Password application supervision method and system based on password resource pool

Abstract

The present application is about a password application supervision method and system based on a password resource pool, and relates to the field of password application technology. The system includes a management user terminal, a password resource pool management server, and a supervision platform server; the password resource pool management server is connected to the supervision platform server in communication; the management user terminal is connected to the password resource pool management server; the management user terminal is connected to the supervision platform server in communication. By recording the calls to each interface, password service, and password resource, an operation log is formed; by recording the administrator's operation behavior, an audit log is formed, which can capture abnormal behavior and potential attacks, help to timely discover and prevent security threats, protect the information asset security of enterprises or organizations, and prevent data leakage and system damage.

Description

Technical Field

[0001] The present application relates to the field of cryptographic application technology, and in particular to a cryptographic application supervision method and system based on a cryptographic resource pool. Background Art

[0002] The technology is used for unified management of cryptographic resources and provision of cryptographic services to users, ensuring network and information security and providing support for cloud computing, government cloud and other fields.

[0003] The cryptographic resource pool relies on the cryptographic infrastructure and utilizes various cryptographic resources and systems such as SSL VPN security gateways, timestamp systems, cryptographic calculation systems, digital signature systems, and key management systems. Through cryptographic service middleware and gateways, it provides cryptographic services such as encryption and decryption, digital authentication, and signature verification for application systems, thereby achieving the integrity, confidentiality, authenticity, and non-repudiation of data information. At the same time, through unified management of cryptographic resources and service deployment, it reduces the maintenance costs of resources and systems.

[0004] The existing password resource pool management solution only manages and maintains each password resource in a unified manner, provides services, and simply records logs.

[0005] However, the cryptographic resource pool management solution in the related technology does not strictly supervise and analyze the content of resource calls and service calls, as well as the status of the cryptographic resources themselves, so that information security cannot be fully guaranteed when users call services and the status of cryptographic resources is not understood in a timely manner. Summary of the invention

[0006] This application is about a password application supervision method and system based on a password resource pool, which can realize efficient management of password resource calls. The technical solution is as follows:

[0007] On the one hand, a cryptographic application supervision method based on a cryptographic resource pool is provided, the method is applied to a cryptographic application supervision system, the cryptographic application supervision system includes a management user terminal, a cryptographic resource pool management server and a supervision platform server;

[0008] The password resource pool management server is connected to the supervision platform server in communication;

[0009] Managing the connection between the client and the password resource pool management server;

[0010] Manage the communication connection between the user end and the regulatory platform server;

[0011] Methods include:

[0012] The management user terminal sends a supervision data acquisition instruction to the supervision platform server;

[0013] The supervision platform server receives the supervision data acquisition instruction; generates and sends a data retrieval instruction to the password resource pool management server based on the supervision data acquisition instruction, wherein the data retrieval instruction includes a user identifier corresponding to the password application user terminal;

[0014] The password resource pool management server receives the data retrieval instruction; generates user information based on the user identifier in the data retrieval instruction, and the user information corresponds to the password application user terminal; and feeds back the user information to the supervision platform server;

[0015] The supervision platform server receives and synchronizes user information to the management user terminal; generates operation logs corresponding to the user information; stores user information; updates supervision information based on user information; updates audit logs based on supervision information; generates confidentiality data based on operation logs and audit logs, and the confidentiality data is used to indicate the working status of the password resource management of the password resource pool management server; generates a management score and management policy corresponding to the password resource pool management server based on the confidentiality data.

[0016] In an optional embodiment, the system further includes a password application user terminal;

[0017] The password application client is connected to the password resource pool management server;

[0018] The method also includes:

[0019] The password application user sends a password service request to the password resource pool management server, and the password service request includes user identity data;

[0020] The cryptographic resource pool management server receives a cryptographic service request; obtains user identity data based on the cryptographic service request; performs authorization verification based on the user identity data; generates call request feedback information corresponding to the cryptographic service request in response to successful authorization verification, wherein the call request feedback information includes cryptographic information corresponding to the cryptographic application user terminal; and feeds back the call request feedback information to the cryptographic application user terminal.

