Fuel data sharing system and method

Abstract

The invention provides a fuel data sharing system and method. Relates to the technical field of data sharing, and comprises the following steps: determining the data sensitivity of fuel data and implementing multi-level authority control by setting a user role and distributing corresponding fuel data access authority; performing data encryption processing and data desensitization processing on the fuel data; performing weighting processing on the data sensitivity of the fuel data in combination with user permission to determine a user data access sharing risk value, and when the user data access sharing risk value is not higher than a preset risk value of corresponding user data access sharing, matching a fuel data sharing mode according to a user role and performing fuel data sharing; monitoring and analyzing a user access behavior and a fuel data sharing behavior, carrying out real-time early warning, and executing a corresponding preset abnormal control strategy; and safe sharing of fuel data is effectively ensured.

Description

Technical Field

[0001] The present invention relates to the technical field of data sharing, and in particular to a fuel data sharing system and method. Background Art

[0002] For in-depth research in the fuel field, researchers can share their fuel analysis data results, so as to realize the sharing of analysis results in various processes in the fuel field, broaden and stimulate analysis directions and means, and thus realize the efficient circulation and integration of analysis results at various stages in the fuel field; however, in the process of fuel data sharing, fuel data involves different data permissions at various levels and there are problems of data leakage and data abuse in fuel data, and data sharing has security risks.

[0003] Therefore, the present invention provides a fuel data sharing system and method. Summary of the invention

[0004] The present invention provides a fuel data sharing system and method, which are used to determine the data sensitivity of fuel data and implement multi-level authority control by setting user roles and assigning corresponding fuel data access permissions; perform data encryption processing and data desensitization processing on the fuel data; perform weighted processing on the data sensitivity of the fuel data in combination with user permissions to determine the user data access sharing risk value, and when the user data access sharing risk value is not higher than the corresponding preset risk value of user data access sharing, match the fuel data sharing mode according to the user role and perform fuel data sharing; monitor and analyze user access behavior and fuel data sharing behavior to issue real-time warnings and execute corresponding preset abnormal control strategies; effectively ensure the safe sharing of fuel data.

[0005] The present invention provides a fuel data sharing system, comprising: The permission control module is used to set user roles and assign corresponding fuel data access permissions. At the same time, it determines the data sensitivity of fuel data and implements multi-level permission control; A data encryption module, used for performing data transmission encryption processing and data storage encryption processing on the fuel data, and performing data desensitization processing when the data sensitivity of the fuel data is not lower than a preset desensitization degree; A data sharing module, used to perform weighted processing on the data sensitivity of the fuel data in combination with the user authority to determine the user data access sharing risk value, and when the user data access sharing risk value is not higher than the preset risk value of the corresponding user data access sharing, match the fuel data sharing mode according to the user role and perform fuel data sharing; The monitoring and early warning module is used to monitor and analyze user access behavior and fuel data sharing behavior. When abnormal access and sharing behavior is detected, early warning data is generated for real-time warning and the corresponding preset abnormal control strategy is executed.

[0006] According to a fuel data sharing system provided by the present invention, the authority control module includes: The user role permission unit is used to set different user roles according to user responsibilities and user needs, and assign corresponding fuel data access permissions to each user role; When a user accesses fuel data, the user information is obtained to match the user role. If the match is successful, the corresponding fuel data access permission is enabled; Otherwise, the user is prompted to update the user information and re-match the user role; The fuel data permission unit is used to implement multi-level permission control on fuel data based on data sensitivity and permission management strategy; The authorization control unit is used to create an administrator account and assign the highest authority, allowing the administrator to regularly audit and update the access rights of other users and fuel data according to the authority management policy, and dynamically adjust the access rights of other users and fuel data according to the fuel data access requirements.

[0007] According to a fuel data sharing system provided by the present invention, a fuel data authority unit includes: A data sensitivity block, used to identify fuel data containing data sensitivity in the fuel data and mark it as sensitive fuel data; Identify the data type of sensitive fuel data and set the corresponding sensitivity level according to the data type; Determining the data sensitivity of the fuel data according to the sensitivity level and the data proportion of the corresponding sensitive fuel data in the fuel data; The permission management policy block is used to preset the access permission management policy and user permission management policy for fuel data with different data sensitivities; When it is detected that the fuel data that the user is allowed to access contains data that exceeds the sensitivity level of the data allowed to be accessed, corresponding data shielding processing is performed.

