Data security protection system and method based on Internet

Abstract

The invention discloses a data security protection system and method based on the Internet, and relates to the technical field of data security, and the method comprises the following steps: 1, after Internet data is generated, obtaining a key length value of the Internet data; 2, encrypting and storing Internet data according to the key length value; 3, after the encrypted interconnection data are stored, generating a security protection record of each encrypted interconnection data based on a fixed time frequency; and step 4, according to a comparison result of the interconnection security value of the security record and a threshold value thereof, determining whether to upgrade the key length of the encrypted interconnection data, the method of the invention can comprehensively analyze the Internet data from two dimensions of data type and affiliated user, and accurately set a reasonable encryption key length for the Internet data.

Description

Technical Field

[0001] The present invention relates to the field of data security technology, and more specifically, to an Internet-based data security protection system and method. Background Art

[0002] With the rapid development of Internet technology, data has become a core resource for business operations and personal life. However, the means of network attacks are becoming increasingly complex and diverse, such as hacker intrusion, virus transmission, data theft, etc., which poses a severe challenge to data security. Traditional data security protection systems use a unified encryption method for all data in the system, which cannot reasonably encrypt each data, and cannot determine whether the encryption strength of the encrypted data matches the access environment. Summary of the invention

[0003] In view of the deficiencies in the prior art, the purpose of the present invention is to provide an Internet-based data security protection system and method.

[0004] To achieve the above object, the present invention provides the following technical solutions:

[0005] Internet-based data security protection system, including security encryption storage module, security protection recording module, and security protection upgrade module;

[0006] The security encryption storage module: after generating Internet data, obtains the key length value of the Internet data, encrypts and stores the Internet data according to the key length value;

[0007] The security protection record module generates a security protection record for each encrypted interconnected data based on a fixed time frequency after the encrypted interconnected data is stored;

[0008] The security protection upgrade module determines whether to upgrade the key length of encrypted interconnected data based on the comparison result between the interconnected security value of the security protection record and its threshold.

[0009] Furthermore, the data type and user of the Internet data are obtained, the type secret value of the data type and the user secret value of the user are obtained, and then the key length value of the Internet data is obtained, the Internet data is encrypted according to the key length value, and encrypted Internet data is generated after encryption. The encrypted Internet data is numbered and transmitted to a storage medium.

[0010] Furthermore, the key length value of the Internet data is obtained by the following method: obtaining the key length value of the Internet data, specifically: using the formula Get the key length value of the Internet data, where r1 is the type secret value coefficient and r2 is the user secret value coefficient.

[0011] Furthermore, the type secret value of the data type is obtained in the following manner: obtain all interconnected security records of the system before the current time, obtain the data type of the interconnected security records, mark the interconnected security records of the same data type as the same type of security records, obtain the data number of the same type of interconnected security records, mark the same type of interconnected security records with the same data number as the same number of interconnected security records, obtain the total number of security consecutive times of the same number of interconnected security records, set the security consecutive limit number, when the total number of security consecutive times is greater than or equal to the security consecutive limit number, mark the data as security key data, when the total number of security consecutive times is less than the security consecutive limit number, mark the data as security general data, obtain the total number of security key data and the total number of security general data in the data type, calculate the ratio of the total number of security key data to the total number of security general data, and obtain the type secret value sk of the data type.

[0012] Furthermore, the total number of security continuations of the same number of interconnected security records is obtained in the following manner: all interconnected security records with the same number are sorted in the order of record generation time, the interconnected security values ​​of two adjacent interconnected security records with the same number after sorting are summed up to obtain the interconnected security continuity value, an interconnected security continuity threshold is set, when the interconnected security continuity value is greater than or equal to the interconnected security continuity threshold, the security continuation number is increased by one, when the interconnected security continuity value is less than the interconnected security continuity threshold, no processing is performed, the security continuation number is summed up to obtain the total number of security continuations.

[0013] Furthermore, the user secret value of the user is obtained by the following method: obtain all interconnected security records of the system before the current time, obtain the user ID to which the interconnected security record belongs, mark the interconnected security records of the same user ID as interconnected security records of the same household, obtain the interconnected security value of the interconnected security record of the same household and mark it as RGj, set the interconnected security coefficient SP, and use the formula The user secret value ym of the user is obtained, where j=1, 2, ..., J, and J is the total number of interconnected security records of the same household.

