Cross-border e-commerce account data security management method and system based on cloud platform

Abstract

The present application provides a cross-border e-commerce account data security management method and system based on a cloud platform. The method includes: classifying the cross-border e-commerce account storage data, generating cross-border e-commerce data clusters of different categories, encrypting and inserting preset sensitivity labels, the cloud platform determines the target cross-border e-commerce encrypted data cluster according to the request access type data and sensitivity access permission data issued by the user, establishes a user access habit model according to the acquired user historical access record data, inputs the user's current access data into the user access habit model to obtain the abnormal access judgment result, and if it is shown that the user is accessing normally, decrypts to obtain the cross-border e-commerce decrypted data cluster, and selects the user's access environment for security assessment according to the user's sensitivity access permission. If it meets the security assessment requirements, the cross-border e-commerce decrypted data cluster is encrypted and transmitted to the user end for decryption and display; thereby achieving the purpose of security management of cross-border e-commerce account data.

Description

Technical Field

[0001] The present application relates to the technical field of big data and cross-border e-commerce data security management, and specifically, to a cross-border e-commerce account data security management method and system based on a cloud platform. Background Art

[0002] With the popularization of Internet technology and the continuous improvement of the global logistics system, more and more companies and consumers are participating in cross-border e-commerce transactions. Cross-border e-commerce accounts contain many sensitive data such as user login credentials, order information, customer information and payment information, so it is very important to manage cross-border e-commerce account data securely. However, there is currently a lack of a security management technology that can control access to cross-border e-commerce account data based on user access habits, user access rights and the security of the user's current access environment. Summary of the invention

[0003] The purpose of this application is to provide a cross-border e-commerce account data security management method and system based on a cloud platform, which realizes security management technology for access control of cross-border e-commerce account data by analyzing user access habits, user access rights and the security of the user's current access environment, thereby achieving the purpose of improving the security of cross-border e-commerce account data.

[0004] This application also provides a cross-border e-commerce account data security management method based on a cloud platform, including the following steps:

[0005] Obtain and classify the storage data of cross-border e-commerce accounts, generate cross-border e-commerce data clusters of different categories, encrypt them, and insert preset sensitivity labels;

[0006] The cloud platform determines the target cross-border e-commerce encrypted data cluster based on the requested access type data and sensitive access permission data issued by the user;

[0007] Establish a user access habit model based on the acquired user historical access record data, input the user's current access data into the user access habit model for processing, and obtain abnormal access judgment result data;

[0008] If the abnormal access judgment result data shows that the user has abnormal access, a prohibition access instruction is issued;

[0009] If the abnormal access judgment result data shows that the user has normal access, the cross-border e-commerce decryption data cluster is obtained by decryption, and the user's access environment is security assessed according to the user's sensitive access rights to obtain the access environment security assessment index;

[0010] The access environment security assessment index is compared with a preset access environment security assessment index threshold. If the threshold comparison result meets the preset threshold comparison result requirement, the cross-border e-commerce decryption data cluster is encrypted and transmitted to the user end for decryption and display.

[0011] Optionally, in the cloud platform-based cross-border e-commerce account data security management method described in the present application, the acquisition and classification of cross-border e-commerce account storage data, the generation of cross-border e-commerce data clusters of different categories, and the encryption and insertion of preset sensitivity labels include:

[0012] Obtain cross-border e-commerce account storage data and perform feature extraction to obtain feature data, classify according to the feature data, and generate cross-border e-commerce data clusters of different categories;

[0013] Inserting preset sensitivity labels into the cross-border e-commerce data cluster, including high sensitivity labels, medium sensitivity labels and low sensitivity labels;

[0014] Obtain a preset encryption key and decryption key, encrypt the cross-border e-commerce data cluster according to the encryption key, obtain the cross-border e-commerce encrypted data cluster and store it on the cloud platform;

[0015] Obtain the preset platform encryption public key and platform decryption private key, and the cloud platform sends the platform encryption public key to each user end.

[0016] Optionally, in the cloud platform-based cross-border e-commerce account data security management method described in the present application, the cloud platform determines the target cross-border e-commerce encrypted data cluster according to the requested access type data and sensitivity access permission data issued by the user, including:

[0017] The user sends an access request to the cloud platform, and the cloud platform authenticates the user and obtains the user's requested access type data and sensitive access permission data;

[0018] Matching and identifying the requested access type data with the characteristic data, and taking the cross-border e-commerce encrypted data cluster corresponding to the characteristic data that meets the preset matching and identification requirements as the cross-border e-commerce encrypted data cluster to be identified;

[0019] The sensitivity access permission data is matched and identified with the sensitivity label, and the cross-border e-commerce encrypted data cluster to be identified corresponding to the sensitivity label that meets the preset matching identification result requirements is used as the target cross-border e-commerce encrypted data cluster.

[0020] Optionally, in the cloud platform-based cross-border e-commerce account data security management method described in the present application, the user access habit model is established based on the acquired user historical access record data, the user's current access data is input into the user access habit model for processing, and abnormal access determination result data is obtained, including:

[0021] Obtain user historical access record data, including user identity data, historical login record data, historical operation behavior data, and historical access behavior data;

[0022] The historical login record data includes login time data, login location data and login device data; the historical operation behavior data includes operation type data, operation speed data and operation sequence data; the historical access behavior data includes access type data, access frequency data, access sequence data and access combination data;

[0023] Training is performed based on the user identity data, login time data, login location data, login device data combined with the operation type data, operation speed data, operation sequence data, and access type data, access frequency data, access sequence data, and access combination data to obtain a user access habit model;

[0024] Obtain the user's current access data, including login identity data, current login data, current operation behavior data and current access behavior data. The current login data includes current login time data, current login location data and current login device data. The current operation behavior data includes current operation type data, current operation speed data and current operation sequence data. The current access behavior data includes current access type data, current access frequency data, current access sequence data and current access combination data.