[0008] According to a fuel data sharing system provided by the present invention, a data encryption module includes: A data transmission encryption unit, used to connect the fuel data storage end with the user access end according to a preset data transmission protocol and perform an end-to-end encrypted connection; A data storage encryption unit, used to call an encryption algorithm of corresponding strength to perform data encryption processing according to the data sensitivity of the fuel data; A data desensitization processing unit, for obtaining data sensitivity of fuel data containing sensitive fuel data when shared access to sensitive fuel data is detected; When the data sensitivity of the fuel data is not lower than the preset desensitization level, the preset data desensitization strategy is called according to the data sensitivity and the user role, wherein the preset data desensitization strategy includes: data replacement desensitization strategy, data hash desensitization strategy and data differential privacy desensitization strategy.

[0009] According to a fuel data sharing system provided by the present invention, a data sharing module includes: The sensitive data association unit is used to pre-process the fuel data and remove invalid data; Extracting sensitive fuel data from the fuel data, determining the impact value of the sensitive fuel data on the fuel data according to the occurrence frequency and occurrence weight of the sensitive fuel data and combining the data sensitivity, and sorting the data in descending order; Select key sensitive data according to the sequence, obtain data association between the key sensitive data, and when the data association between the key sensitive data is not higher than the association threshold, establish an association relationship between the key sensitive data; Constructing a key sensitive data association structure according to the key sensitive data and the association relationship between the key sensitive data; A sensitive data processing unit, used for performing a primary encryption process on the key sensitive data according to the data encryption process; Perform secondary weighted processing on the key sensitive data according to user permissions; Determine a standard association structure of key sensitive data based on historical fuel data, and perform three structural processing on the key sensitive data association structure; A fuel data adaptive association unit, used for acquiring new sensitive data of the new fuel data when monitoring that a user accesses new fuel data, and adaptively associating the fuel data and the new fuel data in combination with the key sensitive data association structure completed by the three-step structural processing; A fuel data association complexity unit, used to determine the data association complexity of current fuel data based on a time period from data preprocessing of fuel data to completion of fuel data adaptive association, combined with an average fuel data association time period determined by historical fuel data; Access sharing risk unit, used to determine the user data access sharing risk value; ; Where F represents the user data access sharing risk value; x1 represents the number of accurately identified sensitive fuel data in the historical fuel data; x2 represents the number of unidentified sensitive fuel data in the historical fuel data; Indicates that when the i1th fuel data accessed by the user is the key sensitive data, the data sensitivity of the i1th fuel data is output , otherwise, output 0; represents the data association time period of the fuel data accessed by the j1-th user; represents an average fuel data associated time period determined by historical fuel data; represents the user authority level of the j1th user; n1 represents the number of key sensitive data in the fuel data; m1 represents the number of users accessing the fuel data; When the user data access sharing risk value is not higher than the preset risk value of the corresponding user accessing the shared data, matching the fuel data sharing mode according to the user role and performing fuel data sharing; Otherwise, the corresponding fuel data is marked as risky data and the corresponding user is marked as a risky user.

[0010] According to the present invention, a fuel data sharing system and a monitoring and early warning module are provided, comprising: A fuel data monitoring unit is used to monitor and analyze user access behaviors and fuel data sharing behaviors, and mark abnormal access and sharing behaviors when abnormal access and sharing behaviors are detected, wherein the abnormal access and sharing behaviors include: high-frequency access, high-frequency downloading, and over-authority access; The fuel data early warning unit is used to generate early warning data based on the abnormal mark and the risk mark to provide real-time early warning and execute corresponding preset abnormal control strategies.

[0011] A fuel data sharing system provided according to the present invention further includes: A data sharing mode module, used to match the fuel data sharing mode according to user needs and user roles, wherein the fuel data sharing modes include: full-staff sharing, logical sharing and web page sharing; A fuel data tag module, used to embed a fuel data tag into the shared fuel data; The access sharing time limit module is used to set a time window for sharing fuel data. When the user access time exceeds the time window, the user access is revoked.