[0021] In an optional embodiment, after the password resource pool management server performs authorization verification based on the user identity data, the following steps are included:

[0022] The password resource pool management server generates an authorization request based on the user identity data in response to the authorization verification failing and the user identifier in the user identity data matching the user identification rule; and sends the authorization request to the supervision platform server;

[0023] The supervision platform server receives the authorization request; in response to receiving the new creation instruction, generates authorization data based on the authorization request and the user identity; and feeds back the authorization data to the password resource pool management server;

[0024] The password resource pool management server receives and feeds back the authorization data to the password application user terminal.

[0025] In an optional embodiment, the method further comprises:

[0026] The supervision platform server sends an authorization request to the management user terminal;

[0027] The management client receives the authorization request and generates a new instruction based on the authorization request.

[0028] In an optional embodiment, the supervision platform server generates an operation log corresponding to the user information, including:

[0029] The password resource pool management server generates retrieval log data based on the data retrieval instruction; generates password resource request data based on the password service request; and sends the retrieval log data and the password resource request data to the supervision platform server;

[0030] The supervision platform server receives the retrieval log data and the password resource request data; generates an operation log based on the retrieval log data and the password resource request data, wherein the retrieval log data and the password resource request data include user information.

[0031] In an optional embodiment, the retrieved log data and the password request log also include timestamp data.

[0032] In an optional embodiment, the supervision platform server updates the supervision information based on the user information, including:

[0033] The supervision platform server generates audit data based on data retrieval instructions, the audit data includes at least one of retrieval instruction time data, retrieval instruction interface data and retrieval instruction content data, and the audit data includes user information; and generates and updates audit logs based on supervision information.

[0034] In an optional embodiment, the method further comprises:

[0035] The supervision platform server receives resource usage supervision instructions, and generates supervision feedback data based on the resource usage supervision instructions; feeds back the supervision feedback data to the cryptographic application user end, wherein the supervision feedback data includes at least one of cryptographic resource name data, cryptographic resource identification data, cryptographic resource port information data, cryptographic resource usage rate data, cryptographic resource access success rate data, cryptographic resource running time data, cryptographic resource access source data and cryptographic resource status data; and generates audit log data based on the supervision feedback data and the identification corresponding to the cryptographic application user end.

[0036] In an optional embodiment, the method further comprises:

[0037] The supervision platform server performs an allocation strategy detection on the cryptographic resource management data based on the reallocation rules; in response to the allocation strategy detection result indicating that the cryptographic resource management data does not match the current allocation strategy, it generates and sends a reallocation instruction to the management user terminal, and the reallocation instruction is used to adjust the current allocation strategy. The reallocation strategy involves the reallocation of at least one of the cryptographic resource concurrency, resource pool memory space, and cryptographic resource update frequency.

[0038] On the other hand, a cryptographic application supervision system is provided, the system comprising a management user terminal, a cryptographic resource pool management server and a supervision platform server;

[0039] The password resource pool management server is connected to the supervision platform server in communication;

[0040] The password application client is connected to the password resource pool management server;

[0041] Manage the communication connection between the user end and the regulatory platform server;

[0042] The cryptographic application supervision system is used to execute any of the cryptographic application supervision methods based on the cryptographic resource pool as described above.

[0043] The technical effects of each embodiment of the present application include at least:

[0044] By recording the calls to various interfaces, cryptographic services, and cryptographic resources, operation logs are formed; by recording the administrator's operating behavior, audit logs are formed, which can capture abnormal behaviors and potential attacks, help to promptly detect and prevent security threats, protect the information assets of enterprises or organizations, and prevent data leakage and system damage. BRIEF DESCRIPTION OF THE DRAWINGS

[0045] In order to more clearly illustrate the technical solutions in the embodiments of the present application, the drawings required for use in the description of the embodiments will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present application. For ordinary technicians in this field, other drawings can be obtained based on these drawings without creative work.