[0025] The login identity data, current login time data, current login location data, current login device data, current operation type data, current operation speed data, current operation sequence data, current access data type data, current access frequency data, current access sequence data, and current access combination mode data are input into the user access habit model for processing to obtain abnormal access judgment result data.

[0026] Optionally, in the cross-border e-commerce account data security management method based on a cloud platform described in the present application, if the abnormal access determination result data shows that the user has normal access, decryption is performed to obtain a cross-border e-commerce decrypted data cluster, and a security assessment is performed on the user's access environment according to the user's sensitivity access rights to obtain an access environment security assessment index, including:

[0027] If the abnormal access determination result data shows that the user has normal access, the target cross-border e-commerce encrypted data cluster is decrypted using the decryption key to obtain a cross-border e-commerce decrypted data cluster;

[0028] If the user's sensitivity access permission data is low-sensitivity access permission data, the cloud platform sends the cross-border e-commerce decrypted data cluster to the user end;

[0029] If the user's sensitivity access permission data is medium sensitivity access permission data or high sensitivity access permission data, the user's current access environment data is obtained, including network traffic data, antivirus software activation data, firewall activation data, and network connection method data;

[0030] The login time data, login location data, login device data, network traffic data, anti-virus software activation data, firewall activation data and network connection mode data are input into a preset access environment security assessment model for processing to obtain an access environment security assessment index.

[0031] Optionally, in the cloud platform-based cross-border e-commerce account data security management method described in the present application, the access environment security assessment index is compared with a preset access environment security assessment index threshold, and if the threshold comparison result meets the preset threshold comparison result requirement, the cross-border e-commerce decryption data cluster is encrypted and transmitted to the user end for decryption and display, including:

[0032] Compare the access environment security assessment index with a preset access environment security assessment index threshold, and if the threshold comparison result meets the preset threshold comparison result requirement, obtain a preset user encryption public key and a user decryption private key of the user terminal;

[0033] The client encrypts the user encryption public key according to the platform encryption public key, obtains the re-encrypted user encryption public key, and sends it to the cloud platform;

[0034] The cloud platform uses the platform decryption private key to decrypt the re-encrypted user encryption public key, generates a target user encryption public key, encrypts the cross-border e-commerce decrypted data cluster according to the target user encryption public key, obtains the cross-border e-commerce re-encrypted data cluster and sends it to the user end;

[0035] The user end uses the user decryption private key to decrypt the cross-border e-commerce heavily encrypted data cluster and then displays it.

[0036] In a second aspect, the present application provides a cross-border e-commerce account data security management system based on a cloud platform, the system comprising: a memory and a processor, the memory storing a program of a cross-border e-commerce account data security management method based on a cloud platform, and the program of the cross-border e-commerce account data security management method based on a cloud platform is executed by the processor to implement the following steps:

[0037] Obtain and classify the storage data of cross-border e-commerce accounts, generate cross-border e-commerce data clusters of different categories, encrypt them, and insert preset sensitivity labels;

[0038] The cloud platform determines the target cross-border e-commerce encrypted data cluster based on the requested access type data and sensitive access permission data issued by the user;

[0039] Establish a user access habit model based on the acquired user historical access record data, input the user's current access data into the user access habit model for processing, and obtain abnormal access judgment result data;

[0040] If the abnormal access judgment result data shows that the user has abnormal access, a prohibition access instruction is issued;

[0041] If the abnormal access judgment result data shows that the user has normal access, the cross-border e-commerce decryption data cluster is obtained by decryption, and the user's access environment is security assessed according to the user's sensitive access rights to obtain the access environment security assessment index;

[0042] The access environment security assessment index is compared with a preset access environment security assessment index threshold. If the threshold comparison result meets the preset threshold comparison result requirement, the cross-border e-commerce decryption data cluster is encrypted and transmitted to the user end for decryption and display.

[0043] Optionally, in the cloud platform-based cross-border e-commerce account data security management system described in the present application, the acquisition and classification of cross-border e-commerce account storage data, the generation of cross-border e-commerce data clusters of different categories, and the encryption and insertion of preset sensitivity labels include:

[0044] Obtain cross-border e-commerce account storage data and perform feature extraction to obtain feature data, classify according to the feature data, and generate cross-border e-commerce data clusters of different categories;

[0045] Inserting preset sensitivity labels into the cross-border e-commerce data cluster, including high sensitivity labels, medium sensitivity labels and low sensitivity labels;

[0046] Obtain a preset encryption key and decryption key, encrypt the cross-border e-commerce data cluster according to the encryption key, obtain the cross-border e-commerce encrypted data cluster and store it on the cloud platform;

[0047] Obtain the preset platform encryption public key and platform decryption private key, and the cloud platform sends the platform encryption public key to each user end.

[0048] From the above, it can be seen that the cloud platform-based cross-border e-commerce account data security management method and system provided in this application realizes security management technology for access control of cross-border e-commerce account data through analysis of user access habits, user access rights and the security of the user's current access environment, thereby achieving the purpose of improving the security of cross-border e-commerce account data.

[0049] Other features and advantages of the present application will be described in the following description, and partly become apparent from the description, or understood by practicing the embodiments of the present application. The purpose and other advantages of the present application can be realized and obtained by the structures specifically pointed out in the written description and the drawings. BRIEF DESCRIPTION OF THE DRAWINGS

[0050] In order to more clearly illustrate the technical solutions of the embodiments of the present application, the drawings required for use in the embodiments of the present application will be briefly introduced below. It should be understood that the following drawings only show certain embodiments of the present application and therefore should not be regarded as limiting the scope. For ordinary technicians in this field, other related drawings can be obtained based on these drawings without paying creative work.