[0012] The present invention provides a fuel data sharing method, comprising: Step 1: Set user roles and assign corresponding fuel data access permissions. At the same time, determine the data sensitivity of fuel data and implement multi-level permission control; Step 2: Perform data transmission encryption processing and data storage encryption processing on the fuel data, and when the data sensitivity of the fuel data is not lower than the preset desensitization degree, perform data desensitization processing; Step 3: weighting the data sensitivity of accessing the shared data in combination with the user authority to determine the user data access sharing risk value; when the user data access sharing risk value is not higher than the preset risk value of the corresponding user accessing the shared data, matching the fuel data sharing mode according to the user role and performing fuel data sharing; Step 4: Monitor and analyze user access behavior and fuel data sharing behavior. When abnormal access sharing behavior is detected, generate warning data for real-time warning and execute corresponding preset abnormal control strategies.

[0013] Compared with the prior art, the present invention has the following beneficial effects: By setting user roles and assigning corresponding fuel data access rights, the data sensitivity of fuel data is determined and multi-level permission control is implemented; data encryption and data desensitization are performed on fuel data; the data sensitivity of the fuel data is weighted in combination with user permissions to determine the user data access sharing risk value; when the user data access sharing risk value is not higher than the preset risk value of the corresponding user data access sharing, the fuel data sharing method is matched according to the user role and fuel data sharing is performed; user access behavior and fuel data sharing behavior are monitored and analyzed for real-time warning and the corresponding preset abnormality control strategy is executed; the safe sharing of fuel data is effectively ensured.

[0014] Other features and advantages of the present invention will be described in the following description, and partly become apparent from the description, or understood by practicing the present invention. The purpose and other advantages of the present invention can be realized and obtained by the structures particularly pointed out in the written description and the accompanying drawings.

[0015] The technical solution of the present invention is further described in detail below through the accompanying drawings and embodiments. BRIEF DESCRIPTION OF THE DRAWINGS

[0016] In order to more clearly illustrate the technical solutions in the present invention or the prior art, the following briefly introduces the drawings required for use in the embodiments or the description of the prior art. Obviously, the drawings described below are some embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying creative work.

[0017] Figure 1 A schematic diagram of the structure of a fuel data sharing system provided in an embodiment of the present invention; Figure 2 The figure is a flow chart of a fuel data sharing method provided in an embodiment of the present invention. DETAILED DESCRIPTION

[0018] In order to make the purpose, technical solution and advantages of the present invention clearer, the technical solution of the present invention will be clearly and completely described below in conjunction with the drawings of the present invention. Obviously, the described embodiments are part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0019] like Figure 1 As shown, the embodiment of the present invention provides a fuel data sharing system, which mainly includes the following structures: The permission control module is used to set user roles and assign corresponding fuel data access permissions. At the same time, it determines the data sensitivity of fuel data and implements multi-level permission control; A data encryption module, used for performing data transmission encryption processing and data storage encryption processing on the fuel data, and performing data desensitization processing when the data sensitivity of the fuel data is not lower than a preset desensitization degree; A data sharing module, used to perform weighted processing on the data sensitivity of the fuel data in combination with the user authority to determine the user data access sharing risk value, and when the user data access sharing risk value is not higher than the preset risk value of the corresponding user data access sharing, match the fuel data sharing mode according to the user role and perform fuel data sharing; The monitoring and early warning module is used to monitor and analyze user access behavior and fuel data sharing behavior. When abnormal access and sharing behavior is detected, early warning data is generated for real-time warning and the corresponding preset abnormal control strategy is executed.

[0020] In this embodiment, user roles are set, such as administrator, operator, and engineer.

[0021] In this embodiment, user roles are set and corresponding fuel data access rights are assigned. For example, three levels of fuel data access rights are preset. Level 1 fuel data access rights only allow access to part of the fuel data at the same level; Level 2 fuel data access rights allow access to Level 1 fuel data and part of the fuel data at the same level; Level 3 fuel data access rights allow access to all fuel data.

[0022] In this embodiment, the data sensitivity of the fuel data refers to the data privacy level of the fuel data.

[0023] In this embodiment, the data sensitivity of the fuel data is determined and multi-level permission control is implemented, such as read-only, edit, and share permission control.

[0024] In this embodiment, the preset desensitization degree refers to a data sensitivity threshold for performing data desensitization processing on the fuel data. When the data sensitivity of the fuel data is not lower than the preset desensitization degree, data desensitization processing is performed.

[0025] In this embodiment, the user data access sharing risk value refers to the risk value when the fuel data is shared. The higher the user data access sharing risk value, the lower the fuel data sharing security.

