Key management equipment operation and maintenance management system based on data analysis

Abstract

The invention relates to the technical field of equipment operation and maintenance management, and discloses a key management equipment operation and maintenance management system based on data analysis, and the system comprises a user unit which is used for creating a user and inputting user information data; the key updating unit is used for updating the key according to the user information data; acquiring key update data; the analysis module is connected with the user unit and the key updating unit and is used for analyzing the user information data and the key updating data and judging whether abnormity occurs when the equipment updates the key; creating a user through the user unit, and inputting user information data; updating the secret key through a secret key updating unit according to the user information data; acquiring key update data; and finally, analyzing the user information data and the secret key updating data through an analysis module, and judging whether abnormity occurs when the equipment updates the secret key or not. And the updated key is monitored in real time, and an early warning is given out in time when the equipment key updating is abnormal, so that the updated key is ensured to meet the requirement.

Description

Technical Field

[0001] The present invention relates to the technical field of equipment operation and maintenance management, and in particular to a key management equipment operation and maintenance management system based on data analysis. Background Art

[0002] Currently, enterprises encrypt data through key management systems to improve confidentiality during data storage and transmission. Key management devices are an important part of key management systems. Key management devices regularly update keys to reduce the risk of long-term attacks or leaks of keys, thereby improving data security.

[0003] The key uses an algorithm to ensure that each updated key reaches a certain security level. However, if there is a problem with the algorithm, the updated key cannot reach the security level, which may cause the key to be too simple. Since the user is unaware of the key update, it is difficult for the user to discover and deal with it in time, making the updated key vulnerable to attack, resulting in data leakage, which will bring huge losses to the enterprise. Summary of the invention

[0004] The purpose of the present invention is to provide a key management equipment operation and maintenance management system based on data analysis to solve the following technical problems:

[0005] How to determine whether an abnormality occurs when the key management device updates the key.

[0006] The purpose of the present invention can be achieved through the following technical solutions:

[0007] A key management equipment operation and maintenance management system based on data analysis, the operation and maintenance management system comprising:

[0008] User unit, used to create users and input user information data;

[0009] A key updating unit, used to update the key according to the user information data; and obtain the key updating data;

[0010] The analysis module is connected to the user unit and the key update unit, and is used to analyze the user information data and the key update data to determine whether an abnormality occurs when the device updates the key.

[0011] As a further solution of the present invention: the user information data includes the user's authority level;

[0012] The key update data includes the key update time and the updated key.

[0013] As a further solution of the present invention: the analysis process of the analysis module is:

[0014] S1: Randomly select the key update time of N users in the past preset time period and the corresponding updated key;

[0015] S2: Obtain a judgment index by analyzing the key update time of N users in the past preset time period and the corresponding updated keys;

[0016] S3: Analyze the judgment index to determine whether there is an abnormality when the device updates the key; if it is judged to be abnormal, issue a warning, otherwise continue to work.

[0017] As a further solution of the present invention: the process of obtaining the judgment index is:

[0018] S10: Obtaining the key complexity of the key by analyzing the updated key;

[0019] S20: obtaining the key similarity of the key by analyzing the two keys before and after the update;

[0020] S30: Analyze the key complexity and key similarity of each key according to preset rules to obtain a judgment index.

[0021] As a further solution of the present invention: in S10, the key complexity is obtained by the formula:

[0022]

[0023] Calculate the key complexity after the i-th update;

[0024] in, is the basic complexity; is the number of characters in the key; is the number of character types of the key after the i-th update; The number of character types that are preset for a key of basic complexity; is the number of characters in the key whose character type is different from the character type of its adjacent characters after the i-th update; The number of characters in the key of basic complexity where the character type of each character is different from the character type of its adjacent characters; is the first weight coefficient; is the second weight coefficient; is the first preset adjustment coefficient; is the second preset adjustment coefficient.

[0025] As a further solution of the present invention: in S20, the key similarity is calculated by the formula;

[0026]

[0027] Get the key similarity of the two keys before and after the i-th update ;

[0028] in, is the basic similarity; is the actual number of characters that are identical between any two adjacent characters in the key after the i-th update and any two adjacent characters in the key before the i-th update; The preset number of characters that are the same between any two adjacent characters in the two keys of basic similarity; is the third preset adjustment coefficient.

