshold, the blockchain node corresponding to the abnormal coefficient is marked as a transfer node, and the transfer node is sent to the storage management module.

[0075] Embodiment 5:

[0076] Based on any of the above embodiments, Embodiment 5 of the present invention is a data acquisition module. The function of the data acquisition module is to acquire node preference information, wherein the node preference information includes capacity information, rate information, and missing information. The specific process is as follows:

[0077] After receiving the node analysis instruction, the data acquisition module marks each storage server distributed in the cloud computing storage module as a blockchain node in turn, and represents it with the symbol Jj, j = 1, ..., m, where j = 1, 2, 3, ..., m, m is a positive integer, m represents the total number of storage servers, and j is the serial number of any storage server;

[0078] The data acquisition module obtains the total storage capacity and remaining total capacity of the blockchain node, and marks them as storage capacity value and remaining capacity value, respectively, and represents them with symbols CR and YR, quantifies the storage capacity value and remaining capacity value, extracts the values ​​of storage capacity value and remaining capacity value, and substitutes them into the formula for calculation. The capacity information is obtained and represented by the symbol RL, where e is a mathematical constant, r1 and r2 are preset proportional coefficients corresponding to the storage capacity and the residual capacity, respectively, r1 and r2 satisfy r1+r2=1, 0<r1<r2<1, and r1=0.33 and r2=0.67;

[0079] The data acquisition module obtains the data storage transmission rate and network download rate of the blockchain node, and marks them as transmission value and download value respectively, and represents them with symbols CS and XZ respectively. The transmission value and download value are quantified, the values ​​of the transmission value and download value are extracted, and substituted into the formula for calculation. According to the formula The rate information is obtained and represented by the symbol SL, where e is a mathematical constant, s1 and s2 are preset proportional coefficients corresponding to the transmission value and the download value, respectively, s1 and s2 satisfy s1+s2=1, 0<s2<s1<1, and s1=0.58 and s2=0.42;

[0080] The data acquisition module obtains the total amount and total bytes of data stored in the blockchain node per unit time, and marks them as the post-quantity value and the post-node value, obtains the total amount and total bytes of the stored data before storage, and marks them as the pre-quantity value and the pre-node value, obtains the difference between the pre-quantity value and the post-quantity value, and marks it as the quantity difference value, and represents it with the symbol LC, obtains the difference between the pre-node value and the post-node value, and marks it as the node difference value, and represents it with the symbol JC, quantifies the quantity difference value and the node difference value, extracts the numerical value of the quantity difference value and the node difference value, and substitutes them into the formula for calculation, according to the formula The missing information is obtained and represented by the symbol QS, where e is a mathematical constant, q1 and q2 are preset proportional coefficients corresponding to the quantity difference value and the node difference value, respectively, q1 and q2 satisfy q1+q2=1, 0<q1<q2<1, and q1=0.44, q2=0.56;

[0081] The data acquisition module sends the capacity information, rate information and missing information to the information analysis module.

[0082] Embodiment 6:

[0083] Based on any of the above embodiments, Embodiment 6 of the present invention is an information analysis module, which has two functions:

[0084] One of the functions is to obtain the optimal coefficient. The specific process is as follows:

[0085] The information analysis module quantifies the capacity information, rate information and missing information, extracts the values ​​of capacity information, rate information and missing information, and uses the formula The optimal coefficient is obtained, which is recorded as YXj, where κ is the preset error adjustment factor, κ=1.115, x1, x2 and x3 are the preset weight factors corresponding to capacity information, rate information and missing information respectively, x1, x2 and x3 satisfy 1.652<x2<x1<x3, and x1=2.21, x2=1.82, x3=2.67;

[0086] The information analysis module sends the optimization coefficient to the security management and control platform;

[0087] The second function is to obtain the abnormal coefficient. The specific process is as follows:

[0088] The information analysis module quantifies the temperature and humidity information and the frequency and sound information, extracts the values ​​of the temperature and humidity information and the frequency and sound information, and uses the formula The abnormal coefficient is obtained, which is recorded as YC, where η is the preset error adjustment factor, η=0.949, e is a mathematical constant, t1 and t2 are the preset weight factors corresponding to the temperature and humidity information and the frequency and sound information, respectively, t1 and t2 satisfy t1>t2>1.338, and t1=2.16 and t2=1.68;

[0089] The information analysis module sends the abnormality coefficient to the security management and control platform.

[0090] Embodiment 7:

[0091] Based on any of the above embodiments, Embodiment 7 of the present invention is a cloud computing storage module. The function of the cloud computing storage module is to generate storage management instructions. The specific process is as follows:

[0092] The cloud computing storage module stores the data to be stored in the selected storage node, generates a storage management instruction after the storage is completed, and sends the storage management instruction to the storage management module.

