Data security warning method and system

By calculating user security authentication level and data security protection level, combining historical access records and risk point evaluation, the security authentication level is dynamically adjusted, and the problem of insufficient data security warning efficiency and accuracy in the existing technology is solved, and more efficient data is achieved Protect.

CN119272327APending Publication Date: 2025-01-07GUANGXI TECHCAL COLLEGE OF MACHINERY & ELECTRICITY +1
View PDF 0 Cites 1 Cited by

Patent Information

Application Number
CN202411328457.5
Authority / Receiving Office
CN · China
Patent Type
Applications(China)
Current Assignee / Owner
Filing Date
2024-09-24
Publication Date
2025-01-07

AI Technical Summary

Technical Problem

The existing technology is difficult to effectively improve the efficiency and accuracy of data security warnings, which makes it difficult to identify and prevent data leakage and security threats in a timely manner.

Method used

By obtaining user access data information, calculating user security authentication level and data security protection level, judging and triggering warning information, aborting user access, combining historical access records, registration information and risk point assessment, dynamically adjusting security authentication level and risk probability to achieve Data security warning.

Benefits of technology

It improves the efficiency and accuracy of data security warnings, promptly identify and prevent potential data leakage, and enhances data protection capabilities.

✦ Generated by Eureka AI based on patent content.

Smart Images

  • Figure CN119272327A_ABST
    Figure CN119272327A_ABST
Patent Text Reader

Abstract

The invention discloses a data security warning method and system. The method comprises the following steps: acquiring user access data information; obtaining a user security authentication level and an access data security protection level according to the user access data information; judging whether the user security authentication level is smaller than an access data security protection level or not, and if yes, triggering access data security warning information; and based on the access data security warning information, stopping the corresponding user from accessing the data. According to the invention, the efficiency and accuracy of data security warning are improved.
Need to check novelty before this filing date? Find Prior Art

Description

Technical Field

[0001] The present invention relates to the field of data security technology, and more specifically, to a data security warning method and system. Background Art

[0002] With the development of digital transformation, data has become one of the most important assets. Data security not only involves personal privacy protection, but also involves business secrets and information security. Therefore, data security has become an important issue that cannot be ignored at present. Summary of the invention

[0003] In view of the above problems, an object of the present invention is to provide a data security warning method and system, which can improve the efficiency and accuracy of data security warnings.

[0004] A first aspect of the present invention provides a data security warning method, comprising:

[0005] Obtain user access data information;

[0006] According to the user's access data information, the user's security authentication level and the access data security protection level are obtained;

[0007] Determine whether the user security authentication level is lower than the access data security protection level, and if so, trigger access data security warning information;

[0008] Based on the data access security warning information, the corresponding user is terminated from accessing the data.

[0009] In this solution, the step of obtaining the user security authentication level specifically includes:

[0010] Get the historical access records of the corresponding user;

[0011] According to the historical access records of the corresponding user, obtain the historical access time and historical access data operations of the corresponding user;

[0012] Determine whether there is any triggering access data security warning information in the historical data access operation, and if so, extract the number of times the triggering access data security warning information exists;

[0013] Based on the number of times the access data security warning information is triggered, the preset warning number impact safety factor table is searched to obtain the corresponding impact safety factor;

[0014] The historical access time of the corresponding user is multiplied by the preset access time weight coefficient and the corresponding impact safety coefficient to obtain the security authentication adjustment level of the corresponding user;

[0015] The user's security authentication adjustment level is added to the preset initial security authentication level to obtain the corresponding user security authentication level.

[0016] In this solution, the step of obtaining the preset initial security authentication level includes:

[0017] Obtain user registration information;

[0018] Extract keywords from user registration information;

[0019] Classify the keywords in the user registration information to obtain keyword categories;

[0020] According to the keyword category, query in the basic score table of the preset keyword category to obtain the basic score of the corresponding keyword;

[0021] According to the keyword category, the weight coefficient table of the preset keyword category is searched to obtain the weight coefficient of the corresponding keyword;

[0022] Multiply the basic score of the keyword by the weight coefficient of the corresponding keyword to obtain the score of the corresponding keyword;

[0023] Add up the scores of all keywords to get the total score of the corresponding user registration information;

[0024] Based on the preset score range within which the total score of the corresponding user's registration information falls, the initial security authentication level of the corresponding user is determined.