[0026] The beneficial effects of the above technical solution are: by setting user roles and assigning corresponding fuel data access rights, the data sensitivity of fuel data is determined and multi-level permission control is implemented; data encryption and data desensitization are performed on fuel data; the data sensitivity of the fuel data is weighted in combination with user permissions to determine the user data access sharing risk value, and when the user data access sharing risk value is not higher than the preset risk value of the corresponding user data access sharing, the fuel data sharing method is matched according to the user role and fuel data sharing is performed; user access behavior and fuel data sharing behavior are monitored and analyzed to provide real-time warnings and execute corresponding preset abnormality control strategies; the safe sharing of fuel data is effectively ensured.

[0027] The embodiment of the present invention provides a fuel data sharing system, an authority control module, including: The user role permission unit is used to set different user roles according to user responsibilities and user needs, and assign corresponding fuel data access permissions to each user role; When a user accesses fuel data, the user information is obtained to match the user role. If the match is successful, the corresponding fuel data access permission is enabled; Otherwise, the user is prompted to update the user information and re-match the user role; The fuel data permission unit is used to implement multi-level permission control on fuel data based on data sensitivity and permission management strategy; The authorization control unit is used to create an administrator account and assign the highest authority, allowing the administrator to regularly audit and update the access rights of other users and fuel data according to the authority management policy, and dynamically adjust the access rights of other users and fuel data according to the fuel data access requirements.

[0028] In this embodiment, the fuel data access rights include, for example, public-level access rights, internal-level access rights, confidential-level access rights, and highest-confidential-level access rights.

[0029] In this embodiment, a user with a high level of access authority can access fuel data with the same level of access authority as well as fuel data with a low level of access authority.

[0030] In this embodiment, corresponding fuel data access rights are assigned to various user roles. For example, the administrator is assigned the highest confidentiality level access right.

[0031] In this embodiment, user permissions and fuel data permissions are regularly audited and updated. For example, the access permission of user a1 is updated from public level to confidential level; the access permission of fuel data b1 is updated from public level to internal level.

[0032] In this embodiment, the authority management policy refers to a policy for controlling user authority and fuel data access authority. For example, a user with public-level access authority can only access fuel data with corresponding public-level access authority.

[0033] The beneficial effect of the above technical solution is: by setting user roles and assigning corresponding fuel data access permissions and implementing multi-level permission control according to the data sensitivity of the fuel data, the shared security of the fuel data is initially and effectively ensured and user needs are met.

[0034] The embodiment of the present invention provides a fuel data sharing system, a fuel data authority unit, including: A data sensitivity block, used to identify fuel data containing data sensitivity in the fuel data and mark it as sensitive fuel data; Identify the data type of sensitive fuel data and set the corresponding sensitivity level according to the data type; Determining the data sensitivity of the fuel data according to the sensitivity level and the data proportion of the corresponding sensitive fuel data in the fuel data; The permission management policy block is used to preset the access permission management policy and user permission management policy for fuel data with different data sensitivities; When it is detected that the fuel data that the user is allowed to access contains data that exceeds the sensitivity level of the data allowed to be accessed, corresponding data shielding processing is performed.

[0035] In this embodiment, data types of sensitive fuel data are identified, such as a public data type, an internal data type, a confidential data type, and a top secret data type.

[0036] In this embodiment, when it is detected that the fuel data that the user is allowed to access contains data that exceeds the sensitivity level of the data allowed to be accessed, corresponding data shielding processing is performed. For example, if user b1 accesses fuel data a1, and the fuel data a2 that user b1 has access rights to exists in the fuel data a1, the fuel data a2 will be shielded.

[0037] The beneficial effects of the above technical solution are: marking sensitive fuel data and setting sensitivity levels to determine the data sensitivity of the fuel data, which facilitates subsequent security control of sensitive fuel data; presetting access permission management strategies and user permission management strategies for fuel data with different data sensitivities to ensure the security of fuel data sharing.

[0038] The embodiment of the present invention provides a fuel data sharing system, a data encryption module, including: A data transmission encryption unit, used to connect the fuel data storage end with the user access end according to a preset data transmission protocol and perform an end-to-end encrypted connection; A data storage encryption unit, used to call an encryption algorithm of corresponding strength to perform data encryption processing according to the data sensitivity of the fuel data; A data desensitization processing unit, for obtaining data sensitivity of fuel data containing sensitive fuel data when shared access to sensitive fuel data is detected; When the data sensitivity of the fuel data is not lower than the preset desensitization level, the preset data desensitization strategy is called according to the data sensitivity and the user role, wherein the preset data desensitization strategy includes: data replacement desensitization strategy, data hash desensitization strategy and data differential privacy desensitization strategy.

