Tamper-proof encryption system and method for file management

Abstract

The invention relates to the technical field of file management tamper-proofing, and particularly discloses a tamper-proofing encryption system and method for file management, and the method comprises the steps: S1, transporting important paper files in a workplace into a paper file library in a unified manner at a preset frequency; s2, the paper archive is converted into an electronic archive through an archive conversion module, the paper archive is sealed and stored, the electronic archive is encrypted and uploaded to an electronic archive library, and retrieval connection is established; s3, in the process that the user accesses the electronic archive library, information of the user accessing the electronic archive library is collected through a collection module; according to the system, the user information of a visitor is acquired through the acquisition module, and when the visiting user applies to modify the archive information in the electronic archive library, the acquired user information is analyzed, and whether the user is allowed to modify the electronic archive or not is judged; therefore, the electronic archive can be effectively prevented from being tampered due to the fact that the user information is stolen and used.

Description

Technical Field

[0001] The present invention relates to the technical field of file management tamper-proofing, and in particular to a tamper-proof encryption system and method for file management. Background Art

[0002] With the continuous advancement of technology, the use and preservation of electronic archival materials has become more and more common, but in some workplaces, such as government agencies, law firms, medical institutions, and libraries, the practice of working with paper archives is still retained.

[0003] Although paper archives have advantages such as stability, strong confidentiality and cannot be modified at will during the management and preservation process, they have many disadvantages such as large storage space requirements, easy damage and low retrieval efficiency. In some workplaces, paperless work (i.e. electronic archive management) has been gradually promoted. The advantage of paperless work is that it takes up less storage space, has more efficient retrieval, and can achieve remote access and sharing. However, paperless work may cause some important archives to be leaked or tampered with during the preservation process, which may cause certain troubles and disputes to the corresponding work. Summary of the invention

[0004] The purpose of the present invention is to provide a tamper-proof encryption system and method for file management to solve the following technical problems: In the process of managing important archives, how to make them easy to access and tamper-proof.

[0005] The purpose of the present invention can be achieved through the following technical solutions: A tamper-proof encryption method for archive management, the method comprising: S1. Transport important paper files in the workplace to the paper archives library at a preset frequency; S2. Convert paper archives into electronic archives through the archive conversion module, seal the paper archives, encrypt and upload the electronic archives to the electronic archive library, and establish a search connection; S3, when the user accesses the electronic archive library, the user information accessing the electronic archive library is collected through the collection module; S4. When the accessing user applies to modify the archive information of the electronic archive, the archive management center analyzes the collected user information to determine whether the user is allowed to modify the electronic archive.

[0006] Furthermore, the collected user information includes: Login logs, which are operation records during the user's login process, are used to analyze the user's login activities; IP information, the IP address of the account when accessing the electronic archive and the historical IP data of the account; Operation logs are the operation records of the account in the electronic archive, including but not limited to access time, accessed archives, operation types, and browsing habits.

[0007] Furthermore, in step S4, the process of determining whether the user is allowed to modify the electronic file includes: S41. If the user's login account does not have the authority to modify the electronic file, deny the user from modifying the electronic file; If the user login account has the permission to modify electronic files, the login log and IP information of the user login account are analyzed to obtain the security anomaly coefficient of the account's current login. ; S42, will Verify the preset account threshold Make a comparison; like , then the user is allowed to modify the electronic file; like , then perform secondary verification and execute step S43; like , then the user is denied the right to modify the electronic file; S43, analyzing the operation log after the user logs into the account, and obtaining the authority coefficient of the account for this login ,Will The authority coefficient required for this account to apply to modify the corresponding project data in the electronic file For comparison, if , then the user is allowed to modify the electronic file this time. , then the user's modification of the electronic file will be rejected.

