Digital media management system based on digital certificate

Abstract

The invention discloses a digital media management system based on a digital certificate, and particularly relates to the technical field of digital management, a first access level is determined by acquiring a private key which can be provided by a user at present, and the highest digital media data level which the user wants to access is acquired as a second access level; obtaining state information in a private key providing process to obtain a state coefficient, obtaining an accessible level according to the state coefficient, the first level and user historical access information, comparing the accessible level with a second access level, and managing digital media data access authority corresponding to the second access level according to a comparison result. Therefore, if the user needs to urgently obtain some digital media data with the confidentiality level higher than that of the digital media data decrypted by a private key, whether the access permission corresponding to the digital media data to be accessed by the user can be started or not can be determined according to the actual situation, the influence on the user experience is reduced as much as possible, and meanwhile, the risk of data leakage is reduced.

Description

Technical Field

[0001] The present invention relates to the technical field of digital management, and in particular to a digital media management system based on digital certificates. Background Art

[0002] A digital media management system based on digital certificates is a system that ensures the secure management and access control of digital media by using digital certificate technology. Each user holds a pair of public and private keys in the system. The digital certificate contains the public key, which is used for identity authentication and data encryption. When a user accesses digital media, the system first verifies the digital certificate to confirm the user's identity and assigns corresponding access rights based on the user's identity. For protected digital media content, the system encrypts the data and sends it to the user. The user uses his or her own private key to decrypt the data to ensure that only legitimate users can view and operate digital media content. This system ensures the security of digital media and the effective management of user rights through encryption and identity authentication mechanisms.

[0003] In actual usage, the digital media data that can be decrypted by the user's private key can generally only be the digital media data with the corresponding confidentiality level or lower. However, if the user needs to urgently obtain some digital media data with a confidentiality level higher than that decrypted by the private key, if it cannot be obtained in time, it may affect the user's usage experience and delay the user's progress. If the digital media data with a confidentiality level higher than that decrypted by the private key is directly released, it may lead to the risk of data leakage. Summary of the invention

[0004] The purpose of the present invention is to solve the problem and propose a digital media management system based on digital certificates.

[0005] The present invention proposes a digital media management system based on digital certificates, the system comprising:

[0006] Preliminary access module: obtains the private key that the user can currently provide, determines the corresponding accessible digital media data level as the first access level, and obtains the highest digital media data level that the user wants to access as the second access level;

[0007] State coefficient module: obtains the time interval when the user fully provides the private key as the target time interval, obtains the state information of the private key provision process in the target time interval, and obtains the state coefficient according to the state information of the private key provision process;

[0008] Accessibility module: obtains the accessibility level according to the state coefficient, the first level and the user's historical access information, and uses the accessibility level as the third access level;

[0009] The permission management module compares the third access level with the second access level, and manages the digital media data access rights corresponding to the second access level according to the comparison result.

[0010] Optionally, the state coefficient module includes:

[0011] The state information includes a signal instability coefficient, a private key duration coefficient, and a system load coefficient;

[0012] The method for obtaining the signal stability coefficient is:

[0013] Get the actual network signal of the system at different times in the target time interval, and mark the actual network signal as F 实 l , l represents the number of the actual network signal of the system at different times in the target time interval, l = 1, 2, 3, 4, ..., e, e is the sequence number of the actual network signal, and e is a positive integer;

[0014] Calculate the actual network signal F at different times within the target time interval 实 l The standard deviation of is used as the signal instability index EG, and the calculation formula is:

[0015]

[0016] in, is the average value of the actual network signal at different times within the target time interval, and the expression obtained is:

[0017] Optionally, the state coefficient module further includes:

[0018] The private key input process is divided into multiple stages, and the actual duration of each stage and the corresponding preset optimal duration range are obtained respectively, and the actual duration of each stage is marked as R 实 s , and mark the corresponding preset optimal duration range as (R 短 s , R 长 s ), s represents the number of stages in the process of private key input, s = 1, 2, 3, 4, ..., h, h is a positive integer;

[0019] Enter the private key into the process. The actual duration of the phase R 实 s The preset optimal duration range is marked as (R 短 s , R 长 s) are re-labeled as W 实 y , y represents the actual duration of the stage during the private key input process R 实 s The preset optimal duration range is marked as (R 短 s , R 长 s ) is the number of the stages outside the scope of the invention, y=1, 2, 3, 4, ..., m, where m is a positive integer;

[0020] Calculate the private key duration coefficient. The calculation formula is: PU = ln(m / h+1), where PU is the private key duration coefficient.

