Electronic archive system with secret key identification assembly

Abstract

The invention discloses an electronic archive system with a secret key identification assembly. The electronic archive system comprises the secret key identification assembly, a control unit, a data storage unit and a user interface unit, the secret key identification assembly comprises a biological identification module, a password input module and a secret key management module, the biological identification module comprises a fingerprint identifier and an iris scanner and is used for collecting biological characteristic information of a user, and the password input module comprises a numeric keyboard and a touch screen keyboard and is used for receiving and verifying password information input by the user; the electronic archive system is combined with a multi-factor authentication mode of biological recognition and password input, the security of the system is effectively enhanced, meanwhile, the user experience is improved, the design of the system supports cloud service and distributed data storage, the flexibility of the system and the reliability of data are ensured, and in addition, the system is convenient to use. The electronic archive system is easy to maintain and upgrade, and has good expansibility and adaptability.

Description

Technical Field

[0001] The present invention relates to the technical field of information security, and in particular to an electronic archive system with a key identification component. Background Art

[0002] With the rapid development of information technology, electronic archive systems are being used more and more widely in governments, enterprises and individuals. In order to protect the security of electronic archives and prevent unauthorized access, key identification technology has become the key to ensuring information security.

[0003] Traditional key identification methods mainly include passwords, smart cards, tokens, etc. The electronic archive system mainly relies on password input for identity authentication. However, a single password verification method poses security risks and is easily cracked or stolen. At the same time, users need to remember different passwords between multiple systems, which reduces ease of use. Summary of the invention

[0004] The object of the present invention is to provide an electronic archive system with a key identification component to solve the problems raised in the above background technology.

[0005] To achieve the above-mentioned object, the present invention provides the following technical solutions: an electronic archive system with a key identification component, the electronic archive system comprising a key identification component, a control unit, a data storage unit, and a user interface unit; The key identification component includes a biometric identification module, a password input module and a key management module. The biometric identification module includes a fingerprint identifier and an iris scanner for collecting the user's biometric information. The password input module includes a numeric keyboard and a touch screen keyboard for receiving and verifying the password information input by the user. The key management module is used to manage and update the key identification algorithm and data. The control unit includes a component management module, a communication interface module, a security module, and a scheduling module; the component management module is used to manage the loading, unloading, and updating of components; the communication interface module is used to realize data transmission between components and cloud services; the scheduling module is used to dynamically allocate cloud resources according to system requirements and resource conditions; the security module is used to encrypt data communicated with the cloud to ensure system security; The data storage unit is used to store and manage electronic file data; The user interface unit is used for interacting with the user, including receiving a login request from the user.

[0006] Preferably, the control unit also includes an authentication algorithm library and a decision module, the authentication algorithm library stores algorithms for verifying biometric information and password information; the decision module verifies the collected biometric information and password information according to the algorithms in the authentication algorithm library, and decides whether to authorize the user to access the electronic file.

[0007] Preferably, the specific method for constructing the biometric authentication algorithm in the authentication algorithm library comprises the following steps: S11: Collecting biometric information data of the user through a fingerprint scanner or a camera; S12: preprocessing the biometric information data, and extracting highly distinguishing features from the processed data; S13: Compare the extracted features with the templates stored in the database, calculate the score or distance using point-to-point matching, and verify according to a preset threshold.

[0008] Preferably, the specific method for constructing the password authentication algorithm in the authentication algorithm library comprises the following steps: S21: The password entered by the user is encrypted to ensure secure transmission; S22: The encrypted password is compared with the password hash value stored in the database.

[0009] Preferably, the method for upgrading the electronic archive system comprises the following steps: S31: The control unit receives the upgrade instruction and determines the components that need to be upgraded; S32: If the key identification component needs to be upgraded, the new component version is downloaded and verified by the security module; S33: The component management module uninstalls the old version of the key identification component; S34: installing a new version of the key identification component and synchronizing it with other components through the communication interface module; S35: Test the new version of the key identification component to ensure the overall stability of the system; S36: After the upgrade is completed, the system configuration is saved and the upgrade log is recorded.

