Student information security management system and method based on blockchain

Abstract

The present invention discloses a student information security management system and method based on blockchain, and relates to the technical field of information security management. The system discloses a block security management module, a block access restriction module, a security management sequence module, and a block access protection module. By setting the block security management module and the security management sequence module, the student information security of each block in the blockchain can be managed and analyzed periodically, and the security management analysis can be performed preferentially on the blocks with higher potential student information security risks. By setting the block access restriction module and the block access protection module, when it is found that there is a security risk in the student information in the block, the access rights of the block can be locked immediately, and by analyzing the student relationship spectrum, the blocks that may have security risks can be efficiently and accurately locked, waiting for the security management analysis of the blocks.

Description

Technical Field

[0001] The present invention relates to the field of information security management technology, and more specifically, to a student information security management system and method based on blockchain. Background Art

[0002] With the rapid development of information technology, student information management systems in the field of education have become an indispensable part of modern schools. These systems not only store a large amount of student personal information, including but not limited to sensitive data such as name, ID number, home address, and academic performance, but also involve important information such as students' academic planning, reward and punishment records, etc. However, with the surge in data volume, how to ensure the security, integrity, and privacy protection of this information has become an urgent problem to be solved.

[0003] In recent years, blockchain technology has shown great application potential in many fields with its characteristics of decentralization, immutability, transparency and traceability. Especially in the field of information security, blockchain technology can effectively solve many problems faced by traditional centralized systems. By storing student information on the blockchain, the authenticity and immutability of the information can be ensured, while improving the system's anti-attack ability and data recovery capabilities.

[0004] However, despite the significant advantages of blockchain technology in information security, it still faces many challenges in practical applications. For example, how to efficiently and orderly manage and analyze a large number of blocks in the blockchain to ensure that potential security risks are discovered and dealt with in a timely manner, and when security risks are discovered, quickly lock the relevant blocks and prevent the further spread of security threats. Summary of the invention

[0005] In view of the shortcomings of the prior art, the purpose of the present invention is to provide a student information security management system and method based on blockchain.

[0006] To achieve the above object, the present invention provides the following technical solutions:

[0007] The student information security management system based on blockchain includes block security management module, block access restriction module, security management sequence module and block access protection module;

[0008] The block security management module: sets the security management cycle length to g. When the security management cycle node is reached, security management analysis is performed on each block in sequence according to the block security management sequence. When security management analysis is completed for each block, a security management log for the block is generated.

[0009] The block access restriction module: obtains the security management score of the security management log, and determines whether to mark the block as an access restricted block based on the comparison result between the security management score and the security management limit score;

[0010] The security management sequence module: after completing the security management analysis of all blocks in the block security management sequence, generates a new block security management sequence, and the new block security management sequence is used for the security management analysis of the next periodic node;

[0011] The block access protection module: when an access restricted block appears, obtains the student ID corresponding to the access restricted block, marks the student as an access restricted student, obtains the student relationship spectrum, marks all students in the student relationship spectrum who have a relationship with the access restricted student as associated students, and determines whether it is necessary to temporarily lock the access rights of the block corresponding to the associated student.

[0012] Furthermore, the security management log includes the block number, security management score, and management analysis time.

[0013] Furthermore, the steps for obtaining the block security management sequence are as follows: obtain the management sequence value of each block, sort all blocks in order from large to small according to the numerical value of the management sequence value, and generate the block security management sequence after the sorting is completed.

[0014] Furthermore, the management sequence value of the block is obtained in the following way: obtain j security management logs continuously generated by the block before the current time of the system, sum up the security management scores of all security management logs and take the average to obtain the average security management score EPkg, set the security management standard score, and when the security management score of the security management log is greater than or equal to the security management standard score, mark the security management log as a key management log, sort all key management logs in the order of management analysis time, calculate the time difference between the management analysis times of two adjacent key management logs after sorting, and obtain the key management time difference, sum up all the key management time differences and take the average to obtain the key management average time difference GMdz, and use the formula The management sequence value XLgn of the block is obtained, where up is the safety management coefficient and ur is the key management coefficient.

