Hard disk data security system based on double encryption

Abstract

The invention relates to the field of security, in particular to a hard disk data security system based on double encryption, which comprises an encryption range setting module for determining a first encryption range according to file access authority in hard disk data and determining an encryption mode based on file storage position in the first encryption range; the encryption mode adjusting module is used for screening the first encryption range, caching the screened data to determine a second encryption range and adjusting the encryption mode of the second encryption range according to the access frequency of the file in the second encryption range, and the adjusted encryption mode is a second encryption mode; the speed matching module is used for setting a preset speed based on the second encryption mode, and sending an early warning instruction when the actual encryption speed of encryption by adopting the second encryption mode exceeds the preset speed; and the early warning module gives an alarm based on the early warning instruction. And the stability of the system and the security of data are ensured.

Description

Technical Field

[0001] The present invention relates to the field of data security, and in particular to a hard disk data security system based on double encryption. Background Art

[0002] As cyber attacks become more frequent and sophisticated, the need for data protection among businesses and individuals continues to grow, and double encryption provides an additional layer of security.

[0003] The patent document with publication number CN111556003A discloses a dual network encryption system, which includes a sending end device, including a data source module and a file encryption module, the file encryption module obtains at least one data packet from the data source module, and sequentially converts the data packet into a first encryption sequence through a first data encryptor and into a second encryption sequence through a PN sequence encryptor before outputting it; and a receiving end device, including a data target module and a file decryption module, the receiving end device obtains at least one of the second encryption sequences from the sending end device, the file decryption module sequentially restores the second encryption sequence into the first encryption sequence through the PN sequence decryptor, and restores the first encryption sequence into the data packet through a first data decryptor before transmitting it to the data target module.

[0004] In the prior art, the encryption method and content are not set, resulting in insufficient stability and security of the data. Summary of the invention

[0005] To this end, the present invention provides a hard disk data security system based on double encryption, which can solve the technical loopholes of two different encryption logic deformations and eliminate incomplete technical problems.

[0006] To achieve the above object, the present invention provides a hard disk data security system based on double encryption, comprising: An encryption range setting module, which is used to determine a first encryption range according to the file access rights in the hard disk data, and to determine an encryption method based on the file storage location within the first encryption range; an encryption mode adjustment module, connected to the encryption range setting module, for screening the first encryption range, and caching the screened data to determine the second encryption range, the encryption mode adjustment module is further used to adjust the encryption mode of the second encryption range according to the access frequency of the files within the second encryption range, the adjusted encryption mode is the second encryption mode; a speed matching module connected to the encryption mode adjustment module, configured to set a preset speed based on the second encryption mode, and to send an early warning instruction when an actual encryption speed of encryption using the second encryption mode exceeds the preset speed; The early warning module is connected to the speed matching module and issues an alarm based on the early warning instruction.

[0007] Furthermore, the encryption range setting module includes: a first encryption range determination unit, configured to analyze the data stored in the hard disk and determine the files with access permissions according to the analysis result; An encryption setting unit is connected to the first encryption range determination unit, and is used to centrally place the files in a set area in the hard disk and set a key encryption for the set area.

[0008] Furthermore, the encryption mode adjustment module includes: A screening unit, which is used to analyze the file, screen the high-frequency access data and key data according to the analysis result, and generate a data string based on the screened data and store and process the data string, wherein the key data includes: name, address and number; A monitoring unit connected to the screening unit for monitoring the access frequency of the file data in the set area in real time; An adjusting unit is connected to the monitoring unit and is used to adjust the stored data based on the result of the access frequency to determine a second encryption range.

[0009] Furthermore, the adjustment unit includes: adding subunits and removing subunits, An adding subunit, configured to add the data to the storage data when the access frequency of the file data in the set area reaches a preset access frequency; The removing subunit is connected to the adding subunit and is used to remove the data string from the stored data when the screened data string does not reach a preset access frequency, so as to determine a second encryption range.

[0010] Furthermore, the encryption mode adjustment module also includes: a data analysis unit, configured to analyze the storage capacity of the data string in the second encryption range, and to divide the data string into a plurality of continuous sub-data strings according to the analysis result; A data compression unit connected to the data analysis unit, for compressing the continuous sub-data string to reduce storage space; The block encryption unit is connected to the data compression unit and is used to perform block encryption on the compressed sub-data string to implement a second encryption method.