[0025] This plan also includes:

[0026] When a user logs in to an account, it is determined whether the user has completed identity authentication. If so, the corresponding user login is normal; if not, a login abnormality prompt message is triggered;

[0027] Generate a login abnormality weight coefficient based on the login abnormality prompt information;

[0028] Multiply the user security authentication level by the login abnormality weight coefficient to obtain the revised user security authentication level.

[0029] This plan also includes:

[0030] According to the user access data information, the corresponding user access data location is obtained;

[0031] Determine whether the user access data location is a risk point, and if so, extract the preset risk probability of the corresponding risk point;

[0032] Based on a preset first time period, all risk points in the user's access data location are obtained;

[0033] Accumulate the preset risk probabilities of all risk points in the user's access data location, and then multiply by the preset risk probability superposition coefficient to obtain the total risk probability of the corresponding user;

[0034] If the total risk probability of the corresponding user is greater than the preset risk probability threshold, an access data security warning message is triggered;

[0035] Based on the data access security warning information, the corresponding user is terminated from accessing the data.

[0036] In this solution, the steps for obtaining the risk points specifically include:

[0037] Split the accessed data into multiple sub-data;

[0038] Based on the preset second time period, if there is a historical user who triggers access data security warning information when accessing the corresponding sub-data, the location of the corresponding sub-data is set as a risk point.

[0039] In this solution, the step of obtaining the preset risk probability specifically includes:

[0040] Obtaining the number of times that the sub-data is triggered to access data security warning information within a preset second time period;

[0041] Obtaining a total number of times that the corresponding sub-data is accessed by the user within a preset second time period;

[0042] Get the cumulative time value of the user's access to the corresponding sub-data;

[0043] If the accumulated time value of the user accessing the corresponding sub-data is less than the preset time threshold, the current access of the corresponding user will be deleted from the total number of times accessed by the user;

[0044] The preset risk probability of the corresponding risk point is obtained by dividing the number of times the sub-data is triggered to access the data security warning information within the preset second time period by the total number of times the corresponding sub-data is accessed by the user within the preset second time period.

[0045] A second aspect of the present invention provides a data security warning system, including a memory and a processor, wherein the memory stores a data security warning method program, and when the data security warning method program is executed by the processor, the following steps are implemented:

[0046] Obtain user access data information;

[0047] According to the user's access data information, the user's security authentication level and the access data security protection level are obtained;

[0048] Determine whether the user security authentication level is lower than the access data security protection level, and if so, trigger access data security warning information;

[0049] Based on the data access security warning information, the corresponding user is terminated from accessing the data.

[0050] In this solution, the step of obtaining the user security authentication level specifically includes:

[0051] Get the historical access records of the corresponding user;

[0052] According to the historical access records of the corresponding user, obtain the historical access time and historical access data operations of the corresponding user;

[0053] Determine whether there is any triggering access data security warning information in the historical data access operation, and if so, extract the number of times the triggering access data security warning information exists;

[0054] Based on the number of times the access data security warning information is triggered, the preset warning number impact safety factor table is searched to obtain the corresponding impact safety factor;

[0055] The historical access time of the corresponding user is multiplied by the preset access time weight coefficient and the corresponding impact safety coefficient to obtain the security authentication adjustment level of the corresponding user;

[0056] The user's security authentication adjustment level is added to the preset initial security authentication level to obtain the corresponding user security authentication level.

[0057] In this solution, the step of obtaining the preset initial security authentication level includes:

[0058] Obtain user registration information;

[0059] Extract keywords from user registration information;

[0060] Classify the keywords in the user registration information to obtain keyword categories;

[0061] According to the keyword category, query in the basic score table of the preset keyword category to obtain the basic score of the corresponding keyword;

[0062] According to the keyword category, the weight coefficient table of the preset keyword category is searched to obtain the weight coefficient of the corresponding keyword;

[0063] Multiply the basic score of the keyword by the weight coefficient of the corresponding keyword to obtain the score of the corresponding keyword;

[0064] Add up the scores of all keywords to get the total score of the corresponding user registration information;

[0065] Based on the preset score range within which the total score of the corresponding user's registration information falls, the initial security authentication level of the corresponding user is determined.