[0051] Figure 1 A flowchart of a cross-border e-commerce account data security management method based on a cloud platform provided in an embodiment of the present application;

[0052] Figure 2 A flow chart of encrypting a cross-border e-commerce data cluster and inserting a preset sensitivity label in a cross-border e-commerce account data security management method based on a cloud platform provided in an embodiment of the present application;

[0053] Figure 3 A flow chart of determining a target cross-border e-commerce encrypted data cluster for a cross-border e-commerce account data security management method based on a cloud platform provided in an embodiment of the present application;

[0054] Figure 4 A flowchart of obtaining abnormal access determination result data for a cross-border e-commerce account data security management method based on a cloud platform provided in an embodiment of the present application. DETAILED DESCRIPTION

[0055] The technical solutions in the embodiments of the present application will be clearly and completely described below in conjunction with the drawings in the embodiments of the present application. Obviously, the described embodiments are only a part of the embodiments of the present application, rather than all of the embodiments. The components of the embodiments of the present application described and shown in the drawings here can be arranged and designed in various different configurations. Therefore, the following detailed description of the embodiments of the present application provided in the drawings is not intended to limit the scope of the application claimed for protection, but merely represents the selected embodiments of the present application. Based on the embodiments of the present application, all other embodiments obtained by those skilled in the art without making creative work belong to the scope of protection of the present application.

[0056] It should be noted that similar reference numerals and letters represent similar items in the following drawings, so once an item is defined in one drawing, it does not need to be further defined and explained in subsequent drawings. At the same time, in the description of this application, the terms "first", "second", etc. are only used to distinguish the description and cannot be understood as indicating or implying relative importance.

[0057] Please refer to Figure 1 , Figure 1 The flowchart of the cross-border e-commerce account data security management method based on the cloud platform in some embodiments of the present application. The cross-border e-commerce account data security management method based on the cloud platform is used in terminal devices, such as computers, mobile terminals, etc. The cross-border e-commerce account data security management method based on the cloud platform includes the following steps:

[0058] S11, obtaining and classifying the cross-border e-commerce account storage data, generating cross-border e-commerce data clusters of different categories, and encrypting and inserting preset sensitivity labels;

[0059] S12, the cloud platform determines the target cross-border e-commerce encrypted data cluster according to the request access type data and the sensitivity access permission data issued by the user;

[0060] S13, establishing a user access habit model based on the acquired user historical access record data, inputting the user's current access data into the user access habit model for processing, and obtaining abnormal access determination result data;

[0061] S14, if the abnormal access determination result data shows that the user has made an abnormal access, a prohibition access instruction is issued;

[0062] S15. If the abnormal access determination result data shows that the user has normal access, decryption is performed to obtain a cross-border e-commerce decryption data cluster, and a security assessment is performed on the user's access environment according to the user's sensitivity access permission selection to obtain an access environment security assessment index;

[0063] S16. Compare the access environment security assessment index with a preset access environment security assessment index threshold. If the threshold comparison result meets the preset threshold comparison result requirement, encrypt the cross-border e-commerce decryption data cluster and transmit it to the user end for decryption and display.

[0064] It should be noted that the cross-border e-commerce account storage data is first classified to generate cross-border e-commerce data clusters of different categories, and encrypted and inserted with preset sensitivity labels. The cloud platform determines the target cross-border e-commerce encrypted data cluster based on the request access type data and sensitivity access permission data issued by the user, and establishes a user access habit model based on the acquired user historical access record data. The user's current access data is input into the user access habit model to obtain the abnormal access judgment result. If the user is shown to have normal access, the cross-border e-commerce decrypted data cluster is decrypted, and the user's access environment is security assessed based on the user's sensitivity access permission. If it meets the security assessment requirements, the cross-border e-commerce decrypted data cluster is encrypted and transmitted to the user end for decryption and display. This application implements security management technology for access control of cross-border e-commerce account data by analyzing user access habits, user access permissions, and the security of the user's current access environment, thereby improving the security of cross-border e-commerce account data.

[0065] Please refer to Figure 2 , Figure 2 The present invention is a flowchart of encrypting a cross-border e-commerce data cluster and inserting a preset sensitivity label in a cross-border e-commerce account data security management method based on a cloud platform in some embodiments of the present application. According to an embodiment of the present invention, the cross-border e-commerce account storage data is obtained and classified, and cross-border e-commerce data clusters of different categories are generated, and encrypted and preset sensitivity labels are inserted, including:

[0066] S21, obtaining cross-border e-commerce account storage data and performing feature extraction to obtain feature data, classifying according to the feature data, and generating cross-border e-commerce data clusters of different categories;

[0067] S22, inserting preset sensitivity labels into the cross-border e-commerce data cluster, including high sensitivity labels, medium sensitivity labels and low sensitivity labels;

[0068] S23, obtaining a preset encryption key and a decryption key, encrypting the cross-border e-commerce data cluster according to the encryption key, obtaining the cross-border e-commerce encrypted data cluster and storing it in the cloud platform;

[0069] S24. Obtain the preset platform encryption public key and platform decryption private key, and the cloud platform sends the platform encryption public key to each user terminal.

[0070] It should be noted that the cross-border e-commerce account storage data, including personal identity data, order data, product data, payment account data and account login data, is obtained and classified according to data characteristics to generate cross-border e-commerce data clusters of different categories. The cross-border e-commerce data clusters are encrypted and preset sensitivity labels are inserted.

[0071] Please refer to Figure 3 , Figure 3The present invention is a flowchart of determining a target cross-border e-commerce encrypted data cluster of a cross-border e-commerce account data security management method based on a cloud platform in some embodiments of the present application. According to an embodiment of the present invention, the cloud platform determines the target cross-border e-commerce encrypted data cluster based on the requested access type data and the sensitive access permission data issued by the user, including:

[0072] S31. The user sends an access request to the cloud platform. The cloud platform authenticates the user and obtains the user's requested access type data and sensitive access permission data.