[0039] In this embodiment, a data transmission protocol is preset, such as the SSL protocol or the TLS protocol.

[0040] In this embodiment, an encryption algorithm of corresponding strength is called to perform data encryption processing according to the data sensitivity of the fuel data. For example, a strong encryption algorithm is called to perform data encryption processing on the fuel data a1.

[0041] In this embodiment, data encryption processing is performed, for example, on statically stored fuel data.

[0042] In this embodiment, the user roles accessing the fuel data are anonymized.

[0043] In this embodiment, the same type of fuel data calls the same type of preset data desensitization strategy. For example, the b1 type fuel data calls the data replacement desensitization strategy to ensure that the b1 type fuel data does not contain sensitive data.

[0044] The beneficial effect of the above technical solution is that by performing data transmission encryption processing, data storage encryption processing and data desensitization processing on fuel data, the shared transmission security of fuel data in different network transmission environments is ensured and fuel data leakage is avoided.

[0045] The embodiment of the present invention provides a fuel data sharing system, a data sharing module, including: The sensitive data association unit is used to pre-process the fuel data and remove invalid data; Extracting sensitive fuel data from the fuel data, determining the impact value of the sensitive fuel data on the fuel data according to the occurrence frequency and occurrence weight of the sensitive fuel data and combining the data sensitivity, and sorting the data in descending order; Select key sensitive data according to the sequence, obtain data association between the key sensitive data, and when the data association between the key sensitive data is not higher than the association threshold, establish an association relationship between the key sensitive data; Constructing a key sensitive data association structure according to the key sensitive data and the association relationship between the key sensitive data; A sensitive data processing unit, used for performing a primary encryption process on the key sensitive data according to the data encryption process; Perform secondary weighted processing on the key sensitive data according to user permissions; Determine a standard association structure of key sensitive data based on historical fuel data, and perform three structural processing on the key sensitive data association structure; A fuel data adaptive association unit, used for acquiring new sensitive data of the new fuel data when monitoring that a user accesses new fuel data, and adaptively associating the fuel data and the new fuel data in combination with the key sensitive data association structure completed by the three-step structural processing; A fuel data association complexity unit, used to determine the data association complexity of current fuel data based on a time period from data preprocessing of fuel data to completion of fuel data adaptive association, combined with an average fuel data association time period determined by historical fuel data; Access sharing risk unit, used to determine the user data access sharing risk value; ; Where F represents the user data access sharing risk value; x1 represents the number of accurately identified sensitive fuel data in the historical fuel data; x2 represents the number of unidentified sensitive fuel data in the historical fuel data; Indicates that when the i1th fuel data accessed by the user is the key sensitive data, the data sensitivity of the i1th fuel data is output , otherwise, output 0; represents the data association time period of the fuel data accessed by the j1-th user; represents an average fuel data associated time period determined by historical fuel data; represents the user authority level of the j1th user; n1 represents the number of key sensitive data in the fuel data; m1 represents the number of users accessing the fuel data; When the user data access sharing risk value is not higher than the preset risk value of the corresponding user accessing the shared data, matching the fuel data sharing mode according to the user role and performing fuel data sharing; Otherwise, the corresponding fuel data is marked as risky data and the corresponding user is marked as a risky user.

[0046] In this embodiment, data preprocessing, for example, marks insensitive data in the fuel data as irrelevant data for data elimination.

[0047] In this embodiment, key sensitive data refers to data with high frequency of occurrence and high weight in sensitive data, and has a significant impact on fuel data.

[0048] In this embodiment, the data correlation between key sensitive data refers to the existence of an influence relationship between the key sensitive data. For example, if key sensitive data a1 appears, key sensitive data a2 appears accordingly; if key sensitive data a1 does not appear, key sensitive data a2 does not appear accordingly; it is determined that there is a data correlation between key sensitive data a1 and key sensitive data a2.

[0049] In this embodiment, the data correlation is determined based on the occurrence frequency and mutual influence relationship between key sensitive data. For example, the data correlation between key sensitive data a1 and key sensitive data a2 is determined to be b1; the data correlation between key sensitive data a1 and key sensitive data a3 is determined to be b2.

[0050] In this embodiment, when the data correlation between the key sensitive data is not higher than the correlation threshold, an association relationship is established between the key sensitive data. For example, if the correlation threshold is b3, b1>b3>b2, then an association relationship is established between the key sensitive data a1 and the key sensitive data a2; and no association relationship is established between the key sensitive data a1 and the key sensitive data a3.