[0066] The present invention discloses a data security warning method and system, which improve the efficiency and accuracy of data security warnings. BRIEF DESCRIPTION OF THE DRAWINGS

[0067] Figure 1 A flow chart of a data security warning method of the present invention is shown;

[0068] Figure 2 A block diagram of a data security warning system of the present invention is shown. DETAILED DESCRIPTION

[0069] In order to more clearly understand the above-mentioned purpose, features and advantages of the present invention, the present invention is further described in detail below in conjunction with the accompanying drawings and specific embodiments. It should be noted that the embodiments of the present application and the features in the embodiments can be combined with each other without conflict.

[0070] In the following description, many specific details are set forth to facilitate a full understanding of the present invention. However, the present invention may also be implemented in other ways different from those described herein. Therefore, the protection scope of the present invention is not limited to the specific embodiments disclosed below.

[0071] Figure 1 A flow chart of a data security warning method of the present invention is shown.

[0072] S101, obtaining user access data information;

[0073] S102, obtaining the user security authentication level and the access data security protection level according to the user access data information;

[0074] S103, determining whether the user security authentication level is lower than the access data security protection level, and if so, triggering access data security warning information;

[0075] S104: Based on the data access security warning information, the corresponding user is stopped from accessing the data.

[0076] According to an embodiment of the present invention, the user access data information includes user information and accessed data information. The user security authentication level is obtained based on the user information; the access data security protection level is obtained based on the accessed data information, and then the user security authentication level is determined based on the access data security protection level. If the user security authentication level is lower than the access data security protection level, the access data security warning information is triggered.

[0077] According to an embodiment of the present invention, the step of obtaining the user security authentication level specifically includes:

[0078] Get the historical access records of the corresponding user;

[0079] According to the historical access records of the corresponding user, obtain the historical access time and historical access data operations of the corresponding user;

[0080] Determine whether there is any triggering access data security warning information in the historical data access operation, and if so, extract the number of times the triggering access data security warning information exists;

[0081] Based on the number of times the access data security warning information is triggered, the preset warning number impact safety factor table is searched to obtain the corresponding impact safety factor;

[0082] The historical access time of the corresponding user is multiplied by the preset access time weight coefficient and the corresponding impact safety coefficient to obtain the security authentication adjustment level of the corresponding user;

[0083] The user's security authentication adjustment level is added to the preset initial security authentication level to obtain the corresponding user security authentication level.

[0084] It should be noted that the user security authentication level is composed of the preset initial security authentication level and the user's security authentication adjustment level, wherein the user's security authentication adjustment level is affected by the user's historical access time and historical access data operations. The historical access data operations include data deletion, data modification and other operations during the historical access data process. The preset data operation permissions are used to determine whether the historical access data operation will trigger an access data security warning message. If the preset data operation permissions do not allow the corresponding historical access data operation, the corresponding access data security warning message will be triggered.

[0085] According to an embodiment of the present invention, the step of obtaining the preset initial security authentication level includes:

[0086] Obtain user registration information;

[0087] Extract keywords from user registration information;

[0088] Classify the keywords in the user registration information to obtain keyword categories;

[0089] According to the keyword category, query in the basic score table of the preset keyword category to obtain the basic score of the corresponding keyword;

[0090] According to the keyword category, the weight coefficient table of the preset keyword category is searched to obtain the weight coefficient of the corresponding keyword;

[0091] Multiply the basic score of the keyword by the weight coefficient of the corresponding keyword to obtain the score of the corresponding keyword;

[0092] Add up the scores of all keywords to get the total score of the corresponding user registration information;

[0093] Based on the preset score range within which the total score of the corresponding user's registration information falls, the initial security authentication level of the corresponding user is determined.