[0046] Figure 1 A schematic diagram of the system architecture of a cryptographic application supervision system provided by an exemplary embodiment of the present application is shown.

[0047] Figure 2 A flowchart of a cryptographic application supervision method based on a cryptographic resource pool provided by an exemplary embodiment of the present application is shown.

[0048] Figure 3 A schematic diagram of the structure of another cryptographic application supervision system provided by an exemplary embodiment of the present application is shown.

[0049] Figure 4 A schematic diagram of the operation process of a password application user terminal provided by an exemplary embodiment of the present application is shown.

[0050] Figure 5 A schematic diagram of a process of generating an operation log provided by an exemplary embodiment of the present application is shown.

[0051] Figure 6 A schematic diagram of a process of generating an audit log provided by an exemplary embodiment of the present application is shown. DETAILED DESCRIPTION

[0052] In order to make the objectives, technical solutions and advantages of the present application clearer, the implementation methods of the present application will be further described in detail below with reference to the accompanying drawings.

[0053] Figure 1 A schematic diagram of the system architecture of a password application supervision system provided by an exemplary embodiment of the present application is shown, and the system includes a management user terminal 110, a password resource pool management server 120, and a supervision platform server 130. The password resource pool management server is connected to the supervision platform server in communication, the password application user terminal is connected to the password resource pool management server, and the management user terminal is connected to the supervision platform server in communication.

[0054] The password resource pool management server is used to store and manage password resources. In the embodiment of the present application, the password resource pool management server can pre-store multiple password strings, which can be called based on user needs or changed based on administrator needs. Optionally, the password resource pool management server includes a database of pre-stored password strings.

[0055] In an embodiment of the present application, the supervision platform server is used to monitor and manage password call events and password management events occurring in the password resource pool management server, and generate intermediate data that can be visualized.

[0056] In the embodiment of the present application, the management client is implemented as a user terminal, which can interact with the password resource pool management server to obtain or manage passwords. At the same time, the management client can interact with the password resource pool management server to obtain the above-mentioned intermediate data that can be visualized and perform further processing. At the same time, the management client can send data to the password resource pool management server, so that the password resource pool management server further updates its own data.

[0057] Figure 2 A flowchart of a password application supervision method based on a password resource pool provided by an exemplary embodiment of the present application is shown, and the method is applied to Figure 1Taking the system shown in FIG. 1 as an example, the method includes:

[0058] Step 201: The management user terminal sends a supervision data acquisition instruction to the supervision platform server.

[0059] In actual application scenarios, this process is implemented as a process of managing the user end to obtain regulatory data. Optionally, the data acquisition request will be received by the regulatory platform server.

[0060] Step 202: The supervision platform server receives a supervision data acquisition instruction.

[0061] Step 203: The supervision platform server generates a data retrieval instruction based on the supervision data acquisition instruction and sends it to the cryptographic resource pool management server.

[0062] In an embodiment of the present application, the cryptographic resource pool management server serves as a management terminal of the cryptographic resource pool to retrieve data.

[0063] In the embodiment of the present application, the data retrieval instruction includes a user identification corresponding to the password application user terminal. Optionally, the user representation is used to uniquely indicate the user. The present application does not limit the actual implementation form of the user identification.

[0064] Step 204: The cryptographic resource pool management server receives a data retrieval instruction.

[0065] Step 205: The cryptographic resource pool management server generates user information based on the user identifier in the data retrieval instruction.

[0066] In the embodiment of the present application, the user information corresponds to the password application user terminal. The user information is used to characterize the password usage status of the user. In one example, the user information includes the identity information corresponding to the user, the user ID code, and the user password resource list. The present application does not limit the specific content of the user information.

[0067] Step 206: The cryptographic resource pool management server feeds back user information to the supervision platform server.

[0068] Step 207: The supervision platform server receives and synchronizes user information to the management user terminal.

[0069] Step 208: The supervision platform server generates an operation log corresponding to the user information.

[0070] After the supervision platform server receives the user information, it will generate an operation log corresponding to the user. The operation log is used to record the actions of the password application user end or the management user end to generate an operation log in the form of a list.