[0051] In this embodiment, the key sensitive data association structure is used to simplify the description of sensitive data in the corresponding fuel data.

[0052] In this embodiment, the one-time encryption process refers to ensuring the security of the fuel data by encrypting the key sensitive data.

[0053] In this embodiment, the secondary weighted processing refers to weighting the user rights of key sensitive data to ensure that the user's access to the data does not exceed the access rights.

[0054] In this embodiment, the three-stage structural processing refers to improving the processing efficiency of the fuel data by adjusting the structure of key sensitive data.

[0055] In this embodiment, the more similar the key sensitive data association structure is to the standard association structure, the higher the access processing efficiency of the corresponding fuel data.

[0056] In this embodiment, the primary encryption process, the secondary weighting process, and the tertiary structure process are performed sequentially and each item is performed.

[0057] In this embodiment, the fuel data and the new fuel data are adaptively associated in combination with the key sensitive data association structure, so as to improve the access processing efficiency and access security of the same user accessing the new fuel data.

[0058] In this embodiment, the data association complexity refers to the complexity of performing three-step processing and adaptive association on fuel data sharing and user access.

[0059] In this embodiment, when the fuel data is marked as risky data, the fuel data sharing behavior is stopped and recorded; when the user is marked as a risky user, the user access behavior is stopped and recorded.

[0060] The beneficial effect of the above technical solution is: by weighting the data sensitivity of the fuel data in combination with the user authority to determine the user data access sharing risk value and then perform fuel data sharing control, the security of fuel data sharing is effectively ensured.

[0061] The embodiment of the present invention provides a fuel data sharing system, a monitoring and early warning module, including: A fuel data monitoring unit is used to monitor and analyze user access behaviors and fuel data sharing behaviors, and mark abnormal access and sharing behaviors when abnormal access and sharing behaviors are detected, wherein the abnormal access and sharing behaviors include: high-frequency access, high-frequency downloading, and over-authority access; The fuel data early warning unit is used to generate early warning data based on the abnormal mark and the risk mark to provide real-time early warning and execute corresponding preset abnormal control strategies.

[0062] In this embodiment, the abnormal access sharing behavior includes abnormal user access behavior and abnormal fuel data sharing behavior.

[0063] In this embodiment, the abnormal access sharing behavior and the corresponding warning data are sorted and stored independently based on the time sequence.

[0064] In this embodiment, an abnormal control strategy is preset, such as prohibiting user access, data encryption and desensitization, and user authority adjustment control.

[0065] The beneficial effect of the above technical solution is: by monitoring and analyzing user access behavior and fuel data sharing behavior, it is convenient for subsequent real-time early warning and execution of corresponding preset abnormal control strategies, further ensuring the sharing security of fuel data.

[0066] An embodiment of the present invention provides a fuel data sharing system, further comprising: A data sharing mode module, used to match the fuel data sharing mode according to user needs and user roles, wherein the fuel data sharing modes include: full-staff sharing, logical sharing and web page sharing; A fuel data tag module, used to embed a fuel data tag into the shared fuel data; The access sharing time limit module is used to set a time window for sharing fuel data. When the user access time exceeds the time window, the user access is revoked.

[0067] In this embodiment, all staff members share the data, and each user can view the corresponding fuel data according to the corresponding user authority.

[0068] In this embodiment, logic sharing is used to share fuel indicators or fuel underlying logic, and access permissions can be set to allow other users to access.

[0069] In this embodiment, a time window for sharing fuel data is set. For example, a time window t1 is set for fuel data a1, and all users are allowed to access fuel data a1 within the time period t1.

[0070] The beneficial effects of the above technical solution are: matching the fuel data sharing method according to user needs and user roles to effectively meet user needs; embedding fuel data tags to facilitate monitoring and tracing of fuel data access and sharing; setting a time window for fuel data sharing to effectively prevent fuel data leakage.