[0015] Furthermore, the steps for obtaining the security management score of the security management log are as follows: obtain all terminal access records of the block within the security management cycle, the terminal access records include terminal number, access behavior, terminal id, access behavior resolution value, record generation time, sort all terminal access records in the order of record generation time, sum the access behavior resolution values ​​of two adjacent terminal access records after sorting, obtain a continuous resolution anomaly value, set a continuous resolution anomaly threshold, when the continuous resolution anomaly value is greater than or equal to the continuous resolution anomaly threshold, increase the number of continuous resolution anomalies by one, mark the number of continuous resolution anomalies as Lgp, obtain the terminal resolution value of each terminal, set the terminal resolution upper value and the terminal resolution lower value, when the terminal resolution value of the terminal is greater than or equal to the terminal resolution When the terminal resolution value of the terminal is less than or equal to the terminal resolution lower value, the terminal is marked as a normal resolution terminal, the total number of abnormal resolution terminals is marked as Fcd, and the total number of normal resolution terminals is marked as Gbt. When the terminal resolution value of the terminal is between the terminal resolution upper value and the terminal resolution lower value, the terminal is marked as a resolution edge terminal, and the terminal relationship spectrum is obtained. When two resolution edge terminals are associated in the terminal relationship spectrum, the terminal resolution values ​​of the two resolution edge terminals are summed to obtain the resolution edge accumulation value, and the resolution edge accumulation threshold is set. When the resolution edge accumulation value is greater than or equal to the resolution edge accumulation threshold, the resolution edge accumulation times are increased by one, and the resolution edge accumulation times are marked as Bwh. The formula is used The safety management score FYgc of the safety management log is obtained, where as is the continuous analysis anomaly coefficient, az is the analysis edge accumulation coefficient, and at is the quantity coefficient.

[0016] Furthermore, a security management limit score is set. When the security management score of the security management log is greater than or equal to the security management limit score, the block is marked as an access restricted block and the access rights of the block are locked. When the security management score of the security management log is less than the security management limit score, security management analysis is performed on the next block according to the block security management sequence.

[0017] Furthermore, the terminal resolution value of the terminal is obtained as follows: obtain the terminal ID of the terminal access record, mark the terminal access record of the same terminal ID as the same-terminal access record, sort all the same-terminal access records in the order of record generation time, calculate the difference between the access behavior resolution values ​​of two adjacent same-terminal access records after sorting and take the absolute value to obtain the behavior resolution turbulence value, set the behavior resolution turbulence threshold, when the behavior resolution turbulence value is greater than or equal to the behavior resolution turbulence threshold, increase the number of behavior turbulences by one, when the behavior resolution turbulence value is less than the behavior resolution turbulence threshold, increase the number of behavior stability by one, mark the number of behavior turbulences as csz, mark the number of behavior stability as rtm, sum and average the access behavior resolution values ​​of all the same-terminal access records, obtain the access behavior resolution mean gsg, and use the formula The terminal analysis value Zjx of the terminal is obtained, where gd is the behavior turbulence coefficient and gt is the behavior stability coefficient.

[0018] Furthermore, the steps for obtaining the access behavior parsing value of the terminal access record are as follows: obtain the access behavior of the terminal access record, preprocess the access behavior, obtain access feature data after preprocessing, obtain the terminal ID of the terminal access record, obtain the access behavior parsing model of the terminal, use the access feature data as input data of the access behavior parsing model, and obtain the access behavior parsing value by the output of the access behavior parsing model.

[0019] Furthermore, determine whether it is necessary to temporarily lock the access rights of the block corresponding to the associated student, specifically: obtain the number of association lines between the access-restricted student and the associated students in the student relationship spectrum, set the association line threshold number, and when the number of association lines is greater than or equal to the association line threshold number, temporarily lock the access rights of the block corresponding to the associated student, waiting for security management analysis of the block.

[0020] Furthermore, the student information security management method based on blockchain includes the following steps:

[0021] Step 1: Periodically perform security management analysis on each block in sequence according to the block security management sequence. When the security management analysis is completed for each block, a security management log for the block is generated;

[0022] Step 2: Based on the comparison result between the security management score and the security management limit score, determine whether to mark the block as an access restricted block;

[0023] Step 3: When an access restricted block appears, obtain the student ID corresponding to the access restricted block, mark the student as an access restricted student, obtain the student relationship spectrum, mark all students in the student relationship spectrum who have a relationship with the access restricted student as associated students, and determine whether it is necessary to temporarily lock the access rights of the block corresponding to the associated student.