[0094] It should be noted that the keywords in the user registration information include name, ID number and other information. Different keywords correspond to different basic scores and authority coefficients. The basic score table of the preset keyword category stores various keyword categories and the basic scores of the corresponding keyword categories. The basic scores of the keyword categories are determined by table query; the weight coefficient table of the preset keyword category stores various keyword categories and the weight coefficients of the corresponding keyword categories. The weight coefficients of the keyword categories are determined by table query; the preset score range is divided by the preset score base. For example, if the preset score base is 10, the preset score range (0, 10] is the first level of initial security authentication, and the preset score range (10, 20] is the second level of initial security authentication... and so on. Each preset score range corresponds to an initial security authentication level, and the higher the initial security authentication level, the more data the corresponding user can access.

[0095] According to an embodiment of the present invention, it also includes:

[0096] When a user logs in to an account, it is determined whether the user has completed identity authentication. If so, the corresponding user login is normal; if not, a login abnormality prompt message is triggered;

[0097] Generate a login abnormality weight coefficient based on the login abnormality prompt information;

[0098] Multiply the user security authentication level by the login abnormality weight coefficient to obtain the revised user security authentication level.

[0099] It should be noted that users must pass identity authentication to log into their accounts, such as face recognition, password verification, etc. If other login methods are used, the user security authentication level of the logged-in user will be revised, and the login abnormality weight coefficient will be less than 1 and greater than or equal to 0.

[0100] According to an embodiment of the present invention, it also includes:

[0101] According to the user access data information, the corresponding user access data location is obtained;

[0102] Determine whether the user access data location is a risk point, and if so, extract the preset risk probability of the corresponding risk point;

[0103] Based on a preset first time period, all risk points in the user's access data location are obtained;

[0104] Accumulate the preset risk probabilities of all risk points in the user's access data location, and then multiply by the preset risk probability superposition coefficient to obtain the total risk probability of the corresponding user;

[0105] If the total risk probability of the corresponding user is greater than the preset risk probability threshold, an access data security warning message is triggered;

[0106] Based on the data access security warning information, the corresponding user is terminated from accessing the data.

[0107] It should be noted that when a user accesses data, the total risk probability is used to determine whether the current user's access is risky.

[0108] According to an embodiment of the present invention, the step of acquiring risk points specifically includes:

[0109] Split the accessed data into multiple sub-data;

[0110] Based on the preset second time period, if there is a historical user who triggers access data security warning information when accessing the corresponding sub-data, the location of the corresponding sub-data is set as a risk point.

[0111] It should be noted that, based on the preset second time period, for example, the preset second time period is 1 day, if the access data security warning information triggered by the historical user when accessing the corresponding sub-data exceeds 1 day, the risk point of the corresponding sub-data will be revoked.

[0112] According to an embodiment of the present invention, the step of obtaining the preset risk probability specifically includes:

[0113] Obtaining the number of times that the sub-data is triggered to access data security warning information within a preset second time period;

[0114] Obtaining a total number of times that the corresponding sub-data is accessed by the user within a preset second time period;

[0115] Get the cumulative time value of the user's access to the corresponding sub-data;

[0116] If the accumulated time value of the user accessing the corresponding sub-data is less than the preset time threshold, the current access of the corresponding user will be deleted from the total number of times accessed by the user;

[0117] The preset risk probability of the corresponding risk point is obtained by dividing the number of times the sub-data is triggered to access the data security warning information within the preset second time period by the total number of times the corresponding sub-data is accessed by the user within the preset second time period.

[0118] It should be noted that, for example, if the preset second time period is 1 day, the number of times the corresponding sub-data is triggered to access the data security warning information within 1 day will be extracted; for example, if the preset time threshold is 5 seconds, if the cumulative time for a user to access the corresponding sub-data is less than 5 seconds, the corresponding access record will be deleted, and the access will not be included in the total number of times accessed by the user; it should be noted that if the cumulative time value of the user's access to the corresponding sub-data is less than the preset time threshold, but the corresponding user has an access data operation that triggers the access data security warning information within the cumulative time value of accessing the corresponding sub-data, the access should be included in the total number of times accessed by the user.