[0014] Furthermore, the interconnected security record includes data number, data type, user ID, interconnected security value, and record generation time.

[0015] Furthermore, the interconnection security value of the interconnection security record is obtained by the following method: obtain all successful access records and failed access records of the encrypted interconnection data in the current time frequency band, mark the total number of successful access records as TEP, mark the total number of failed access records as RYB, obtain the interconnection access index of the successful access record, sum and average the interconnection access indexes of all successful access records, obtain the interconnection access average index FG, sort all successful access records in the order of successful access time, calculate the difference between the interconnection access indexes of two adjacent successful access records after sorting and take the absolute value, obtain the successful access change value, set the successful access change threshold, when the successful access change value is greater than or equal to the successful access change threshold, increase the number of successful access changes by one, when the successful access change value is less than the successful access change threshold, do not process it, sum the number of successful access changes, obtain the total number of successful access changes ASK, and use the formula The interconnected security value DCS of the interconnected security record is obtained, where m1 is the total number coefficient of successful access records, m2 is the total number coefficient of successful access records, m3 is the interconnected access average index coefficient, and m4 is the total number of successful access changes coefficient.

[0016] Furthermore, the successful access record is obtained in the following manner: when the visitor completes the decryption and access of the encrypted Internet data, a successful access record is generated; the successful access record includes data type, access behavior data, Internet access index, access type, and successful access time;

[0017] The Internet access index of the successful access record is obtained by: obtaining access behavior data of the successful access record, inputting the access behavior data into an Internet access model, and outputting the Internet access index;

[0018] The failed access record is obtained in the following manner: when the visitor fails to complete the decryption of the encrypted Internet data, a failed access record is generated.

[0019] Furthermore, the Internet-based data security protection method includes the following steps:

[0020] Step 1: After generating Internet data, obtain the key length value of the Internet data;

[0021] Step 2: Encrypt and store Internet data according to the key length value;

[0022] Step 3: After the encrypted interconnected data is stored, a security protection record for each encrypted interconnected data is generated based on a fixed time frequency;

[0023] Step 4: Based on the comparison result between the interconnection security value of the security protection record and its threshold, determine whether to upgrade the key length for encrypting interconnection data.

[0024] Compared with the prior art, the present invention has the following beneficial effects:

[0025] 1. The method of the present invention can comprehensively analyze Internet data from two dimensions: data type and user, and accurately set a reasonable encryption key length for Internet data;

[0026] 2. Set up a security encryption storage module. On the basis of ensuring the security of Internet data, reasonably configure the system's encryption resources, set up a security protection recording module and a security protection upgrade module, which can regularly conduct comprehensive analysis of the successful access records and failed access records of encrypted Internet data, and can flexibly upgrade the key length of encrypted Internet data to ensure that encrypted Internet data can cope with different access environments. BRIEF DESCRIPTION OF THE DRAWINGS

[0027] Figure 1 It is a flowchart of a data security protection method based on the Internet;

[0028] Figure 2 This is a principle block diagram of the Internet-based data security protection system;

[0029] Figure 3 The flowchart is a flow chart of encrypting Internet data according to the key length value. DETAILED DESCRIPTION

[0030] Example 1

[0031] Reference Figure 1 , a data security protection method based on the Internet, comprising the following steps:

[0032] Step 1: After generating Internet data, obtain the key length value of the Internet data;

[0033] Step 2: Encrypt and store Internet data according to the key length value;

[0034] Step 3: After the encrypted interconnected data is stored, a security protection record for each encrypted interconnected data is generated based on a fixed time frequency;

[0035] Step 4: Based on the comparison result between the interconnection security value of the security protection record and its threshold, determine whether to upgrade the key length for encrypting interconnection data.

[0036] The method of the present invention can comprehensively analyze Internet data from two dimensions: data type and user, and accurately set a reasonable encryption key length for Internet data.

