Print data security verification method and system

By printing the authorization authentication model and the data security verification model, combined with the threshold secret sharing model, the problem of leakage risk during data transmission in traditional printing technology is solved, and efficient data security verification and protection is achieved.

CN119127098AInactive Publication Date: 2024-12-13GUOHE XINGKE (SHENZHEN) TECH CO LTD
View PDF 0 Cites 2 Cited by

Patent Information

Application Number
CN202411266486.3
Authority / Receiving Office
CN · China
Patent Type
Applications(China)
Current Assignee / Owner
Filing Date
2024-09-11
Publication Date
2024-12-13
Estimated Expiration
Not applicable · inactive patent

AI Technical Summary

Technical Problem

In traditional printing technology, print data is easily intercepted and tampered during transmission, and traditional verification methods cannot provide continuous protection, resulting in a high risk of data leakage.

Method used

The print authorization authentication model and the print data security verification model are adopted, and the user metadata authentication and multiple block verification are combined with the threshold secret sharing model to ensure the confidentiality and security of the data during transmission.

Benefits of technology

Effectively identify and intercept unauthorized or potentially risky printing tasks, reduce the risk of sensitive information leakage, ensure that high-risk data is strictly protected, improve the legality and security of data access, and reduce the risk of sensitive data being illegally printed.

✦ Generated by Eureka AI based on patent content.

Smart Images

  • Figure CN119127098A_ABST
    Figure CN119127098A_ABST
Patent Text Reader

Abstract

The invention discloses a printing data security verification method and system, and relates to the technical field of printing. A printing data security verification system comprises a printing data acquisition module, a printing data authorization authentication module and a printing data security verification module. According to the method, the printing authorization authentication model and the printing data security verification model are introduced in the printing process, and unauthorized or potential risk printing tasks can be identified and intercepted before data printing, so that the leakage risk of sensitive information is reduced; the printing data are classified according to the security levels, so that the printing data of different levels can accept security verification strategies of different degrees, and it can be ensured that high-risk data can obtain more strict security protection measures; according to the method, verification is carried out by selecting part of the data blocks instead of all the data, verification efficiency is improved, confidentiality of the original data is guaranteed, and the calculation burden in the verification process is reduced while data privacy is protected.
Need to check novelty before this filing date? Find Prior Art

Description

Technical Field

[0001] The present invention relates to the field of printing technology, and in particular to a printing data security verification method and system. Background Art

[0002] In the traditional printing process, print data may be intercepted during transmission from the sender to the printer, especially when printing over a wireless network, the risk of data leakage is higher.

[0003] In traditional printing technology, verifying the entire file is one of the common security measures. This method usually verifies the entire file content once before sending it to the printer to ensure that it has not been tampered with. However, this method has several disadvantages. When verifying the entire file, it cannot protect the security of the file during the verification process. Once the data begins to be transmitted, it may be intercepted and tampered with. Traditional verification methods cannot provide continuous protection for data during transmission.

[0004] Therefore, we urgently need to provide a printing data security verification method and system that provides an efficient security verification mechanism. Summary of the invention

[0005] The present invention aims to provide a print data security verification method and system, providing an efficient verification mechanism for the security of print data.

[0006] A printing data security verification method, comprising: S1. Obtain the print data to be verified; obtain the user metadata to be verified corresponding to the print data to be verified; the user metadata to be verified includes the user identity information to be verified and the print task information to be verified; the print task information to be verified includes the print data access rights, print data sensitivity level, and print data risk assessment; S2. Input the user metadata to be verified into the printing authorization authentication model for security authentication, and obtain the authorization authentication result and the printing security level; the printing security level includes high, medium and low levels; if the authorization authentication result is passed, the printing data to be verified is used as the data to be printed, and the data to be printed and the printing security level are input into the queue to be printed; otherwise, the printing data to be verified is intercepted and an audit report is sent; S3. Obtain the data to be printed and the printing security level in the queue to be printed; input the data to be printed and the printing security level into the printing data security verification model for security verification to obtain a security verification result; the printing data security verification model is used to perform multiple block verifications on the data to be printed according to the printing security level, and the data after block verification follows the threshold secret sharing model, and the original data to be printed cannot be restored based on the data after each block, thereby ensuring the confidentiality of the data to be printed; if the security verification result is passed, the data to be printed will be printed; otherwise, the data to be printed will be intercepted and an interception report will be sent.