[0021] Optionally, the state coefficient module further includes:

[0022] Divide the target time interval into several sub-intervals according to the preset window, and obtain the CPU usage, memory usage and disk I / O of the system in each sub-interval, and mark them as CPU t ,Memory t ,disk t , and set the corresponding maximum load threshold, marked as CPU high ,Memory high ,disk high , t represents the number of subintervals, t = 1, 2, 3, 4, ..., u, u is a positive integer;

[0023] The CPU in each sub-interval t ,Memory t ,disk t Divide by the corresponding CPU high ,Memory high ,disk high , get the CPU usage load factor FP of the sub-interval t 、Memory usage load factor FW t and Disk I / O Load Factor FX t ;

[0024] Calculate the system load factor using the following formula:

[0025]

[0026] Where QA is the system load factor, a1, a2, and a3 are preset weight values, and a1, a2, and a3 are all greater than 0.

[0027] Optionally, the state coefficient module further includes:

[0028] The state coefficients obtained based on the signal instability coefficient, the private key duration coefficient and the system load coefficient include:

[0029]

[0030] Wherein, Tsx is the state coefficient, EG, PU and QA are the signal instability coefficient, private key duration coefficient and system load coefficient respectively, α, β, γ are the preset proportional coefficients of the signal instability coefficient, private key duration coefficient and system load coefficient respectively, and α, β, γ are all greater than 0.

[0031] Optionally, the accessible module includes:

[0032] The user's historical access information includes the skip-level access coefficient, access authority enhancement coefficient and security incident involvement coefficient;

[0033] Obtaining the total number of times the user accesses the digital media data, and obtaining the number of times the user accesses beyond the level, and dividing the number of times the user accesses beyond the level by the total number of times the user accesses the digital media data, to obtain a coefficient of access beyond the level;

[0034] Obtain the number of times the user's access rights are upgraded and the time covered by the access rights upgrade, and divide the number of times the access rights are upgraded by the time covered by the access rights upgrade to obtain the access rights upgrade coefficient;

[0035] The total number of times the user accesses the digital media data is obtained, and the number of times the user accesses involve security events in the total number of times the user accesses, and the number of times the security events involve is divided by the total number of times the user accesses the digital media data to obtain a security event involvement coefficient.

[0036] Optionally, the accessible module further includes:

[0037] The accessibility level is obtained according to the status coefficient, the first level, the leap-level access coefficient, the access authority enhancement coefficient and the security incident involvement coefficient;

[0038] The first level is converted into the corresponding level value as the first level value. The accessible level is obtained according to the state coefficient, the first level value, the leapfrog access coefficient, the access authority enhancement coefficient and the security incident involvement coefficient. The calculation formula is:

[0039]

[0040] Where DGH is the accessibility coefficient, Tsx, kf, gv, wq and en are the state coefficient, first level value, skip-level access coefficient, access permission improvement coefficient and security incident involvement coefficient respectively, b1, b2, b3, b4 and b5 are the proportional coefficients of the state coefficient, first level value, skip-level access coefficient, access permission improvement coefficient and security incident involvement coefficient respectively, and b1, b2, b3, b4 and b5 are all greater than 0;

[0041] According to the accessibility coefficient, an accessibility level table corresponding to a preset accessibility coefficient is queried to obtain an accessibility level as the third access level.

[0042] Optionally, the rights management module includes:

[0043] comparing the third access level with the second access level, and if the third access level is greater than the second access level, enabling the user to have access to the digital media data corresponding to the second access level;

[0044] If the third access level is not greater than the second access level, the digital media data access permission corresponding to the second access level is not enabled for the user.