[0073] S32, matching and identifying the requested access type data with the characteristic data, and taking the cross-border e-commerce encrypted data cluster corresponding to the characteristic data that meets the preset matching and identification requirements as the cross-border e-commerce encrypted data cluster to be identified;

[0074] S33: Match and identify the sensitivity access permission data with the sensitivity label, and use the cross-border e-commerce encrypted data cluster to be identified corresponding to the sensitivity label that meets the preset matching identification result requirements as the target cross-border e-commerce encrypted data cluster.

[0075] It should be noted that when a user sends an access request to the cloud platform, the cloud platform determines the target cross-border e-commerce encrypted data cluster based on the user's requested access type data and sensitivity access permission data.

[0076] Please refer to Figure 4 , Figure 4 The flowchart of obtaining abnormal access determination result data of the cross-border e-commerce account data security management method based on the cloud platform in some embodiments of the present application. According to the embodiment of the present invention, the user access habit model is established based on the acquired user historical access record data, and the user's current access data is input into the user access habit model for processing to obtain abnormal access determination result data, including:

[0077] S41, obtaining user historical access record data, including user identity data, historical login record data, historical operation behavior data and historical access behavior data;

[0078] S42, the historical login record data includes login time data, login location data and login device data, the historical operation behavior data includes operation type data, operation speed data and operation sequence data, and the historical access behavior data includes access type data, access frequency data, access sequence data and access combination data;

[0079] S43, training is performed based on the user identity data, login time data, login location data, login device data, the operation type data, the operation speed data, the operation sequence data, and the access type data, access frequency data, access sequence data, and access combination data to obtain a user access habit model;

[0080] S44, obtaining the user's current access data, including login identity data, current login data, current operation behavior data and current access behavior data, the current login data including current login time data, current login location data and current login device data, the current operation behavior data including current operation type data, current operation speed data and current operation sequence data, the current access behavior data including current access type data, current access frequency data, current access sequence data and current access combination mode data;

[0081] S45. Input the login identity data, current login time data, current login location data, current login device data, current operation type data, current operation speed data, current operation sequence data, current access data type data, current access frequency data, current access sequence data, and current access combination mode data into the user access habit model for processing to obtain abnormal access determination result data.

[0082] It should be noted that the user's historical access record data is obtained, a user access habit model is established based on the user's historical access record data, and the user's current access data is input into the user access habit model for processing to obtain abnormal access judgment result data. Among them, the access combination method refers to a mode of combining multiple order-related data elements for access, which reflects the inherent connection of user access data in business logic, and the user's collaborative needs for different data when completing a task.

[0083] According to an embodiment of the present invention, if the abnormal access determination result data shows that the user has normal access, decryption is performed to obtain a cross-border e-commerce decryption data cluster, and a security assessment is performed on the user's access environment according to the user's sensitivity access permission selection to obtain an access environment security assessment index, including:

[0084] If the abnormal access determination result data shows that the user has normal access, the target cross-border e-commerce encrypted data cluster is decrypted using the decryption key to obtain a cross-border e-commerce decrypted data cluster;

[0085] If the user's sensitivity access permission data is low-sensitivity access permission data, the cloud platform sends the cross-border e-commerce decrypted data cluster to the user end;

[0086] If the user's sensitivity access permission data is medium sensitivity access permission data or high sensitivity access permission data, the user's current access environment data is obtained, including network traffic data, antivirus software activation data, firewall activation data, and network connection method data;

[0087] The login time data, login location data, login device data, network traffic data, anti-virus software activation data, firewall activation data and network connection mode data are input into a preset access environment security assessment model for processing to obtain an access environment security assessment index.

[0088] It should be noted that if the abnormal access judgment result data shows that the user has normal access and the user has low-sensitivity access rights, the target cross-border e-commerce encrypted data cluster will be decrypted and sent directly to the user end for display. If the user has medium-sensitivity access rights or high-sensitivity access rights, the cloud platform needs to conduct a security assessment of the user's access environment before sending the data to the user end. If the user has abnormal device login, abnormal network traffic, anti-virus software and firewall are not enabled, or connected to public WiFi or unencrypted Ethernet, the security risk of the device is high at this time, and it is not suitable for accessing medium-sensitivity or high-sensitivity data. Therefore, the login time data, login location data, login device data, network traffic data, anti-virus software activation data, firewall activation data and network connection method data can be input into the preset access environment security assessment model for processing to obtain the access environment security assessment index. Among them, the preset access environment security assessment model is a model obtained by training with a large number of historical samples of login time data, login location data, login device data, network traffic data, anti-virus software activation data, firewall activation data, network connection method data and access environment security assessment index. It can be processed by inputting relevant data to obtain the corresponding output access environment security assessment index.

[0089] According to an embodiment of the present invention, the access environment security assessment index is compared with a preset access environment security assessment index threshold, and if the threshold comparison result meets the preset threshold comparison result requirement, the cross-border e-commerce decryption data cluster is encrypted and transmitted to the user end for decryption and display, including:

[0090] Compare the access environment security assessment index with a preset access environment security assessment index threshold, and if the threshold comparison result meets the preset threshold comparison result requirement, obtain a preset user encryption public key and a user decryption private key of the user terminal;

[0091] The client encrypts the user encryption public key according to the platform encryption public key, obtains the re-encrypted user encryption public key, and sends it to the cloud platform;

[0092] The cloud platform uses the platform decryption private key to decrypt the re-encrypted user encryption public key, generates a target user encryption public key, encrypts the cross-border e-commerce decrypted data cluster according to the target user encryption public key, obtains the cross-border e-commerce re-encrypted data cluster and sends it to the user end;

[0093] The user end uses the user decryption private key to decrypt the cross-border e-commerce heavily encrypted data cluster and then displays it.