[0010] Preferably, the cloud services in the electronic archive system include cloud key identification services, cloud data processing services and cloud database services. The cloud key identification service receives biometric information and password information from the control unit and returns an authentication result; the cloud data processing service receives data operation requests from the control unit and returns a processing result; the cloud database service stores electronic archive data and synchronizes with local data storage components.

[0011] Preferably, the specific method of using the key identification component includes the following steps: S41: The user initiates an access request through the user interface unit; S42: The key identification component prompts the user to input biometric information or password information; S43: The control unit sends the collected information to the cloud key identification service for verification; S44: If the verification is successful, the control unit performs data operations through the cloud data processing service; S45: If the verification fails, deny the user access and record the failed attempt.

[0012] Preferably, the scheduling module includes a monitoring unit, an analysis unit, a decision unit, and an execution unit: the monitoring unit is responsible for collecting status information of the system and cloud resources; the analysis unit processes monitoring data, performs demand forecasting and resource usage analysis; the decision unit makes resource allocation decisions based on the analysis results; and the execution unit implements the decisions, configures and adjusts cloud resources.

[0013] Preferably, the specific working method of the scheduling module includes the following steps: S51: The monitoring unit periodically obtains indicators of CPU usage, memory usage, storage usage, and network bandwidth consumption from the cloud service, sends the collected data to the analysis unit, and updates the resource status record; S52: The decision-making unit formulates a resource allocation plan based on resource monitoring data and demand forecasts, with reference to cost-first and performance-first strategies, and sorts each task and request according to priority to ensure that key tasks obtain the necessary resources; S53: the execution unit adjusts the cloud resource configuration according to the resource allocation plan of the decision unit, such as increasing or decreasing virtual machine instances and adjusting storage capacity; S54: The monitoring unit continuously checks for possible performance degradation or failure signs. Once a failure is found, the decision unit and the execution unit are immediately notified to reallocate resources.

[0014] Preferably, the scheduling module also includes a load balancing unit for dynamically adjusting the configuration of cloud resources according to system load conditions.

[0015] Compared with the prior art, the present invention has the following beneficial effects: 1. The electronic archive system of the present invention combines biometrics with multi-factor authentication methods such as password input, effectively enhancing the security of the system while improving the user experience. The system design supports cloud services and distributed data storage to ensure the flexibility of the system and the reliability of data. In addition, the electronic archive system of the present invention is easy to maintain and upgrade, and has good scalability and adaptability.

[0016] 2. The present invention provides a multimodal key identification electronic archive system that combines biometrics and traditional password input, aiming to improve the security and usability of the electronic archive system; and by migrating the key identification and data processing processes to the cloud, it significantly reduces the occupancy of local hardware resources and improves the performance and scalability of the system.

[0017] 3. The electronic archive system of the present invention realizes independent upgrading and replacement of components through modular design, thereby improving the maintainability and scalability of the system. The independent upgrading capability of the key identification component enables the system to flexibly adapt to changing security requirements, while reducing maintenance costs and improving upgrading efficiency. BRIEF DESCRIPTION OF THE DRAWINGS

[0018] Figure 1 The system block diagram of the electronic archive system with a key identification component of the present invention.

[0019] Figure 2 The figure is a workflow diagram of the electronic archive system with a key identification component of the present invention.

[0020] Figure 3 A flowchart for constructing a biometric authentication algorithm in the authentication algorithm library of the present invention.

[0021] Figure 4 The figure is a workflow diagram of the electronic archive system upgrading method of the present invention.

[0022] Figure 5 The present invention is a flowchart of a method for using the key identification component. DETAILED DESCRIPTION

[0023] The following will be combined with the drawings in the embodiments of the present invention to clearly and completely describe the technical solutions in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0024] See also Figures 1 to 5 ,The present invention provides a technical solution: an electronic archive system with a key identification component, the electronic archive system includes a key identification component, a control unit, a data storage unit, and a user interface unit; The key identification component includes a biometric identification module, a password input module and a key management module. The biometric identification module includes a fingerprint identifier and an iris scanner for collecting the user's biometric information. The password input module includes a numeric keyboard and a touch screen keyboard for receiving and verifying the password information input by the user. The key management module is used to manage and update the key identification algorithm and data. The specific method for constructing the biometric authentication algorithm in the authentication algorithm library includes the following steps: S11: Collecting biometric information data of the user through a fingerprint scanner or a camera; S12: preprocessing the biometric information data, and extracting highly distinguishing features from the processed data; S13: Compare the extracted features with the templates stored in the database, calculate the score or distance using point-to-point matching, and verify according to a preset threshold.