[0024] Compared with the prior art, the present invention has the following beneficial effects:

[0025] 1. The method of the present invention satisfies the efficient and orderly analysis of each block in the blockchain. Through the multi-dimensional security analysis of the student information in the block, the security risks of the student information in the block are accurately identified, the spread of security threats is effectively prevented, and the minimum security control of the student information in the blockchain is realized;

[0026] 2. Setting up the block security management module and the security management sequence module can periodically manage and analyze the student information security of each block in the blockchain, and can give priority to security management analysis of blocks with higher student information security risks. Setting up the block access restriction module and the block access protection module can immediately lock the access rights of the block when it is found that there is a security risk in the student information in the block, and through the analysis of the student relationship spectrum, efficiently and accurately lock the blocks that may have security risks, waiting for the security management analysis of the block. BRIEF DESCRIPTION OF THE DRAWINGS

[0027] Figure 1 A flowchart of the student information security management method based on blockchain;

[0028] Figure 2 A flowchart for determining whether it is necessary to temporarily lock the access rights of the block corresponding to the associated student;

[0029] Figure 3 This is a module diagram of the student information security management system based on blockchain. DETAILED DESCRIPTION

[0030] Example 1: Reference Figure 1 ,The student information security management method based on blockchain includes the following steps:

[0031] Step 1: Periodically perform security management analysis on each block in sequence according to the block security management sequence. When the security management analysis is completed for each block, a security management log for the block is generated;

[0032] Step 2: Based on the comparison result between the security management score and the security management limit score, determine whether to mark the block as an access restricted block;

[0033] Step 3: When an access restricted block appears, obtain the student ID corresponding to the access restricted block, mark the student as an access restricted student, obtain the student relationship spectrum, mark all students in the student relationship spectrum who have a relationship with the access restricted student as associated students, and determine whether it is necessary to temporarily lock the access rights of the block corresponding to the associated student.

[0034] Through the above steps, efficient and orderly analysis of each block in the blockchain is achieved. Through multi-dimensional security analysis of student information in the block, accurate identification of security risks of student information in the block is ensured, the spread of security threats is effectively prevented, and minimized security control of student information in the blockchain is achieved.

[0035] Example 2: Reference Figures 2 to 3 ,The student information security management system based on blockchain includes block security management module, block access restriction module, security management sequence module, and block access protection module.

[0036] Block security management module: Set the security management cycle length to g. When the cycle node of the security management cycle is reached, perform security management analysis on each block in turn according to the block security management sequence. When the security management analysis of each block is completed, generate a security management log for the block. The security management log includes the block number (each block corresponds to a unique number, the blockchain contains multiple blocks, each block only stores the student information of one student, and different blocks store the student information of different students), security management score, and management analysis time.

[0037] The steps for obtaining the block security management sequence are as follows: obtain the management sequence value of each block, sort all blocks in descending order according to the management sequence value, and generate a block security management sequence after the sorting is completed. For example, there are four blocks in total, namely block 1, block 2, block 3 and block 4, and the generated block security management sequence is (block 3, block 2, block 4, block 1). At the next cycle node, block 3 is given priority for security management analysis, and block 1 is finally subjected to security management analysis.

[0038] The management sequence value of the block is obtained in the following way: obtain j security management logs generated continuously by the block before the current time of the system, sum up the security management scores of all security management logs and take the average to obtain the average security management score EPkg, set the security management standard score (the security management standard score is the score set by the system by default, and the security management standard score is not the same as the security management boundary score), when the security management score of the security management log is greater than or equal to the security management standard score, mark the security management log as a key management log, when the security management score of the security management log is less than the security management standard score, do not process it, sort all key management logs in the order of management analysis time, calculate the time difference between the management analysis times of two adjacent key management logs after sorting, and obtain the key management time difference, sum up all key management time differences and take the average to obtain the key management average time difference GMdz, and use the formula The management sequence value XLgn of the block is obtained, where up is the safety management coefficient, ur is the key management coefficient, the value of up is 3.41, and the value of ur is 2.58.