[0045] Beneficial effects of the present invention:

[0046] The present invention proposes a digital media management system based on digital certificates, which determines the first access level by obtaining the private key that the user can currently provide, and obtains the highest digital media data level that the user wants to access as the second access level, and then obtains the state information in the process of providing the private key, and obtains the state coefficient according to the state information in the process of providing the private key, and obtains the accessible level according to the state coefficient, the first level and the user's historical access information, and uses the accessible level as the third access level, compares the third access level with the second access level, and manages the digital media data access rights corresponding to the second access level according to the comparison result. In this way, if the user needs to urgently obtain some digital media data with a confidentiality level higher than that which can be decrypted by the private key, it can be determined according to the actual situation whether the access rights corresponding to the digital media data that the user wants to access can be enabled, thereby minimizing the impact on the user's usage experience as much as possible and reducing the risk of data leakage. BRIEF DESCRIPTION OF THE DRAWINGS

[0047] The present invention will be further described below in conjunction with the accompanying drawings.

[0048] Figure 1 A framework diagram of a digital media management system based on digital certificates provided by the present invention. DETAILED DESCRIPTION

[0049] The following will be combined with the drawings in the embodiments of the present invention to clearly and completely describe the technical solutions in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0050] Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in the field without making any creative work shall fall within the scope of protection of the present invention.

[0051] The embodiment of the present invention provides a digital media management system based on digital certificates. Figure 1 , Figure 1 A framework diagram of a digital media management system based on digital certificates provided by an embodiment of the present invention. The system includes:

[0052] Preliminary access module: obtains the private key that the user can currently provide, determines the corresponding accessible digital media data level as the first access level, and obtains the highest digital media data level that the user wants to access as the second access level;

[0053] State coefficient module: obtains the time interval when the user fully provides the private key as the target time interval, obtains the state information of the private key provision process in the target time interval, and obtains the state coefficient according to the state information of the private key provision process;

[0054] Accessibility module: obtains the accessibility level according to the state coefficient, the first level and the user's historical access information, and uses the accessibility level as the third access level;

[0055] The permission management module compares the third access level with the second access level, and manages the digital media data access rights corresponding to the second access level according to the comparison result.

[0056] Based on the digital certificate-based digital media management system provided by the embodiment of the present invention, through the above method, if a user needs to urgently obtain some digital media data with a confidentiality level higher than that which can be decrypted by the private key, it can be determined according to the actual situation whether the access rights corresponding to the digital media data that the user wants to access can be enabled, thereby minimizing the impact on the user experience and reducing the risk of data leakage.

[0057] It should be noted that the level of accessible digital media data corresponding to the private key that the user can currently provide is associated with a specific permission level. This permission level is set by the system administrator when generating a digital certificate. The permission level determines the sensitivity and importance of the digital media data that the user can access, and can therefore serve as the user's first access level.

[0058] In one embodiment, the status information includes a signal instability coefficient, a private key duration coefficient, and a system load coefficient;

[0059] The signal stability coefficient is obtained as follows:

[0060] Get the actual network signal of the system at different times in the target time interval, and mark the actual network signal as F 实 l , l represents the number of the actual network signal of the system at different times in the target time interval, l = 1, 2, 3, 4, ..., e, e is the sequence number of the actual network signal, and e is a positive integer;

[0061] Calculate the actual network signal F at different times within the target time interval 实 l The standard deviation of is used as the signal instability index EG, and the calculation formula is:

[0062]

[0063] in, is the average value of the actual network signal at different times within the target time interval, and the expression obtained is:

[0064] It should be noted that the actual network signals at different times in the target time interval can be acquired in real time according to a monitoring system in a digital media management system based on a digital certificate, or in other ways, which are not specifically limited.

[0065] It should be noted that the signal instability coefficient refers to the degree of instability of the actual network signal when the digital media management system based on the digital certificate is running; if the degree of instability of the actual network signal when the system is running is greater, it means that the digital media management system based on the digital certificate is less able to open the digital media data above the accessible digital media data level corresponding to the private key provided by the user, the reason is:

[0066] Reduced data transmission integrity: Unstable network signals may cause packet loss or errors during data transmission, which may prevent encrypted data from being correctly transmitted or decrypted. In this way, users may not be able to obtain complete or correct data when decrypting and accessing digital media data, affecting the validity and security of the data.