[0071] Step 209: The supervision platform server stores user information.

[0072] Step 210: The supervision platform server updates the supervision information based on the user information.

[0073] In the embodiment of the present application, the supervision information is used to indicate the monitoring status of the user. Optionally, the supervision information is updated according to the timing of the user information received by the supervision platform server, or the supervision information is updated according to a preset update cycle.

[0074] Step 211, the regulatory platform server updates the audit log based on the regulatory information.

[0075] Step 212: The regulatory platform server generates confidentiality data based on the operation log and audit log.

[0076] Step 213: The supervision platform server generates a management score and a management strategy corresponding to the cryptographic resource pool management server based on the cryptographic review data.

[0077] In the present application embodiment, "cryptographic evaluation" refers to the commercial cryptographic application security assessment, which is a security assessment of commercial cryptographic products and applications used in network information systems. In order to ensure the compliance, correctness and effectiveness of commercial cryptographic applications such as cryptographic application platforms or cryptographic resources, users need to conduct commercial cryptographic application security assessments regularly.

[0078] In the embodiment of the present application, the user can set the stage of the current password application in the secret review process, whether it is waiting for secret review, in the secret review process, or has passed the secret review, and can also record the time of entering the secret review process next time. The supervision platform server makes corresponding supervision judgments based on the current stage:

[0079] When in the stage of waiting for secret review or in the process of secret review, whether the user's use of cryptographic applications meets the requirements of secret review. For example, whether the correct key type and cryptographic algorithm are used, whether the key management process is compliant, and whether the use of cryptographic protocols is standard.

[0080] After the review is passed, the call records of password services and password resources are used to determine whether the review requirements are met. Is there any situation where the frequency of use of a password service that should have been frequently called has decreased or is no longer called, or an unsafe password resource is called in violation of regulations after the review is passed? When a problem is found, the supervision platform determines that the user has violated the regulations, issues an alarm, and makes rectification suggestions;

[0081] When the regulatory platform finds that a user's password application is about to enter the next password review process, it will issue a reminder, integrate the user's use of password applications and password resources in the previous password review compliance stage, form a usage report, score the compliance and correctness of the use in this stage, and put forward improvement suggestions for deficiencies.

[0082] That is, the management score and management strategy correspond to the critical review process.

[0083] In the embodiment of the present application, the password review data is used to indicate the password resource management working status of the password resource pool management server.

[0084] To sum up, the method provided in the embodiment of the present application forms an operation log by recording the calls to each interface, cryptographic service and cryptographic resource; and forms an audit log by recording the administrator's operating behavior, which can capture abnormal behavior and potential attacks, help to timely discover and prevent security threats, protect the information asset security of the enterprise or organization, and prevent data leakage and system damage.

[0085] Figure 3 A structural diagram of another cryptographic application supervision system provided by an exemplary embodiment of the present application is shown, the cryptographic application supervision system includes a management user terminal 110, a cryptographic resource pool management server 120, a supervision platform server 130 and a cryptographic application user terminal 140; the cryptographic resource pool management server is communicatively connected to the supervision platform server; the management user terminal is connected to the cryptographic resource pool management server; the management user terminal is communicatively connected to the supervision platform server. Among them, the cryptographic application user terminal is connected to the cryptographic resource pool management server. The cryptographic application user terminal is also implemented as a user terminal, but the cryptographic application user terminal has a demand for password retrieval.

[0086] In this case, in the embodiment of the present application, the supervision platform server can monitor the actions of the password application user terminal and approve some requests of the password application user terminal. Figure 4 As shown, the process includes:

[0087] Step 401: The cryptographic application client sends a cryptographic service request to the cryptographic resource pool management server.

[0088] correspond Figure 2 In the illustrated embodiment, the cryptographic service request includes user identity data.

[0089] Step 402: The cryptographic resource pool management server receives a cryptographic service request.

[0090] Step 403: The password resource pool management server obtains user identity data based on the password service request.

[0091] Step 404: The cryptographic resource pool management server performs authorization verification based on the user identity data.