[0039] The steps for obtaining the security management score of the security management log are as follows: obtain all terminal access records of the block within the security management cycle (when the terminal needs to access student information, the identity of the terminal is verified through the private key. After the verification is completed, the terminal can access the student information in the block, and access behavior will occur during the access process). The terminal access record includes the terminal number (each terminal corresponds to a unique number), access behavior, terminal id (that is, the id corresponding to the terminal accessing the block), access behavior resolution value, record generation time (that is, the generation time corresponding to the terminal access record), sort all terminal access records in the order of record generation time, sum the access behavior resolution values ​​of the two adjacent terminal access records after sorting, and obtain the continuous resolution anomaly value, set the continuous resolution anomaly threshold (the continuous resolution anomaly threshold is the threshold set by the system by default), when the continuous resolution anomaly value is greater than or equal to the continuous resolution anomaly threshold, the number of continuous resolution anomalies is increased by one, when the continuous resolution anomaly value is less than the continuous resolution anomaly threshold, no processing is performed, and the number of continuous resolution anomalies is marked as Lgp, and the terminal resolution value of each terminal is obtained. , set the terminal resolution upper value and the terminal resolution lower value (the terminal resolution upper value is greater than the terminal resolution lower value, and the terminal resolution upper value and the terminal resolution lower value are both the thresholds set by the system by default). When the terminal resolution value of the terminal is greater than or equal to the terminal resolution upper value, mark the terminal as a resolution abnormal terminal. When the terminal resolution value of the terminal is less than or equal to the terminal resolution lower value, mark the terminal as a resolution normal terminal. Mark the total number of resolution abnormal terminals as Fcd, and the total number of resolution normal terminals as Gbt. When the terminal resolution value of the terminal is between the terminal resolution upper value and the terminal resolution lower value, mark the terminal as a resolution edge terminal, obtain the terminal relationship spectrum, and when two resolution edge terminals are associated in the terminal relationship spectrum, sum the terminal resolution values ​​of the two resolution edge terminals to obtain the resolution edge accumulation value. Set the resolution edge accumulation threshold (the resolution edge accumulation threshold is the threshold set by the system by default). When the resolution edge accumulation value is greater than or equal to the resolution edge accumulation threshold, increase the resolution edge accumulation times by one. When the resolution edge accumulation value is less than the resolution edge accumulation threshold, no processing is performed, and the resolution edge accumulation times are marked as Bwh. Using the formula The security management score FYgc of the security management log is obtained, where as is the continuous analysis anomaly coefficient, az is the analysis edge accumulation coefficient, and at is the quantity coefficient. The value of as is 2.54, the value of az is 1.98, and the value of at is 1.27.

[0040] The terminal relationship spectrum includes all terminals, which are represented by the relationship of a network diagram and show the relationship between the terminals. The relationship between the terminals includes but is not limited to affiliation and communication relationship. For example, if terminal a is subordinate to terminal b in the terminal relationship spectrum, then terminal a and terminal b are associated in the terminal relationship spectrum.

[0041] The steps for obtaining the terminal resolution value of the terminal are as follows: obtain the terminal ID of the terminal access record, mark the terminal access record of the same terminal ID as the same-terminal access record, sort all the same-terminal access records in the order of record generation time, calculate the difference between the access behavior resolution values ​​of two adjacent same-terminal access records after sorting and take the absolute value to obtain the behavior resolution turbulence value, set the behavior resolution turbulence threshold (the behavior resolution turbulence threshold is the threshold set by the system by default), when the behavior resolution turbulence value is greater than or equal to the behavior resolution turbulence threshold, increase the number of behavior turbulences by one, when the behavior resolution turbulence value is less than the behavior resolution turbulence threshold, increase the number of behavior stability by one, mark the number of behavior turbulences as csz, mark the number of behavior stability as rtm, sum and average the access behavior resolution values ​​of all the same-terminal access records, obtain the access behavior resolution mean gsg, and use the formula The terminal analysis value Zjx of the terminal is obtained, where gd is the behavior turbulence coefficient, gt is the behavior stability coefficient, the value of gd is 1.38, and the value of gt is 1.19.

[0042] The steps for obtaining the access behavior parsing value of the terminal access record are as follows: obtain the access behavior of the terminal access record, preprocess the access behavior (the preprocessing method includes but is not limited to data cleaning and feature extraction), obtain access feature data after preprocessing, obtain the terminal ID of the terminal access record, obtain the access behavior parsing model of the terminal, use the access feature data as the input data of the access behavior parsing model, and obtain the access behavior parsing value from the output of the access behavior parsing model.

