A security system for online technical consultation

Abstract

The present invention discloses a security system for online technical consultation, which relates to the field of security technology and includes an acquisition module, a consultation module, a custom module, a monitoring phased encryption module, a partition module, a performance reduction module, a compression encryption module and a display module. The present invention has the advantages that: through the setting of the acquisition module and the custom module, when the user can record the consultation information in a database created by himself, the efficiency of technical consultation is further improved, and the user experience can be increased. Through the setting of the priority, the resource effect of reproducing the answer can be reduced, and the operation speed of the system is improved. By monitoring the phased encryption module, the security level of user information can be further improved. At the same time, the use of phased password blocking can effectively prevent potential illegal login attempts, and the phased processing method reduces the phenomenon of normal users being blocked by mistake due to misoperation to a certain extent.

Description

Technical Field

[0001] The present invention relates to the field of secret security technology, and in particular to a secret security system for online technical consultation. Background Art

[0002] Internet consultation refers to the process of using the Internet as a medium to establish a good consulting relationship, so that the consultant can be familiar with and understand his or her own doubts and problems, and the consultant or platform can help the inquirer to discover problems and explore resources, and solve problems in a constructive way, so as to effectively meet their needs and promote their growth. Internet consultation refers to the process of using the Internet as a medium, establishing a good consulting relationship based on professional knowledge, and applying psychological methods and techniques;

[0003] Common technical consultation security systems cannot record the consultation information in the database established by the user according to the user's needs when the user provides technical consultation, and cannot have a phased encryption function, resulting in a low degree of encryption and unable to effectively prevent potential illegal login attempts. For this reason, we propose an online technical consultation security system. Summary of the invention

[0004] The purpose of the present invention is to provide a security system for online technical consultation.

[0005] In order to solve the problems raised in the above background technology, the present invention provides the following technical solutions: a security system for online technical consultation, the security system for online technical consultation includes an acquisition module, a consultation module, a customization module, a monitoring stage encryption module, a partition module, a performance reduction module, a compression encryption module and a display module;

[0006] Acquisition module, which can obtain user information;

[0007] Consultation module, creating a consultation interface;

[0008] Custom module, users can create databases according to their needs. When users complete consultation, they can choose to record the consultation information in the database created by the user.

[0009] Monitoring phased encryption module, when users frequently fail to log in or download large amounts of data, it can record all the user's operations and perform phased password blocking at the same time;

[0010] Partition module, which can store user information in partitions;

[0011] The performance reduction module calculates the performance ratio that can be reduced by the partition storage method;

[0012] The compression and encryption module compresses the information stored in the partition and then encrypts it;

[0013] The display module can display the reduced performance usage ratio of the calculation.

[0014] As a further solution of the present invention: the acquisition module can establish an authentication function. When the user logs in to the consultation interface, the user is required to authenticate his or her identity, and then obtain the user's name, identity, contact information and work unit information. When the user authenticates, it is necessary to verify the information used by the user. The specific verification methods are SMS verification, fingerprint recognition verification and facial recognition verification, so as to ensure the authenticity of the user's identity.

[0015] As a further solution of the present invention: after the consultation module creates a consultation interface, the user can provide technical consultation on the consultation interface, and establish a restriction function to prohibit the user from uploading files that may be risky when consulting. At the same time, the security level of the consultation information is analyzed based on the user's consultation information. When the consultation interface answers the user's consultation information, the answer information will also be processed with the same security level.

[0016] As a further solution of the present invention: the custom module can receive information processed by the consultation module. After completing the database creation, the user can also establish different databases according to needs. At the same time, after recording the user's consultation information, it can extract information features from the consultation information and record the information features in the database. When the user consults on the consultation interface, the consultation features of the consultation information can be extracted, and then similar information features can be retrieved from the database based on the consultation features. When similar information features exist, the consultation information corresponding to the information features can be preferentially extracted to the consultation interface, and the priority can be set for the database, so that the user can preferentially search in the database when consulting.

[0017] As a further solution of the present invention: the monitoring stage encryption module can receive information processed by the consulting module. After the user frequently fails to log in, the monitoring stage encryption module will perform stage password blocking at set intervals. When the user downloads a large amount of data, the monitoring stage encryption module will perform stage password blocking during the data download process. When performing password blocking, the sealing disorder processing can be set, and the disorder method is to disrupt the sealing order, and the disorder method is transmitted to the user's mobile phone at the same time, thereby increasing the degree of security.