[0011] Furthermore, the data analysis unit comprises: A data preprocessing subunit, preprocessing the data string within the second encryption range; The segmentation execution subunit is connected to the data preprocessing subunit to analyze the size of the preprocessed data string and the hard disk storage space, and to determine the segmentation point and segmentation size according to the analysis result to form a plurality of continuous sub-data strings.

[0012] Furthermore, the block encryption unit includes: An encrypted data block subunit, used to encrypt the sub-data string using an encryption algorithm and a key to form an encrypted block; The management encryption block subunit is connected to the encryption data block subunit and is used to organize the encrypted data blocks in a specific order to facilitate subsequent decryption and data recovery.

[0013] Furthermore, the speed matching module includes: A speed setting unit, used for analyzing the speed of encryption performed by the encryption algorithm in sub-data strings of different lengths, and determining a preset speed according to the analysis result; A speed acquisition unit, connected to the speed setting unit, for acquiring in real time the speed at which the sub-data string completes encryption during the encryption process; A speed evaluation unit is connected to the speed acquisition unit and is used to evaluate the encryption speed and determine whether it exceeds the preset speed according to the evaluation result. If it exceeds the preset speed, an early warning instruction is sent.

[0014] Furthermore, the speed setting unit comprises: A data analysis subunit, which analyzes the average speed of encryption of sub-data strings of different lengths and collects encryption history data; A speed preset subunit is connected to the data analysis subunit and is used to set a preset speed based on the key indicators and historical data.

[0015] Furthermore, the early warning module includes: A receiving unit, used for receiving the warning instruction; The early warning unit is connected to the receiving unit and is used to notify the user of encryption anomalies via email based on the early warning instruction.

[0016] Compared with the prior art, the beneficial effect of the present invention is that, by analyzing the hard disk data, the files and areas that need to be encrypted can be accurately determined, thereby avoiding the encryption of unnecessary data, improving encryption efficiency, and saving system resources. By screening and caching the data within the first encryption range, the encryption method can be adjusted more flexibly to adapt to different data security requirements, improving the flexibility and applicability of the system, screening the first encryption range, caching the screened data to determine the second encryption range, adjusting the encryption method for the second encryption range, and the adjusted encryption method is the second encryption method, reducing unnecessary encryption operations and saving computing resources and storage space. A preset speed is set based on the second encryption method, and when the encryption speed exceeds the preset speed, an early warning instruction is sent, and an alarm is issued based on the early warning instruction to ensure the stability of the system and the security of the data.

[0017] In particular, by identifying files with access permissions, centrally storing and encrypting these files, the encryption scope is refined, further enhancing data security while facilitating management and maintenance.

[0018] In particular, by screening high-frequency access data and key data and monitoring data access frequency in real time, the encryption scope can be dynamically adjusted to ensure that important data receives a higher level of protection while optimizing the use of storage and encryption resources.

[0019] In particular, by dynamically adding or removing data strings according to the data access frequency, it is possible to ensure that the encryption range always matches the data access pattern, further improving data security and encryption efficiency.

[0020] In particular, by analyzing, compressing and encrypting data strings in blocks, it is possible to reduce storage space usage, increase encryption speed, and enhance data's ability to resist attacks.

[0021] In particular, by segmenting the data, the impact of a single data string being damaged on the overall data is reduced, and the segmented data strings can be accessed faster and are more efficient in network transmission.

[0022] In particular, by encrypting each data block and managing the encrypted blocks, the randomness and unpredictability of the encryption process can be ensured, while facilitating subsequent decryption and data recovery, thereby improving the reliability and ease of use of the system.

[0023] In particular, by testing and analyzing the execution speed of the encryption algorithm, collecting encryption speed data in real time and evaluating it, it is possible to more accurately determine whether the encryption speed is abnormal, and send early warning instructions in a timely manner, thereby effectively preventing potential security risks.