[0043] Each terminal corresponds to a unique access behavior parsing model, and different terminals correspond to different access behavior parsing models. This embodiment discloses the design method of the access behavior parsing model as follows: collect multiple access feature data from the same terminal, use each access feature data as training data for the deep learning model, assign an access behavior parsing value to each training data, and the access behavior parsing value ranges from (1 to 2). The larger the access behavior parsing value, the more abnormal the access behavior corresponding to the access feature data. The training data is divided into a 70% training set and a 30% validation set, and the training set and the validation set are iteratively trained. After the training is completed, the access behavior parsing model of the terminal is obtained.

[0044] Block access restriction module: Set the security management limit score (the security management limit score is the score set by the system by default). When the security management score of the security management log is greater than or equal to the security management limit score, mark the block as an access restricted block, lock the access rights of the block (subsequently conduct security audits and vulnerability repairs on the block), and then perform security management analysis on the next block according to the block security management sequence. When the security management score of the security management log is less than the security management limit score, perform security management analysis on the next block according to the block security management sequence.

[0045] Security management sequence module: After completing the security management analysis of all blocks in the block security management sequence, a new block security management sequence is generated. The new block security management sequence is used for the security management analysis of the next cycle node.

[0046] By setting up a block security management module and a security management sequence module, the student information security of each block in the blockchain can be managed and analyzed periodically, and security management analysis can be prioritized for blocks with higher student information security risks, thereby meeting the requirements for efficient and orderly analysis of each block in the blockchain. Through multi-dimensional security analysis of student information in the blocks, accurate identification of security risks of student information in the blocks is guaranteed.

[0047] Block access protection module: When an access restriction block appears, obtain the student ID corresponding to the access restriction block (because each block only stores the student information of one student, the access restriction block only corresponds to one student ID), mark the student as an access restriction student, obtain the student relationship spectrum, mark all students who have a relationship with the access restriction student in the student relationship spectrum as associated students, obtain the number of association lines between the access restriction student and the associated students in the student relationship spectrum, set the association line threshold number (the association line threshold number is the threshold set by the system default), when the number of association lines is greater than or equal to the association line threshold number, temporarily lock the access rights of the block corresponding to the associated student, and wait for security management analysis of the block. When the number of association lines is less than the association line threshold number, no processing is performed.

[0048] The student relationship spectrum contains the student IDs of all students, which are represented by a network diagram and show the relationships between students. There are many kinds of relationships among students, including but not limited to family relationships (such as two students are brothers), classmate relationships (such as two students are from the same school and class), roommate relationships (such as two students are from the same dormitory), and organizational relationships (such as two students belong to the same student union). There are i representations between two students, and the student IDs of the two students show i association lines in the student relationship spectrum.

[0049] By setting up the block access restriction module and the block access protection module, when it is found that there is a security risk in the student information in the block, the access rights of the block can be locked immediately. Through the analysis of the student relationship spectrum, the blocks that may have security risks can be locked efficiently and accurately, waiting for the security management analysis of the block, effectively preventing the spread of security threats, and realizing the minimum security control of student information in the blockchain.

[0050] The above formulas are all dimensionless and numerical calculations are performed, and the preset parameters in the formulas are set by technicians in this field according to actual conditions.

[0051] The above embodiments can be implemented in whole or in part by software, hardware, firmware or any other combination. When implemented by software, the above embodiments can be implemented in whole or in part in the form of a computer program product. The computer program product includes one or more computer instructions or computer programs. When the computer instructions or computer programs are loaded or executed on a computer, the process or function described in the embodiment of the present application is generated in whole or in part. The computer can be a general-purpose computer, a special-purpose computer, a computer network, or other programmable device. The computer instructions can be stored in a computer-readable storage medium, or transmitted from one computer-readable storage medium to another computer-readable storage medium. For example, the computer instructions can be transmitted from one website site, computer, server or data center to another website site, computer, server or data center by wired or wireless (e.g., infrared, wireless, microwave, etc.). The computer-readable storage medium can be any available medium that a computer can access or a data storage device such as a server or data center that contains one or more available media sets. The available medium can be a magnetic medium (e.g., a floppy disk, a hard disk, a tape), an optical medium (e.g., a DVD), or a semiconductor medium. The semiconductor medium can be a solid-state hard disk.