[0007] As a preferred technical solution of the present invention, the printing authorization authentication model in step S2 includes a data preprocessing layer, an authorization authentication layer, a security level assessment layer, a security level output layer and a result output layer; The data preprocessing layer is used to preprocess the user identity information to be verified and the printing task information to be verified to obtain preprocessed user identity information to be verified and preprocessed printing task information to be verified; The authorization authentication layer is used to match the pre-processed user identity information to be verified in the printing authorized user authentication library, which contains the authorized user identity information and the user security level corresponding to the authorized user identity information; if the match is successful, the authorization authentication result is passed, and the user security level corresponding to the authorized user identity information matching the user identity information to be verified is obtained to obtain the first security level; if the match is unsuccessful, the authorization authentication result is failed; The security level assessment layer is used to perform level assessment based on the pre-processed print task information to be verified, and obtain a second security level; The security level output layer is used to perform weighted processing on the first security level and the second security level to obtain the printing security level to be matched; perform level matching on the printing security level to be matched to obtain the printing security level; The result output layer is used to output the authorization and authentication results and print the security level.

[0008] As a preferred technical solution of the present invention, the specific steps of training the security level assessment layer in the printing authorization authentication model include: Acquire several pieces of verified printing task information with preset security levels marked by humans, wherein the verified printing task information and the pre-processed printing task information to be verified have the same data form; combine several pieces of verified printing task information with preset security levels marked by humans to obtain a printing security level training set; and use the preset security level marked by humans as a target value of the printing security level training set; The printing security level training set is input into the printing authorization authentication model to train the security level assessment layer with the target value as the target to obtain the initial security level assessment layer; the accuracy of the output result of the initial security level assessment layer is evaluated to obtain the classification evaluation result; if the classification evaluation result is within the error standard range, the initial security level assessment layer is deployed as the security level assessment layer; otherwise, the printing security level training set is used to continue training the security level assessment layer.

[0009] As a preferred technical solution of the present invention, the print data security verification model in step S3 includes a print data preprocessing layer, a data block layer, M data verification layers Y m and verification result output layer, m=1, 2, …, M; The print data preprocessing layer is used to process the data to be printed to obtain preprocessed data to be printed; The data block layer is used to match the security verification policy in the security verification policy library according to the printing security level to obtain the security verification policy of the corresponding level; perform data block operation on the pre-processed data to be printed according to the security verification policy of the corresponding level to obtain N printing data blocks; The security verification policy library includes a high-level security verification policy corresponding to a high-level printing security level, an intermediate-level security verification policy corresponding to an intermediate-level printing security level, and a low-level security verification policy corresponding to a low-level printing security level; the high-level security verification policy includes the values ​​of t1 and n1; the intermediate-level security verification policy includes the values ​​of t2 and n2; the low-level security verification policy includes the values ​​of t3 and n3; when the printing security level is high, the value of N is n1, and the value of T is t1; when the printing security level is intermediate, the value of N is n2, and the value of T is t2; when the printing security level is low, the value of N is n3, and the value of T is t3; N is the number of data blocks to be printed, and T is the number of blocks in each data verification layer Y m The number of print data blocks selected from N print data blocks for security verification; Data Validation Layer Y m It is used to select T printing data blocks from N printing data blocks for data security verification, and obtain the printing data block verification result K mt ; t=1, 2, ..., T; Verify result K based on all printed data blocks mt Get the data security verification result R m ; If all printed data blocks verify the result K mt If it is passed, the data security verification result R m If the data security verification result is R m for not passing; The verification result output layer is used to output the security verification results; if all data security verification results R m If both are passed, the security verification result is passed; otherwise, the security verification result is failed.

[0010] As a preferred technical solution of the present invention, the specific steps of constructing a security verification strategy library and a print data security verification model using a swarm optimization algorithm include: Construct a security verification strategy individual X i , i=1,2,…,I; each security verification strategy individual X i Contains different values ​​of (t1, n1), (t2, n2), (t3, n3) and M; the values ​​of (t1, n1), (t2, n2), (t3, n3) and M fluctuate within the preset value range; I security verification strategy individuals X i Combine to obtain the iterative population of security verification strategies; set the maximum number of iterations; According to the safety verification strategy iteration population, the safety verification strategy individual X i Perform simulation calculation to obtain the safety verification time W i ; Set the security verification time W i The inverse of is used as the security verification strategy individual X i The fitness S i ; The steps of simulation calculation are: Construct three standard print data corresponding to three security verification strategies; according to the security verification strategy individual X i The values ​​in are used to construct a simulated printing data security verification model and a simulated security verification strategy library; the three standard printing data are input into the simulated printing data security verification model for simulated security verification, and the security verification time W is obtained. i ; When the maximum number of iterations is reached, the security verification strategy individual X corresponding to the maximum fitness is output i , which is the optimal security verification strategy individual. The printing data security verification model is set according to the value of the optimal security verification strategy individual, and a security verification strategy library is constructed.