[0008] Furthermore, in step S41, the process of obtaining the security anomaly coefficient of the current login of the account includes:

[0009]

[0010]

[0011] The security anomaly coefficient of the current login of this account is obtained through analysis of formulas (1)-(3) ; in, The abnormal operation parameters of this account login. is the IP address change risk factor, The time it takes to enter the account password during this login process. It is the average time taken to enter the account password during the historical login process of this account. Enter the default account password standard deviation time, The cumulative number of incorrect password inputs before the current successful login of this account. The geographical distance between the IP address of the current login of this account and the IP address of the last login. The time interval between the current login and the last login of this account.

[0012] Furthermore, in step S43, the process of obtaining the authority coefficient of the account for this login includes:

[0013] The authority coefficient of the account for this login is obtained by analyzing and calculating through formula (4) ; Where N is the number of operation records that deviate from the historical operations after the current login of the account. , is the deviation coefficient of the i-th operation record in the electronic archive after the account logs in this time, is the preset standard deviation coefficient, This is the standard permission for this account.

[0014] In one embodiment, the method further comprises: S5. The archive management center collects statistics on the user access logs of the electronic archives to obtain the daily visits to the electronic archives of each category in the electronic archives. The cumulative update reference characteristic value of the electronic archives of the corresponding category is obtained based on the daily visits and the importance of the archive data of each category. When the cumulative update reference characteristic value of the electronic archives of any category is greater than or equal to the preset standard cumulative update reference characteristic value, the electronic archives of the category and the log records of modifying the electronic archives are encrypted and sent to the paper archives; S6. Compare the received electronic archive of the category with the backup electronic archive retained in the paper archive library, analyze and obtain the modified electronic archive, convert the modified electronic archive and the log record of modifying the electronic archive into paper archives through the archive conversion module, and store them in the paper archive library.

[0015] Furthermore, in step S5, the process of obtaining the cumulative updated reference feature value of the corresponding category archive includes:

[0016] The cumulative updated reference characteristic value of the corresponding category archive is obtained by analyzing formula (5) ; Among them, M is the number of days between the last update date of the paper archive of this category and the latest date. , is the number of views of the electronic archives of this category on the jth day, is the importance coefficient of the archive data of this category.

[0017] A tamper-proof encryption system for archive management, and a tamper-proof encryption method for archive management, the system comprising: Paper archives, used to store paper archives to prevent tampering; The file conversion module is used to convert paper files into electronic files, and to convert the modified electronic files into paper files; Electronic archives, used to store converted electronic archives and facilitate daily retrieval, review and modification; A collection module is used to collect information about users who access the electronic archives; The archive management center is used to analyze the collected user information and determine whether the user is allowed to modify the electronic archive; analyze the user access logs of the electronic archive library and the importance of archive data in each category, and promptly convert the modified electronic archives into paper archives for preservation.

[0018] Beneficial effects of the present invention: (1) The present invention converts paper files into electronic files through the file conversion module, and uses an encryption algorithm to encrypt the electronic files and upload them to the electronic file library. This can prevent the electronic files from being tampered with during the upload process and facilitate users to review the files.

[0019] (2) The present invention collects the user information of visitors through the collection module. When the visiting user applies to modify the archive information in the electronic archive library, the collected user information is analyzed to determine whether the user is allowed to modify the electronic archive. This can effectively prevent the user information from being stolen and used to tamper with the electronic archive. If the user is allowed to modify the electronic archive, the electronic archive library needs to record the user information of the user and generate a log record corresponding to the modified part.

[0020] (3) The present invention analyzes the login log and IP information of the user's login account to determine whether the account's login is abnormal. If there is no abnormality, the user is allowed to modify the electronic file. If there is a major abnormality, the user is denied to modify the electronic file. If there is a minor abnormality, a secondary verification is performed. The operation log after the user logs into the account is analyzed to limit the authority scope of the account and determine whether the user is allowed to modify the electronic file. In this way, the security status of the account accessing the electronic file can be analyzed and its access rights can be restricted, thereby achieving the purpose of preventing the electronic file from being tampered with. BRIEF DESCRIPTION OF THE DRAWINGS

[0021] The present invention will be further described below in conjunction with the accompanying drawings.