[0052] It should be understood that in the various embodiments of the present application, the size of the serial numbers of the above-mentioned processes does not mean the order of execution. The execution order of each process should be determined by its function and internal logic, and should not constitute any limitation on the implementation process of the embodiments of the present application.

[0053] Those of ordinary skill in the art will appreciate that the units and algorithm steps of each example described in conjunction with the embodiments disclosed herein can be implemented in electronic hardware, or a combination of computer software and electronic hardware. Whether these functions are performed in hardware or software depends on the specific application and design constraints of the technical solution. Professional and technical personnel can use different methods to implement the described functions for each specific application, but such implementation should not be considered to be beyond the scope of this application.

[0054] Those skilled in the art can clearly understand that, for the convenience and brevity of description, the specific working processes of the systems, devices and units described above can refer to the corresponding processes in the aforementioned method embodiments and will not be repeated here.

[0055] In the several embodiments provided in the present application, it should be understood that the disclosed systems, devices and methods can be implemented in other ways. For example, the device embodiments described above are only schematic. For example, the division of the units is only a logical function division. There may be other division methods in actual implementation, such as multiple units or components can be combined or integrated into another system, or some features can be ignored or not executed. Another point is that the mutual coupling or direct coupling or communication connection shown or discussed can be through some interfaces, indirect coupling or communication connection of devices or units, which can be electrical, mechanical or other forms.

[0056] If the functions are implemented in the form of software functional units and sold or used as independent products, they can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of the present application can be essentially or partly embodied in the form of a software product that contributes to the prior art. The computer software product is stored in a storage medium and includes several instructions for a computer device (which can be a personal computer, a server, or a network device, etc.) to perform all or part of the steps of the methods described in the various embodiments of the present application. The aforementioned storage media include: various media that can store program codes, such as USB flash drives, mobile hard disks, read-only memories (ROM), random access memories (RAM), magnetic disks or optical disks.

[0057] The above is only a specific implementation of the present application, but the protection scope of the present application is not limited thereto. Any person skilled in the art who is familiar with the present technical field can easily think of changes or substitutions within the technical scope disclosed in the present application, which should be included in the protection scope of the present application. Therefore, the protection scope of the present application should be based on the protection scope of the claims.