[0011] As a preferred technical solution of the present invention, each data verification layer Y in the training print data security verification model m The specific steps include: Collecting a number of print data blocks with safety target value labels; the content of the safety target value is whether the content in the print data block has passed the safety verification; combining a number of print data blocks with safety target value labels to obtain a print data verification training set; Input the print data verification training set into the print data security verification model for each data verification layer Y m Train with the security target value as the goal; get the initial data verification layer Y m ; Validate layer Y for initial data m The output result of the initial data is evaluated for accuracy to obtain the safety verification evaluation result; if the safety verification evaluation result is within the error standard range, the initial data verification layer Y m As data validation layer Y m Deploy; otherwise, use the printed data to verify the training set and continue to verify each data layer Y m Conduct training.

[0012] As a preferred technical solution of the present invention, the group optimization algorithm used to construct the security verification strategy library and the print data security verification model is a genetic algorithm.

[0013] A printing data security verification system, comprising: The print data acquisition module is used to acquire the print data to be verified; acquire the user metadata to be verified corresponding to the print data to be verified; the user metadata to be verified includes the user identity information to be verified and the print task information to be verified; the print task information to be verified includes the print data access rights, the print data sensitivity level, and the print data risk assessment; The print data authorization and authentication module is used to input the user metadata to be authenticated into the print authorization and authentication model for security authentication, and obtain the authorization and authentication result and the print security level; the print security level includes high, medium and low levels; if the authorization and authentication result is passed, the print data to be authenticated is used as the data to be printed, and the data to be printed and the print security level are input into the queue to be printed; otherwise, the print data to be authenticated is intercepted and an audit report is sent; A print data security verification module is used to obtain the data to be printed and the printing security level in the queue to be printed; the data to be printed and the printing security level are input into the print data security verification model for security verification to obtain a security verification result; the print data security verification model is used to perform multiple block verifications on the data to be printed according to the printing security level, and the data after block verification follows the threshold secret sharing model, and the original data to be printed cannot be restored based on the data after each block, thereby ensuring the confidentiality of the data to be printed; if the security verification result is passed, the data to be printed will be printed; otherwise, the data to be printed will be intercepted and an interception report will be sent.

[0014] The present invention has the following advantages: 1. The present invention can effectively perform security checks on print data by introducing a print authorization authentication model and a print data security verification model into the print process. This method can identify and intercept unauthorized or potentially risky print tasks before data printing, thereby reducing the risk of sensitive information leakage; the print data is classified according to security levels, so that print data of different levels can accept different degrees of security verification strategies. This hierarchical verification method can ensure that high-risk data receive more stringent security protection measures; by authenticating the user metadata corresponding to the print data to be verified, dynamic access control based on user identity and print task information is implemented. This method can ensure that only authorized users can issue print instructions, thereby enhancing the legitimacy and security of print data access.

[0015] 2. The present invention uses a data block layer to match the corresponding security verification strategy according to the printing security level, which means that the security verification process can be dynamically adjusted according to the sensitivity and risk level of the data, so that the security measures are both strict and flexible, ensuring that the processing of data of different security levels is appropriate; by selecting part of the data block for verification instead of the entire data, the efficiency of verification is improved and the confidentiality of the original data is guaranteed. This method not only protects data privacy, but also reduces the computational burden in the verification process; the design of multiple data verification layers increases the depth and complexity of the verification process, and greatly enhances the protection of data security through multi-level and multi-angle verification; only when the results of all data verification layers are passed, the data to be printed can be printed, which greatly reduces the risk of sensitive data being illegally printed. As security requirements change, data verification layers can be flexibly increased or decreased to meet different security verification requirements. BRIEF DESCRIPTION OF THE DRAWINGS

[0016] Figure 1 A schematic diagram of the structure of a printing data security verification system used in an embodiment of the present invention. DETAILED DESCRIPTION

[0017] In order to enable persons skilled in the art to better understand the technical solutions in the present invention, the technical solutions in the embodiments of the present invention will be clearly and completely described below in conjunction with the accompanying drawings in the embodiments of the present invention.