[0119] According to an embodiment of the present invention, the step of obtaining the access data security protection level specifically includes:

[0120] Extracting data keywords from the accessed data information and the positions and quantity values ​​of the corresponding data keywords;

[0121] According to the position of the data keyword, a search is performed in a preset data keyword position encryption index table to obtain a first encryption index corresponding to the data keyword;

[0122] According to the data keyword, query in the preset data keyword basic encryption index table to obtain the basic encryption index of the corresponding data keyword;

[0123] Multiplying the basic encryption index of the corresponding data keyword by the quantity value of the corresponding data keyword to obtain a second encryption index of the data keyword;

[0124] The first encryption index of the data keyword is multiplied by the preset first encryption weight coefficient, and the second encryption index of the data keyword is multiplied by the preset second encryption weight coefficient to obtain the encryption index of the corresponding keyword;

[0125] The encryption indexes of all keywords are accumulated to obtain the total encryption index of the corresponding data;

[0126] The corresponding access data security protection level is determined based on the preset encryption index range within which the total encryption index of the corresponding data falls.

[0127] It should be noted that the preset data keyword position encryption index table stores various data keyword positions and the first encryption index corresponding to the data keyword positions, the preset data keyword basic encryption index table stores various data keywords and the basic encryption index of the data keywords, and the preset encryption index range is divided according to the preset encryption index cardinality. For example, if the preset encryption index cardinality is 5, the corresponding preset encryption index range can be divided into (0, 5], (5, 10], ... and so on, and each preset encryption index range corresponds to an access data security protection level, and the larger the value in the preset encryption index range, the higher the corresponding access data security protection level.

[0128] Figure 2 A block diagram of a data security warning system of the present invention is shown.

[0129] like Figure 2 As shown, the second aspect of the present invention provides a data security warning system 2, including a memory 21 and a processor 22, wherein the memory stores a data security warning method program, and when the data security warning method program is executed by the processor, the following steps are implemented:

[0130] Obtain user access data information;

[0131] According to the user's access data information, the user's security authentication level and the access data security protection level are obtained;

[0132] Determine whether the user security authentication level is lower than the access data security protection level, and if so, trigger access data security warning information;

[0133] Based on the data access security warning information, the corresponding user is terminated from accessing the data.

[0134] According to an embodiment of the present invention, the step of obtaining the user security authentication level specifically includes:

[0135] Get the historical access records of the corresponding user;

[0136] According to the historical access records of the corresponding user, obtain the historical access time and historical access data operations of the corresponding user;

[0137] Determine whether there is any triggering access data security warning information in the historical data access operation, and if so, extract the number of times the triggering access data security warning information exists;

[0138] Based on the number of times the access data security warning information is triggered, the preset warning number impact safety factor table is searched to obtain the corresponding impact safety factor;

[0139] The historical access time of the corresponding user is multiplied by the preset access time weight coefficient and the corresponding impact safety coefficient to obtain the security authentication adjustment level of the corresponding user;

[0140] The user's security authentication adjustment level is added to the preset initial security authentication level to obtain the corresponding user security authentication level.

[0141] According to an embodiment of the present invention, the step of obtaining the preset initial security authentication level includes:

[0142] Obtain user registration information;

[0143] Extract keywords from user registration information;

[0144] Classify the keywords in the user registration information to obtain keyword categories;

[0145] According to the keyword category, query in the basic score table of the preset keyword category to obtain the basic score of the corresponding keyword;

[0146] According to the keyword category, the weight coefficient table of the preset keyword category is searched to obtain the weight coefficient of the corresponding keyword;

[0147] Multiply the basic score of the keyword by the weight coefficient of the corresponding keyword to obtain the score of the corresponding keyword;

[0148] The scores of all keywords are accumulated to obtain the total score of the corresponding user registration information; based on the preset score range within which the total score of the corresponding user registration information falls, the feature value of the corresponding keyword is determined.