[0037] Example 2

[0038] Reference Figures 2 to 3 , an Internet-based data security protection system, including a security encryption storage module, a security protection recording module, and a security protection upgrade module.

[0039] Security encryption storage module: After generating Internet data, obtain the data type and user of the Internet data (users will generate corresponding Internet data during the use of the Internet. Internet data can be divided into different data types according to the source and purpose of the data, such as browsing type, social type, and search type), obtain the type secret value of the data type and the user secret value of the user, and then obtain the key length value of the Internet data, encrypt the Internet data according to the key length value, generate encrypted Internet data after encryption, number the encrypted Internet data, and transmit the encrypted Internet data to the storage medium.

[0040] Get the key length value of the Internet data, specifically: Use the formula The key length value of the Internet data is obtained, where r1 is the type secret value coefficient, r2 is the user secret value coefficient, the value of r1 is 0.85, and the value of r2 is 0.79.

[0041] The type secret value of the data type is obtained in the following manner: obtain all interconnected security records of the system before the current time, obtain the data type of the interconnected security records, mark the interconnected security records of the same data type as the same type of security records, obtain the data number of the same type of interconnected security records, mark the same type of interconnected security records with the same data number (the same data number means the same data) as the same number of interconnected security records, obtain the total number of security consecutive times of the same number of interconnected security records, set the security consecutive limit number (system threshold, which can be modified according to actual needs), when the total number of security consecutive times is greater than or equal to the security consecutive limit number, mark the data as security key data, when the total number of security consecutive times is less than the security consecutive limit number, mark the data as security general data, obtain the total number of security key data and the total number of security general data in the data type, calculate the ratio of the total number of security key data to the total number of security general data, and obtain the type secret value sk of the data type.

[0042] The total number of security consecutive times of the same number of interconnected security records is obtained in the following way: all the interconnected security records with the same number are sorted in the order of the record generation time, and the interconnected security values ​​of two adjacent interconnected security records with the same number after sorting are summed to obtain the interconnected security continuous value, and the interconnected security continuous threshold is set (the system threshold can be modified according to actual needs). When the interconnected security continuous value is greater than or equal to the interconnected security continuous threshold, the security continuous number is increased by one. When the interconnected security continuous value is less than the interconnected security continuous threshold, no processing is performed, and the security continuous number is summed to obtain the total number of security continuous times.

[0043] The user secret value of the user is obtained in the following way: obtain all interconnected security records of the system before the current time, obtain the user id to which the interconnected security record belongs, mark the interconnected security records of the same user id as interconnected security records of the same household, obtain the interconnected security value of the interconnected security record of the same household, and mark it as RGj, set the range of each interconnected security value RGj to correspond to an interconnected security coefficient SP, P = 1, 2, 3, ... P; S1 < S2 < S3 < ... < SP, set each interconnected security coefficient to correspond to a range of interconnected security values, including (0, RG1], (RG1, RG2], ..., (RGj-1, RGj], when RGj∈(0, RG1], the corresponding interconnected security coefficient is S1, and use the formula The user secret value ym of the user is obtained, where j=1, 2, ..., J, and J is the total number of interconnected security records of the same household.

[0044] Internet data is encrypted according to the key length value, specifically: the key length value of the Internet data is marked as ESk, the key length value ESk includes multiple non-overlapping ranges, and the range of each key length value ESk is set to correspond to a key length level. The range of the key length value ESk includes (0, ES1], (ES1, ES2], ..., (ESk-1, ESk], and the key length level includes key length level 1, key length level 2, ..., key length level k-1, key length level k. When ESk∈(0, ES1], the Internet data is encrypted according to key length level 1. The higher the key length level, the longer the key length. The key length corresponding to the key length level is illustrated below. The key length level 1 corresponds to a 128-bit key length, and the key length level 2 corresponds to a 192-bit key length.

[0045] By setting up a security encryption storage module, you can conduct a comprehensive analysis of Internet data from two dimensions: data type and user, accurately set a reasonable encryption key length for Internet data, and reasonably configure the system's encryption resources on the basis of ensuring the security of Internet data.