[0094] It should be noted that the access environment security assessment index is compared with the preset access environment security assessment index threshold. If the threshold comparison result meets the preset threshold comparison result requirement, it means that the user access environment is safe. However, in order to avoid the risk of data leakage during transmission, the cloud platform needs to use the user encryption public key to encrypt the data before transmitting it to the client. However, when the client sends the user encryption public key to the cloud platform, in order to ensure the security of the user encryption public key during transmission, it is necessary to use the pre-saved cloud platform encryption public key to encrypt the user encryption public key and then transmit it to the cloud platform. After decryption, the cloud platform uses the user encryption public key to encrypt the data and transmit it to the user end. The user end decrypts and then displays it.

[0095] It is worth mentioning that according to an embodiment of the present invention, it also includes:

[0096] Conduct security simulation tests on cross-border e-commerce accounts to obtain security test result data, including multi-factor authentication support rate data, system vulnerability severity data, unauthorized access success rate data, and data leakage degree data;

[0097] Processing the multi-factor authentication support rate data, the system vulnerability severity data, the unauthorized access success rate data, and the data leakage degree data to obtain a security risk assessment index;

[0098] Comparing the security risk assessment index with a preset security risk assessment index threshold, and determining the security risk assessment level according to the range level to which the threshold comparison result belongs;

[0099] The security risk assessment level data is input into the preset cross-border e-commerce security risk repair database for security risk level matching, and the corresponding security risk repair strategy is obtained according to the security risk level matching results.

[0100] It should be noted that the security simulation test of the cross-border e-commerce account is carried out, and the security risk assessment index is obtained by processing the multi-factor authentication support rate data, system vulnerability severity data, unauthorized access success rate data and data leakage degree data. The multi-factor authentication support rate data is a quantitative indicator used to measure the degree of support for the multi-factor authentication function of the cloud platform;

[0101] The calculation formula of the safety risk assessment index is:

[0102] ;

[0103] in, is the security risk assessment index, For multi-factor authentication support data, is the system vulnerability severity data, To unauthorize access to success rate data, For data leakage degree data, , , and It is the preset characteristic coefficient (which can be obtained by querying the preset cross-border e-commerce data security management cloud platform).

[0104] The present invention also discloses a cross-border e-commerce account data security management system based on a cloud platform, including a memory and a processor, wherein the memory stores a cross-border e-commerce account data security management method program based on a cloud platform, and when the cross-border e-commerce account data security management method program based on a cloud platform is executed by the processor, the following steps are implemented:

[0105] Obtain and classify the storage data of cross-border e-commerce accounts, generate cross-border e-commerce data clusters of different categories, encrypt them, and insert preset sensitivity labels;

[0106] The cloud platform determines the target cross-border e-commerce encrypted data cluster based on the requested access type data and sensitive access permission data issued by the user;

[0107] Establish a user access habit model based on the acquired user historical access record data, input the user's current access data into the user access habit model for processing, and obtain abnormal access judgment result data;

[0108] If the abnormal access judgment result data shows that the user has abnormal access, a prohibition access instruction is issued;

[0109] If the abnormal access judgment result data shows that the user has normal access, the cross-border e-commerce decryption data cluster is obtained by decryption, and the user's access environment is security assessed according to the user's sensitive access rights to obtain the access environment security assessment index;

[0110] The access environment security assessment index is compared with a preset access environment security assessment index threshold. If the threshold comparison result meets the preset threshold comparison result requirement, the cross-border e-commerce decryption data cluster is encrypted and transmitted to the user end for decryption and display.

[0111] It should be noted that the cross-border e-commerce account storage data is first classified to generate cross-border e-commerce data clusters of different categories, and encrypted and inserted with preset sensitivity labels. The cloud platform determines the target cross-border e-commerce encrypted data cluster based on the request access type data and sensitivity access permission data issued by the user, and establishes a user access habit model based on the acquired user historical access record data. The user's current access data is input into the user access habit model to obtain the abnormal access judgment result. If the user is shown to have normal access, the cross-border e-commerce decrypted data cluster is decrypted, and the user's access environment is security assessed based on the user's sensitivity access permission. If it meets the security assessment requirements, the cross-border e-commerce decrypted data cluster is encrypted and transmitted to the user end for decryption and display. This application implements security management technology for access control of cross-border e-commerce account data by analyzing user access habits, user access permissions, and the security of the user's current access environment, thereby improving the security of cross-border e-commerce account data.

[0112] According to an embodiment of the present invention, the method of obtaining and classifying the cross-border e-commerce account storage data, generating cross-border e-commerce data clusters of different categories, encrypting and inserting preset sensitivity labels includes:

[0113] Obtain cross-border e-commerce account storage data and perform feature extraction to obtain feature data, classify according to the feature data, and generate cross-border e-commerce data clusters of different categories;

[0114] Inserting preset sensitivity labels into the cross-border e-commerce data cluster, including high sensitivity labels, medium sensitivity labels and low sensitivity labels;

[0115] Obtain a preset encryption key and decryption key, encrypt the cross-border e-commerce data cluster according to the encryption key, obtain the cross-border e-commerce encrypted data cluster and store it on the cloud platform;

[0116] Obtain the preset platform encryption public key and platform decryption private key, and the cloud platform sends the platform encryption public key to each user end.

[0117] It should be noted that the cross-border e-commerce account storage data, including personal identity data, order data, product data, payment account data and account login data, is obtained and classified according to data characteristics to generate cross-border e-commerce data clusters of different categories. The cross-border e-commerce data clusters are encrypted and preset sensitivity labels are inserted.