[0022] Figure 1 It is a flowchart of the steps of the tamper-proof encryption method for archive management proposed by the present invention; Figure 2 It is a schematic block diagram of the tamper-proof encryption system for archive management proposed by the present invention. DETAILED DESCRIPTION

[0023] The following will be combined with the drawings in the embodiments of the present invention to clearly and completely describe the technical solutions in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0024] See also Figure 1 As shown, in one embodiment, a tamper-proof encryption method for archive management is provided, the method comprising: S1. Transport important paper files in the workplace to the paper archives warehouse at a preset frequency. The preset frequency is set based on experience, usually once a day or once a week; S2. Convert paper files into electronic files through the file conversion module, seal the paper files, copy and back up the electronic files to a storage medium that cannot be connected to the Internet, and then encrypt the electronic files using an encryption algorithm and upload them to the electronic archive library, so as to prevent the electronic files from being tampered with during the upload process, and establish a retrieval connection; S3, when the user accesses the electronic archive library, the user information accessing the electronic archive library is collected through the collection module; S4. When the accessing user applies to modify the archive information of the electronic archive, the archive management center analyzes the collected user information to determine whether the user is allowed to modify the electronic archive.

[0025] Through the above technical scheme, this embodiment provides an anti-tampering encryption method for archive management. First, important paper archives in the workplace are uniformly transported to the paper archive library at a preset frequency, and then the paper archives are converted into electronic archives through the archive conversion module. The electronic archives are encrypted using an encryption algorithm and uploaded to the electronic archive library. This can prevent the electronic archives from being tampered with during the upload process. When a user visits the electronic archive library to review the electronic archives, the user information of the visitor is collected through the collection module. When the visiting user applies to modify the archive information in the electronic archive library, the collected user information is analyzed to determine whether the user is allowed to modify the electronic archive. This can effectively prevent the user information from being stolen and used to tamper with the electronic archive. If the user is allowed to modify the electronic archive, the electronic archive library needs to record the user information of the user and generate a log record corresponding to the modified part.

[0026] The collected user information includes: Login logs are records of operations during the user's login process, which are used to analyze the user's login activities and determine whether the account is logged in by the user himself; IP information, including the IP address of the account when accessing the electronic archive and the historical IP login data of the account, to determine whether the login address of the account is abnormal; Operation logs are the operation records of the account in the electronic archive, including but not limited to access time, accessed archives, operation types, and browsing habits, to determine whether the operator behind the account login is the person himself.

[0027] In one embodiment, in step S4, the process of determining whether the user is allowed to modify the electronic file includes: S41. If the account logged in by the user does not have the authority to modify the electronic file, the user is denied permission to modify the electronic file; If the account logged in by the user has the authority to modify the electronic file, the login log and IP information of the user's login account are analyzed to obtain the security anomaly coefficient of the account's login this time. ; S42, will Verify the preset account threshold For comparison, the preset account verification coefficient threshold It can be obtained based on experience, where is the account security critical value, The critical value of the account risk; like , indicating that there is no abnormality in the account login this time, and the user is allowed to modify the electronic file; like , indicating that the account login is slightly abnormal and needs to be verified again, and step S43 is executed; like , indicating that there is a major abnormality in the current login of the account, and the user is denied the right to modify the electronic file; S43, analyzing the operation log after the user logs into the account, and obtaining the authority coefficient of the account for this login ,Will The authority coefficient required for this account to apply to modify the corresponding project data in the electronic file For comparison, the The authority coefficients required to modify items of different importance in the electronic archive are different. The specific authority coefficients can be preset based on experience. , then the user is allowed to modify the electronic file this time. , then the user's modification of the electronic file will be rejected.