[0046] Security protection record module: After the encrypted interconnected data is stored, a security protection record for each encrypted interconnected data is generated based on a fixed time frequency (security protection records are automatically generated according to the system's pre-set, fixed time intervals). The interconnected security record includes the data number (each encrypted interconnected data corresponds to a unique data number), data type, user id, interconnected security value, and record generation time (the time when the interconnected security record was generated).

[0047] Security protection upgrade module: Set the interconnection security threshold (system threshold, which can be modified according to actual needs). When the interconnection security value is greater than or equal to the interconnection security threshold, the key length of the encrypted interconnection data will be upgraded (such as the original key length is 128 bits, it will be upgraded to 192 bits). When the interconnection security value is less than the interconnection security threshold, no processing will be performed.

[0048] The interconnection security value of the interconnection security record is obtained in the following way: obtain all successful access records and failed access records of the encrypted interconnection data in the current time frequency band (the time period between two time frequencies), mark the total number of successful access records as TEP, mark the total number of failed access records as RYB, obtain the interconnection access index of the successful access record, sum and average the interconnection access indexes of all successful access records, obtain the interconnection access average index FG, sort all successful access records in the order of successful access time, calculate the difference between the interconnection access indexes of two adjacent successful access records after sorting and take the absolute value, obtain the successful access change value, set the successful access change threshold (system threshold, which can be modified according to actual needs), when the successful access change value is greater than or equal to the successful access change threshold, increase the number of successful access changes by one, when the successful access change value is less than the successful access change threshold, do not process it, sum the number of successful access changes, obtain the total number of successful access changes ASK, and use the formula The interconnected security value DCS of the interconnected security record is obtained, where m1 is the total number coefficient of successful access records, m2 is the total number coefficient of successful access records, m3 is the interconnected access average index coefficient, and m4 is the total number of successful access changes coefficient. The value of m1 is 0.87, the value of m2 is 1.59, the value of m3 is 0.62, and the value of m4 is 0.81.

[0049] The successful access record is obtained in the following way: when the visitor (visitor to encrypted Internet data) completes the decryption and access of the encrypted Internet data, a successful access record is generated; the successful access record includes data type, access behavior data, Internet access index, access type, and successful access time (generation time).

[0050] The Internet access index of the successful access record is obtained in the following manner: the access behavior data of the successful access record (i.e., the behavior data generated during the visitor's access to the encrypted Internet data) is obtained, the access behavior data is input into the Internet access model, and the Internet access index is obtained as output.

[0051] The failed access record is obtained in the following manner: when the visitor fails to complete the decryption of the encrypted Internet data, a failed access record is generated.

[0052] The Internet access behavior model is obtained in the following way: obtaining multiple groups of access behavior data, extracting features from the access behavior data, obtaining multiple groups of access behavior feature data, constructing a neural network model, using the multiple groups of access behavior feature data as training data for the deep learning model, assigning an Internet access index to the training data, dividing the training data into a training set and a validation set in a ratio of 1:2, iteratively training the training set and the validation set, and obtaining the Internet access behavior model, wherein the value range of the Internet access index is (2 to 3), the closer the Internet access index is to 3, the more abnormal the access behavior is, and the closer the Internet access index is to 2, the more normal the access behavior is.

[0053] By setting up a security protection record module and a security protection upgrade module, it is possible to regularly conduct a comprehensive analysis of the successful access records and failed access records of encrypted interconnected data, and to flexibly upgrade the key length of encrypted interconnected data to ensure that encrypted interconnected data can cope with different access environments.

[0054] The above formulas are all dimensionless and numerical calculations. The formula is a formula for the most recent real situation obtained by collecting a large amount of data and performing software simulation. The preset parameters in the formula are set by technicians in this field according to actual conditions.