[0118] According to an embodiment of the present invention, the cloud platform determines the target cross-border e-commerce encrypted data cluster according to the requested access type data and the sensitivity access permission data issued by the user, including:

[0119] The user sends an access request to the cloud platform, and the cloud platform authenticates the user and obtains the user's requested access type data and sensitive access permission data;

[0120] Matching and identifying the requested access type data with the characteristic data, and taking the cross-border e-commerce encrypted data cluster corresponding to the characteristic data that meets the preset matching and identification requirements as the cross-border e-commerce encrypted data cluster to be identified;

[0121] The sensitivity access permission data is matched and identified with the sensitivity label, and the cross-border e-commerce encrypted data cluster to be identified corresponding to the sensitivity label that meets the preset matching identification result requirements is used as the target cross-border e-commerce encrypted data cluster.

[0122] It should be noted that when a user sends an access request to the cloud platform, the cloud platform determines the target cross-border e-commerce encrypted data cluster based on the user's requested access type data and sensitivity access permission data.

[0123] According to an embodiment of the present invention, the method of establishing a user access habit model based on the acquired user historical access record data, inputting the user's current access data into the user access habit model for processing, and obtaining abnormal access determination result data includes:

[0124] Obtain user historical access record data, including user identity data, historical login record data, historical operation behavior data, and historical access behavior data;

[0125] The historical login record data includes login time data, login location data and login device data; the historical operation behavior data includes operation type data, operation speed data and operation sequence data; the historical access behavior data includes access type data, access frequency data, access sequence data and access combination data;

[0126] Training is performed based on the user identity data, login time data, login location data, login device data combined with the operation type data, operation speed data, operation sequence data, and access type data, access frequency data, access sequence data, and access combination data to obtain a user access habit model;

[0127] Obtain the user's current access data, including login identity data, current login data, current operation behavior data and current access behavior data. The current login data includes current login time data, current login location data and current login device data. The current operation behavior data includes current operation type data, current operation speed data and current operation sequence data. The current access behavior data includes current access type data, current access frequency data, current access sequence data and current access combination data.

[0128] The login identity data, current login time data, current login location data, current login device data, current operation type data, current operation speed data, current operation sequence data, current access data type data, current access frequency data, current access sequence data, and current access combination mode data are input into the user access habit model for processing to obtain abnormal access judgment result data.

[0129] It should be noted that the user's historical access record data is obtained, a user access habit model is established based on the user's historical access record data, and the user's current access data is input into the user access habit model for processing to obtain abnormal access judgment result data. Among them, the access combination method refers to a mode of combining multiple order-related data elements for access, which reflects the inherent connection of user access data in business logic, and the user's collaborative needs for different data when completing a task.

[0130] According to an embodiment of the present invention, if the abnormal access determination result data shows that the user has normal access, decryption is performed to obtain a cross-border e-commerce decryption data cluster, and a security assessment is performed on the user's access environment according to the user's sensitivity access permission selection to obtain an access environment security assessment index, including:

[0131] If the abnormal access determination result data shows that the user has normal access, the target cross-border e-commerce encrypted data cluster is decrypted using the decryption key to obtain a cross-border e-commerce decrypted data cluster;

[0132] If the user's sensitivity access permission data is low-sensitivity access permission data, the cloud platform sends the cross-border e-commerce decrypted data cluster to the user end;

[0133] If the user's sensitivity access permission data is medium sensitivity access permission data or high sensitivity access permission data, the user's current access environment data is obtained, including network traffic data, antivirus software activation data, firewall activation data, and network connection method data;

[0134] The login time data, login location data, login device data, network traffic data, anti-virus software activation data, firewall activation data and network connection mode data are input into a preset access environment security assessment model for processing to obtain an access environment security assessment index.

[0135] It should be noted that if the abnormal access judgment result data shows that the user has normal access and the user has low-sensitivity access rights, the target cross-border e-commerce encrypted data cluster will be decrypted and sent directly to the user end for display. If the user has medium-sensitivity access rights or high-sensitivity access rights, the cloud platform needs to conduct a security assessment of the user's access environment before sending the data to the user end. If the user has abnormal device login, abnormal network traffic, anti-virus software and firewall are not enabled, or connected to public WiFi or unencrypted Ethernet, the security risk of the device is high at this time, and it is not suitable for accessing medium-sensitivity or high-sensitivity data. Therefore, the login time data, login location data, login device data, network traffic data, anti-virus software activation data, firewall activation data and network connection method data can be input into the preset access environment security assessment model for processing to obtain the access environment security assessment index. Among them, the preset access environment security assessment model is a model obtained by training with a large number of historical samples of login time data, login location data, login device data, network traffic data, anti-virus software activation data, firewall activation data, network connection method data and access environment security assessment index. It can be processed by inputting relevant data to obtain the corresponding output access environment security assessment index.

[0136] According to an embodiment of the present invention, the access environment security assessment index is compared with a preset access environment security assessment index threshold, and if the threshold comparison result meets the preset threshold comparison result requirement, the cross-border e-commerce decryption data cluster is encrypted and transmitted to the user end for decryption and display, including:

[0137] Compare the access environment security assessment index with a preset access environment security assessment index threshold, and if the threshold comparison result meets the preset threshold comparison result requirement, obtain a preset user encryption public key and a user decryption private key of the user terminal;

[0138] The client encrypts the user encryption public key according to the platform encryption public key, obtains the re-encrypted user encryption public key, and sends it to the cloud platform;

[0139] The cloud platform uses the platform decryption private key to decrypt the re-encrypted user encryption public key, generates a target user encryption public key, encrypts the cross-border e-commerce decrypted data cluster according to the target user encryption public key, obtains the cross-border e-commerce re-encrypted data cluster and sends it to the user end;

[0140] The user end uses the user decryption private key to decrypt the cross-border e-commerce heavily encrypted data cluster and then displays it.