[0018] Embodiment 1, a printing data security verification method, comprising: S1. Obtain the print data to be verified; obtain the user metadata to be verified corresponding to the print data to be verified; the user metadata to be verified includes the user identity information to be verified and the print task information to be verified; the print task information to be verified includes the print data access rights, print data sensitivity level, and print data risk assessment; Obtain the print data to be verified and the user metadata to be verified from the user terminal. The user uploads the data file to be printed on the user terminal. When uploading, the user already knows that the identity information of the user to be verified and the print task information to be verified need to be obtained; the identity information of the user to be verified includes information such as the user ID and the user organization; the print data access permission is the access permission level set by the user for the data file, such as determining who needs to access the data and why; the print data sensitivity level is the document sensitivity level of the data file; the print data risk assessment is the risk that may be caused if the data file is leaked or accessed without authorization; S2. Input the user metadata to be verified into the printing authorization authentication model for security authentication, and obtain the authorization authentication result and the printing security level; the printing security level includes high, medium and low levels; if the authorization authentication result is passed, the printing data to be verified is used as the data to be printed, and the data to be printed and the printing security level are input into the queue to be printed; otherwise, the printing data to be verified is intercepted and an audit report is sent; By inputting the metadata of the user to be verified into the print authorization authentication model, the automated security review of the print task is realized, and the efficiency and accuracy of security authentication are improved; by assigning different print security levels to the print tasks, such as high, medium, and low, hierarchical security control of the print data is realized, and corresponding security measures can be taken according to the sensitivity and risk level of the data to ensure data security; the dichotomy of the authorization authentication results makes data access management more precise, and only the print tasks that pass the security authentication can enter the queue to be printed, thereby effectively preventing unauthorized data access and printing; intercepting the print data that fails to pass the authentication and sending the audit report can prevent possible data leakage in time; The printing authorization and authentication model in step S2 includes a data preprocessing layer, an authorization and authentication layer, a security level assessment layer, a security level output layer and a result output layer; The data preprocessing layer is used to preprocess the user identity information to be verified and the printing task information to be verified to obtain preprocessed user identity information to be verified and preprocessed printing task information to be verified; The authorization authentication layer is used to match the pre-processed user identity information to be verified in the printing authorized user authentication library, which contains the authorized user identity information and the user security level corresponding to the authorized user identity information; if the match is successful, the authorization authentication result is passed, and the user security level corresponding to the authorized user identity information matching the user identity information to be verified is obtained to obtain the first security level; if the match is unsuccessful, the authorization authentication result is failed; The user security level in the print authorization user authentication library is set by professionals based on the user's identity information, and the level is expressed in digital form, such as 1, 3, 5; The security level assessment layer is used to perform level assessment based on the pre-processed print task information to be verified, and obtain a second security level; The security level output layer is used to perform weighted processing on the first security level and the second security level to obtain the printing security level to be matched; and to perform level matching on the printing security level to be matched to obtain the printing security level; For example, the first security level is 5, the second security level is 7, and the security level of the print to be matched after weighted processing is 6; it is stipulated that when the level is 1-4, the printing security level is low; when the level is 5-7, the printing security level is medium; when the level is 8-10, the printing security level is high; the actual level matching standard is divided by professional technicians according to actual conditions; The result output layer is used to output the authorization and authentication results and print the security level; The specific steps for training the security level assessment layer in the print authorization authentication model include: Acquire several pieces of verified printing task information with manually marked preset security levels, the verified printing task information and the pre-processed printing task information to be verified have the same data form, and both the verified printing task information and the pre-processed printing task information to be verified can be input into the printing authorization authentication model for identification; combine several pieces of verified printing task information with manually marked preset security levels to obtain a printing security level training set; use the manually marked preset security level as the target value of the printing security level training set; the manually marked preset security level is marked by professional technicians according to actual conditions; Input the print security level training set into the print authorization authentication model to train the security level assessment layer with the target value as the target, and obtain the initial security level assessment layer; evaluate the accuracy of the output result of the initial security level assessment layer to obtain the classification evaluation result; if the classification evaluation result is within the error standard range, the initial security level assessment layer is deployed as the security level assessment layer; otherwise, continue to train the security level assessment layer using the print security level training set; The BP neural network model is selected as the basic model of the security level assessment layer in the printing authorization authentication model; by using the verified printing task information with manually labeled preset security levels as the training set, it can be ensured that the printing authorization authentication model learns accurate and reliable data, thereby improving the accuracy of the model in classifying the security level of printing tasks; by continuously training and optimizing the printing security level training set, the generalization ability of the model can be improved, so that it can better adapt to new or unseen printing tasks; S3. Obtain the data to be printed and the printing security level in the queue to be printed; input the data to be printed and the printing security level into the printing data security verification model for security verification, and obtain the security verification result; the printing data security verification model is used to perform multiple block verifications on the data to be printed according to the printing security level, and the data after block verification follows the threshold secret sharing model, and the original data to be printed cannot be restored according to the data after each block, thereby ensuring the confidentiality of the data to be printed; if the security verification result is passed, the data to be printed is printed; otherwise, the data to be printed is intercepted and an interception report is sent; The print data security verification model in step S3 includes a print data preprocessing layer, a data block layer, M data verification layers Y m and verification result output layer, m=1, 2, …, M; The print data preprocessing layer is used to process the data to be printed to obtain preprocessed data to be printed; The data block layer is used to match the security verification policy in the security verification policy library according to the printing security level to obtain the security verification policy of the corresponding level; the pre-processed data to be printed is subjected to data block operation according to the security verification policy of the corresponding level to obtain N printing data blocks; the data length of all printing data blocks is the same, if the data to be printed does not meet the data length of the division, the printing data block is subjected to data padding operation; The security verification policy library includes a high-level security verification policy