[0024] In particular, by analyzing encryption speed data, calculating key indicators and setting warning thresholds, it is possible to more accurately determine whether the encryption speed exceeds the preset speed and generate warning instructions in a timely manner, thereby improving the system's warning accuracy and response speed.

[0025] In particular, by setting a preset speed and monitoring the encryption speed in real time, abnormal encryption speed situations can be discovered and handled in a timely manner, ensuring system stability and data security. BRIEF DESCRIPTION OF THE DRAWINGS

[0026] Figure 1 A schematic diagram of the structure of a hard disk data security system based on double encryption provided by an embodiment of the present invention; Figure 2 A schematic diagram of the structure of an encryption range setting module of a hard disk data security system based on double encryption provided by an embodiment of the present invention; Figure 3 A schematic diagram of the structure of an encryption mode adjustment module of a hard disk data security system based on double encryption provided by an embodiment of the present invention; Figure 4 A schematic diagram of the structure of an encryption mode adjustment module of a hard disk data security system based on double encryption provided by an embodiment of the present invention; Figure 5 A schematic structural diagram of a speed matching module of a hard disk data security system based on double encryption provided by an embodiment of the present invention; Figure 6 A schematic structural diagram of an early warning module of a hard disk data security system based on double encryption provided by an embodiment of the present invention. DETAILED DESCRIPTION

[0027] In order to make the objects and advantages of the present invention more clearly understood, the present invention is further described below in conjunction with embodiments; it should be understood that the specific embodiments described herein are only used to explain the present invention and are not used to limit the present invention.

[0028] The preferred embodiments of the present invention are described below with reference to the accompanying drawings. It should be understood by those skilled in the art that these embodiments are only used to explain the technical principles of the present invention and are not intended to limit the protection scope of the present invention.

[0029] It should be noted that, in the description of the present invention, terms such as "up", "down", "left", "right", "inside" and "outside" indicating directions or positional relationships are based on the directions or positional relationships shown in the drawings. This is merely for the convenience of description and does not indicate or imply that the device or element must have a specific orientation, be constructed and operated in a specific orientation. Therefore, it should not be understood as a limitation on the present invention.

[0030] In addition, it should be noted that in the description of the present invention, unless otherwise clearly specified and limited, the terms "installed", "connected" and "connected" should be understood in a broad sense, for example, it can be a fixed connection, a detachable connection, or an integral connection; it can be a mechanical connection or an electrical connection; it can be a direct connection or an indirect connection through an intermediate medium, or it can be the internal communication of two components. For those skilled in the art, the specific meanings of the above terms in the present invention can be understood according to specific circumstances.

[0031] See also Figure 1 As shown, the present invention provides a hard disk data security system based on double encryption, comprising: An encryption range setting module 10, which is used to determine a first encryption range according to the file access rights in the hard disk data, and to determine an encryption method based on the file storage location within the first encryption range; an encryption mode adjustment module 20, which is connected to the encryption range setting module, and is used to screen the first encryption range, and cache the screened data to determine the second encryption range. The encryption mode adjustment module is also used to adjust the encryption mode of the second encryption range according to the access frequency of the files in the second encryption range, and the adjusted encryption mode is the second encryption mode; a speed matching module 30, which is connected to the encryption mode adjustment module, and is used to set a preset speed based on the second encryption mode, and to send an early warning instruction when the actual encryption speed of encryption using the second encryption mode exceeds the preset speed; The early warning module 40 is connected to the speed matching module and issues an alarm based on the early warning instruction.

[0032] Specifically, the data stored in the hard disk is analyzed, and the files with access rights are concentrated in a set area in the hard disk, the area being a first encryption range, and a key is set in the area for encryption, and the analysis is performed according to the first encryption range, and high-frequency access data and key data are screened according to the analysis result, and a data string is generated from the screened data for storage, and the access frequency of the file data in the first encryption range is monitored in real time, and the stored data is adjusted based on the result of the access frequency, and a data string is generated from the adjusted stored data for storage, so as to determine the second encryption range, and the storage capacity of the data string in the second encryption range is analyzed, and the data string is divided into a plurality of continuous sub-data strings, The continuous sub-data string is compressed, and the compressed sub-data string is encrypted in blocks to implement the second encryption method. A preset speed is set for the sub-data string. When the encryption speed of the sub-data string exceeds the preset speed, a warning instruction is sent, and an email is sent to notify the user.