[0071] like Figure 2 As shown, the embodiment of the present invention provides a fuel data sharing method, which mainly includes the following steps: Step 1: Set user roles and assign corresponding fuel data access permissions. At the same time, determine the data sensitivity of fuel data and implement multi-level permission control; Step 2: Perform data transmission encryption processing and data storage encryption processing on the fuel data, and when the data sensitivity of the fuel data is not lower than the preset desensitization degree, perform data desensitization processing; Step 3: weighting the data sensitivity of accessing the shared data in combination with the user authority to determine the user data access sharing risk value; when the user data access sharing risk value is not higher than the preset risk value of the corresponding user accessing the shared data, matching the fuel data sharing mode according to the user role and performing fuel data sharing; Step 4: Monitor and analyze user access behavior and fuel data sharing behavior. When abnormal access sharing behavior is detected, generate warning data for real-time warning and execute corresponding preset abnormal control strategies.

[0072] The beneficial effects of the above technical solution are: by setting user roles and assigning corresponding fuel data access rights, the data sensitivity of fuel data is determined and multi-level permission control is implemented; data encryption and data desensitization are performed on fuel data; the data sensitivity of the fuel data is weighted in combination with user permissions to determine the user data access sharing risk value, and when the user data access sharing risk value is not higher than the preset risk value of the corresponding user data access sharing, the fuel data sharing method is matched according to the user role and fuel data sharing is performed; user access behavior and fuel data sharing behavior are monitored and analyzed to provide real-time warnings and execute corresponding preset abnormality control strategies; the safe sharing of fuel data is effectively ensured.

[0073] Finally, it should be noted that the above embodiments are only used to illustrate the technical solutions of the present invention, rather than to limit it. Although the present invention has been described in detail with reference to the aforementioned embodiments, those skilled in the art should understand that they can still modify the technical solutions described in the aforementioned embodiments, or make equivalent replacements for some of the technical features therein. However, these modifications or replacements do not deviate the essence of the corresponding technical solutions from the spirit and scope of the technical solutions of the embodiments of the present invention.

Claims

1. A fuel data sharing system, characterized in that: include: The permission control module is used to set user roles and assign corresponding fuel data access permissions. At the same time, it determines the data sensitivity of fuel data and implements multi-level permission control; A data encryption module, used for performing data transmission encryption processing and data storage encryption processing on the fuel data, and performing data desensitization processing when the data sensitivity of the fuel data is not lower than a preset desensitization degree; A data sharing module, used to perform weighted processing on the data sensitivity of the fuel data in combination with the user authority to determine the user data access sharing risk value, and when the user data access sharing risk value is not higher than the preset risk value of the corresponding user data access sharing, match the fuel data sharing mode according to the user role and perform fuel data sharing; The monitoring and early warning module is used to monitor and analyze user access behavior and fuel data sharing behavior. When abnormal access and sharing behavior is detected, early warning data is generated for real-time warning and the corresponding preset abnormal control strategy is executed.

2. A fuel data sharing system according to claim 1, characterized in that: Permission control module, including: The user role permission unit is used to set different user roles according to user responsibilities and user needs, and assign corresponding fuel data access permissions to each user role; When a user accesses fuel data, the user information is obtained to match the user role. If the match is successful, the corresponding fuel data access permission is enabled; Otherwise, the user is prompted to update the user information and re-match the user role; The fuel data permission unit is used to implement multi-level permission control on fuel data based on data sensitivity and permission management strategy; The authorization control unit is used to create an administrator account and assign the highest authority, allowing the administrator to regularly audit and update the access rights of other users and fuel data according to the authority management policy, and dynamically adjust the access rights of other users and fuel data according to the fuel data access requirements.

3. A fuel data sharing system according to claim 2, characterized in that: Fuel data authority unit, including: A data sensitivity block, used to identify fuel data containing data sensitivity in the fuel data and mark it as sensitive fuel data; Identify the data type of sensitive fuel data and set the corresponding sensitivity level according to the data type; Determining the data sensitivity of the fuel data according to the sensitivity level and the data proportion of the corresponding sensitive fuel data in the fuel data; The permission management policy block is used to preset the access permission management policy and user permission management policy for fuel data with different data sensitivities; When it is detected that the fuel data that the user is allowed to access contains data that exceeds the sensitivity level of the data allowed to be accessed, corresponding data shielding processing is performed.

4. A fuel data sharing system according to claim 1, characterized in that: Data encryption module, including: A data transmission encryption unit, used to connect the fuel data storage end with the user access end according to a preset data transmission protocol and perform an end-to-end encrypted connection; A data storage encryption unit, used to call an encryption algorithm of corresponding strength to perform data encryption processing according to the data sensitivity of the fuel data; A data desensitization processing unit, for obtaining data sensitivity of fuel data containing sensitive fuel data when shared access to sensitive fuel data is detected; When the data sensitivity of the fuel data is not lower than the preset desensitization level, the preset data desensitization strategy is called according to the data sensitivity and the user role, wherein the preset data desensitization strategy includes: data replacement desensitization strategy, data hash desensitization strategy and data differential privacy desensitization strategy.