corresponding to a high-level printing security level, an intermediate-level security verification policy corresponding to an intermediate-level printing security level, and a low-level security verification policy corresponding to a low-level printing security level; the high-level security verification policy includes the values ​​of t1 and n1; the intermediate-level security verification policy includes the values ​​of t2 and n2; the low-level security verification policy includes the values ​​of t3 and n3; when the printing security level is high, the value of N is n1, and the value of T is t1; when the printing security level is intermediate, the value of N is n2, and the value of T is t2; when the printing security level is low, the value of N is n3, and the value of T is t3; N is the number of data blocks to be printed, and T is the number of blocks in each data verification layer Y m The number of print data blocks selected from N print data blocks for security verification; Data Validation Layer Y m It is used to select T printing data blocks from N printing data blocks for data security verification, and obtain the printing data block verification result K mt ; t=1, 2, ..., T; Verify result K based on all printed data blocks mt Get the data security verification result R m ; If all printed data blocks verify the result K mt If it is passed, the data security verification result R mIf the data security verification result is R m for not passing; Before and after data verification, the print data is stored in a closed system, and the print data itself will not be identified and verified for data security, which ensures the security of the print data and prevents it from being leaked; each time T print data blocks are selected from N print data blocks for data security verification, even if T print data blocks are intercepted or leaked, the data interceptor will not infer the specific content of the entire print data based on the content of the T print data blocks. This is a data partitioning method derived from the threshold secret sharing model. The threshold secret sharing model allows a secret, such as a password, key, important information, etc., to be divided into multiple parts and distributed to each member of the participant group. The key feature of this method is that the original secret information can only be reconstructed when a certain number of participants, i.e., the threshold value, gather their respective secret shares. If the number of participants is less than the threshold value, no information about the secret can be obtained; in the embodiment of the present invention, N is the overall partition of the print data, T is a number less than the threshold value, and the threshold value is determined according to the value of N; Since the print data is divided into multiple print data blocks, even if some print data blocks are leaked or lost, as long as the leaked print data blocks do not reach the threshold value, the print data is still safe; by adjusting the values ​​of N and T, the access rights to the print data can be flexibly controlled; The purpose of setting M data verification layers is to traverse N printing data blocks in M ​​random samplings, so that all information of the data to be printed is security verified and a security verification result is obtained; The verification result output layer is used to output the security verification results; if all data security verification results R m If both are passed, the security verification result is passed; otherwise, the security verification result is failed; Train each data verification layer Y in the print data security verification model m The specific steps include: Collecting a number of print data blocks with safety target value labels; the content of the safety target value is whether the content in the print data block has passed the safety verification; combining a number of print data blocks with safety target value labels to obtain a print data verification training set; Input the print data verification training set into the print data security verification model for each data verification layer Y m Train with the security target value as the goal; get the initial data verification layer Y m ; Validate layer Y for initial data m The output result of the initial data is evaluated for accuracy to obtain the safety verification evaluation result; if the safety verification evaluation result is within the error standard range, the initial data verification layer Y mAs data validation layer Y m Deploy; otherwise, use the printed data to verify the training set and continue to verify each data layer Y m Conduct training; The BP neural network model is selected as the basic model of the data verification layer to collect a large number of printing data blocks, and each data block is marked with the security target value whether it has passed the security verification. These data blocks can come from actual printing tasks, including safe and compliant data and non-compliant data; by accurately verifying the security of printed data, potential security risks and the possibility of data leakage are reduced; automated data verification reduces the need for manual review and greatly improves the efficiency and speed of verification; Specific steps for building a security verification strategy library and printing data security verification model using swarm optimization algorithm: Construct a security verification strategy individual X i , i=1,2,…,I; each security verification strategy individual X i Contains different values ​​of (t1, n1), (t2, n2), (t3, n3) and M; the values ​​of (t1, n1), (t2, n2), (t3, n3) and M fluctuate within the preset value range; I security verification strategy individuals X i The combination obtains the iterative population of the security verification strategy; the maximum number of iterations is set; the preset value range is divided by professional and technical personnel based on the actual situation, the higher the security level, the larger the value of N, n1>n2>n3; the value range of T fluctuates according to the value of N; the maximum number of iterations is set by professional and technical personnel based on the actual situation; According to the safety verification strategy iteration population, the safety verification strategy individual X i Perform simulation calculation to obtain the safety verification time W i ; Set the security verification time W i The inverse of the security verification strategy individual X i The fitness S i ; The steps of simulation calculation are: Construct three standard print data corresponding to three security verification strategies; according to the security verification strategy individual X i The values ​​in are used to construct a simulated printing data security verification model and a simulated security verification strategy library; the three standard printing data are input into the simulated printing data security verification model for simulated security verification, and the security verification time W is obtained. i ; Standard printing data is constructed by professional technicians; when calculating the security verification time, it is stipulated that the security verification results of the standard printing data are all passed; When the population optimization algorithm is a genetic algorithm, the security verification strategy iterative population can be updated using recombination, selection, and mutation operations; The reorganization operation is to perform multi-point crossover changes on two random security verification strategy individuals in the security verification strategy iteration population, that is, randomly select corresponding values, cross-exchange the elements of the two random security verification strategy individuals at multiple selected positions, such as exchanging the value of M in the two groups of security verification strategy individuals, to generate new security verification strategy individuals; Select the operation as individual X in the security verification policy i The fitness S i Based on this, the roulette wheel selection algorithm is used to select the security verification strategy individual X in the security verification strategy iteration population. i Make a selection and choose a better security verification strategy individual X i Form a new safety verification strategy iteration population; The mutation operation is to iterate each security verification strategy individual X in the security verification strategy population i , randomly generate a set of (t1, n1), (t2, n2), (t3, n3) values ​​and M values. If the generated values ​​meet the mutation conditions, randomly select and adjust the value position in the security verification strategy individual, and change the security verification strategy individual X i Perform mutation at the selected value position; When the maximum number of iterations is reached, the security verification strategy individual X corresponding to the maximum fitness is output i , which is the optimal security verification strategy individual. The printing data security verification model is set according to the value of the optimal security verification strategy individual, and a security verification strategy library is constructed.