[0018] As a further solution of the present invention: the partition module can receive information processed by the consulting module. When the consulting information is partitioned and stored, the specific information partitioning method is to divide according to the sensitivity of the information, the access frequency of the information, the generation time of the dependent data, the type of data, the business function and department, and the value of the data. The sealing level files of the six partitioning methods are divided into three levels: high, medium and low. When the consulting information involves the high level of the six partitioning methods, the consulting information will be directly recorded in the high-level security file of the corresponding partition. Let the sensitivity value of the consulting information be Z M , let the access frequency value of consulting information be Z F , let the value of the time when the consultation information is generated be Z C , let the type value of the consulting information be Z L , let the business value of consulting information be Z Y , let the value of consulting information be Z J , let the middle level data limit be Z X , let the high level value limit be G X , the mean of the judgment level is P D , the formula for converting a single data value into a quantity is:

[0019]

[0020] According to the above formula, the mean level can be calculated. D <Z X When Z X ≤P D <G X When the consultation information is recorded in the intermediate level security file of the corresponding partition mode, D ≥G X The consulting information will be recorded in a high-level confidentiality file in the corresponding partition method.

[0021] As a further solution of the present invention: the performance reduction module is able to receive the information processed by the partition module and the total space information occupied by the consultation information, so as to analyze the performance value of the computer security processing corresponding to the total consultation information, and then incorporate the performance value of the computer security processing corresponding to the total consultation information into the total consultation performance value, and then analyze the performance value of the computer security processing corresponding to the current partitioning method, and incorporate the performance value of the computer security processing corresponding to the current partitioning method into the partition performance value, so as to obtain the difference between the total consultation performance value and the partition performance value, and calculate the performance ratio of the partition performance value relative to the total consultation performance value.

[0022] As a further solution of the present invention: the compression encryption module can receive the content processed by the partition module, and compress the security files recorded in the partitions and levels, and then add different degrees of security measures according to the different levels of security files.

[0023] As a further solution of the present invention: the display module is capable of receiving the content processed by the compression encryption module and the performance degradation module, and recording the position of the security file corresponding to the consultation information of the set time period, and then using guide lines to guide the positions of the corresponding security files recorded by different consultation information, and displaying the relationship diagram between the consultation information and the security files guided by the guide lines, and then displaying the performance ratio of the partition performance value calculated relative to the total consultation performance value.

[0024] By adopting the above technical solution, compared with the prior art, the beneficial effects of the present invention are:

[0025] 1. The present invention obtains the setting of the module customization module, when the user can record the consultation information in the database created by himself, so as to further improve the efficiency of technical consultation and enhance the user experience. By setting the priority, the resource effect of reproducing the answer can be reduced, and the operation speed of the system is improved. By monitoring the staged encryption module, the confidentiality of user information can be further improved. At the same time, the use of staged password blocking can effectively prevent potential illegal login attempts, and the staged processing method reduces the phenomenon of normal users being blocked by mistake due to misoperation to a certain extent.

[0026] 2. The present invention can classify and manage information more accurately through the partition module, improve the effect of information storage and retrieval, and store information according to different levels to allocate storage resources more reasonably, so that more resources can be used for important and sensitive information, and at the same time help to better identify and use valuable information. The compression encryption module can further reduce the size of encrypted data and improve the efficiency of encryption;

[0027] 3. The present invention understands the performance values ​​used in the consulting information through the performance degradation module, and can take timely measures to prevent system failures caused by insufficient performance. It is also beneficial to control the additional hardware upgrade or maintenance costs that may be caused by performance degradation while ensuring the security effect. It can also better find a balance between security requirements and system performance to ensure the security and availability of the system. BRIEF DESCRIPTION OF THE DRAWINGS

[0028] Figure 1 It is a schematic diagram of the overall process in an embodiment of the present invention. DETAILED DESCRIPTION

[0029] The specific embodiments of the present invention will be further described below in conjunction with the accompanying drawings. It should be noted that the description of these embodiments is used to help understand the present invention, but does not constitute a limitation of the present invention.