[0067] Increased risk of identity verification failure: Digital certificate verification usually relies on real-time network connection. If the network signal is unstable, the system may experience timeout or errors when verifying the digital certificate, resulting in identity verification failure or inaccuracy, thus affecting the accuracy of rights management.

[0068] Risk of man-in-the-middle attack: When the network signal is unstable, the data may need to be retransmitted multiple times, which increases the chance of man-in-the-middle attack. The attacker may forge or tamper with the data packet, thereby endangering the security of the system. If higher-level access is enabled in this case, the risk will be more significant.

[0069] Unable to ensure timely response: When the network is unstable, the system's response speed will be affected. If higher-level access is enabled in this case, users may still not be able to correctly access the required data after a long wait, which not only affects the user experience but may also lead to greater security risks.

[0070] Therefore, when a digital certificate-based digital media management system detects that the network signal is unstable, it tends to restrict users from accessing data above their normal permissions to ensure the security of the system and the integrity of the data, thereby reducing potential security risks.

[0071] In one embodiment, the method for obtaining the private key duration coefficient is:

[0072] The private key input process is divided into multiple stages (such as input, verification, confirmation, etc.), and the actual duration of each stage and the corresponding preset optimal duration range are obtained respectively, and the actual duration of each stage is marked as R 实 s , and mark the corresponding preset optimal duration range as (R 短 s , R 长 s ), s represents the number of stages in the process of private key input, s = 1, 2, 3, 4, ..., h, h is a positive integer;

[0073] Enter the private key into the process. The actual duration of the phase R 实 s The preset optimal duration range is marked as (R 短 s , R 长 s ) are re-labeled as W 实 y , y represents the actual duration of the stage during the private key input process R 实 s The preset optimal duration range is marked as (R 短 s , R 长 s ) is the number of the stages outside the scope of the invention, y=1, 2, 3, 4, ..., m, where m is a positive integer;

[0074] Calculate the private key duration coefficient. The calculation formula is: PU = ln(m / h+1), where PU is the private key duration coefficient.

[0075] It should be noted that the actual duration of each stage can be obtained in real time based on the monitoring system in the digital media management system based on the digital certificate, or in other ways, which are not specifically limited; in addition, the preset optimal duration range is determined by professionals based on the actual situation, which is not specifically limited.

[0076] It should be noted that the private key duration coefficient refers to the degree to which the actual duration of each stage (such as input, verification, confirmation, etc.) during the private key input process deviates from the corresponding preset optimal duration range; the greater the deviation, the less likely the digital media management system based on the digital certificate can open digital media data above the accessible digital media data level corresponding to the private key provided by the user, because:

[0077] Abnormal behavior indicators: Time deviations during the private key input process may be a sign of malicious attacks or abnormal user operations. For example, attackers may try to bypass the normal verification process through automated scripts or other tools. These abnormal behaviors increase the risk of system compromise.

[0078] Reduced verification reliability: If the time deviation of the verification phase is too large, it may mean that the verification process is incomplete or interfered with, which reduces the reliability of the verification results and may allow unauthorized users to access highly sensitive data.

[0079] System load problem: Time deviation may be caused by excessive system load. If the system continues to allow users to access higher-authorized data under high load, it may further aggravate system instability and even cause system crash.

[0080] Network instability: Time deviation can also be caused by network instability, especially during the verification phase. If the network is not in good condition, data transmission may be interrupted or delayed. In such an environment, enabling higher-level data access may result in incomplete or erroneous data transmission.

[0081] Therefore, when a digital certificate-based digital media management system detects a large deviation in the private key duration coefficient, it usually restricts or prohibits users from accessing data above the current accessible level to ensure the security and stability of the system and minimize the risk of data leakage and system failure.