[0019] Embodiment 2, a printing data security verification system, see Figure 1 As shown, including: The print data acquisition module is used to acquire the print data to be verified; acquire the user metadata to be verified corresponding to the print data to be verified; the user metadata to be verified includes the user identity information to be verified and the print task information to be verified; the print task information to be verified includes the print data access rights, the print data sensitivity level, and the print data risk assessment; The print data authorization and authentication module is used to input the user metadata to be authenticated into the print authorization and authentication model for security authentication, and obtain the authorization and authentication result and the print security level; the print security level includes high, medium and low levels; if the authorization and authentication result is passed, the print data to be authenticated is used as the data to be printed, and the data to be printed and the print security level are input into the queue to be printed; otherwise, the print data to be authenticated is intercepted and an audit report is sent; A print data security verification module is used to obtain the data to be printed and the printing security level in the queue to be printed; the data to be printed and the printing security level are input into the print data security verification model for security verification to obtain a security verification result; the print data security verification model is used to perform multiple block verifications on the data to be printed according to the printing security level, and the data after block verification follows the threshold secret sharing model, and the original data to be printed cannot be restored based on the data after each block, thereby ensuring the confidentiality of the data to be printed; if the security verification result is passed, the data to be printed will be printed; otherwise, the data to be printed will be intercepted and an interception report will be sent.