[0149] The user's initial security authentication level is obtained by multiplying the basic score of the keyword by the characteristic value of the corresponding keyword by the authority coefficient of the corresponding characteristic value.

[0150] The present invention discloses a data security warning method and system, which improve the efficiency and accuracy of data security warnings.

[0151] In the several embodiments provided in the present application, it should be understood that the disclosed devices and methods can be implemented in other ways. The device embodiments described above are only schematic. For example, the division of the units is only a logical function division. There may be other division methods in actual implementation, such as: multiple units or components can be combined, or can be integrated into another system, or some features can be ignored or not executed. In addition, the coupling, direct coupling, or communication connection between the components shown or discussed can be through some interfaces, and the indirect coupling or communication connection of the devices or units can be electrical, mechanical or other forms.

[0152] The units described above as separate components may or may not be physically separated, and the components displayed as units may or may not be physical units; they may be located in one place or distributed on multiple network units; some or all of the units may be selected according to actual needs to achieve the purpose of the present embodiment.

[0153] In addition, all functional units in the embodiments of the present invention may be integrated into one processing unit, or each unit may be separately used as a unit, or two or more units may be integrated into one unit; the above-mentioned integrated units may be implemented in the form of hardware or in the form of hardware plus software functional units.

[0154] Those skilled in the art can understand that: all or part of the steps of implementing the above method embodiments can be completed by hardware related to program instructions, and the aforementioned program can be stored in a computer-readable storage medium. When the program is executed, it executes the steps of the above method embodiments; and the aforementioned storage medium includes: mobile storage devices, read-only memories (ROM, Read-Only Memory), random access memories (RAM, Random Access Memory), disks or optical disks, etc. Various media that can store program codes.

[0155] Alternatively, if the above-mentioned integrated unit of the present invention is implemented in the form of a software function module and sold or used as an independent product, it can also be stored in a computer-readable storage medium. Based on this understanding, the technical solution of the embodiment of the present invention can be essentially or partly reflected in the form of a software product that contributes to the prior art. The computer software product is stored in a storage medium and includes several instructions for a computer device (which can be a personal computer, a server, or a network device, etc.) to execute all or part of the methods described in each embodiment of the present invention. The aforementioned storage medium includes: various media that can store program codes, such as mobile storage devices, ROM, RAM, magnetic disks or optical disks.

Claims

1. A data security warning method, characterized in that: include: Obtain user access data information; According to the user's access data information, the user's security authentication level and the access data security protection level are obtained; Determine whether the user security authentication level is lower than the access data security protection level, and if so, trigger access data security warning information; Based on the data access security warning information, the corresponding user is terminated from accessing the data.

2. A data security warning method according to claim 1, characterized in that: The step of obtaining the user security authentication level specifically includes: Get the historical access records of the corresponding user; According to the historical access records of the corresponding user, obtain the historical access time and historical access data operations of the corresponding user; Determine whether there is any triggering access data security warning information in the historical data access operation, and if so, extract the number of times the triggering access data security warning information exists; Based on the number of times the access data security warning information is triggered, the preset warning number impact safety factor table is searched to obtain the corresponding impact safety factor; The historical access time of the corresponding user is multiplied by the preset access time weight coefficient and the corresponding impact safety coefficient to obtain the security authentication adjustment level of the corresponding user; The user's security authentication adjustment level is added to the preset initial security authentication level to obtain the corresponding user security authentication level.

3. A data security warning method according to claim 2, characterized in that: The step of obtaining the preset initial security authentication level includes: Obtain user registration information; Extract keywords from user registration information; Classify the keywords in the user registration information to obtain keyword categories; According to the keyword category, query in the basic score table of the preset keyword category to obtain the basic score of the corresponding keyword; According to the keyword category, the weight coefficient table of the preset keyword category is searched to obtain the weight coefficient of the corresponding keyword; Multiply the basic score of the keyword by the weight coefficient of the corresponding keyword to obtain the score of the corresponding keyword; Add up the scores of all keywords to get the total score of the corresponding user registration information; Based on the preset score range within which the total score of the corresponding user's registration information falls, the initial security authentication level of the corresponding user is determined.