[0030] In addition, the technical features involved in the various embodiments of the present invention described below can be combined with each other as long as they do not conflict with each other.

[0031] Please see attached Figure 1 The present invention discloses a security system for online technical consultation, which includes an acquisition module, a consultation module, a customization module, a monitoring phase encryption module, a partition module, a performance reduction module, a compression encryption module, and a display module;

[0032] Acquisition module, which can obtain user information;

[0033] Consultation module, creating a consultation interface;

[0034] Custom module, users can create databases according to their needs. When users complete consultation, they can choose to record the consultation information in the database created by the user.

[0035] Monitoring phased encryption module, when users frequently fail to log in or download large amounts of data, it can record all the user's operations and perform phased password blocking at the same time;

[0036] Partition module, which can store user information in partitions;

[0037] The performance reduction module calculates the performance ratio that can be reduced by the partition storage method;

[0038] The compression and encryption module compresses the information stored in the partition and then encrypts it;

[0039] The display module can display the reduced performance usage ratio of the calculation.

[0040] In one embodiment of the present invention: the acquisition module can establish an authentication function. When the user logs in to the consultation interface, the user is required to authenticate his or her identity, and then obtain the user's name, identity, contact information and work unit information. When the user authenticates, it is necessary to verify the information used by the user. The specific verification methods are SMS verification, fingerprint recognition verification and facial recognition verification, so as to ensure the authenticity of the user's identity.

[0041] In one embodiment of the present invention: after the consultation module creates a consultation interface, the user can provide technical consultation on the consultation interface, and establish a restriction function to prohibit the user from uploading files that may be risky when consulting. At the same time, the security level of the consultation information is analyzed based on the user's consultation information. When the consultation interface answers the user's consultation information, the answer information will also be processed with the same security level.

[0042] In one embodiment of the present invention: the custom module can receive information processed by the consultation module. After completing the database creation, the user can also establish different databases according to needs. At the same time, after recording the user's consultation information, the information features can be extracted from the consultation information and recorded in the database. When the user consults on the consultation interface, the consultation features of the consultation information can be extracted, and then similar information features can be retrieved from the database based on the consultation features. When similar information features exist, the consultation information corresponding to the information features can be preferentially extracted to the consultation interface, and the priority can be set for the database, so that the user can preferentially search in the database when consulting.

[0043] In one embodiment of the present invention: the monitoring stage encryption module can receive information processed by the consulting module. After the user frequently fails to log in, the monitoring stage encryption module will perform stage password blocking at set intervals. When the user downloads a large amount of data, the monitoring stage encryption module will perform stage password blocking during the data download process. When performing password blocking, the sealing disorder processing can be set, and the disorder method is to disrupt the sealing order, and the disorder method is transmitted to the user's mobile phone at the same time, thereby increasing the degree of security.

[0044] In one embodiment of the present invention: the partition module can receive information processed by the consulting module. When the consulting information is partitioned and stored, the specific information partitioning method is to partition according to the sensitivity of the information, the access frequency of the information, the generation time of the dependent data, the type of data, the business function and department, and the value of the data. The sealing level files of the six partitioning methods are divided into three levels: high, medium and low. When the consulting information involves the high level of the six partitioning methods, the consulting information will be directly recorded in the high-level security file of the corresponding partition. Suppose the sensitivity value of the consulting information is Z M , let the access frequency value of consulting information be Z F , let the value of the time when the consultation information is generated be Z C , let the type value of the consulting information be Z L , let the business value of consulting information be Z Y , let the value of consulting information be Z J , let the middle level data limit be Z X, let the high level value limit be G X , the mean of the judgment level is P D , the formula for converting a single data value into a quantity is:

[0045]

[0046] According to the above formula, the mean level can be calculated. D <Z X When Z X ≤P D <G X When the consultation information is recorded in the intermediate level security file of the corresponding partition mode, D ≥G X The consulting information will be recorded in a high-level confidentiality file in the corresponding partition method.

[0047] In one embodiment of the present invention: the performance reduction module is able to receive the information processed by the partition module and the total space information occupied by the consultation information, so as to analyze the performance value of the computer security processing corresponding to the total consultation information, and then incorporate the performance value of the computer security processing corresponding to the total consultation information into the total consultation performance value, and then analyze the performance value of the computer security processing corresponding to the current partitioning method, and incorporate the performance value of the computer security processing corresponding to the current partitioning method into the partition performance value, so as to obtain the difference between the total consultation performance value and the partition performance value, and calculate the performance ratio of the partition performance value relative to the total consultation performance value.