[0025] The specific method for constructing the password authentication algorithm in the authentication algorithm library includes the following steps: S21: The password entered by the user is encrypted to ensure secure transmission; S22: The encrypted password is compared with the password hash value stored in the database.

[0026] In this embodiment, the implementation of the fingerprint recognition algorithm is as follows: Gabor filter is used for image enhancement, feature extraction is performed by analyzing the overall features of the fingerprint image, such as ridge structure and ridge density, and the detail points of the intersections, bifurcation points, and endpoints of the ridges and valleys in the fingerprint image are detected to extract various feature information of the fingerprint.

[0027] The fingerprint is initially matched using the invariance of the local neighborhood structure of the detail points, such as using the k-nearest neighbor method to match the local detail features once, and further matching the fingerprint according to the global structure of the detail points, calculating the matching vector, and using the matching vector to perform rotation correction on the fingerprint image. The relative distance between the detail points is first normalized, and then a comprehensive match is performed based on the local structure and the global structure to reduce the false recognition rate and rejection rate. The traditional fingerprint image processing method is converted into a convolution method and integrated into a unified planar network for detail point extraction and matching. The implementation of the iris recognition algorithm is similar to that of the fingerprint recognition algorithm.

[0028] Password information algorithm implementation: When a user registers an account on a website or application, the system will ask the user to set a password. After the user submits the password, the system will immediately use the SHA-256 algorithm to process the password and generate a hash value of a fixed length. This value will replace the user's plain text password and be stored in the database. When the user logs in again, the system will ask the user to enter the password and use the SHA-256 algorithm to hash the input password again. Then, the system will compare the obtained hash value with the hash value stored in the database. If the two hash values ​​match, it means that the user has entered the correct password; if they do not match, the password is incorrect.

[0029] This embodiment provides a multi-modal key identification electronic archive system that combines biometrics and traditional password input, aiming to improve the security and usability of the electronic archive system and reduce the risk of unauthorized access.

[0030] The key management module includes algorithm library, data storage, update interface, configuration management, and logging; the algorithm library stores the current key identification algorithm, the data storage stores key data and related parameters, the update interface is used to receive algorithm and data updates from external sources, the configuration management manages the configuration files of the algorithm and data, and the logging records all operations, including algorithm updates and data changes.

[0031] First, conduct rigorous testing on the new algorithm to verify its security and performance, assign version numbers to the new algorithm and data, and keep records; use SSL / TLS encrypted transmission to receive updates from trusted sources, check the hash values ​​or digital signatures of the algorithm and data to confirm that they have not been tampered with, run the old and new algorithms in parallel for a period of time, and compare the results; update the configuration information of the algorithm and data in the system, dynamically reload the new algorithm library and data into memory, and if the update affects users, notify them in advance and guide them to complete the necessary steps; record the key steps and possible errors in the update process, monitor the system's performance indicators, ensure that the new algorithm runs normally, and be prepared to roll back to the old version when any problems are found.

[0032] The key management module improves the security, data integrity and operational transparency of the electronic archive system through multiple sub-modules, enhances the stability and reliability of the system, and also improves the system's flexibility and user experience.

[0033] The control unit includes a component management module, a communication interface module, a security module, and a scheduling module; the component management module is used to manage the loading, unloading, and updating of components; the communication interface module is used to realize data transmission between components and cloud services; the scheduling module is used to dynamically allocate cloud resources according to system requirements and resource conditions; the security module is used to encrypt data communicated with the cloud to ensure system security; The component management module is based on the microservice architecture. Each service or function is encapsulated as an independent microservice unit. The system functions can be quickly expanded and modified through dynamic loading and unloading. When the system starts, the component management module dynamically loads the required modules according to the configuration file and registers them to the system through the plug-in architecture. When the module needs to be updated or replaced, the component management module is responsible for unloading the old module and loading the new module version to ensure a smooth transition of the system.