[0092] In the embodiment of the present application, the authorization verification process may be a verification process based on symmetric encryption and decryption.

[0093] Step 405: In response to the authorization verification being passed, the cryptographic resource pool management server generates call request feedback information corresponding to the cryptographic service request.

[0094] In the embodiment of the present application, the call request feedback information includes password information corresponding to the password application user end.

[0095] Step 406: The cryptographic resource pool management server feeds back call request feedback information to the cryptographic application client.

[0096] Step 407: In response to the failure of the authorization verification and the user identification in the user identification data matching the user identification rule, the cryptographic resource pool management server generates an authorization request based on the user identification data.

[0097] Step 408: The cryptographic resource pool management server sends an authorization request to the supervision platform server.

[0098] Step 409: The supervision platform server receives the authorization request.

[0099] Step 410: The supervision platform server sends an authorization request to the management user terminal.

[0100] Step 411: The management client receives the authorization request.

[0101] Step 412: The management client generates a new creation instruction based on the authorization request.

[0102] Step 413: The management user terminal sends a new creation instruction to the supervision platform server.

[0103] Step 414: In response to receiving the new creation instruction, the supervision platform server generates authorization data based on the authorization request and the user identity.

[0104] Step 415: the application platform supervision server feeds back the authorization data to the cryptographic resource pool management server.

[0105] Step 416: The cryptographic resource pool management server receives and feeds back the authorization data to the cryptographic application client.

[0106] Next, the generation process of the operation log and audit log involved in the embodiments of the present application is explained. Figure 5 A schematic diagram of a process flow of generating an operation log provided by an exemplary embodiment of the present application is shown, and the method is applied to Figure 3 The method is described in the system shown in FIG. 1 , and includes:

[0107] Step 501: The cryptographic resource pool management server generates retrieval log data based on a data retrieval instruction.

[0108] Step 502: The cryptographic resource pool management server generates cryptographic resource request data based on the cryptographic service request.

[0109] Step 503: The cryptographic resource pool management server sends the retrieved log data and cryptographic resource request data to the supervision platform server.

[0110] Step 504: The supervision platform server receives and retrieves log data and password resource request data.

[0111] Step 505: The supervision platform server generates an operation log based on the retrieved log data and the cryptographic resource request data.

[0112] In the embodiment of the present application, the retrieved log data and the password resource request data include user information, and the password request log includes timestamp data.

[0113] Figure 6 A schematic diagram of a process flow of generating an audit log provided by an exemplary embodiment of the present application is shown, and the process is applied to Figure 3 Taking the supervision platform server in the system shown as an example, the process includes:

[0114] Step 601, generating audit data based on the data retrieval instruction.

[0115] In an embodiment of the present application, the audit data includes at least one of call instruction time data, call instruction interface data, and call instruction content data, and the audit data includes user information.

[0116] Step 602: Generate and update an audit log based on the supervision information.

[0117] It should be noted that in the embodiment of the present application, the supervision platform server has the function of monitoring and analyzing the use of cryptographic resources and performing audit summarization.

[0118] In one example, when using the monitoring and analysis function, the supervision platform server receives a resource usage supervision instruction, generates supervision feedback data based on the resource usage supervision instruction, and feeds back the supervision feedback data to the cryptographic application user terminal, wherein the supervision feedback data includes at least one of cryptographic resource name data, cryptographic resource identification data, cryptographic resource port information data, cryptographic resource usage rate data, cryptographic resource access success rate data, cryptographic resource running time data, cryptographic resource access source data, and cryptographic resource status data.

[0119] Correspondingly, when using the audit summary and the function of generating an audit log, the regulatory platform server generates audit data based on the data retrieval instruction, and the audit data includes at least one of retrieval instruction time data, retrieval instruction interface data, and retrieval instruction content data, and the audit data includes the user information; the audit log is generated and updated based on the regulatory information.

[0120] That is, the regulatory platform server can generate audit log data based on the regulatory feedback data and the identifier corresponding to the cryptographic application user terminal.