[0048] In one embodiment of the present invention: the compression and encryption module can receive the content processed by the partition module, and compress the security files recorded in the partitions and levels, and then add different degrees of security measures according to the different levels of security files.

[0049] In one embodiment of the present invention: the display module is able to receive the content processed by the compression encryption module and the performance degradation module, and record the location of the security file corresponding to the consultation information of the set time period, and then use the guide line to guide the location of the corresponding security file recorded by different consultation information, and display the consultation information and security file relationship diagram guided by the guide line, and then display the performance ratio of the calculated partition performance value relative to the total consultation performance value.

[0050] Example 1, please refer to the attached Figure 1When users are prohibited from uploading files that may be risky, the files uploaded by users can be detected by firewalls and intrusion detection systems to ensure that the files uploaded by users are safe files. At the same time, artificial intelligence algorithms are introduced to learn and analyze users' login behaviors and data download patterns. When artificial intelligence detects abnormalities in users' login behaviors and data download patterns, it will automatically trigger the response of the staged encryption function.

[0051] Example 2, please refer to the attached Figure 1 ,When calculating the numerical performance of the computer, the distributed ,computing framework can be used to perform the calculation, thereby preventing the huge ,amount of data from causing poor calculation efficiency. ,At the same time, a good interface can be set for the partition ,module and other related modules, so as to obtain the required information ,more accurately.

[0052] Example 3, please refer to the attached Figure 1 When compressing and encrypting consulting information, self-developed compression algorithms and encryption algorithms can be used to achieve it, and the use of self-developed compression algorithms and encryption algorithms can meet specific needs. At the same time, encryption logic of different complexities can be set to increase the degree of encryption and improve the protection of user consulting information.

[0053] Specifically, by obtaining the settings of the module customization module, when the user can record the consulting information in the database created by himself, the efficiency of technical consultation can be further improved, and the user experience can also be increased. By setting the priority, the resource effect of re-producing answers can be reduced, and the operation speed of the system can be improved. By monitoring the staged encryption module, the confidentiality of user information can be further improved. At the same time, the use of staged password blocking can effectively prevent potential illegal login attempts. The staged processing method reduces the phenomenon of normal users being mistakenly blocked due to misoperation to a certain extent.

[0054] Specifically, the partitioning module can more accurately classify and manage information, improve the efficiency of information storage and retrieval, and store information according to different levels so that storage resources can be allocated more reasonably, and more resources can be used for important and sensitive information. It also helps to better identify and utilize valuable information. The compression encryption module can further reduce the data size during encryption and improve the efficiency of encryption.

[0055] Specifically, by understanding the performance values ​​used in the consulting information through the performance degradation module, timely measures can be taken to prevent system failures caused by insufficient performance. It is also beneficial to control the additional hardware upgrade or maintenance costs that may be incurred due to performance degradation while ensuring the security effect. It can also better find a balance between security requirements and system performance to ensure the security and availability of the system.

[0056] Working principle:

[0057] First, the name, identity, contact information and work unit information used by the user when logging in are obtained. Then the user can provide technical consultation on the consultation interface. When completing a single technical consultation, the consultation information can be recorded in different databases according to the user's needs. When the user consults about similar technology next time, the answer stored in the database can be extracted and displayed first. When the user fails to log in multiple times or needs to download a large amount of data, the system will monitor the user's operation, and at the same time start the staged encryption function to encrypt the user information, and scramble the user's password sequence, and transmit the scrambled password sequence to the user's mobile phone. When the user does not directly record the consultation information in the database, the system will analyze the consultation information method and store it in the corresponding level of security files according to the type of consultation information. At the same time, the performance value that can be reduced by the partition storage method is calculated, so as to calculate the performance ratio that can be reduced by the partition method, and then compress the security files of different levels in different partitions. At this time, different degrees of security measures are taken for the security files of different levels in different partitions, and the performance ratio of the calculated partition performance value relative to the total consultation performance value and the relationship diagram of the consultation information and security files guided by the guide line are displayed. At this point, the entire workflow ends.