[0028] In step S41, the process of obtaining the security anomaly coefficient of the current login of the account includes:

[0029]

[0030]

[0031] The security anomaly coefficient of the current login of this account is obtained through analysis of formulas (1)-(3) ; in, The abnormal operation parameters of this account login. is the IP address change risk factor, The time it takes to enter the account password during the current login process of the account. This time is the time it takes for the account to successfully log in this time. It can be obtained by collecting data through the collection module. It is the average time it takes to enter the account password during the historical login process of the account. This time is the average time it takes to successfully log in in the history of the account. In the specific calculation process, the average time of all successful logins can be calculated, or the average time of the most recent preset number of successful logins can be calculated. The preset selection can be made based on experience. When the standard deviation of the account and password is preset, it can be obtained according to the abnormal experiment of account login operation. This is the cumulative number of incorrect password inputs before the current successful login of this account, which can be obtained from the log records of the electronic archive library. It is the geographical distance between the IP address of the current login of the account and the IP address of the last login. It can be calculated by converting the IP address into the geographical location during the login process of the account. It is the time interval between the current login and the last login of this account, which can be obtained based on the login record of this account in the electronic archive.

[0032] In step S43, the process of obtaining the authority coefficient of the account for this login includes:

[0033] The authority coefficient of the account for this login is obtained by analyzing and calculating through formula (4) ; Where N is the number of operation record items that deviate from the historical operations after the current login of the account, and the operation items include but are not limited to the access time period, access time length, access file type, operation type during access, and browsing habits, etc. , The deviation coefficient of the i-th operation record in the electronic archive after the account logs in this time is preset and selected according to different operation items. For example, the deviation coefficient of the access time period can be preset as 0, 0.5, and 1. The historical access time period of the account is from 9:00 to 12:00 Beijing time. If the access time point of this time is 11:00 Beijing time, the deviation coefficient of this operation is selected as 0. If the access time point of this time is 13:00 Beijing time, the deviation coefficient of this operation is selected as 0.5. If the access time point of this time is 23:00, the deviation coefficient of this operation is selected as 1. The deviation coefficients of other operation items can be preset and automatically selected in turn. To preset the standard deviation coefficient, it can be preset based on experience. This is the standard permission for the account and can be obtained based on the permission settings for the account in the electronic archive.

[0034] Through the above technical scheme, this embodiment provides a method for determining whether the user is allowed to modify the electronic file. First, it is determined whether the account logged in by the user has the authority to modify the electronic file. If it does not have the modification authority, the user is directly denied the modification of the electronic file. If it has the modification authority, the login log and IP information of the user's login account are analyzed to determine whether the current login of the account is abnormal. If there is no abnormality, the user is allowed to modify the electronic file. If there is a major abnormality, the user is denied the modification of the electronic file. If there is a minor abnormality, a secondary verification is performed, and the operation log after the user logs in to the account is analyzed to limit the authority scope of the account to determine whether the user is allowed to modify the electronic file this time. In this way, the security status of the account accessing the electronic file can be analyzed and its access rights can be restricted, thereby achieving the purpose of tampering prevention of the electronic file.

[0035] In one embodiment, the method further comprises: S5. The archive management center collects statistics on the user access logs of the electronic archives to obtain the daily visits to the electronic archives of each category in the electronic archives. According to the daily visits and the importance of the archive data of each category, the cumulative update reference characteristic value of the electronic archives of the corresponding category is obtained. When the cumulative update reference characteristic value of the electronic archives of any category is greater than or equal to the preset standard cumulative update reference characteristic value, the electronic archives of this category and the log records of modifying the electronic archives are encrypted and sent to the paper archives; S6. Compare the received electronic archive of this category with the backup electronic archive retained in the paper archive library. The backup electronic archive is located in a storage medium that cannot be connected to the Internet and has an anti-tampering effect. The modified electronic archive is obtained by analysis. The modified electronic archive and the log record of modifying the electronic archive are converted into paper archives through the archive conversion module and stored in the paper archive library. The original paper archive in the paper archive library is still retained to facilitate restoration if any problems are found in the modified data in the electronic archive library later.