[0033] Specifically, by analyzing the hard disk data, the files and areas that need to be encrypted can be accurately determined, thereby avoiding the encryption of unnecessary data, improving encryption efficiency, and saving system resources. By screening and caching the data within the first encryption range, the encryption method can be more flexibly adjusted to adapt to different data security requirements, thereby improving the flexibility and applicability of the system. The first encryption range is screened, and the screened data is cached to determine the second encryption range. The encryption method of the second encryption range is adjusted. The adjusted encryption method is the second encryption method, which reduces unnecessary encryption operations and saves computing resources and storage space. A preset speed is set based on the second encryption method. When the encryption speed exceeds the preset speed, an early warning instruction is sent, and an alarm is issued based on the early warning instruction to ensure the stability of the system and the security of the data.

[0034] See also Figure 2 As shown, the encryption range setting module 10 includes: A first encryption range determination unit 11 is used to analyze the data stored in the hard disk and determine the files with access rights according to the analysis result; The encryption setting unit 12 is connected to the first encryption range determination unit, and is used to place the files in a set area in the hard disk and set a key encryption for the set area.

[0035] Specifically, a key is set for the setting area, and encryption parameters such as key length and encryption mode are configured according to the encryption algorithm. The key is stored in a password manager or a key management service, and a backup of the key is made to prevent the loss of the key from causing inaccessibility to encrypted data.

[0036] Specifically, by identifying files with access permissions, centrally placing and encrypting these files, the encryption scope is refined, which further enhances data security and facilitates management and maintenance.

[0037] See also Figure 3 As shown, the encryption mode adjustment module 20 includes: A screening unit 21, which is used to analyze the file, screen the high-frequency access data and key data according to the analysis results, and generate a data string based on the screened data and store and process the data string, wherein the key data includes: names, addresses and numbers; A monitoring unit 22, connected to the screening unit, for real-time monitoring of the access frequency of the file data in the set area; The adjusting unit 23 is connected to the monitoring unit and is used to adjust the stored data based on the result of the access frequency to determine a second encryption range.

[0038] Specifically, by screening high-frequency access data and key data and monitoring data access frequency in real time, the encryption scope can be dynamically adjusted to ensure that important data receives a higher level of protection while optimizing the use of storage and encryption resources.

[0039] Specifically, the adjustment unit includes: adding subunits and removing subunits. An adding subunit, configured to add the data to the storage data when the access frequency of the file data in the set area reaches a preset access frequency; The removing subunit is connected to the adding subunit and is used to remove the data string from the stored data when the screened data string does not reach a preset access frequency, so as to determine a second encryption range.

[0040] Specifically, if the access frequency of the file data in the set area reaches 10 times or more, the data is added to the stored data, and if the access frequency of the filtered data string does not reach 3 times, the data string is removed from the stored data.

[0041] Specifically, dynamically adding or removing data strings according to data access frequency can ensure that the encryption range always matches the data access pattern, further improving data security and encryption efficiency.

[0042] See also Figure 4 As shown, the encryption mode adjustment module 20 also includes: A data analysis unit 24, configured to analyze the storage capacity of the data string in the second encryption range, and to divide the data string into a plurality of continuous sub-data strings according to the analysis result; A data compression unit 25, connected to the data analysis unit, for compressing the continuous sub-data string to reduce storage space; The block encryption unit 26 is connected to the data compression unit and is used to perform block encryption on the compressed sub-data string to implement a second encryption method.

[0043] Specifically, by analyzing, compressing and encrypting data strings in blocks, it is possible to reduce storage space usage, increase encryption speed, and enhance data's ability to resist attacks.

[0044] Specifically, the data analysis unit includes: A data preprocessing subunit, preprocessing the data string within the second encryption range; The segmentation execution subunit is connected to the data preprocessing subunit to analyze the size of the preprocessed data string and the hard disk storage space, and to determine the segmentation point and segmentation size according to the analysis result to form a plurality of continuous sub-data strings.