[0029] As a further solution of the present invention: in S30, the preset rule is through the formula:

[0030] Calculate the judgment index ;

[0031] in, is the first judgment function, when hour, ;when hour, ; is the second judgment function, when hour, ;when hour, ; To select the number of users, ; for of the selected users Users; For the The complexity of the preset keys for the permission levels of each user; is the complexity allowable error value; For the The total number of key updates for a user in the past preset time period, ; is a first preset ratio; For the Similarity of preset keys of permission levels corresponding to users; is the allowable error value of similarity; is the second preset ratio.

[0032] As a further solution of the present invention: In S3, the process of determining whether the key management device is abnormal is as follows:

[0033] when When the device updates the key, there is no abnormality;

[0034] when When the device updates the key abnormally, an early warning is required.

[0035] Beneficial effects of the present invention:

[0036] The present invention creates a user through a user unit and inputs user information data; then updates the key according to the user information data through a key update unit; obtains the key update data; finally, analyzes the user information data and the key update data through an analysis module to determine whether an abnormality occurs when a device updates a key; monitors the updated key in real time to determine whether an abnormality occurs when a key management device updates a key, promptly discovers the abnormality of the key management device, and promptly handles it to ensure that the updated key reaches the required security level and reduce the risk of data leakage. BRIEF DESCRIPTION OF THE DRAWINGS

[0037] The present invention will be further described below in conjunction with the accompanying drawings.

[0038] Figure 1 A system module framework diagram of an embodiment of the present invention. DETAILED DESCRIPTION

[0039] The following will be combined with the drawings in the embodiments of the present invention to clearly and completely describe the technical solutions in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0040] See also Figure 1 As shown, in one embodiment, a key management device operation and maintenance management system based on data analysis is provided, including:

[0041] User unit, used to create users and input user information data;

[0042] A key updating unit, used to update the key according to the user information data; and obtain the key updating data;

[0043] An analysis module, connected to the user unit and the key update unit, for analyzing the user information data and the key update data to determine whether an abnormality occurs when the device updates the key;

[0044] Through the above technical solution, this embodiment creates a user through the user unit and inputs user information data; then updates the key according to the user information data through the key update unit; obtains the key update data; finally, analyzes the user information data and the key update data through the analysis module to determine whether there is an abnormality when the device updates the key; monitors the updated key in real time to determine whether there is an abnormality when the key management device updates the key, promptly discovers the abnormality of the key management device, and handles it in time to ensure that the updated key reaches the required security level and reduce the risk of data leakage.

[0045] As an implementation mode of the present invention, the user information data includes the user's authority level;

[0046] The key update data includes the key update time and the updated key;

[0047] The analysis process of the analysis module is as follows:

[0048] S1: Randomly select the key update time of multiple users within a preset time period and the corresponding updated keys;

[0049] S2: Obtain a judgment index by analyzing the key update time of multiple users in a preset time period in the past and the corresponding updated keys;

[0050] S3: Analyze the judgment index to determine whether there is an abnormality when the device updates the key; if it is abnormal, issue a warning, otherwise continue to work;

[0051] Through the above technical solution, this embodiment randomly selects the key update time and the corresponding updated key of multiple users within the past preset time period; then analyzes the key update time and the corresponding updated key of multiple users within the past preset time period to obtain a judgment index; finally, analyzes the judgment index to determine whether an abnormality occurs when the device updates the key; if it is determined to be abnormal, an early warning is issued, otherwise it continues to work.

[0052] As an implementation mode of the present invention, the process of obtaining the judgment index is as follows:

[0053] S10: Obtaining the key complexity of the key by analyzing the updated key;

[0054] S20: obtaining the key similarity of the key by analyzing the two keys before and after the update;

[0055] S30: Analyze the key complexity and key similarity of each key according to preset rules to obtain a judgment index;

[0056] Through the above technical scheme, this embodiment obtains the key complexity of the key by analyzing the updated key; then obtains the key similarity of the key by analyzing the two keys before and after the update; finally, the key complexity and key similarity of each key are analyzed according to preset rules to obtain a judgment index; and whether an abnormality occurs when the device updates the key is determined according to the judgment index.