[0141] It should be noted that the access environment security assessment index is compared with the preset access environment security assessment index threshold. If the threshold comparison result meets the preset threshold comparison result requirement, it means that the user access environment is safe. However, in order to avoid the risk of data leakage during transmission, the cloud platform needs to use the user encryption public key to encrypt the data before transmitting it to the client. However, when the client sends the user encryption public key to the cloud platform, in order to ensure the security of the user encryption public key during transmission, it is necessary to use the pre-saved cloud platform encryption public key to encrypt the user encryption public key and then transmit it to the cloud platform. After decryption, the cloud platform uses the user encryption public key to encrypt the data and transmit it to the user end. The user end decrypts and then displays it.

[0142] It is worth mentioning that according to an embodiment of the present invention, it also includes:

[0143] Conduct security simulation tests on cross-border e-commerce accounts to obtain security test result data, including multi-factor authentication support rate data, system vulnerability severity data, unauthorized access success rate data, and data leakage degree data;

[0144] Processing the multi-factor authentication support rate data, the system vulnerability severity data, the unauthorized access success rate data, and the data leakage degree data to obtain a security risk assessment index;

[0145] Comparing the security risk assessment index with a preset security risk assessment index threshold, and determining the security risk assessment level according to the range level to which the threshold comparison result belongs;

[0146] The security risk assessment level data is input into the preset cross-border e-commerce security risk repair database for security risk level matching, and the corresponding security risk repair strategy is obtained according to the security risk level matching results.

[0147] It should be noted that the security simulation test of the cross-border e-commerce account is carried out, and the security risk assessment index is obtained by processing the multi-factor authentication support rate data, system vulnerability severity data, unauthorized access success rate data and data leakage degree data. The multi-factor authentication support rate data is a quantitative indicator used to measure the degree of support for the multi-factor authentication function of the cloud platform;

[0148] The calculation formula of the safety risk assessment index is:

[0149] ;

[0150] in, is the safety risk assessment index, For multi-factor authentication support data, is the system vulnerability severity data, To unauthorize access to success rate data, For data leakage degree data, , , and It is the preset characteristic coefficient (which can be obtained by querying the preset cross-border e-commerce data security management cloud platform).

[0151] The cloud platform-based cross-border e-commerce account data security management method and system disclosed in the present invention realizes security management technology for access control of cross-border e-commerce account data by analyzing user access habits, user access rights and the security of the user's current access environment, thereby achieving the purpose of improving the security of cross-border e-commerce account data.

[0152] In the several embodiments provided in the present application, it should be understood that the disclosed devices and methods can be implemented in other ways. The device embodiments described above are only schematic. For example, the division of the units is only a logical function division. There may be other division methods in actual implementation, such as: multiple units or components can be combined, or can be integrated into another system, or some features can be ignored or not executed. In addition, the coupling, direct coupling, or communication connection between the components shown or discussed can be through some interfaces, and the indirect coupling or communication connection of the devices or units can be electrical, mechanical or other forms.

[0153] The units described above as separate components may or may not be physically separated, and the components displayed as units may or may not be physical units; they may be located in one place or distributed on multiple network units; some or all of the units may be selected according to actual needs to achieve the purpose of the present embodiment.

[0154] In addition, all functional units in the embodiments of the present invention may be integrated into one processing unit, or each unit may be separately used as a unit, or two or more units may be integrated into one unit; the above-mentioned integrated units may be implemented in the form of hardware or in the form of hardware plus software functional units.

Claims

1. A cross-border e-commerce account data security management method based on a cloud platform, characterized in that: The following steps are involved: Obtain and classify the storage data of cross-border e-commerce accounts, generate cross-border e-commerce data clusters of different categories, encrypt them, and insert preset sensitivity labels; The cloud platform determines the target cross-border e-commerce encrypted data cluster based on the requested access type data and sensitive access permission data issued by the user; Establish a user access habit model based on the acquired user historical access record data, input the user's current access data into the user access habit model for processing, and obtain abnormal access judgment result data; If the abnormal access judgment result data shows that the user has abnormal access, a prohibition access instruction is issued; If the abnormal access judgment result data shows that the user has normal access, the cross-border e-commerce decryption data cluster is obtained by decryption, and the user's access environment is security assessed according to the user's sensitive access rights to obtain the access environment security assessment index; The access environment security assessment index is compared with a preset access environment security assessment index threshold. If the threshold comparison result meets the preset threshold comparison result requirement, the cross-border e-commerce decryption data cluster is encrypted and transmitted to the user end for decryption and display; The obtaining and classifying the cross-border e-commerce account storage data, generating cross-border e-commerce data clusters of different categories, encrypting and inserting preset sensitivity labels, includes: Obtain the cross-border e-commerce account storage data and perform feature extraction to obtain feature data, classify according to the feature data, and generate cross-border e-commerce data clusters of different categories; Inserting preset sensitivity labels into the cross-border e-commerce data cluster, including high sensitivity labels, medium sensitivity labels and low sensitivity labels; Obtain preset encryption keys and decryption keys, encrypt the cross-border e-commerce data cluster according to the encryption key, obtain the cross-border e-commerce encrypted data cluster and store it on the cloud platform; Obtain the preset platform encryption public key and platform decryption private key, and the cloud platform sends the platform encryption public key to each user end.

2. According to the cloud platform-based cross-border e-commerce account data security management method of claim 1, it is characterized in that: The cloud platform determines the target cross-border e-commerce encrypted data cluster according to the requested access type data and the sensitive access permission data issued by the user, including: The user sends an access request to the cloud platform, and the cloud platform authenticates the user and obtains the user's requested access type data and sensitive access permission data; Matching and identifying the requested access type data with the characteristic data, and taking the cross-border e-commerce encrypted data cluster corresponding to the characteristic data that meets the preset matching and identification requirements as the cross-border e-commerce encrypted data cluster to be identified; The sensitivity access permission data is matched and identified with the sensitivity label, and the cross-border e-commerce encrypted data cluster to be identified corresponding to the sensitivity label that meets the preset matching identification result requirements is used as the target cross-border e-commerce encrypted data cluster.