[0121] Correspondingly, the supervision platform server performs an allocation strategy detection on the cryptographic resource management data based on the reallocation rules; in response to the allocation strategy detection result indicating that the cryptographic resource management data does not match the current allocation strategy, a reallocation instruction is generated and sent to the management user terminal, and the reallocation instruction is used to adjust the current allocation strategy. The reallocation strategy involves the reallocation of at least one of the following resources: cryptographic resource concurrency, resource pool memory space, and cryptographic resource update frequency.

[0122] In the above embodiment, the current allocation strategy can be implemented as follows: when it is monitored that the demand for the use of a certain cryptographic resource increases and the number of cryptographic application user terminals using it increases, the supervision platform server can dynamically increase the concurrency supported by a certain cryptographic resource, expand the resource pool memory space occupied by it, and increase the available amount and update frequency of cryptographic resources; when it is monitored that the demand for cryptographic resources and the access frequency of a certain cryptographic application user terminal increase over a period of time, the user terminal will be responded to first; when it is monitored that the CPU occupancy rate of a certain cryptographic resource is high, the useless cryptographic resources can be suspended for a short period of time to release system resources.

[0123] It should be noted that in the present application example, the supervision platform server can also generate alarm information based on the cryptographic resource management data, and the alarm information is used to indicate abnormalities in the cryptographic resource management data.

[0124] To summarize, the methods provided in the various embodiments of the present application form operation logs by recording calls to various interfaces, cryptographic services, and cryptographic resources; and form audit logs by recording the administrator's operating behaviors, which can capture abnormal behaviors and potential attacks, help to promptly discover and prevent security threats, protect the information asset security of an enterprise or organization, and prevent data leakage and system damage.

[0125] The methods provided in various embodiments of the present application enable users to conveniently and intuitively understand the current status of cryptographic resources through monitoring and management of the basic information and status of cryptographic resources.

[0126] The methods provided in various embodiments of the present application analyze the calling and accessing situations of interfaces, cryptographic services and cryptographic resources, and propose strategies for reallocating cryptographic services and resources to ensure the efficiency of services and improve resource utilization.

[0127] The above are only optional embodiments of the present application and are not intended to limit the present application. Any modifications, equivalent substitutions, improvements, etc. made within the spirit and principles of the present application should be included in the protection scope of the present application.

Claims

1. A cryptographic application supervision method based on a cryptographic resource pool, characterized in that: The method is applied to a cryptographic application supervision system, which includes a management user terminal, a cryptographic resource pool management server, and a supervision platform server; The cryptographic resource pool management server is communicatively connected with the supervision platform server; The management client is connected to the password resource pool management server; The management client is in communication connection with the supervision platform server; The method comprises: The management user terminal sends a supervision data acquisition instruction to the supervision platform server; The supervision platform server receives the supervision data acquisition instruction; generates and sends a data retrieval instruction to the password resource pool management server based on the supervision data acquisition instruction, wherein the data retrieval instruction includes a user identifier corresponding to the password application user terminal; The password resource pool management server receives the data retrieval instruction; generates user information based on the user identifier in the data retrieval instruction, the user information corresponding to the password application user terminal; and feeds back the user information to the supervision platform server; The supervision platform server receives and synchronizes the user information to the management user terminal; generates an operation log corresponding to the user information; stores the user information; updates the supervision information based on the user information; updates the audit log based on the supervision information; generates confidentiality data based on the operation log and the audit log, the confidentiality data being used to indicate the working status of the cryptographic resource management of the cryptographic resource pool management server; generates a confidentiality score corresponding to the cryptographic resource pool management server based on the confidentiality data; determines the compliance of cryptographic application in combination with the confidentiality data and the confidentiality score, the compliance of cryptographic application including at least one of the key type, i.e., the correctness of the cryptographic algorithm, the compliance of the key management process, and the compliance of the use of the cryptographic protocol; determines whether the confidentiality score meets the confidentiality requirements in combination with the confidentiality data and the confidentiality score.