[0057] As an implementation mode of the present invention, in S10, the key complexity obtaining process is through the formula:

[0058]

[0059] Calculate the key complexity after the i-th update;

[0060] in, is the basic complexity; is the number of characters in the key; is the number of character types of the key after the i-th update; The number of character types that are preset for a key of basic complexity; is the number of characters in the key whose character type is different from the character type of its adjacent characters after the i-th update; The number of characters in the key of basic complexity where the character type of each character is different from the character type of its adjacent characters; is the first weight coefficient; is the second weight coefficient; is the first preset adjustment coefficient; is a second preset adjustment coefficient;

[0061] Through the above technical solution, this embodiment is the difference between the number of character types of the key after the i-th update and the number of preset character types; is the ratio of the difference between the number of character types of the key after the i-th update and the number of preset character types to the number of characters in the key; when , it means that the number of character types of the key after the i-th update is more than the preset number of character types, and the key complexity of the key after the i-th update is More complex than basic High; therefore, the ratio of the difference between the number of character types of the key after the i-th update and the number of preset character types to the number of characters in the key The larger the value, the greater the key complexity of the key after the i-th update. The bigger; when , it means that the number of character types of the key after the i-th update is less than the preset number of character types, and the key complexity of the key after the i-th update is More complex than basic Low; therefore, the absolute value of the ratio of the difference between the number of character types of the key after the i-th update and the number of preset character types to the number of characters in the key The larger the value, the greater the key complexity of the key after the i-th update. The smaller; is the difference between the number of characters whose character types are different from those of their adjacent characters in the key after the i-th update and the preset number of characters; is the ratio of the difference between the number of characters whose character types are different from those of their adjacent characters in the key after the i-th update and the preset number of characters to the number of characters in the key; , it means that after the i-th update, the number of characters whose character types are different from those of their adjacent characters in the key is greater than the preset number of characters, and the key complexity of the key after the i-th update is More complex than basic High; therefore, after the i-th update, the ratio of the difference between the number of characters whose character types in the key are different from the character types of their adjacent characters and the preset number of characters to the number of characters in the key The larger the value, the greater the key complexity of the key after the i-th update. The bigger; when , it means that after the i-th update, the number of characters whose character types are different from those of their adjacent characters in the key is less than the preset number of characters, and the key complexity of the key after the i-th update is More complex than basic Therefore, after the i-th update, the absolute value of the ratio of the difference between the number of characters whose character types in the key are different from the character types of their adjacent characters and the preset number of characters to the number of characters in the key is The larger the value, the greater the key complexity of the key after the i-th update. The smaller;

[0062] It should be noted that the basic complexity , the number of characters in the key , the number of preset character types for the key of basic complexity , the number of characters in the basic complexity key where the character type of each character is different from the character type of its adjacent characters , the first weight coefficient , the second weight coefficient ; The first preset adjustment coefficient and the second preset adjustment factor It is a preset value, obtained based on experience, and will not be described in detail here.

[0063] As an implementation mode of the present invention, in S20, the key similarity is calculated by the formula;

[0064] ,

[0065] Get the key similarity of the two keys before and after the i-th update ;

[0066] in, is the basic similarity; is the actual number of characters that are identical between any two adjacent characters in the key after the i-th update and any two adjacent characters in the key before the i-th update; The preset number of characters that are the same between any two adjacent characters in the two keys of basic similarity; is a third preset adjustment coefficient;

[0067] Through the above technical solution, this embodiment The difference between the actual number of characters that are identical between any two adjacent characters in the key after the i-th update and any two adjacent characters in the key before the i-th update and the preset number; is the ratio of the difference between the actual number of characters that are identical between any two adjacent characters in the key after the i-th update and any two adjacent characters in the key before the i-th update and the preset number to the number of characters in the key; when , it means that the actual number of characters that are the same between any two adjacent characters in the key after the i-th update and any two adjacent characters in the key before the i-th update is greater than the preset number, and the key similarity after the i-th update is Basic similarity High; therefore, the ratio of the difference between the actual number of characters of any two adjacent characters in the key after the i-th update and the preset number of characters of any two adjacent characters in the key before the i-th update to the number of characters in the key The larger the value, the greater the key similarity between the two keys before and after the i-th update. The bigger; when , it means that the actual number of characters that are the same between any two adjacent characters in the key after the i-th update and any two adjacent characters in the key before the i-th update is less than the preset number, and the key similarity between the two keys before and after the i-th update is Basic similarity Therefore, the absolute value of the ratio of the actual number of characters that are the same as any two adjacent characters in the key before the i-th update and the preset number of characters in the key after the i-th update is The larger the value, the greater the key similarity between the two keys before and after the i-th update. The smaller;

[0068] It should be noted that the basic similarity , the third preset adjustment coefficient The preset number of characters that are the same as any two adjacent characters in the two keys with basic similarity It is a preset value, obtained based on experience, and will not be described in detail here; the key before the i-th update is the key after the i-1-th update.