[0082] In one embodiment, the method for obtaining the system load factor is:

[0083] Divide the target time interval into several sub-intervals according to the preset window, and obtain the CPU usage, memory usage and disk I / O of the system in each sub-interval, and mark them as CPU t ,Memory t ,disk t , and set the corresponding maximum load threshold, marked as CPU high ,Memory high ,disk high , t represents the number of subintervals, t = 1, 2, 3, 4, ..., u, u is a positive integer;

[0084] The CPU in each sub-interval t ,Memory t ,disk t Divide by the corresponding CPU high ,Memory high ,disk high , get the CPU usage load factor FP of the sub-interval t 、Memory usage load factor FW t and Disk I / O Load Factor FX t ;

[0085] Calculate the system load factor using the following formula:

[0086]

[0087] Where QA is the system load factor, a1, a2, and a3 are preset weight values, and a1, a2, and a3 are all greater than 0.

[0088] It should be noted that the CPU usage, memory usage and disk I / O of the system in each sub-interval can be directly obtained in real time from the operation log in the digital media management system based on the digital certificate, or other methods are not limited to the specific ones; in addition, the corresponding threshold CPU high ,Memory high ,disk high It is determined by professionals based on actual circumstances and is not specifically limited.

[0089] It should be noted that the system load factor refers to the actual system load level of the digital media management system based on the digital certificate when it is running; if the load level is greater, it means that the digital media management system based on the digital certificate is less able to open the digital media data above the accessible digital media data level corresponding to the private key provided by the user, because:

[0090] System performance degradation: When the system load is too high, the CPU, memory, and disk I / O resources may be heavily occupied, resulting in a slow system response. This may cause users to experience delays or freezes when performing key operations (such as private key verification, encrypted data processing, etc.), affecting the overall performance and stability of the system.

[0091] Increased risk of data processing errors: Under high load, the system may not be able to process and transmit data in a timely and accurate manner, especially in operations involving highly sensitive data. The risk of data processing errors is greatly increased. This may cause data encryption or decryption failures, or generate incomplete data streams, ultimately affecting the security and integrity of the data.

[0092] Reduced security: Under high load, the system may experience resource contention or resource shortage, increasing the risk of malicious attacks. For example, under high load, the system may have vulnerabilities due to memory overflow or processor bottleneck, which can be exploited by attackers. In this case, enabling data access with higher permissions may make the system more vulnerable and increase potential security threats.

[0093] Therefore, when the system load is too high, the digital media management system based on digital certificates should restrict users from accessing data that exceeds their normal permissions to ensure system security and data integrity and reduce potential risks caused by excessive load.

[0094] In one embodiment, obtaining the state coefficient according to the state information in the private key provision process includes:

[0095] The state coefficients obtained based on the signal instability coefficient, the private key duration coefficient and the system load coefficient include:

[0096]

[0097] Wherein, Tsx is the state coefficient, EG, PU and QA are the signal instability coefficient, private key duration coefficient and system load coefficient respectively, α, β, γ are the preset proportional coefficients of the signal instability coefficient, private key duration coefficient and system load coefficient respectively, and α, β, γ are all greater than 0.

[0098] In one embodiment, the user's historical access information includes a skip-level access coefficient, an access authority enhancement coefficient, and a security incident involvement coefficient;

[0099] Obtaining the total number of times the user accesses the digital media data, and obtaining the number of times the user accesses beyond the level, and dividing the number of times the user accesses beyond the level by the total number of times the user accesses the digital media data, to obtain a coefficient of access beyond the level;

[0100] Obtain the number of times the user's access rights are upgraded and the time covered by the access rights upgrade, and divide the number of times the access rights are upgraded by the time covered by the access rights upgrade to obtain the access rights upgrade coefficient;

[0101] The total number of times the user accesses the digital media data is obtained, and the number of times the user accesses involve security events in the total number of times the user accesses, and the number of times the security events involve is divided by the total number of times the user accesses the digital media data to obtain a security event involvement coefficient.

[0102] It should be noted that the total number of times users access digital media data, the number of times user access rights are enhanced, the time covered by the enhanced access rights, and the number of security incidents involved in the total number of user accesses can all be obtained through the operation storage log in the digital media management system based on digital certificates, or other methods, which are not specifically limited.