[0036] In step S5, the process of obtaining the cumulative updated reference feature value of the corresponding category file includes:

[0037] The cumulative updated reference characteristic value of the corresponding category archive is obtained by analyzing formula (5) ; Among them, M is the number of days between the date when the paper archive of this category was last updated and the latest date. The number of days is recounted each time the paper archive of this category is updated. , is the number of views of the electronic archives of this category on the jth day, which can be obtained through log statistics in the electronic archive library. is the importance coefficient of the archival data in this category, which is preset based on experience.

[0038] Through the above technical scheme, this embodiment provides a method for timely saving and backing up archive data of various categories in an electronic archive library to a paper archive library. Specifically, analysis is performed based on the cumulative number of visits to archives of various categories in the electronic archive library and the importance of the category data, and the cumulative update reference characteristic value corresponding to each category archive is obtained. When the cumulative update reference characteristic value of an electronic archive of any category is greater than or equal to a preset standard cumulative update reference characteristic value, the electronic archive of the category and the log record of modifying the electronic archive are encrypted and sent to the paper archive library, which is compared with the electronic archive backed up in the paper archive library, and the modified electronic archive is obtained through analysis. The modified electronic archive and the log record of modifying the electronic archive are converted into paper archives through an archive conversion module and stored in the paper archive library. In this way, the modified part in the electronic archive library can be saved and backed up in a timely and effective manner. If the data in the electronic archive library is tampered with, it can be restored through the backup paper archive, thereby improving the data security of the electronic archive library.

[0039] See also Figure 2 As shown, in one embodiment, a tamper-proof encryption system for archive management and a tamper-proof encryption method for archive management are provided, and the system includes: Paper archives, used to store paper archives to prevent tampering; A file conversion module, used to convert paper files into electronic files, and to convert modified electronic files into paper files. The file conversion module may be a scanning printer; Electronic archives, used to store converted electronic archives and facilitate daily retrieval, review and modification; A collection module is used to collect information about users who access the electronic archives; The archive management center is used to analyze the collected user information and determine whether the user is allowed to modify the electronic archive; analyze the user access logs of the electronic archive library and the importance of archive data in each category, and timely convert the modified electronic archives into paper archives for preservation; It should be noted that because paper archives require a large storage space, the paper archives stored in the paper archives can be comprehensively analyzed based on factors such as the preservation period, the importance of the archives, and whether they have been modified, so that the storage space of the paper archives can be recycled.

[0040] The above is a detailed description of an embodiment of the present invention, but the content is only a preferred embodiment of the present invention and cannot be considered to limit the scope of implementation of the present invention. All equivalent changes and improvements made within the scope of the present invention should still fall within the scope of the patent coverage of the present invention.

Claims

1. A tamper-proof encryption method for archive management, characterized in that: The method comprises: S1. Transport important paper files in the workplace to the paper archives library at a preset frequency; S2. Convert paper archives into electronic archives through the archive conversion module, seal the paper archives, encrypt and upload the electronic archives to the electronic archive library, and establish a search connection; S3, when the user accesses the electronic archive library, the user information accessing the electronic archive library is collected through the collection module; S4. When the accessing user applies to modify the archive information of the electronic archive, the archive management center analyzes the collected user information to determine whether the user is allowed to modify the electronic archive.

2. The tamper-proof encryption method for archive management according to claim 1, characterized in that: The collected user information includes: Login logs, which are operation records during the user's login process, are used to analyze the user's login activities; IP information, the IP address of the account when accessing the electronic archive and the historical IP data of the account; Operation logs are the operation records of the account in the electronic archive, including but not limited to access time, accessed archives, operation types, and browsing habits.