[0093] Embodiment 8:

[0094] Based on any of the above embodiments, Embodiment 8 of the present invention is a storage management module, and the storage management module has two functions:

[0095] One of them is to obtain node abnormal information, which includes temperature and humidity information and frequency and sound information. The specific process is as follows:

[0096] The storage management module receives the storage management instruction to monitor the status of the blockchain node, obtain the real-time temperature and real-time humidity of the blockchain node, and mark them as real temperature value and real humidity value, represented by symbols SW and SS respectively, quantify the real temperature value and real humidity value, extract the values ​​of the real temperature value and real humidity value, and use the formula The temperature and humidity information is obtained, which is recorded as WS, where w1 and w2 are the preset proportional coefficients corresponding to the actual temperature value and the actual humidity value, respectively. w1 and w2 satisfy w1+w2=1, 0<w1<w2<1, and w1=0.41 and w2=0.59;

[0097] The storage management module obtains the maximum vibration frequency and maximum sound intensity of the blockchain node per unit time, and marks them as the most frequent value and the most audible value, represented by symbols ZP and ZY respectively, quantifies the most frequent value and the most audible value, extracts the values ​​of the most frequent value and the most audible value, and uses the formula The frequency information is obtained, which is recorded as PY, where p1 and p2 are preset proportional coefficients corresponding to the most frequent value and the most audible value, respectively, and p1 and p2 satisfy p1+p2=1, 0<p2<p1<1, and p1=0.72 and p2=0.28 are taken;

[0098] The storage management module sends the temperature and humidity information and the frequency and sound information to the information analysis module;

[0099] The second function is to transfer the user data in the transfer node. The specific process is as follows:

[0100] The storage management module transfers the user data in the transfer node to the spare blockchain node for storage.

[0101] Based on Examples 1-8, the working principle of the present invention is as follows:

[0102] The data security protection control system based on cloud computing of the present invention logs in to the user login module using an account and password, then uploads the user data, obtains the data to be stored through the security control platform, and generates a node analysis instruction at the same time. After receiving the node analysis instruction through the data acquisition module, the blockchain node is obtained, and the node preference information of the blockchain node is obtained. The information analysis module obtains the preference coefficient according to the node preference information, and the security control platform obtains the selected storage node according to the preference coefficient. The data to be stored is stored in the selected storage node through the cloud computing storage module. After the storage is completed, a storage management instruction is generated, and the storage management instruction is received through the storage management module to monitor the status of the blockchain node, and the node abnormality information of the blockchain node is obtained. The information analysis module obtains the abnormality coefficient according to the node abnormality information, and the security control platform obtains the abnormality coefficient according to the abnormality information. The control platform obtains the transfer node according to the abnormality coefficient, and transfers the user data in the transfer node to the spare blockchain node for storage through the storage management module; in the process of storing user data, the system first collects data from the blockchain node to obtain node preference information, and then the preference coefficient obtained according to the node preference information can comprehensively measure the quality of the blockchain node, and the larger the preference coefficient, the higher the quality, and the more priority it is selected for data storage, and then the blockchain node that has stored the user data is collected to obtain node abnormality information, and the abnormality coefficient obtained according to the node abnormality information can comprehensively measure the abnormality of the blockchain node, and the larger the abnormality coefficient, the higher the abnormality, which indicates that the blockchain node is prone to failure, resulting in user data storage errors, and finally data transfer and storage;

[0103] The advantage of the present invention is that, through data collection and data analysis technology, data security storage and efficient node selection are achieved, the node with the best status is selected for data storage, and the node after storage is further monitored, and data can be transferred when an abnormality occurs in the node. Therefore, the data security protection and control system of the present invention can not only protect the user's data security, but also effectively prevent security risks such as data leakage, tampering or illegal access, protect the user's legitimate rights and interests, and improve data access speed and transmission efficiency, bringing better user experience. At the same time, the system also has the characteristics of easy implementation, high efficiency and reliability, and is suitable for cloud computing environments of various sizes.

[0104] It should be further explained that the above formulas are all dimensionless and numerical calculations. The formula is a formula for the most recent real situation obtained by collecting a large amount of data and performing software simulation. The preset parameters in the formula are set by technicians in this field according to actual conditions.

[0105] In the description of this specification, the description with reference to the terms "one embodiment", "example", "specific example", etc. means that the specific features, structures, materials or characteristics described in conjunction with the embodiment or example are included in at least one embodiment or example of the present invention. In this specification, the schematic representation of the above terms does not necessarily refer to the same embodiment or example. Moreover, the specific features, structures, materials or characteristics described can be combined in any one or more embodiments or examples in a suitable manner.

[0106] The above contents are merely examples and explanations of the present invention. Those skilled in the art may make various modifications or additions to the specific embodiments described or replace them in a similar manner. As long as they do not deviate from the invention or exceed the scope defined by the claims, they shall all fall within the protection scope of the present invention.

