Data security management method and system
By establishing a trusted network connection and one-way channel authorization between the ear canal data collection terminal and the data management terminal, the ear canal data is collected, analyzed and encrypted, which solves the problem of limited design size of earphone rubber sleeves and leakage of data collection in the existing technology. and error issues, achieving safe, personalized and efficient collection of ear canal data, and improving the quality and efficiency of headphone design.
Patent Information
- Application Number
- CN202411161779.5
- Authority / Receiving Office
- CN · China
- Patent Type
- Applications(China)
- Current Assignee / Owner
- Filing Date
- 2024-08-23
- Publication Date
- 2025-01-21
AI Technical Summary
The rubber sleeve design size of existing in-ear headphones is limited, which leads to the problem of easy slipping of the headphones, and the existing data collection methods have the risk of data leakage and subjective judgment errors.
Through a trusted network connection between the ear canal data collection terminal and the data management terminal, one-way channel authorization is established, the ear canal data is collected and analyzed, the data is divided according to attributes, the security management level is set, desensitization and encryption are performed, and finally the data is The management terminal splices and decrypts the data to form the ear canal sample set.
It achieves safe, personalized and efficient collection of ear canal data, avoids data leakage and subjective judgment errors, and improves the quality and efficiency of headphone design.
Smart Images

Figure CN119337393A_ABST
Abstract
Description
Technical Field
[0001] The present invention relates to the field of data security technology, and in particular to a data security management method and system. Background Art
[0002] As people's living standards continue to improve and they yearn for a better life, they look forward to being exposed to more interesting multimedia content every day, such as short videos, news, videos, music and movies. There is an increasing demand for more convenient wireless headphones, and high-quality and feature-rich wireless headphones are very popular. In-ear headphones, as the best among them, are given priority by more and more consumers.
[0003] Although some high-end in-ear headphones are equipped with three to five sizes of rubber covers for users to choose from to better fit their ears, the diversity of the rubber cover design is limited by cost and versatility, resulting in limited sizes. There is still the problem that the headphones are easy to slip off due to the mismatch between the rubber cover and the ear.
[0004] To this end, headphone designers have been committed to providing more suitable rubber sleeves. When designing, they choose to collect ear canal data of the target group through questionnaires and recruiting volunteers, and use modeling analysis as sample data to obtain several more common size specifications. Obviously, the sample data obtained in this way is limited in magnitude and there is a risk of data leakage; therefore, it is necessary to provide a more personalized and secure solution. Summary of the invention
[0005] The purpose of the present invention is to provide a data security management method and system, aiming at solving the problems mentioned in the above background technology.
[0006] The first aspect of the present invention is achieved by a data security management method, the method comprising: Establish a trusted network connection for the ear canal data collection terminal and data management terminal, and authorize a one-way channel for data transmission; Analyze the collected ear canal data, divide the ear canal data according to attributes, and obtain at least two ear canal sub-data with different attributes; and set a security management level for the ear canal sub-data based on the attributes; Desensitize the ear canal sub-data at different security management levels, and select the specified encryption algorithm to perform encryption at different levels; After receiving all the ear canal sub-data, the data management terminal splices them and checks the integrity of the data. If it is incomplete, it checks for omissions; if it is complete, all the ear canal sub-data are decrypted using a decryption algorithm that matches the encryption algorithm to make an ear canal sample set.
[0007] Furthermore, the step of establishing a trusted network connection between the ear canal data collection terminal and the data management terminal and authorizing a one-way channel for data transmission specifically includes: When the ear canal data acquisition terminal is being charged through a preset charging base, a wireless communication connection is established with the charging base; When the wireless communication connection is established, a connection request of the charging base is triggered, so that the charging base communicates with the data management terminal, and the data management terminal performs identity authentication for the communication connection; After the data management terminal confirms that the identity authentication is passed, a one-way channel authorization for data transmission is performed, and the ear canal data collected by the ear canal data collection terminal is obtained through the charging base; The one-way channel allows data to be transmitted from the ear canal data acquisition terminal to the data management terminal via the charging base.
[0008] Furthermore, the one-way channel prohibits the ear canal data acquisition terminal from transmitting data to the data management terminal in a non-charging state.
[0009] Furthermore, the method further comprises: Establish a monitoring and auditing unit to monitor the use of charging bases; And, audit and analyze the monitoring records and generate audit reports.
[0010] Furthermore, the step of analyzing the collected ear canal data and dividing the ear canal data according to attributes specifically includes: Analyze the collected ear canal data, mine the user information to which the ear canal data belongs, and mark the source address of the ear canal data transmission; Clean the transmitted ear canal data, remove noise and repeated information, and obtain ear canal feature data; The attributes of the data are determined according to the analysis results, and the user information, the source address, and the ear canal feature data are divided into first ear canal sub-data, second ear canal sub-data, and third ear canal sub-data according to the determined attributes.