[0034] The communication interface module provides a unified interface for communication between various components in the system and between the system and external cloud services. It supports multiple communication protocols, such as HTTP / HTTPS, WebSocket, and can handle data exchange in different formats, such as JSON and XML. The communication interface module establishes and manages sessions, uses session identifiers to track connection status, and realizes reliable transmission of information. When sending data, the communication interface module encapsulates the request data into a specific JSON format. When receiving data, the communication interface module parses the response message and converts the data into a format that can be recognized within the system. To simplify external access, the communication interface module provides an abstract API, so that external services can call system functions without worrying about internal implementation details, thereby ensuring the platform flexibility of the system.

[0035] The security module uses multi-layer encryption, including secure socket layer encryption at the transport layer and advanced encryption standard encryption at the authentication layer. All outgoing data is encrypted through the SSL / TLS protocol to ensure the confidentiality and integrity of the data during transmission. The AES algorithm is used to encrypt stored sensitive data to prevent the data from being stolen when idle. The security module is responsible for processing authentication requests from the key identification component, checking user credentials, and authorizing access to corresponding resources based on user permissions. The security module also integrates an intrusion detection system and a firewall. The integrated intrusion detection system can monitor abnormal behavior in real time and automatically take measures to block attacks. The firewall is responsible for formulating security rules, controlling the traffic in and out of the network, and providing another layer of security protection.

[0036] The design of these three modules jointly improves the flexibility, communication efficiency and security of the electronic archive system. The component management module realizes the rapid expansion and modification of system functions through the microservice architecture; the communication interface module realizes efficient and reliable data transmission through unified interface and protocol support; the security module ensures the data transmission and storage security of the system through multi-layer encryption and security measures. These designs not only improve the overall performance of the system, but also provide users with a more secure and stable service environment.

[0037] The scheduling module includes a monitoring unit, an analysis unit, a decision unit, and an execution unit: the monitoring unit is responsible for collecting status information of the system and cloud resources; the analysis unit processes monitoring data, performs demand forecasting and resource usage analysis; the decision unit makes resource allocation decisions based on the analysis results; and the execution unit implements decisions, configures, and adjusts cloud resources.

[0038] The specific working method of the scheduling module includes the following steps: S51: The monitoring unit periodically obtains indicators of CPU usage, memory usage, storage usage, and network bandwidth consumption from the cloud service, sends the collected data to the analysis unit, and updates the resource status record; S52: The decision-making unit formulates a resource allocation plan based on resource monitoring data and demand forecasts, with reference to cost-first and performance-first strategies, and sorts each task and request according to priority to ensure that key tasks obtain the necessary resources; S53: the execution unit adjusts the cloud resource configuration according to the resource allocation plan of the decision unit, such as increasing or decreasing virtual machine instances and adjusting storage capacity; S54: The monitoring unit continuously checks for possible performance degradation or failure signs. Once a failure is found, the decision unit and the execution unit are immediately notified to reallocate resources.

[0039] The scheduling module also includes a load balancing unit, which is used to dynamically adjust the configuration of cloud resources according to the system load.

[0040] When the system load exceeds the preset threshold, the load balancing unit will trigger the resource expansion process to allocate additional computing or storage resources from the cloud resource pool; conversely, when the load is below the threshold, the load balancing unit will execute the resource contraction process to release unnecessary resources to optimize costs. This method can ensure that the system can still maintain stable operation under high load conditions and improve overall performance.

[0041] The monitoring unit regularly collects the usage of cloud resources, the analysis unit conducts demand forecasting and resource usage analysis, the decision-making unit formulates resource allocation plans based on the analysis results, and the execution unit is responsible for implementing these plans. This dynamic adjustment mechanism can ensure that cloud resources are fully utilized and avoid resource waste; the monitoring unit continuously checks for possible performance degradation or signs of failure. Once a failure is found, it immediately notifies the decision-making unit and the execution unit to reallocate resources. The real-time monitoring and rapid response mechanism can effectively prevent and handle potential system failures and enhance system reliability.

[0042] The control unit also includes an authentication algorithm library and a decision module. The authentication algorithm library stores algorithms for verifying biometric information and password information; the decision module verifies the collected biometric information and password information according to the algorithms in the authentication algorithm library, and decides whether to authorize the user to access the electronic file.