Claims

1. A data security protection management and control system based on cloud computing, characterized in that: include: The user login module is used for users to log in with their account and password, and then upload user data and send it to the security management and control platform; The security management and control platform is used to obtain the data to be stored, generate node analysis instructions, and send the node analysis instructions to the data acquisition module; it is also used to obtain the selected storage node according to the optimization coefficient, and send the selected storage node to the cloud computing storage module; A data acquisition module is used to obtain a blockchain node after receiving a node analysis instruction, obtain node preference information of the blockchain node, and send the node preference information to the information analysis module; wherein the node preference information includes capacity information, rate information, and missing information; The specific process of the data acquisition module acquiring capacity information is as follows: After receiving the node analysis instruction, each storage server distributed in the cloud computing storage module is marked as a blockchain node in turn and represented by the symbol Jj; Obtain the total storage capacity and remaining total capacity of the blockchain node, and mark them as storage capacity value and remaining capacity value, respectively, and represent them with symbols CR and YR, respectively. Quantify the storage capacity value and remaining capacity value according to the formula The capacity information is obtained and represented by the symbol RL, where e is a mathematical constant, r1 and r2 are preset proportional coefficients corresponding to the storage capacity and the residual capacity respectively; The specific process of the data acquisition module acquiring rate information is as follows: Obtain the data storage transmission rate and network download rate of the blockchain node, and mark them as transmission value and download value respectively, and represent them with symbols CS and XZ respectively. Quantify the transmission value and download value according to the formula The rate information is obtained and represented by the symbol SL, where e is a mathematical constant, s1 and s2 are preset proportional coefficients corresponding to the transmission value and the download value respectively; The specific process of the data acquisition module acquiring missing information is as follows: Get the total amount and total bytes of data stored in the blockchain node per unit time, and mark them as post-quantity value and post-node value, get the total amount and total bytes of the stored data before storage, and mark them as pre-quantity value and pre-node value, get the difference between pre-quantity value and post-quantity value, and mark it as quantity difference value, and represent it with symbol LC, get the difference between pre-node value and post-node value, and mark it as node difference value, and represent it with symbol JC, quantify quantity difference value and node difference value, according to formula The missing information is obtained and represented by the symbol QS, where e is a mathematical constant, q1 and q2 are preset proportional coefficients corresponding to the quantity difference value and the node difference value respectively; The information analysis module is used to obtain the optimal coefficient according to the node optimal information, and send the optimal coefficient to the security management and control platform; it is also used to obtain the abnormal coefficient according to the node abnormal information, and send the abnormal coefficient to the security management and control platform; The specific process of the information analysis module obtaining the optimization coefficient is as follows: The capacity information, rate information and missing information are quantified according to the formula The optimal coefficient is obtained, which is recorded as YXj, where κ is the preset error adjustment factor, and x1, x2 and x3 are the preset weight factors corresponding to capacity information, rate information and missing information respectively; Send the optimization coefficient to the security management and control platform; The specific process of the information analysis module obtaining the abnormal coefficient is as follows: The temperature and humidity information and the frequency and sound information are quantified according to the formula The abnormal coefficient is obtained, which is recorded as YC, where η is the preset error adjustment factor, η=0.949, e is a mathematical constant, t1 and t2 are the preset weight factors corresponding to the temperature and humidity information and the frequency and sound information respectively; Send the abnormal coefficient to the security control platform; A cloud computing storage module is used to store the data to be stored in the selected storage node; The storage management module is used to receive the storage management instruction to monitor the status of the blockchain node, obtain the node abnormality information of the blockchain node, and send the node abnormality information to the information analysis module; wherein the node abnormality information includes temperature and humidity information and frequency and sound information; and is also used to transfer the user data in the transfer node to the spare blockchain node for storage; The specific process of the storage management module obtaining temperature and humidity information is as follows: After receiving the storage management instruction, the blockchain node is monitored, the real-time temperature and humidity of the blockchain node are obtained, and marked as the actual temperature value and the actual humidity value, represented by the symbols SW and SS respectively, and the actual temperature value and the actual humidity value are quantified according to the formula The temperature and humidity information is obtained, which is recorded as WS, where w1 and w2 are the preset proportional coefficients corresponding to the actual temperature value and the actual humidity value respectively; The specific process of the storage management module acquiring the audio information is as follows: Get the maximum vibration frequency and maximum sound intensity of the blockchain node per unit time, and mark them as the most frequent value and the most audible value, represented by symbols ZP and ZY respectively. Quantify the most frequent value and the most audible value according to the formula The frequency information is obtained and recorded as PY, wherein p1 and p2 are preset proportional coefficients corresponding to the most frequent value and the most audible value, respectively.

2. The data security protection management and control system based on cloud computing according to claim 1 is characterized in that: The specific process of the security management and control platform obtaining the selected storage node is as follows: All blockchain nodes are sorted in descending order according to the optimization coefficient, the blockchain node at the top is marked as the selected storage node, and the selected storage node is sent to the cloud computing storage module.

3. The data security protection management and control system based on cloud computing according to claim 1 is characterized in that: The security control platform is also used to obtain a transfer node according to the abnormal coefficient, and send the transfer node to the storage management module; the specific process of the security control platform obtaining the transfer node is as follows: Compare the anomaly coefficient with the preset anomaly threshold: If the abnormal coefficient ≥ the abnormal threshold, the blockchain node corresponding to the abnormal coefficient is marked as a transfer node, and the transfer node is sent to the storage management module.

Images