[0103] In one embodiment, obtaining the accessible level according to the state coefficient, the first level and the user's historical access information includes:

[0104] The accessibility level is obtained according to the status coefficient, the first level, the leap-level access coefficient, the access authority enhancement coefficient and the security incident involvement coefficient;

[0105] The first level is converted into the corresponding level value as the first level value. The accessible level is obtained according to the state coefficient, the first level value, the leapfrog access coefficient, the access authority enhancement coefficient and the security incident involvement coefficient. The calculation formula is:

[0106]

[0107] Where DGH is the accessibility coefficient, Tsx, kf, gv, wq and en are the state coefficient, first level value, skip-level access coefficient, access permission improvement coefficient and security incident involvement coefficient respectively, b1, b2, b3, b4 and b5 are the proportional coefficients of the state coefficient, first level value, skip-level access coefficient, access permission improvement coefficient and security incident involvement coefficient respectively, and b1, b2, b3, b4 and b5 are all greater than 0;

[0108] According to the accessibility coefficient, an accessibility level table corresponding to a preset accessibility coefficient is queried to obtain an accessibility level as the third access level.

[0109] It should be noted that the accessibility level table corresponding to the preset accessibility coefficient is determined by professionals according to actual conditions and is not specifically limited.

[0110] In one embodiment, comparing the third access level with the second access level, and managing the digital media data access rights corresponding to the second access level according to the comparison result includes:

[0111] comparing the third access level with the second access level, and if the third access level is greater than the second access level, enabling the user to have access to the digital media data corresponding to the second access level;

[0112] If the third access level is not greater than the second access level, the digital media data access permission corresponding to the second access level is not enabled for the user.

[0113] In one implementation method, through the above method, if a user needs to urgently obtain some digital media data with a confidentiality level higher than that which can be decrypted by the private key, it can be determined based on the actual situation whether the access rights corresponding to the digital media data that the user wants to access can be enabled, thereby minimizing the impact on the user experience and reducing the risk of data leakage.

[0114] The above is a detailed description of an embodiment of the present invention, but the content is only a preferred embodiment of the present invention and cannot be considered to limit the scope of implementation of the present invention. All equivalent changes and improvements made within the scope of the present invention should still fall within the scope of the patent coverage of the present invention.

Claims

1. A digital media management system based on digital certificates, characterized in that: The system comprises: Preliminary access module: obtains the private key that the user can currently provide, determines the corresponding accessible digital media data level as the first access level, and obtains the highest digital media data level that the user wants to access as the second access level; State coefficient module: obtains the time interval when the user fully provides the private key as the target time interval, obtains the state information of the private key provision process in the target time interval, and obtains the state coefficient according to the state information of the private key provision process; Accessibility module: obtains the accessibility level according to the state coefficient, the first level and the user's historical access information, and uses the accessibility level as the third access level; The permission management module compares the third access level with the second access level, and manages the digital media data access rights corresponding to the second access level according to the comparison result.

2. The digital media management system based on digital certificates according to claim 1, characterized in that: The state coefficient module includes: The state information includes a signal instability coefficient, a private key duration coefficient, and a system load coefficient; The method for obtaining the signal stability coefficient is: Get the actual network signal of the system at different times in the target time interval, and mark the actual network signal as F 实 l , l represents the number of the actual network signal of the system at different times in the target time interval, l = 1, 2, 3, 4, ..., e, e is the sequence number of the actual network signal, and e is a positive integer; Calculate the actual network signal F at different times within the target time interval 实 l The standard deviation of is used as the signal instability index EG, and the calculation formula is: in, is the average value of the actual network signal at different times within the target time interval, and the expression obtained is:

3. The digital media management system based on digital certificates according to claim 2, characterized in that: The state coefficient module also includes: The private key input process is divided into multiple stages, and the actual duration of each stage and the corresponding preset optimal duration range are obtained respectively, and the actual duration of each stage is marked as R 实 s, and mark the corresponding preset optimal duration range as (R 短 s , R 长 s ), s represents the number of stages in the process of private key input, s = 1, 2, 3, 4, ..., h, h is a positive integer; Enter the private key into the process. The actual duration of the phase R 实 The optimal duration range of s is marked as (R 短 s , R 长 s ) are re-labeled as W 实 y , y represents the actual duration of the stage during the private key input process R 实 s The preset optimal duration range is marked as (R 短 s , R 长 s ) is the number of the stages outside the scope of the invention, y=1, 2, 3, 4, ..., m, where m is a positive integer; Calculate the private key duration coefficient. The calculation formula is: PU = ln(m / h+1), where PU is the private key duration coefficient.