2. The method for supervising password application based on a password resource pool according to claim 1, characterized in that: The system also includes a password application user terminal; The password application client is connected to the password resource pool management server; The method further comprises: The password application user terminal sends a password service request to the password resource pool management server, wherein the password service request includes user identity data; The cryptographic resource pool management server receives a cryptographic service request; Acquiring user identity data based on the password service request; performing authorization verification based on the user identity data; In response to the authorization verification being passed, generating call request feedback information corresponding to the cryptographic service request, the call request feedback information including the cryptographic information corresponding to the cryptographic application user end; and feeding back the call request feedback information to the cryptographic application user end.

3. The method for supervising password application based on a password resource pool according to claim 2, characterized in that: After the password resource pool management server performs authorization verification based on the user identity data, it includes: In response to the authorization verification failing and the user identifier in the user identity data matching the user identifier rule, the password resource pool management server generates an authorization request based on the user identity data; and sends the authorization request to the supervision platform server; The supervision platform server receives the authorization request; in response to receiving the creation instruction, generates authorization data based on the authorization request and the user identity; and feeds back the authorization data to the password resource pool management server; The cryptographic resource pool management server receives and feeds back the authorization data to the cryptographic application client.

4. The method for supervising password application based on a password resource pool according to claim 3 is characterized in that: The method further comprises: The supervision platform server sends the authorization request to the management user terminal; The management client receives the authorization request; and generates the new creation instruction based on the authorization request.

5. The method for supervising password application based on a password resource pool according to claim 2, characterized in that: The supervision platform server generates an operation log corresponding to the user information, including: The cryptographic resource pool management server generates retrieval log data based on the data retrieval instruction; generates cryptographic resource request data based on the cryptographic service request; and sends the retrieval log data and the cryptographic resource request data to the supervision platform server; The supervision platform server receives the retrieval log data and the password resource request data; generates the operation log based on the retrieval log data and the password resource request data, wherein the retrieval log data and the password resource request data include the user information.

6. The method for supervising password application based on a password resource pool according to claim 5, characterized in that: The retrieval log data and the password request log also include timestamp data.

7. The method for supervising password application based on a password resource pool according to claim 2, characterized in that: The supervision platform server updates the supervision information based on the user information, including: The supervision platform server generates audit data based on the data retrieval instruction, and the audit data includes at least one of retrieval instruction time data, retrieval instruction interface data and retrieval instruction content data, and the audit data includes the user information; and generates and updates the audit log based on the supervision information.

8. The method for supervising password application based on a password resource pool according to claim 7, characterized in that: The method further comprises: The supervision platform server receives resource usage supervision instructions, generates supervision feedback data based on the resource usage supervision instructions; feeds back the supervision feedback data to the cryptographic application user end, wherein the supervision feedback data includes at least one of cryptographic resource name data, cryptographic resource identification data, cryptographic resource port information data, cryptographic resource usage rate data, cryptographic resource access success rate data, cryptographic resource running time data, cryptographic resource access source data and cryptographic resource status data; and generates audit log data based on the supervision feedback data and the identification corresponding to the cryptographic application user end.

9. The method for supervising password application based on a password resource pool according to claim 7, characterized in that: The method further comprises: The supervision platform server performs an allocation strategy detection on the cryptographic resource management data based on the reallocation rules; in response to the allocation strategy detection result indicating that the cryptographic resource management data does not match the current allocation strategy, it generates and sends a reallocation instruction to the management user terminal, and the reallocation instruction is used to adjust the current allocation strategy. The reallocation strategy involves the reallocation of at least one of the cryptographic resource concurrency, resource pool memory space, and cryptographic resource update frequency.

10. A cryptographic application supervision system based on a cryptographic resource pool, characterized in that: The system includes a management client, a password resource pool management server and a supervision platform server; The cryptographic resource pool management server is communicatively connected with the supervision platform server; The management client is connected to the password resource pool management server; The management client is in communication connection with the supervision platform server; The cryptographic application supervision system is used to execute the cryptographic application supervision method based on the cryptographic resource pool as described in any one of claims 1 to 9.

Images