[0069] As an implementation manner of the present invention, in S30, the preset rule is through the formula:

[0070] Calculate the judgment index ;

[0071] in, is the first judgment function, when hour, ;when hour, ; is the second judgment function, when hour, ;when hour, ; To select the number of users, ; for of the selected users Users; For the The complexity of the preset keys for the permission levels of each user; is the complexity allowable error value; For the The total number of key updates for a user in the past preset time period, ; is a first preset ratio; For the Similarity of preset keys of permission levels corresponding to users; is the allowable error value of similarity; is a second preset ratio;

[0072] In S3, the process of determining whether the key management device is abnormal is as follows:

[0073] when When the device updates the key, there is no abnormality;

[0074] when When the device updates the key abnormally, an early warning is required;

[0075] Through the above technical solution, this embodiment For the The difference between the preset key complexity of the permission level corresponding to the user and the key complexity after the i-th update of the user; When , it means that the key complexity of the user after the i-th update is equal to or higher than the i-th update The preset key complexity of the permission level corresponding to the user; the key complexity of the user meets the requirements after the i-th update; when When , it means that the key complexity of the user after the i-th update is lower than that of the The preset key complexity of the permission level corresponding to each user; ; then through Judgement Whether the difference between the preset key complexity of the permission level corresponding to the user and the key complexity after the i-th update of the user is within the allowed error value of complexity; , explain The difference between the preset key complexity of the permission level corresponding to the user and the key complexity of the user after the i-th update is within the complexity tolerance value; therefore, the key complexity of the user after the i-th update meets the requirements; when , explain The difference between the preset key complexity of the permission level corresponding to the user and the key complexity after the i-th update of the user exceeds the complexity tolerance value, so the key complexity after the i-th update of the user does not meet the requirements; For the The number of keys of a user whose key complexity does not meet the requirements in the past preset time period; The ratio of the number of keys whose key complexity does not meet the requirements in the past preset time period to the total number of keys updated by the user; The average ratio of the number of keys whose key complexity does not meet the requirements to the total number of updated keys of N users in the past preset time period; is the difference between the average ratio of the number of keys whose key complexity does not meet the requirements of the preset time period of N users in the past and the total number of updated keys of N users and the first preset ratio; When the key complexity of N users does not meet the requirements in the past preset time period, the average ratio of the number of keys that do not meet the requirements to the total number of keys updated by N users is less than or equal to the first preset ratio, indicating that the key complexity of the device is normal when updating the key. ;when When , it indicates that the average ratio of the number of keys of N users whose key complexity does not meet the requirements in the past preset time period to the total number of keys updated by N users is greater than the first preset ratio, indicating that the key complexity of the key update of the device is abnormal, ; The key similarity between the two keys before and after the i-th update of the user and the key similarity between the i-th update and the i-th update The difference in similarity of the preset keys of the permission levels corresponding to the users; , it means that the key similarity of the two keys before and after the i-th update of the user is equal to or less than the i-th update. The preset key similarity of the permission level corresponding to the user; the key similarity of the two keys before and after the i-th update of the user meets the requirements; when , it means that the key similarity of the two keys before and after the i-th update of the user is higher than that of the i-th update. The preset key similarity of the permission level corresponding to each user; ; then through Determine the key similarity between the two keys before and after the i-th update of the user and the i-th update of the user. Whether the difference in similarity of the preset keys of the permission levels corresponding to the users is within the allowable error value of the similarity; , it means that the key similarity of the two keys before and after the i-th update of the user is the same as that of the i-th update. The difference in the similarity of the preset keys of the permission levels corresponding to the users is within the allowable error value of the similarity; therefore, the key complexity of the user meets the requirements after the i-th update; when , it means that the key similarity of the two keys before and after the i-th update of the user is the same as that of the i-th update. The difference in the preset key similarity of the permission level corresponding to the user exceeds the similarity allowable error value, so the key similarity of the user after the i-th update does not meet the requirements; For the The number of keys of a user whose key similarity does not meet the requirements in the past preset time period; The ratio of the number of keys whose key similarity does not meet the requirements in the past preset time period to the total number of keys updated by the user; The average ratio of the number of keys of N users whose key similarity does not meet the requirements in the past preset time period to the total number of updated keys of N users; is the difference between the average ratio of the number of keys whose key similarity does not meet the requirements in the past preset time period of N users and the total number of updated keys of N users and the second preset ratio; , it indicates that the average ratio of the number of keys whose key similarity does not meet the requirement in the past preset time period of N users to the total number of keys updated by N users is less than or equal to the second preset ratio, indicating that the key similarity of the key updated by the device is normal, ;when When , it indicates that the average ratio of the number of keys whose key similarity does not meet the requirement in the past preset time period of N users to the total number of keys updated by N users is greater than the second preset ratio, indicating that the key similarity of the key updated by the device is abnormal. ; Therefore, when When the device updates the key, there is no abnormality; when When the device updates the key abnormally, an early warning is required.