Claims

1. The student information security management system based on blockchain is characterized by: It includes block security management module, block access restriction module, security management sequence module and block access protection module; The block security management module: sets the security management cycle length to g. When the security management cycle node is reached, security management analysis is performed on each block in sequence according to the block security management sequence. When security management analysis is completed for each block, a security management log for the block is generated. The block access restriction module: obtains the security management score of the security management log, and determines whether to mark the block as an access restricted block based on the comparison result between the security management score and the security management limit score; The security management sequence module: after completing the security management analysis of all blocks in the block security management sequence, generates a new block security management sequence, and the new block security management sequence is used for the security management analysis of the next periodic node; The block access protection module: when an access restricted block appears, obtains the student ID corresponding to the access restricted block, marks the student as an access restricted student, obtains the student relationship spectrum, marks all students in the student relationship spectrum who have a relationship with the access restricted student as associated students, and determines whether it is necessary to temporarily lock the access rights of the block corresponding to the associated student; The steps for obtaining the block security management sequence are as follows: obtain the management sequence value of each block, sort all blocks in descending order according to the management sequence value, and generate the block security management sequence after the sorting is completed; The management sequence value of the block is obtained in the following way: obtain j security management logs generated continuously by the block before the current time of the system, sum up the security management scores of all security management logs and take the average to obtain the average security management score EPkg, set the security management standard score, and when the security management score of the security management log is greater than or equal to the security management standard score, mark the security management log as a key management log, sort all key management logs in the order of management analysis time, calculate the time difference between the management analysis times of two adjacent key management logs after sorting, and obtain the key management time difference, sum up all key management time differences and take the average to obtain the key management average time difference GMdz, and use the formula Get the management sequence value XLgn of the block, where up is the safety management coefficient and ur is the key management coefficient; The steps for obtaining the security management score of the security management log are as follows: obtain all terminal access records of the block within the security management cycle. The terminal access records include terminal number, access behavior, terminal id, access behavior resolution value, and record generation time. Sort all terminal access records in the order of record generation time, sum the access behavior resolution values ​​of two adjacent terminal access records after sorting, and obtain a continuous resolution anomaly value. Set a continuous resolution anomaly threshold. When the continuous resolution anomaly value is greater than or equal to the continuous resolution anomaly threshold, increase the number of continuous resolution anomalies by one, and mark the number of continuous resolution anomalies as Lgp. Obtain the terminal resolution value of each terminal, set the terminal resolution upper value and the terminal resolution lower value, and when the terminal resolution value of the terminal is greater than or equal to the terminal resolution upper value When the terminal resolution value of the terminal is less than or equal to the terminal resolution lower value, the terminal is marked as a normal resolution terminal, the total number of abnormal resolution terminals is marked as Fcd, and the total number of normal resolution terminals is marked as Gbt. When the terminal resolution value of the terminal is between the terminal resolution upper value and the terminal resolution lower value, the terminal is marked as a resolution edge terminal, and the terminal relationship spectrum is obtained. When two resolution edge terminals are associated in the terminal relationship spectrum, the terminal resolution values ​​of the two resolution edge terminals are summed to obtain the resolution edge accumulation value, and the resolution edge accumulation threshold is set. When the resolution edge accumulation value is greater than or equal to the resolution edge accumulation threshold, the resolution edge accumulation times are increased by one, and the resolution edge accumulation times are marked as Bwh. The formula is used Get the security management score FYgc of the security management log, where as is the continuous analysis anomaly coefficient, az is the analysis edge accumulation coefficient, and at is the quantity coefficient; Set the security management limit score. When the security management score of the security management log is greater than or equal to the security management limit score, mark the block as an access-restricted block, lock the access rights of the block, and then perform security management analysis on the next block according to the block security management sequence. When the security management score of the security management log is less than the security management limit score, directly perform security management analysis on the next block according to the block security management sequence; The steps for obtaining the terminal resolution value of the terminal are as follows: obtain the terminal ID of the terminal access record, mark the terminal access record of the same terminal ID as the same-terminal access record, sort all the same-terminal access records in the order of record generation time, calculate the difference between the access behavior resolution values ​​of two adjacent same-terminal access records after sorting and take the absolute value to obtain the behavior resolution turbulence value, set the behavior resolution turbulence threshold, when the behavior resolution turbulence value is greater than or equal to the behavior resolution turbulence threshold, increase the number of behavior turbulences by one, when the behavior resolution turbulence value is less than the behavior resolution turbulence threshold, increase the number of behavior stability by one, mark the number of behavior turbulences as csz, mark the number of behavior stability as rtm, sum the access behavior resolution values ​​of all the same-terminal access records and take the average, obtain the access behavior resolution mean gsg, and use the formula Get the terminal analysis value Zjx of the terminal, where gd is the behavior turbulence coefficient and gt is the behavior stability coefficient; The steps for obtaining the access behavior analysis value of the terminal access record are as follows: obtain the access behavior of the terminal access record, preprocess the access behavior, obtain the access feature data after preprocessing, obtain the terminal ID of the terminal access record, obtain the access behavior analysis model of the terminal, use the access feature data as the input data of the access behavior analysis model, and obtain the access behavior analysis value from the output of the access behavior analysis model.

2. The student information security management system based on blockchain according to claim 1 is characterized in that: The security management log includes the block number, security management score, and management analysis time.

3. The student information security management system based on blockchain according to claim 1 is characterized in that: Determine whether it is necessary to temporarily lock the access rights of the block corresponding to the associated student, specifically: obtain the number of association lines between the access-restricted student and the associated students in the student relationship spectrum, set the association line threshold number, and when the number of association lines is greater than or equal to the association line threshold number, temporarily lock the access rights of the block corresponding to the associated student, waiting for security management analysis of the block.

4. A student information security management method based on blockchain, applied to the student information security management system based on blockchain as claimed in claim 1, characterized in that: The steps include: Step 1: Periodically perform security management analysis on each block in sequence according to the block security management sequence. When the security management analysis is completed for each block, a security management log for the block is generated; Step 2: Based on the comparison result between the security management score and the security management limit score, determine whether to mark the block as an access restricted block; Step 3: When an access restricted block appears, obtain the student ID corresponding to the access restricted block, mark the student as an access restricted student, obtain the student relationship spectrum, mark all students in the student relationship spectrum who have a relationship with the access restricted student as associated students, and determine whether it is necessary to temporarily lock the access rights of the block corresponding to the associated student.

Images