[0055] The above embodiments can be implemented in whole or in part by software, hardware, firmware or any other combination. When implemented by software, the above embodiments can be implemented in whole or in part in the form of a computer program product. The computer program product includes one or more computer instructions or computer programs. When the computer instructions or computer programs are loaded or executed on a computer, the process or function described in the embodiment of the present application is generated in whole or in part. The computer can be a general-purpose computer, a special-purpose computer, a computer network, or other programmable device. The computer instructions can be stored in a computer-readable storage medium, or transmitted from one computer-readable storage medium to another computer-readable storage medium. For example, the computer instructions can be transmitted from one website site, computer, server or data center to another website site, computer, server or data center by wired or wireless (e.g., infrared, wireless, microwave, etc.). The computer-readable storage medium can be any available medium that a computer can access or a data storage device such as a server or data center that contains one or more available media sets. The available medium can be a magnetic medium (e.g., a floppy disk, a hard disk, a tape), an optical medium (e.g., a DVD), or a semiconductor medium. The semiconductor medium can be a solid-state hard disk.

[0056] It should be understood that in the various embodiments of the present application, the size of the serial numbers of the above-mentioned processes does not mean the order of execution. The execution order of each process should be determined by its function and internal logic, and should not constitute any limitation on the implementation process of the embodiments of the present application.

[0057] Those of ordinary skill in the art will appreciate that the units and algorithm steps of each example described in conjunction with the embodiments disclosed herein can be implemented in electronic hardware, or a combination of computer software and electronic hardware. Whether these functions are performed in hardware or software depends on the specific application and design constraints of the technical solution. Professional and technical personnel can use different methods to implement the described functions for each specific application, but such implementation should not be considered to be beyond the scope of this application.

[0058] Those skilled in the art can clearly understand that, for the convenience and brevity of description, the specific working processes of the systems, devices and units described above can refer to the corresponding processes in the aforementioned method embodiments and will not be repeated here.

[0059] In the several embodiments provided in the present application, it should be understood that the disclosed systems, devices and methods can be implemented in other ways. For example, the device embodiments described above are only schematic. For example, the division of the units is only a logical function division. There may be other division methods in actual implementation, such as multiple units or components can be combined or integrated into another system, or some features can be ignored or not executed. Another point is that the mutual coupling or direct coupling or communication connection shown or discussed can be through some interfaces, indirect coupling or communication connection of devices or units, which can be electrical, mechanical or other forms.

[0060] If the functions are implemented in the form of software functional units and sold or used as independent products, they can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of the present application can be essentially or partly embodied in the form of a software product that contributes to the prior art. The computer software product is stored in a storage medium and includes several instructions for a computer device (which can be a personal computer, a server, or a network device, etc.) to perform all or part of the steps of the methods described in the various embodiments of the present application. The aforementioned storage media include: various media that can store program codes, such as USB flash drives, mobile hard disks, read-only memories (ROM), random access memories (RAM), magnetic disks or optical disks.

[0061] The above is only a specific implementation of the present application, but the protection scope of the present application is not limited thereto. Any person skilled in the art who is familiar with the present technical field can easily think of changes or substitutions within the technical scope disclosed in the present application, which should be included in the protection scope of the present application. Therefore, the protection scope of the present application should be based on the protection scope of the claims.

Claims

1. Internet-based data security protection system, characterized in that: Including security encryption storage module, security protection recording module, and security protection upgrade module; After generating the Internet data, the security encryption storage module obtains the key length value of the Internet data, and encrypts and stores the Internet data according to the key length value; The security protection record module generates a security protection record for each encrypted interconnected data based on a fixed time frequency after the encrypted interconnected data is stored; The security protection upgrade module is used to determine whether to upgrade the key length of encrypted interconnected data based on the comparison result of the interconnected security value of the security protection record and its threshold.

2. The Internet-based data security protection system according to claim 1, characterized in that: Obtain the data type and user of the Internet data, obtain the type secret value of the data type and the user secret value of the user, and then obtain the key length value of the Internet data, encrypt the Internet data according to the key length value, generate encrypted Internet data after encryption, number the encrypted Internet data, and transmit the encrypted Internet data to a storage medium.

3. The Internet-based data security protection system according to claim 2, characterized in that: The key length value of the Internet data is obtained by the following method: Get the key length value of the Internet data, specifically: Use the formula Get the key length value of the Internet data, where r1 is the type secret value coefficient and r2 is the user secret value coefficient.