4. A data security warning method according to claim 1, characterized in that: Also includes: When a user logs in to an account, determine whether the user has completed identity authentication when logging in. If so, the corresponding user login is normal; If not, a login exception prompt message is triggered; Generate a login abnormality weight coefficient based on the login abnormality prompt information; Multiply the user security authentication level by the login abnormality weight coefficient to obtain the revised user security authentication level.

5. A data security warning method according to claim 1, characterized in that: Also includes: According to the user access data information, the corresponding user access data location is obtained; Determine whether the user access data location is a risk point, and if so, extract the preset risk probability of the corresponding risk point; Based on a preset first time period, all risk points in the user's access data location are obtained; Accumulate the preset risk probabilities of all risk points in the user's access data location, and then multiply by the preset risk probability superposition coefficient to obtain the total risk probability of the corresponding user; If the total risk probability of the corresponding user is greater than the preset risk probability threshold, an access data security warning message is triggered; Based on the data access security warning information, the corresponding user is terminated from accessing the data.

6. A data security warning method according to claim 5, characterized in that: The steps for obtaining the risk points specifically include: Split the accessed data into multiple sub-data; Based on the preset second time period, if there is a historical user who triggers access data security warning information when accessing the corresponding sub-data, the location of the corresponding sub-data is set as a risk point.

7. A data security warning method according to claim 5, characterized in that: The step of obtaining the preset risk probability specifically includes: Obtaining the number of times that the sub-data is triggered to access data security warning information within a preset second time period; Obtaining a total number of times that the corresponding sub-data is accessed by the user within a preset second time period; Get the cumulative time value of the user's access to the corresponding sub-data; If the accumulated time value of the user accessing the corresponding sub-data is less than the preset time threshold, the current access of the corresponding user will be deleted from the total number of times accessed by the user; The preset risk probability of the corresponding risk point is obtained by dividing the number of times that the sub-data is triggered to access the data security warning information within the preset second time period by the total number of times the corresponding sub-data is accessed by the user within the preset second time period.

8. A data security warning system, characterized in that: The system comprises a memory and a processor, wherein a data security warning method program is stored in the memory, and when the data security warning method program is executed by the processor, the following steps are implemented: Obtain user access data information; According to the user's access data information, the user's security authentication level and the access data security protection level are obtained; Determine whether the user security authentication level is lower than the access data security protection level, and if so, trigger access data security warning information; Based on the data access security warning information, the corresponding user is terminated from accessing the data.

9. A data security warning system according to claim 8, characterized in that: The step of obtaining the user security authentication level specifically includes: Get the historical access records of the corresponding user; According to the historical access records of the corresponding user, obtain the historical access time and historical access data operations of the corresponding user; Determine whether there is any triggering access data security warning information in the historical data access operation, and if so, extract the number of times the triggering access data security warning information exists; Based on the number of times the access data security warning information is triggered, the preset warning number impact safety factor table is searched to obtain the corresponding impact safety factor; The historical access time of the corresponding user is multiplied by the preset access time weight coefficient and the corresponding impact safety coefficient to obtain the security authentication adjustment level of the corresponding user; The user's security authentication adjustment level is added to the preset initial security authentication level to obtain the corresponding user security authentication level.

10. A data security warning system according to claim 9, characterized in that: The step of obtaining the preset initial security authentication level includes: Obtain user registration information; Extract keywords from user registration information; Classify the keywords in the user registration information to obtain keyword categories; According to the keyword category, query in the basic score table of the preset keyword category to obtain the basic score of the corresponding keyword; According to the keyword category, the weight coefficient table of the preset keyword category is searched to obtain the weight coefficient of the corresponding keyword; Multiply the basic score of the keyword by the weight coefficient of the corresponding keyword to obtain the score of the corresponding keyword; Add up the scores of all keywords to get the total score of the corresponding user registration information; Based on the preset score range within which the total score of the corresponding user's registration information falls, the initial security authentication level of the corresponding user is determined.

Citation Information

Cited By

  • Security access control method and device for commodity sales

    CN119918033A