[0058] At the same time, the present application uses specific words to describe the embodiments of the present application. For example, "one embodiment", "an embodiment", and / or "some embodiments" refer to a certain feature, structure or characteristic related to at least one embodiment of the present application. Therefore, it should be emphasized and noted that "one embodiment" or "an embodiment" or "an alternative embodiment" mentioned twice or more in different positions in this specification does not necessarily refer to the same embodiment. In addition, certain features, structures or characteristics in one or more embodiments of the present application can be appropriately combined.

[0059] Some aspects of the present application may be performed entirely by hardware, entirely by software (including firmware, resident software, microcode, etc.), or by a combination of hardware and software. The above hardware or software may be referred to as "data blocks", "modules", "engines", "units", "components" or "systems". The processor may be one or more application specific integrated circuits (ASICs), digital signal processors (DSPs), digital signal processing devices (DAPDs), programmable logic devices (PLDs), field programmable gate arrays (FPGAs), processors, controllers, microcontrollers, microprocessors, or combinations thereof. In addition, various aspects of the present application may be expressed as computer products located in one or more computer-readable media, which include computer-readable program codes. For example, computer-readable media may include, but are not limited to, magnetic storage devices (e.g., hard disks, floppy disks, tapes ...), optical disks (e.g., compact disks CDs, digital versatile disks DVDs ...), smart cards, and flash memory devices (e.g., cards, sticks, key drives ...).

[0060] A computer-readable medium may include a propagated data signal containing computer program code, such as in baseband or as part of a carrier wave. The propagated signal may have a variety of manifestations, including electromagnetic, optical, etc., or a suitable combination. A computer-readable medium may be any computer-readable medium other than a computer-readable storage medium, which may be connected to an instruction execution system, device or apparatus to communicate, propagate or transmit a program for use. The program code on the computer-readable medium may be propagated through any suitable medium, including radio, cable, fiber optic cable, radio frequency signal, or similar medium, or a combination of any of the above mediums.

[0061] Similarly, it should be noted that in order to simplify the description disclosed in this application, so as to help understand one or more embodiments of the invention, in the above description of the embodiments of the present application, sometimes multiple features are merged into one embodiment, drawings or descriptions thereof. However, this disclosure method does not mean that the features required by the object of the present application are more than the features mentioned in the claims. In fact, the features of the embodiment are less than all the features of the single embodiment disclosed above. In some embodiments, numbers describing the number of components and attributes are used. It should be understood that such numbers used in the description of the embodiments are modified by the modifiers "approximately", "approximately" or "substantially" in some examples. Unless otherwise specified, "approximately", "approximately" or "substantially" indicate that the number allows a variation of ±20%. Accordingly, in some embodiments, the numerical parameters used in the specification and claims are approximate values, which may change according to the characteristics required by individual embodiments. In some embodiments, the numerical parameters should take into account the specified significant digits and adopt the general method of retaining the digits. Although the numerical domains and parameters used to confirm the breadth of their range in some embodiments of the present application are approximate values, in specific embodiments, such numerical settings are as accurate as possible within the feasible range.

[0062] Although the present invention is disclosed as above in terms of preferred embodiments, it is not intended to limit the present invention. Any person skilled in the art may make possible changes and modifications without departing from the spirit and scope of the present invention. Therefore, any modification, equivalent change and modification made to the above embodiments according to the technical essence of the present invention without departing from the content of the technical solution of the present invention shall fall within the scope of protection defined by the claims of the present invention.