4. The Internet-based data security protection system according to claim 2, characterized in that: The type secret value of the data type is obtained in the following manner: obtain all interconnected security records of the system before the current time, obtain the data type of the interconnected security records, mark the interconnected security records of the same data type as the same type of security records, obtain the data number of the same type of interconnected security records, mark the same type of interconnected security records with the same data number as the same number of interconnected security records, obtain the total number of security consecutive times of the same number of interconnected security records, set the security consecutive limit number, when the total number of security consecutive times is greater than or equal to the security consecutive limit number, mark the data as security key data, when the total number of security consecutive times is less than the security consecutive limit number, mark the data as security general data, obtain the total number of security key data and the total number of security general data in the data type, calculate the ratio of the total number of security key data to the total number of security general data, and obtain the type secret value sk of the data type.

5. The Internet-based data security protection system according to claim 4, characterized in that: The total number of security continuity times of the same number of interconnected security records is obtained in the following way: all the same number of interconnected security records are sorted in the order of record generation time, the interconnected security values ​​of two adjacent interconnected security records with the same number after sorting are summed up to obtain the interconnected security continuity value, and the interconnected security continuity threshold is set. When the interconnected security continuity value is greater than or equal to the interconnected security continuity threshold, the security continuity times are increased by one, and when the interconnected security continuity value is less than the interconnected security continuity threshold, no processing is performed, and the security continuity times are summed up to obtain the total number of security continuity times.

6. The Internet-based data security protection system according to claim 2, characterized in that: The user secret value of the user is obtained by the following method: obtain all interconnected security records of the system before the current time, obtain the user ID to which the interconnected security record belongs, mark the interconnected security records with the same user ID as interconnected security records of the same household, obtain the interconnected security value of the interconnected security records of the same household and mark it as RGj, set the interconnected security coefficient SP, and use the formula The user secret value ym of the user is obtained, where j=1, 2, ..., J, and J is the total number of interconnected security records of the same household.

7. The Internet-based data security protection system according to claim 1, characterized in that: The interconnected security record includes the data number, data type, user ID, interconnected security value, and record generation time.

8. The Internet-based data security protection system according to claim 1, characterized in that: The interconnection security value of the interconnection security record is obtained in the following way: obtain all successful access records and failed access records of the encrypted interconnection data in the current time frequency band, mark the total number of successful access records as TEP, mark the total number of failed access records as RYB, obtain the interconnection access index of the successful access record, sum and average the interconnection access indexes of all successful access records, obtain the interconnection access average index FG, sort all successful access records in the order of successful access time, calculate the difference between the interconnection access indexes of two adjacent successful access records after sorting and take the absolute value, obtain the successful access change value, set the successful access change threshold, when the successful access change value is greater than or equal to the successful access change threshold, increase the number of successful access changes by one, when the successful access change value is less than the successful access change threshold, do not process it, sum the number of successful access changes, obtain the total number of successful access changes ASK, and use the formula The interconnected security value DCS of the interconnected security record is obtained, where m1 is the total number coefficient of successful access records, m2 is the total number coefficient of successful access records, m3 is the interconnected access average index coefficient, and m4 is the total number of successful access changes coefficient.

9. The Internet-based data security protection system according to claim 8, characterized in that: The successful access record is obtained in the following way: when the visitor completes the decryption and access of the encrypted Internet data, a successful access record is generated; the successful access record includes data type, access behavior data, Internet access index, access type, and successful access time; The Internet access index of the successful access record is obtained by: obtaining access behavior data of the successful access record, inputting the access behavior data into an Internet access model, and outputting the Internet access index; The failed access record is obtained in the following manner: when the visitor fails to complete the decryption of the encrypted Internet data, a failed access record is generated.

10. The Internet-based data security protection method is applied to the Internet-based data security protection system according to claim 1, characterized in that: The steps include: Step 1: After generating Internet data, obtain the key length value of the Internet data; Step 2: Encrypt and store Internet data according to the key length value; Step 3: After the encrypted interconnected data is stored, a security protection record for each encrypted interconnected data is generated based on a fixed time frequency; Step 4: Based on the comparison result between the interconnection security value of the security protection record and its threshold, determine whether to upgrade the key length for encrypting interconnection data.

Images