5. A fuel data sharing system according to claim 1, characterized in that: Data sharing module, including: The sensitive data association unit is used to pre-process the fuel data and remove invalid data; Extracting sensitive fuel data from the fuel data, determining the impact value of the sensitive fuel data on the fuel data based on the occurrence frequency and occurrence weight of the sensitive fuel data and the sensitivity of the data, and sorting the data in descending order; Selecting key sensitive data according to the sequence, obtaining data association between the key sensitive data, and establishing association relationships between the key sensitive data when the data association between the key sensitive data is not higher than an association threshold; Constructing a key sensitive data association structure according to the key sensitive data and the association relationship between the key sensitive data; A sensitive data processing unit, used for performing a primary encryption process on the key sensitive data according to the data encryption process; Perform secondary weighted processing on the key sensitive data according to user permissions; Determine a standard association structure of key sensitive data based on historical fuel data, and perform three structural processing on the key sensitive data association structure; A fuel data adaptive association unit, used for acquiring new sensitive data of the new fuel data when monitoring that a user accesses new fuel data, and adaptively associating the fuel data and the new fuel data in combination with the key sensitive data association structure completed by the three-step structural processing; A fuel data association complexity unit, used to determine the data association complexity of current fuel data based on a time period from data preprocessing of fuel data to completion of fuel data adaptive association, combined with an average fuel data association time period determined by historical fuel data; Access sharing risk unit, used to determine the user data access sharing risk value; ； Where F represents the user data access sharing risk value; x1 represents the number of accurately identified sensitive fuel data in the historical fuel data; x2 represents the number of unidentified sensitive fuel data in the historical fuel data; Indicates that when the i1th fuel data accessed by the user is the key sensitive data, the data sensitivity of the i1th fuel data is output , otherwise, output 0; represents the data association time period of the fuel data accessed by the j1-th user; represents an average fuel data associated time period determined by historical fuel data; represents the user authority level of the j1th user; n1 represents the number of key sensitive data in the fuel data; m1 represents the number of users accessing the fuel data; When the user data access sharing risk value is not higher than the preset risk value of the corresponding user accessing the shared data, matching the fuel data sharing mode according to the user role and performing fuel data sharing; Otherwise, the corresponding fuel data is marked as risky data and the corresponding user is marked as a risky user.

6. A fuel data sharing system according to claim 1, characterized in that: Monitoring and early warning module, including: A fuel data monitoring unit is used to monitor and analyze user access behaviors and fuel data sharing behaviors, and mark abnormal access and sharing behaviors when abnormal access and sharing behaviors are detected, wherein the abnormal access and sharing behaviors include: high-frequency access, high-frequency downloading, and over-authority access; The fuel data early warning unit is used to generate early warning data based on the abnormal mark and the risk mark to provide real-time early warning and execute corresponding preset abnormal control strategies.

7. A fuel data sharing system according to claim 1, characterized in that: Also includes: A data sharing mode module, used to match the fuel data sharing mode according to user needs and user roles, wherein the fuel data sharing modes include: full-staff sharing, logical sharing and web page sharing; A fuel data tag module, used to embed a fuel data tag into the shared fuel data; The access sharing time limit module is used to set a time window for sharing fuel data. When the user access time exceeds the time window, the user access is revoked.

8. A fuel data sharing method, characterized in that: include: Step 1: Set user roles and assign corresponding fuel data access permissions. At the same time, determine the data sensitivity of fuel data and implement multi-level permission control; Step 2: Perform data transmission encryption processing and data storage encryption processing on the fuel data, and when the data sensitivity of the fuel data is not lower than the preset desensitization degree, perform data desensitization processing; Step 3: weighting the data sensitivity of accessing the shared data in combination with the user authority to determine the user data access sharing risk value; when the user data access sharing risk value is not higher than the preset risk value of the corresponding user accessing the shared data, matching the fuel data sharing mode according to the user role and performing fuel data sharing; Step 4: Monitor and analyze user access behavior and fuel data sharing behavior. When abnormal access sharing behavior is detected, generate warning data for real-time warning and execute corresponding preset abnormal control strategies.

Images