Claims

1. A security system for online technical consultation, characterized by: The online technical consultation security system includes an acquisition module, a consultation module, a customization module, a monitoring phase encryption module, a partitioning module, a performance reduction module, a compression encryption module, and a display module; Acquisition module, which can obtain user information; Consultation module, creating a consultation interface; After the consultation module creates a consultation interface, users can provide technical consultation on the consultation interface, and establish a restriction function to prohibit users from uploading files that may be risky during consultation. At the same time, the confidentiality level of the consultation information is analyzed based on the user's consultation information. When the consultation interface answers the user's consultation information, the answer information will also be processed with the same confidentiality level; Custom module, users can create databases according to their needs. When users complete consultation, they can choose to record the consultation information in the database created by the user. Monitoring phased encryption module, when users frequently fail to log in or download large amounts of data, it can record all the user's operations and perform phased password blocking at the same time; Partition module, which can store user information in partitions; When partitioning and storing consulting information, the specific information partitioning methods are divided according to the sensitivity of the information, the access frequency of the information, the generation time of the dependent data, the type of data, the business function and department, and the value of the data. The sealing level files of the six partitioning methods are divided into three levels: high, medium and low. When the consulting information involves the high level of the six partitioning methods, the consulting information will be directly recorded in the high-level confidentiality file of the corresponding partition; The performance reduction module calculates the performance ratio that can be reduced by the partition storage method; The compression and encryption module compresses the information stored in the partition and then encrypts it; The display module can display the reduced performance usage ratio of the calculation.

2. The online technical consultation security system according to claim 1, characterized in that: The acquisition module can establish an authentication function. When the user logs in to the consultation interface, the user is required to authenticate his or her identity, and then obtain the user's name, identity, contact information and work unit information. When the user authenticates, the information used by the user needs to be verified. The specific verification methods are SMS verification, fingerprint recognition verification and facial recognition verification, so as to ensure the authenticity of the user's identity.

3. The online technical consultation security system according to claim 1, characterized in that: The custom module can receive information processed by the consultation module. After completing the database creation, the user can also establish different databases according to needs. At the same time, after recording the user's consultation information, it can extract information features from the consultation information and record the information features in the database. When the user consults on the consultation interface, the consultation features of the consultation information can be extracted, and then similar information features can be retrieved from the database based on the consultation features. When similar information features exist, the consultation information corresponding to the information features can be preferentially extracted to the consultation interface, and priority can be set for the database, so that the user can preferentially search in the database when consulting.

4. The online technical consultation security system according to claim 1, characterized in that: The monitoring stage encryption module can receive information processed by the consulting module. After the user frequently fails to log in, the monitoring stage encryption module will perform stage password blocking at set intervals. When the user downloads a large amount of data, the monitoring stage encryption module will perform stage password blocking during the data download process. When performing password blocking, the sealing disorder processing can be set, and the disorder method is to disrupt the sealing order, and the disordered method is transmitted to the user's mobile phone at the same time, thereby increasing the degree of security.

5. The online technical consultation security system according to claim 1, characterized in that: The partition module can receive information processed by the consulting module. Let the sensitivity value of the consulting information be Z M , let the access frequency value of consulting information be Z F , let the value of the time when the consultation information is generated be Z C , let the type value of the consulting information be Z L , let the business value of consulting information be Z Y , let the value of consulting information be Z J , let the middle level data limit be Z X , let the high level value limit be G X , the mean of the judgment level is P D , the formula for converting a single data value into a quantity is: According to the above formula, the mean level can be calculated. D <Z X When Z X ≤P D <G X When the consultation information is recorded in the intermediate level security file of the corresponding partition mode, D ≥G X The consulting information will be recorded in a high-level confidentiality file in the corresponding partition method.

6. The online technical consultation security system according to claim 5, characterized in that: The performance reduction module can receive the information processed by the partition module and the total space information occupied by the consulting information, so as to analyze the performance value of the computer security processing corresponding to the total consulting information, and then include the performance value of the computer security processing corresponding to the total consulting information into the total consulting performance value. At this time, the performance value of the computer security processing corresponding to the current partitioning method is analyzed again, and the performance value of the computer security processing corresponding to the current partitioning method is included as the partition performance value, so as to obtain the difference between the total consulting performance value and the partition performance value, and calculate the performance ratio of the partition performance value relative to the total consulting performance value.

7. The online technical consultation security system according to claim 5, characterized in that: The compression encryption module can receive the content processed by the partition module, compress the security files recorded in the partitions and levels, and then add different degrees of security measures according to the different levels of security files.

8. The online technical consultation security system according to claim 7, characterized in that: The display module is capable of receiving the content processed by the compression encryption module and the performance reduction module, and recording the location of the security file corresponding to the consultation information of the set time period, and then using guide lines to guide the location of the corresponding security files recorded in different consultation information, and displaying the relationship diagram between the consultation information and the security files guided by the guide lines, and then displaying the performance ratio of the partition performance value calculated relative to the total consultation performance value.

Images