[0045] Specifically, the split point is used to split a specific position in a data string, and the split point is determined based on the logical structure of the data, such as splitting at the boundary of a data record, the end of a file, or a natural breakpoint of a data stream. The split size is the target size of each sub-data string determined based on the storage space limitation of the hard disk and the data access pattern.

[0046] Specifically, by segmenting the data, the impact of a single data string being damaged on the overall data is reduced, and the segmented data strings can be accessed faster and are more efficient in network transmission.

[0047] Specifically, the block encryption unit includes: An encrypted data block subunit, used to encrypt the sub-data string using an encryption algorithm and a key to form an encrypted block; The management encryption block subunit is connected to the encryption data block subunit and is used to organize the encrypted data blocks in a specific order to facilitate subsequent decryption and data recovery.

[0048] Specifically, by encrypting each data block and managing the encrypted blocks, the randomness and unpredictability of the encryption process can be ensured, while facilitating subsequent decryption and data recovery, thereby improving the reliability and ease of use of the system.

[0049] See also Figure 5 As shown, the speed matching module 30 includes: A speed setting unit 31 is used to analyze the speed of encryption performed by the encryption algorithm in sub-data strings of different lengths, and determine a preset speed according to the analysis result; A speed acquisition unit 32, which is connected to the speed setting unit and is used to acquire in real time the speed at which the sub-data string completes encryption during the encryption process; The speed evaluation unit 33 is connected to the speed acquisition unit and is used to evaluate the encryption speed and determine whether it exceeds the preset speed according to the evaluation result. If it exceeds the preset speed, an early warning instruction is sent.

[0050] Specifically, by testing and analyzing the execution speed of the encryption algorithm, collecting encryption speed data in real time and evaluating it, it is possible to more accurately determine whether the encryption speed is abnormal, and send early warning instructions in a timely manner, thereby effectively preventing potential security risks.

[0051] Specifically, the speed setting unit includes: A data analysis subunit, which analyzes the average speed of encryption of sub-data strings of different lengths and collects encryption history data; A speed preset subunit is connected to the data analysis subunit and is used to set a preset speed based on the key indicators and historical data.

[0052] Specifically, an encryption operation is performed on each sub-data string of different lengths and the start and end time of each encryption is recorded. The encryption operation is repeated multiple times, and the average value of all repeated tests for each sub-data string of different lengths is calculated. The average single encryption time of all sub-data strings of different lengths is summarized, and the overall average encryption time is calculated to analyze the average encryption speed of sub-data strings of different lengths.

[0053] Specifically, by analyzing encryption speed data, calculating key indicators and setting warning thresholds, it is possible to more accurately determine whether the encryption speed exceeds the preset speed and generate warning instructions in a timely manner, thereby improving the system's warning accuracy and response speed.

[0054] See also Figure 6 As shown, the early warning module 40 includes: A receiving unit 41, used for receiving the warning instruction; The early warning unit 42 is used to connect with the receiving unit and to notify the user of encryption anomaly via email based on the early warning instruction.

[0055] Specifically, by setting a preset speed and monitoring the encryption speed in real time, abnormal encryption speed situations can be discovered and handled in a timely manner, ensuring system stability and data security.

[0056] So far, the technical solutions of the present invention have been described in conjunction with the preferred embodiments shown in the accompanying drawings. However, it is easy for those skilled in the art to understand that the protection scope of the present invention is obviously not limited to these specific embodiments. Without departing from the principle of the present invention, those skilled in the art can make equivalent changes or substitutions to the relevant technical features, and the technical solutions after these changes or substitutions will fall within the protection scope of the present invention.

[0057] The above description is only a preferred embodiment of the present invention and is not intended to limit the present invention. For those skilled in the art, the present invention may have various modifications and variations. Any modification, equivalent replacement, improvement, etc. made within the spirit and principle of the present invention shall be included in the protection scope of the present invention.