3. The cross-border e-commerce account data security management method based on the cloud platform according to claim 2 is characterized in that: The method of establishing a user access habit model based on the acquired user historical access record data, inputting the user's current access data into the user access habit model for processing, and obtaining abnormal access determination result data includes: Obtain user historical access record data, including user identity data, historical login record data, historical operation behavior data, and historical access behavior data; The historical login record data includes login time data, login location data and login device data; the historical operation behavior data includes operation type data, operation speed data and operation sequence data; the historical access behavior data includes access type data, access frequency data, access sequence data and access combination data; Training is performed based on the user identity data, login time data, login location data, login device data combined with the operation type data, operation speed data, operation sequence data, and access type data, access frequency data, access sequence data, and access combination data to obtain a user access habit model; Obtain the user's current access data, including login identity data, current login data, current operation behavior data and current access behavior data. The current login data includes current login time data, current login location data and current login device data. The current operation behavior data includes current operation type data, current operation speed data and current operation sequence data. The current access behavior data includes current access type data, current access frequency data, current access sequence data and current access combination data. The login identity data, current login time data, current login location data, current login device data, current operation type data, current operation speed data, current operation sequence data, current access data type data, current access frequency data, current access sequence data, and current access combination mode data are input into the user access habit model for processing to obtain abnormal access judgment result data.

4. The cross-border e-commerce account data security management method based on a cloud platform according to claim 3 is characterized in that: If the abnormal access determination result data shows that the user has normal access, the cross-border e-commerce decryption data cluster is decrypted, and the user's access environment is security evaluated according to the user's sensitive access rights, and the access environment security evaluation index is obtained, including: If the abnormal access determination result data shows that the user has normal access, the target cross-border e-commerce encrypted data cluster is decrypted using the decryption key to obtain a cross-border e-commerce decrypted data cluster; If the user's sensitivity access permission data is low-sensitivity access permission data, the cloud platform sends the cross-border e-commerce decrypted data cluster to the user end; If the user's sensitivity access permission data is medium sensitivity access permission data or high sensitivity access permission data, the user's current access environment data is obtained, including network traffic data, antivirus software activation data, firewall activation data, and network connection method data; The login time data, login location data, login device data, network traffic data, anti-virus software activation data, firewall activation data and network connection mode data are input into a preset access environment security assessment model for processing to obtain an access environment security assessment index.

5. The cross-border e-commerce account data security management method based on a cloud platform according to claim 4 is characterized in that: The access environment security assessment index is compared with a preset access environment security assessment index threshold, and if the threshold comparison result meets the preset threshold comparison result requirement, the cross-border e-commerce decryption data cluster is encrypted and transmitted to the user end for decryption and display, including: Compare the access environment security assessment index with a preset access environment security assessment index threshold, and if the threshold comparison result meets the preset threshold comparison result requirement, obtain a preset user encryption public key and a user decryption private key of the user terminal; The client encrypts the user encryption public key according to the platform encryption public key, obtains the re-encrypted user encryption public key, and sends it to the cloud platform; The cloud platform uses the platform decryption private key to decrypt the re-encrypted user encryption public key, generates a target user encryption public key, encrypts the cross-border e-commerce decrypted data cluster according to the target user encryption public key, obtains the cross-border e-commerce re-encrypted data cluster and sends it to the user end; The user end uses the user decryption private key to decrypt the cross-border e-commerce heavily encrypted data cluster and then displays it.

6. A cross-border e-commerce account data security management system based on a cloud platform, characterized in that: The invention comprises a memory and a processor, wherein the memory stores a program of a method for securely managing data of a cross-border e-commerce account based on a cloud platform, and when the method for securely managing data of a cross-border e-commerce account based on a cloud platform is executed by the processor, the following steps are implemented: Obtain and classify the storage data of cross-border e-commerce accounts, generate cross-border e-commerce data clusters of different categories, encrypt them, and insert preset sensitivity labels; The cloud platform determines the target cross-border e-commerce encrypted data cluster based on the requested access type data and sensitive access permission data issued by the user; Establish a user access habit model based on the acquired user historical access record data, input the user's current access data into the user access habit model for processing, and obtain abnormal access judgment result data; If the abnormal access judgment result data shows that the user has abnormal access, a prohibition access instruction is issued; If the abnormal access judgment result data shows that the user has normal access, the cross-border e-commerce decryption data cluster is obtained by decryption, and the user's access environment is security assessed according to the user's sensitive access rights to obtain the access environment security assessment index; The access environment security assessment index is compared with a preset access environment security assessment index threshold. If the threshold comparison result meets the preset threshold comparison result requirement, the cross-border e-commerce decryption data cluster is encrypted and transmitted to the user end for decryption and display; The obtaining and classifying the cross-border e-commerce account storage data, generating cross-border e-commerce data clusters of different categories, encrypting and inserting preset sensitivity labels, includes: Obtain the cross-border e-commerce account storage data and perform feature extraction to obtain feature data, classify according to the feature data, and generate cross-border e-commerce data clusters of different categories; Inserting preset sensitivity labels into the cross-border e-commerce data cluster, including high sensitivity labels, medium sensitivity labels and low sensitivity labels; Obtain preset encryption keys and decryption keys, encrypt the cross-border e-commerce data cluster according to the encryption key, obtain the cross-border e-commerce encrypted data cluster and store it on the cloud platform; Obtain the preset platform encryption public key and platform decryption private key, and the cloud platform sends the platform encryption public key to each user end.

Images