[0020] It should be understood that those skilled in the art can make improvements or changes based on the above description, and all such improvements and changes should fall within the scope of protection of the appended claims of the present invention. Parts not described in detail in this specification belong to the prior art known to those skilled in the art.

Claims

1. A printing data security verification method, characterized in that: include: S1. Obtain the print data to be verified; Obtain the user metadata to be verified corresponding to the print data to be verified; The metadata of the user to be verified includes the identity information of the user to be verified and the printing task information to be verified; The print task information to be verified includes the print data access rights, print data sensitivity level, and print data risk assessment; S2. Input the user metadata to be verified into the printing authorization authentication model for security authentication, and obtain the authorization authentication result and printing security level; The printing security level includes high, medium and low levels; if the authorization authentication result is passed, the print data to be verified is used as the data to be printed, and the data to be printed and the printing security level are input into the queue to be printed; Otherwise, the print data to be verified will be intercepted and an audit report will be sent; S3. Obtain the data to be printed and the printing security level in the print queue; Input the data to be printed and the printing security level into the printing data security verification model for security verification, and obtain a security verification result; The print data security verification model is used to perform multiple block verifications on the data to be printed according to the printing security level. The data after block verification follows the threshold secret sharing model. It is impossible to restore the original data to be printed based on the data after each block verification, thus ensuring the confidentiality of the data to be printed. If the security verification result is passed, the data to be printed will be printed. Otherwise, the data to be printed is intercepted and an interception report is sent.

2. A printing data security verification method according to claim 1, characterized in that: The printing authorization and authentication model in step S2 includes a data preprocessing layer, an authorization and authentication layer, a security level assessment layer, a security level output layer and a result output layer; The data preprocessing layer is used to preprocess the user identity information to be verified and the printing task information to be verified to obtain preprocessed user identity information to be verified and preprocessed printing task information to be verified; The authorization and authentication layer is used to match the pre-processed user identity information to be verified in the printing authorized user authentication library, which contains the authorized user identity information and the user security level corresponding to the authorized user identity information; If the match is successful, the authorization authentication result is passed, and the user security level corresponding to the authorized user identity information that matches the identity information of the user to be verified is obtained, and the first security level is obtained; If the match fails, the authorization authentication result is failed; The security level assessment layer is used to perform level assessment based on the pre-processed print task information to be verified, and obtain a second security level; The security level output layer is used to perform weighted processing on the first security level and the second security level to obtain the printing security level to be matched; perform level matching on the printing security level to be matched to obtain the printing security level; The result output layer is used to output the authorization and authentication results and print the security level.

3. A printing data security verification method according to claim 2, characterized in that: The specific steps for training the security level assessment layer in the print authorization authentication model include: Acquire several pieces of verified printing task information with preset security levels marked by humans, wherein the verified printing task information and the pre-processed printing task information to be verified have the same data form; combine several pieces of verified printing task information with preset security levels marked by humans to obtain a printing security level training set; and use the preset security level marked by humans as a target value of the printing security level training set; The printing security level training set is input into the printing authorization authentication model to train the security level assessment layer with the target value as the target to obtain the initial security level assessment layer; the accuracy of the output result of the initial security level assessment layer is evaluated to obtain the classification evaluation result; if the classification evaluation result is within the error standard range, the initial security level assessment layer is deployed as the security level assessment layer; otherwise, the printing security level training set is used to continue training the security level assessment layer.

4. A printing data security verification method according to claim 1, characterized in that: The print data security verification model in step S3 includes a print data preprocessing layer, a data block layer, M data verification layers Y m and verification result output layer, m=1, 2, …, M; The print data preprocessing layer is used to process the data to be printed to obtain preprocessed data to be printed; The data block layer is used to match the security verification policy in the security verification policy library according to the printing security level to obtain the security verification policy of the corresponding level; Perform data block operation on the pre-processed data to be printed according to the corresponding level security verification strategy to obtain N printing data blocks; The security verification policy library includes a high-level security verification policy corresponding to a high-level printing security level, an intermediate-level security verification policy corresponding to an intermediate-level printing security level, and a low-level security verification policy corresponding to a low-level printing security level; the high-level security verification policy includes the values ​​of t1 and n1; the intermediate-level security verification policy includes the values ​​of t2 and n2; the low-level security verification policy includes the values ​​of t3 and n3; when the printing security level is high, the value of N is n1, and the value of T is t1; when the printing security level is intermediate, the value of N is n2, and the value of T is t2; when the printing security level is low, the value of N is n3, and the value of T is t3; N is the number of data blocks to be printed, and T is the number of blocks in each data verification layer Y m The number of print data blocks selected from N print data blocks for security verification; Data Validation Layer Y m It is used to select T printing data blocks from N printing data blocks for data security verification, and obtain the printing data block verification result K mt ; t=1, 2, ..., T; verify the result K based on all printed data blocks mt Get the data security verification result R m ; If all printed data blocks verify the result K mt If it is passed, the data security verification result R m If the data security verification result is R m for not passing; The verification result output layer is used to output the security verification results; If all data security verification results R m If both are passed, the security verification result is passed; otherwise, the security verification result is failed.