[0043] The cloud services in the electronic archive system include cloud key identification service, cloud data processing service and cloud database service. The cloud key identification service receives biometric information and password information from the control unit and returns the authentication result; the cloud data processing service receives data operation requests from the control unit and returns the processing result; the cloud database service stores the electronic archive data and synchronizes it with the local data storage component.

[0044] The user inputs biometric information and password information through the control unit, and the control unit sends this information to the cloud key identification service; after receiving the biometric information and password information, the cloud key identification service performs authentication processing, and if the authentication is successful, returns the authentication result to the control unit; based on the authentication result, if the authentication is successful, the control unit sends a data operation request to the cloud data processing service; after receiving the data operation request, the cloud data processing service processes it and returns the processing result to the control unit, and based on the processing result, if the electronic file data needs to be stored or updated, the control unit sends a data storage or update request to the cloud database service; after receiving the data storage or update request, the cloud database service performs corresponding operations and synchronizes with the local data storage component.

[0045] Access control to multiple systems is achieved through a unified key identification component, avoiding the problem of users having to remember different passwords and improving the system's usability; biometric information is used for authentication to improve system security; remote data processing and storage are achieved through cloud service modules to improve system flexibility and scalability.

[0046] The method for upgrading the electronic archive system includes the following steps: S31: The control unit receives the upgrade instruction and determines the components that need to be upgraded; S32: If the key identification component needs to be upgraded, the new component version is downloaded and verified by the security module; S33: The component management module uninstalls the old version of the key identification component; S34: installing a new version of the key identification component and synchronizing it with other components through the communication interface module; S35: Test the new version of the key identification component to ensure the overall stability of the system; S36: After the upgrade is completed, the system configuration is saved and the upgrade log is recorded.

[0047] The data storage unit is used to store and manage electronic file data; When electronic archive data enters the system, the data storage unit automatically divides the data into multiple fragments. Each fragment is encrypted and stored on different nodes. At the same time, the system creates redundant copies of each data fragment and stores them on other nodes to ensure that even if some nodes fail, the data is still fully available. The data storage unit uses a consistent hashing algorithm to distribute data fragments to each storage node. The consistent hashing algorithm can minimize the amount of data migration caused by node changes, thereby improving the stability and efficiency of the system.

[0048] The user interface unit is used for interacting with the user, including receiving a login request from the user.

[0049] The user enters the user name and password through the user interface unit, and the user interface unit sends the request to the server for identity authentication; the user interacts with the system through the display screen, input devices and operation buttons.

[0050] The specific method of using the key identification component includes the following steps: S41: The user initiates an access request through the user interface unit; S42: The key identification component prompts the user to input biometric information or password information; S43: The control unit sends the collected information to the cloud key identification service for verification; S44: If the verification is successful, the control unit performs data operations through the cloud data processing service; S45: If the verification fails, deny the user access and record the failed attempt.

[0051] The electronic archive system of the present invention combines biometrics with a multi-factor authentication method of password input, effectively enhancing the security of the system while improving the user experience. The system design supports cloud services and distributed data storage to ensure the flexibility of the system and the reliability of data. In addition, the electronic archive system of the present invention is easy to maintain and upgrade, and has good scalability and adaptability.

[0052] Although embodiments of the present invention have been shown and described, it will be appreciated by those skilled in the art that various changes, modifications, substitutions and variations may be made to the embodiments without departing from the principles and spirit of the present invention, and that the scope of the present invention is defined by the appended claims and their equivalents.

Claims

1. An electronic archive system with a key identification component, characterized in that: The electronic archive system includes a key identification component, a control unit, a data storage unit, and a user interface unit; The key identification component includes a biometric identification module, a password input module and a key management module. The biometric identification module includes a fingerprint identifier and an iris scanner for collecting the user's biometric information. The password input module includes a numeric keyboard and a touch screen keyboard for receiving and verifying the password information input by the user. The key management module is used to manage and update the key identification algorithm and data. The control unit includes a component management module, a communication interface module, a security module, and a scheduling module; The component management module is used to manage the loading, unloading and updating of components; the communication interface module is used to realize data transmission between components and cloud services; the scheduling module is used to dynamically allocate cloud resources according to system requirements and resource conditions; the security module is used to encrypt data communicated with the cloud to ensure system security; The data storage unit is used to store and manage electronic file data; The user interface unit is used for interacting with the user, including receiving a login request from the user.