[0076] It should be noted that the number of selected users , Complexity allowable error value , the first preset ratio , similarity tolerance value and the second preset ratio is the preset value, obtained based on experience; get the The key update time of the user in the past preset time period For the prior art, The complexity of the preset key for the permission level of each user and The similarity of preset keys for the permission levels of each user The preset key complexity and preset key similarity of each level are preset values ​​and will not be described in detail here.

[0077] The above is a detailed description of an embodiment of the present invention, but the content is only a preferred embodiment of the present invention and cannot be considered to limit the scope of implementation of the present invention. All equivalent changes and improvements made within the scope of the present invention should still fall within the scope of the patent coverage of the present invention.

Claims

1. A key management equipment operation and maintenance management system based on data analysis, characterized in that: The operation and maintenance management system includes: User unit, used to create users and input user information data; A key updating unit, used to update the key according to the user information data; and obtain the key updating data; An analysis module, connected to the user unit and the key update unit, for analyzing the user information data and the key update data to determine whether an abnormality occurs when the device updates the key; The user information data includes the user's authority level; The key update data includes the key update time and the updated key; The analysis process of the analysis module is as follows: S1: Randomly select the key update time of N users in the past preset time period and the corresponding updated key; S2: Obtain a judgment index by analyzing the key update time of N users in the past preset time period and the corresponding updated keys; S3: Analyze the judgment index to determine whether there is an abnormality when the device updates the key; if it is abnormal, issue a warning, otherwise continue to work; The process of obtaining the judgment index is as follows: S10: Obtaining the key complexity of the key by analyzing the updated key; S20: obtaining the key similarity of the key by analyzing the two keys before and after the update; S30: Analyze the key complexity and key similarity of each key according to preset rules to obtain a judgment index.

2. A key management equipment operation and maintenance management system based on data analysis according to claim 1, characterized in that: In S10, the key complexity is obtained by the formula: , calculate the key complexity after the i-th update; in, is the basic complexity; is the number of characters in the key; is the number of character types of the key after the i-th update; The number of character types that are preset for a key of basic complexity; is the number of characters in the key whose character type is different from the character type of its adjacent characters after the i-th update; The number of characters in the key of basic complexity where the character type of each character is different from the character type of its adjacent characters; is the first weight coefficient; is the second weight coefficient; is the first preset adjustment coefficient; is the second preset adjustment coefficient.

3. A key management equipment operation and maintenance management system based on data analysis according to claim 2, characterized in that: In S20, the key similarity is calculated by the formula; ， Get the key similarity of the two keys before and after the i-th update ; in, is the basic similarity; is the actual number of characters that are identical between any two adjacent characters in the key after the i-th update and any two adjacent characters in the key before the i-th update; The preset number of characters that are the same between any two adjacent characters in the two keys of basic similarity; is the third preset adjustment coefficient.

4. A key management equipment operation and maintenance management system based on data analysis according to claim 3, characterized in that: In S30, the preset rule is through the formula: , calculate the judgment index ; in, is the first judgment function, when hour, ;when hour, ; is the second judgment function, when hour, ;when hour, ; To select the number of users, ; for of the selected users Users; For the The complexity of the preset keys for the permission levels of each user; is the complexity allowable error value; For the The total number of key updates for a user in the past preset time period, ; is a first preset ratio; For the Similarity of preset keys of permission levels corresponding to users; is the allowable error value of similarity; is the second preset ratio.

5. A key management equipment operation and maintenance management system based on data analysis according to claim 4, characterized in that: In S3, the process of determining whether the key management device is abnormal is as follows: when When the device updates the key, there is no abnormality; when When the device updates the key abnormally, an early warning is required.

Images