5. A printing data security verification method according to claim 4, characterized in that: It also includes the specific steps of using the swarm optimization algorithm to build a security verification strategy library and print data security verification model: Construct a security verification strategy individual X i , i=1,2,…,I; each security verification strategy individual X i Contains different values ​​of (t1, n1), (t2, n2), (t3, n3) and M; the values ​​of (t1, n1), (t2, n2), (t3, n3) and M fluctuate within the preset value range; I security verification strategy individuals X i The combination obtains the iterative population of security verification strategies; Set the maximum number of iterations; According to the safety verification strategy iteration population, the safety verification strategy individual X i Perform simulation calculation to obtain the safety verification time W i ; Set the security verification time W i The inverse of is used as the security verification strategy individual X i The fitness S i ; The steps of simulation calculation are: Construct three standard print data corresponding to three security verification strategies; according to the security verification strategy individual X i The numerical construction of the simulation printing data security verification model and the simulation security verification strategy library; Input the three standard printing data into the simulated printing data security verification model for simulated security verification, and obtain the security verification time W i ; When the maximum number of iterations is reached, the security verification strategy individual X corresponding to the maximum fitness is output i , which is the optimal security verification strategy individual. The printing data security verification model is set according to the value of the optimal security verification strategy individual, and a security verification strategy library is constructed.

6. A printing data security verification method according to claim 5, characterized in that: Train each data verification layer Y in the print data security verification model m The specific steps include: Collecting a number of print data blocks with safety target value labels; the content of the safety target value is whether the content in the print data block has passed the safety verification; combining a number of print data blocks with safety target value labels to obtain a print data verification training set; The print data verification training set is input into the print data security verification model for each data verification layer Y m Train with the security target value as the goal; get the initial data verification layer Y m ; Validate layer Y for initial data m The output result of the initial data is evaluated for accuracy to obtain the safety verification evaluation result; if the safety verification evaluation result is within the error standard range, the initial data verification layer Y m As data validation layer Y m Deploy; otherwise, use the printed data to verify the training set and continue to verify each data layer Y m Conduct training.

7. A printing data security verification method according to claim 5, characterized in that: The group optimization algorithm used to construct the security verification strategy library and the printing data security verification model is a genetic algorithm.

8. A printing data security verification system, characterized in that: The system applies a zone print data security verification method as described in any one of claims 1 to 7, including: The print data acquisition module is used to acquire the print data to be verified; acquire the user metadata to be verified corresponding to the print data to be verified; the user metadata to be verified includes the user identity information to be verified and the print task information to be verified; the print task information to be verified includes the print data access rights, the print data sensitivity level, and the print data risk assessment; The print data authorization and authentication module is used to input the user metadata to be authenticated into the print authorization and authentication model for security authentication, and obtain the authorization and authentication result and the print security level; the print security level includes high, medium and low levels; if the authorization and authentication result is passed, the print data to be authenticated is used as the data to be printed, and the data to be printed and the print security level are input into the queue to be printed; otherwise, the print data to be authenticated is intercepted and an audit report is sent; A print data security verification module is used to obtain the data to be printed and the printing security level in the queue to be printed; the data to be printed and the printing security level are input into the print data security verification model for security verification to obtain a security verification result; the print data security verification model is used to perform multiple block verifications on the data to be printed according to the printing security level, and the data after block verification follows the threshold secret sharing model, and the original data to be printed cannot be restored based on the data after each block, thereby ensuring the confidentiality of the data to be printed; if the security verification result is passed, the data to be printed will be printed; otherwise, the data to be printed will be intercepted and an interception report will be sent.

Citation Information

Cited By

  • Encryption fragmentation and distributed storage method and system of password

    CN121239401A

  • A method and system for encrypted fragmentation and distributed storage of a password

    CN121239401B