2. The electronic archive system with a key identification component according to claim 1, characterized in that: The control unit also includes an authentication algorithm library and a decision module. The authentication algorithm library stores algorithms for verifying biometric information and password information; the decision module verifies the collected biometric information and password information according to the algorithms in the authentication algorithm library, and decides whether to authorize the user to access the electronic file.

3. The electronic archive system with a key identification component according to claim 2, characterized in that: The specific method for constructing the biometric authentication algorithm in the authentication algorithm library comprises the following steps: S11: Collecting biometric information data of the user through a fingerprint scanner or a camera; S12: preprocessing the biometric information data, and extracting highly distinguishing features from the processed data; S13: Compare the extracted features with the templates stored in the database, calculate the score or distance using point-to-point matching, and verify according to a preset threshold.

4. The electronic archive system with a key identification component according to claim 2, characterized in that: The specific method for constructing the password authentication algorithm in the authentication algorithm library comprises the following steps: S21: The password entered by the user is encrypted to ensure secure transmission; S22: The encrypted password is compared with the password hash value stored in the database.

5. The electronic archive system with a key identification component according to claim 1, characterized in that: The electronic archive system upgrade method comprises the following steps: S31: The control unit receives the upgrade instruction and determines the components that need to be upgraded; S32: If the key identification component needs to be upgraded, the new component version is downloaded and verified by the security module; S33: The component management module uninstalls the old version of the key identification component; S34: installing a new version of the key identification component and synchronizing it with other components through the communication interface module; S35: Test the new version of the key identification component to ensure the overall stability of the system; S36: After the upgrade is completed, the system configuration is saved and the upgrade log is recorded.

6. The electronic archive system with a key identification component according to claim 1, characterized in that: The cloud services in the electronic archive system include cloud key identification service, cloud data processing service and cloud database service. The cloud key identification service receives biometric information and password information from the control unit and returns the authentication result; the cloud data processing service receives data operation requests from the control unit and returns the processing result; The cloud database service stores electronic archive data and synchronizes it with the local data storage component.

7. The electronic archive system with a key identification component according to claim 6, characterized in that: The specific method of using the key identification component includes the following steps: S41: The user initiates an access request through the user interface unit; S42: The key identification component prompts the user to input biometric information or password information; S43: The control unit sends the collected information to the cloud key identification service for verification; S44: If the verification is successful, the control unit performs data operations through the cloud data processing service; S45: If the verification fails, deny the user access and record the failed attempt.

8. The electronic archive system with a key identification component according to claim 1, characterized in that: The scheduling module includes a monitoring unit, an analysis unit, a decision unit, and an execution unit: the monitoring unit is responsible for collecting status information of the system and cloud resources; the analysis unit processes monitoring data, performs demand forecasting and resource usage analysis; and the decision unit makes resource allocation decisions based on the analysis results; The execution unit implements decisions, configures and adjusts cloud resources.

9. The electronic archive system with a key identification component according to claim 8, characterized in that: The specific working method of the scheduling module includes the following steps: S51: The monitoring unit periodically obtains indicators of CPU usage, memory usage, storage usage, and network bandwidth consumption from the cloud service, sends the collected data to the analysis unit, and updates the resource status record; S52: The decision-making unit formulates a resource allocation plan based on resource monitoring data and demand forecasts, with reference to cost-first and performance-first strategies, and sorts each task and request according to priority to ensure that key tasks obtain the necessary resources; S53: the execution unit adjusts the cloud resource configuration according to the resource allocation plan of the decision unit, such as increasing or decreasing virtual machine instances and adjusting storage capacity; S54: The monitoring unit continuously checks for possible performance degradation or failure signs. Once a failure is found, the decision unit and the execution unit are immediately notified to reallocate resources.

10. The electronic archive system with a key identification component according to claim 1, characterized in that: The scheduling module also includes a load balancing unit for dynamically adjusting the configuration of cloud resources according to the system load conditions.

Images