Claims

1. A hard disk data security system based on double encryption, characterized in that: include: An encryption range setting module, which is used to determine a first encryption range according to the file access rights in the hard disk data, and to determine an encryption method based on the file storage location within the first encryption range; an encryption mode adjustment module, connected to the encryption range setting module, for screening the first encryption range, and caching the screened data to determine the second encryption range, the encryption mode adjustment module is further used to adjust the encryption mode of the second encryption range according to the access frequency of the files within the second encryption range, the adjusted encryption mode is the second encryption mode; a speed matching module connected to the encryption mode adjustment module, configured to set a preset speed based on the second encryption mode, and to send an early warning instruction when an actual encryption speed of encryption using the second encryption mode exceeds the preset speed; The early warning module is connected to the speed matching module and issues an alarm based on the early warning instruction.

2. The hard disk data security system based on double encryption according to claim 1, characterized in that: The encryption range setting module includes: a first encryption range determination unit, configured to analyze the data stored in the hard disk and determine the files with access permissions according to the analysis result; An encryption setting unit is connected to the first encryption range determination unit, and is used to centrally place the files in a set area in the hard disk and set a key encryption for the set area.

3. The hard disk data security system based on double encryption according to claim 2, characterized in that: The encryption mode adjustment module includes: A screening unit, which is used to analyze the file, screen the high-frequency access data and key data according to the analysis result, and generate a data string based on the screened data and store and process the data string, wherein the key data includes: name, address and number; A monitoring unit connected to the screening unit for monitoring the access frequency of the file data in the set area in real time; An adjusting unit is connected to the monitoring unit and is used to adjust the stored data based on the result of the access frequency to determine a second encryption range.

4. The hard disk data security system based on double encryption according to claim 3, characterized in that: The adjustment unit includes: adding subunits and removing subunits, An adding subunit, configured to add the data to the storage data when the access frequency of the file data in the set area reaches a preset access frequency; The removing subunit is connected to the adding subunit and is used to remove the data string from the stored data when the screened data string does not reach a preset access frequency, so as to determine a second encryption range.

5. The hard disk data security system based on double encryption according to claim 4, characterized in that: The encryption mode adjustment module also includes: a data analysis unit, configured to analyze the storage capacity of the data string in the second encryption range, and to divide the data string into a plurality of continuous sub-data strings according to the analysis result; A data compression unit connected to the data analysis unit, for compressing the continuous sub-data string to reduce storage space; The block encryption unit is connected to the data compression unit and is used to perform block encryption on the compressed sub-data string to implement a second encryption method.

6. The hard disk data security system based on double encryption according to claim 7, characterized in that: The data analysis unit comprises: A data preprocessing subunit, preprocessing the data string within the second encryption range; The segmentation execution subunit is connected to the data preprocessing subunit to analyze the size of the preprocessed data string and the hard disk storage space, and to determine the segmentation point and segmentation size according to the analysis result to form a plurality of continuous sub-data strings.

7. The hard disk data security system based on double encryption according to claim 6, characterized in that: The block cipher unit includes: An encrypted data block subunit, used to encrypt the sub-data string using an encryption algorithm and a key to form an encrypted block; The management encryption block subunit is connected to the encryption data block subunit and is used to organize the encrypted data blocks in a specific order to facilitate subsequent decryption and data recovery.

8. The hard disk data security system based on double encryption according to claim 7, characterized in that: The speed matching module comprises: A speed setting unit, used for analyzing the speed of encryption performed by the encryption algorithm in sub-data strings of different lengths, and determining a preset speed according to the analysis result; A speed acquisition unit, connected to the speed setting unit, for acquiring in real time the speed at which the sub-data string completes encryption during the encryption process; A speed evaluation unit is connected to the speed acquisition unit and is used to evaluate the encryption speed and determine whether it exceeds the preset speed according to the evaluation result. If it exceeds the preset speed, an early warning instruction is sent.

9. The hard disk data security system based on double encryption according to claim 8, characterized in that: The speed setting unit comprises: A data analysis subunit, which analyzes the average speed of encryption of sub-data strings of different lengths and collects encryption history data; A speed preset subunit is connected to the data analysis subunit and is used to set a preset speed based on the key indicators and historical data.

10. The hard disk data security system based on double encryption according to claim 9, characterized in that: The early warning module comprises: A receiving unit, used for receiving the warning instruction; The early warning unit is connected to the receiving unit and is used to notify the user of encryption anomalies via email based on the early warning instruction.

Images