3. The tamper-proof encryption method for archive management according to claim 2, characterized in that: In step S4, the process of determining whether the user is allowed to modify the electronic file includes: S41. If the user's login account does not have the authority to modify the electronic file, deny the user from modifying the electronic file; If the user login account has the permission to modify electronic files, the login log and IP information of the user login account are analyzed to obtain the security anomaly coefficient of the account's current login. ; S42, will Verify the preset account threshold Make a comparison; like , then the user is allowed to modify the electronic file; like , then perform secondary verification and execute step S43; like , then the user is denied the right to modify the electronic file; S43, analyzing the operation log after the user logs into the account, and obtaining the authority coefficient of the account for this login ,Will The authority coefficient required for this account to apply to modify the corresponding project data in the electronic file For comparison, if , then the user is allowed to modify the electronic file this time. , then the user's modification of the electronic file will be rejected.

4. The tamper-proof encryption method for archive management according to claim 3, characterized in that: In step S41, the process of obtaining the security anomaly coefficient of the current login of the account includes: The security anomaly coefficient of the current login of this account is obtained through analysis of formulas (1)-(3) ; in, The abnormal operation parameters of this account login. is the IP address change risk factor, The time it takes to enter the account password during this login process. It is the average time taken to enter the account password during the historical login process of this account. Enter the default account password standard deviation time, The cumulative number of incorrect password inputs before the current successful login of this account. The geographical distance between the IP address of the current login of this account and the IP address of the last login. The time interval between the current login and the last login of this account.

5. The tamper-proof encryption method for archive management according to claim 4, characterized in that: In step S43, the process of obtaining the authority coefficient of the account for this login includes: The authority coefficient of the account for this login is obtained by analyzing and calculating through formula (4) ; Where N is the number of operation records that deviate from the historical operations after the current login of the account. , is the deviation coefficient of the i-th operation record in the electronic archive after the account logs in this time, is the preset standard deviation coefficient, This is the standard permission for this account.

6. The tamper-proof encryption method for archive management according to claim 1, characterized in that: The method further comprises: S5. The archive management center collects statistics on the user access logs of the electronic archives to obtain the daily visits to the electronic archives of each category in the electronic archives. The cumulative update reference characteristic value of the electronic archives of the corresponding category is obtained based on the daily visits and the importance of the archive data of each category. When the cumulative update reference characteristic value of the electronic archives of any category is greater than or equal to the preset standard cumulative update reference characteristic value, the electronic archives of the category and the log records of modifying the electronic archives are encrypted and sent to the paper archives; S6. Compare the received electronic archive of the category with the backup electronic archive retained in the paper archive library, analyze and obtain the modified electronic archive, convert the modified electronic archive and the log record of modifying the electronic archive into paper archives through the archive conversion module, and store them in the paper archive library.

7. The tamper-proof encryption method for archive management according to claim 6, characterized in that: In step S5, the process of obtaining the cumulative updated reference feature value of the corresponding category file includes: The cumulative updated reference characteristic value of the corresponding category archive is obtained by analyzing formula (5) ; Among them, M is the number of days between the last update date of the paper archive of this category and the latest date. , is the number of views of the electronic archives of this category on the jth day, is the importance coefficient of the archive data of this category.

8. A tamper-proof encryption system for archive management, characterized in that: The tamper-proof encryption method for archive management according to any one of claims 1 to 7, the system comprising: Paper archives, used to store paper archives to prevent tampering; The file conversion module is used to convert paper files into electronic files, and to convert the modified electronic files into paper files; Electronic archives, used to store converted electronic archives and facilitate daily retrieval, review and modification; A collection module is used to collect information about users who access the electronic archives; The archive management center is used to analyze the collected user information and determine whether the user is allowed to modify the electronic archive; analyze the user access logs of the electronic archive library and the importance of archive data in each category, and promptly convert the modified electronic archives into paper archives for preservation.

Images