4. The digital media management system based on digital certificates according to claim 3, characterized in that: The state coefficient module also includes: Divide the target time interval into several sub-intervals according to the preset window, and obtain the GPU usage, memory usage and disk I / O of the system in each sub-interval, and mark them as CPU t ,Memory t ,disk t , and set the corresponding maximum load threshold, marked as CPU high， Memory high ,disk high , t represents the number of subintervals, t = 1, 2, 3, 4, ..., u, u is a positive integer; The CPU in each sub-interval t ,Memory t ,disk t Divide by the corresponding CPU high ,Memory high ,disk high , get the GPU usage load factor FP of this sub-interval t 、Memory usage load factor FW t and disk I / 0 load factor FX t ; Calculate the system load factor using the following formula: Where QA is the system load factor, a1, a2, and a3 are preset weight values, and a1, a2, and a3 are all greater than 0.

5. The digital media management system based on digital certificates according to claim 4, characterized in that: The state coefficient module also includes: The state coefficients obtained based on the signal instability coefficient, the private key duration coefficient and the system load coefficient include: Wherein, Tsx is the state coefficient, EG, PU and QA are the signal instability coefficient, private key duration coefficient and system load coefficient respectively, α, β, γ are the preset proportional coefficients of the signal instability coefficient, private key duration coefficient and system load coefficient respectively, and α, β, γ are all greater than 0.

6. The digital media management system based on digital certificates according to claim 1, characterized in that: The accessible modules include: The user's historical access information includes the skip-level access coefficient, access authority enhancement coefficient and security incident involvement coefficient; Obtaining the total number of times the user accesses the digital media data, and obtaining the number of times the user accesses beyond the level, and dividing the number of times the user accesses beyond the level by the total number of times the user accesses the digital media data, to obtain a coefficient of access beyond the level; Obtain the number of times the user's access rights are upgraded and the time covered by the access rights upgrade, and divide the number of times the access rights are upgraded by the time covered by the access rights upgrade to obtain the access rights upgrade coefficient; The total number of times the user accesses the digital media data is obtained, and the number of times the user accesses involve security events in the total number of times the user accesses, and the number of times the security events involve is divided by the total number of times the user accesses the digital media data to obtain a security event involvement coefficient.

7. The digital media management system based on digital certificates according to claim 1, characterized in that: The accessible module also includes: The accessibility level is obtained according to the status coefficient, the first level, the leap-level access coefficient, the access authority enhancement coefficient and the security incident involvement coefficient; The first level is converted into the corresponding level value as the first level value. The accessible level is obtained according to the state coefficient, the first level value, the leapfrog access coefficient, the access authority enhancement coefficient and the security incident involvement coefficient. The calculation formula is: Where DGH is the accessibility coefficient, Tsx, kf, gv, wq and en are the state coefficient, first level value, skip-level access coefficient, access permission improvement coefficient and security incident involvement coefficient respectively, b1, b2, b3, b4 and b5 are the proportional coefficients of the state coefficient, first level value, skip-level access coefficient, access permission improvement coefficient and security incident involvement coefficient respectively, and b1, b2, b3, b4 and b5 are all greater than 0; According to the accessibility coefficient, an accessibility level table corresponding to a preset accessibility coefficient is queried to obtain an accessibility level as the third access level.

8. The digital media management system based on digital certificates according to claim 1, characterized in that: The rights management module includes: comparing the third access level with the second access level, and if the third access level is greater than the second access level, enabling the user to have access to the digital media data corresponding to the second access level; If the third access level is not greater than the second access level, the digital media data access permission corresponding to the second access level is not enabled for the user.

Images