[0011] Furthermore, the step of setting a security management level for the ear canal sub-data based on the attribute specifically includes: Based on the attribute, setting the first ear canal sub-data to a first security level, setting the second ear canal sub-data to a second security level, and setting the third ear canal sub-data to a third security level; The encryption levels of the first security level, the second security level and the third security level decrease in descending order.
[0012] Furthermore, before the step of performing a desensitization operation on the ear canal sub-data of different security management levels, the method further includes: Establish the corresponding relationship between security management level and data sensitivity level; Select two or more desensitizing operation measures and establish a one-to-one mapping relationship between the desensitizing operation measures and the data sensitivity level.
[0013] Furthermore, the specified encryption algorithms include: AES encryption algorithm, DES encryption algorithm, RSA encryption algorithm and SHA encryption algorithm.
[0014] A second aspect of the present invention is a data security management system used in the method, the system comprising: The authority management module is used to establish a trusted network connection between the ear canal data collection terminal and the data management terminal, and to authorize a one-way channel for data transmission; A data partitioning module, used to analyze the collected ear canal data, partition the ear canal data according to attributes, and obtain at least two ear canal sub-data with different attributes; and set a security management level for the ear canal sub-data based on the attributes; The data encryption and decryption module is used to desensitize the ear canal sub-data of different security management levels and select the specified encryption algorithm to perform encryption at different levels; The data processing module is used to splice and check the integrity of the data after the data management terminal receives all the ear canal sub-data. If it is incomplete, it will check for omissions; if it is complete, all the ear canal sub-data will be decrypted by a decryption algorithm matching the encryption algorithm to facilitate the formation of an ear canal sample set.
[0015] Wherein, the rights management module includes: A charging matching unit, used for wirelessly connecting the ear canal data acquisition terminal with the charging base when the ear canal data acquisition terminal is charged through a preset charging base; A communication authentication unit, used to trigger a connection request of the charging base when the wireless communication connection is established, so that the charging base communicates with the data management terminal, and the data management terminal performs identity authentication for the communication connection; The channel establishment unit is used to authorize a one-way channel for data transmission after the data management terminal confirms that the identity authentication has passed, and obtain the ear canal data collected by the ear canal data collection terminal through the charging base.
[0016] The data security management method provided by the present invention has the following effects compared with the prior art: ear canal data of different users can be continuously collected through an ear canal data acquisition terminal, and a sufficient number of ear canal data acquisition terminals can obtain ear canal data of a considerable magnitude. Compared with methods such as questionnaires, the lack of manual participation in the collection can avoid errors caused by subjective judgment, and can avoid data leakage during data processing. In addition, the data collection has a high degree of automation; and in the process of transmitting data from the ear canal data acquisition terminal to the data management terminal, different security management levels can be set according to the attributes of the data division, and then different levels of encryption can be performed to ensure data security and high efficiency of data processing; a sufficient number of ear canal data is conducive to supporting the quality and efficiency improvement of in-ear headphone design. BRIEF DESCRIPTION OF THE DRAWINGS
[0017] Figure 1 A flowchart of a data security management method provided by an embodiment of the present invention; Figure 2 is a first sub-flow chart of an embodiment of the present invention; Figure 3 is a second sub-flow chart of an embodiment of the present invention; Figure 4 is a third sub-flow chart of an embodiment of the present invention; Figure 5 is a fourth sub-flow chart of an embodiment of the present invention; Figure 6 A structural block diagram of a data security management system provided by an embodiment of the present invention; Figure 7 This is a structural block diagram of a rights management module in an embodiment of the present invention; Figure 8 It is a connection block diagram of the ear canal data acquisition terminal and the data management terminal in the embodiment of the present invention; Fig. 9 FIG. 4 is a block diagram of the internal structure of a computer device in one embodiment. DETAILED DESCRIPTION
[0018] In order to make the purpose, technical solution and advantages of the present invention more clearly understood, the present invention is further described in detail below in conjunction with the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are only used to explain the present invention and are not intended to limit the present invention.
[0019] like Figure 1 As shown, in one embodiment, a data security management method can be applied to data transmission and management between an ear canal data acquisition terminal and a data management terminal, wherein the ear canal data acquisition terminal can select an otoscope with a probe or a camera, an ear endoscope, or other ear canal inspection equipment, etc., and the data management terminal can use a cloud server, such as Figure 8 As shown; generally, one or more ear canal data acquisition terminals are equipped with a charging base, for example: ear canal data acquisition terminal A, ear canal data acquisition terminal B, ear canal data acquisition terminal C, ear canal data acquisition terminal D are equipped with charging base A, ear canal data acquisition terminal X, ear canal data acquisition terminal Y, ear canal data acquisition terminal Z, etc. are equipped with charging base B; charging base A and charging base B can communicate with the cloud server through a mobile communication network or a wireless network when powered.
[0020] Exemplarily, the method of this embodiment may include steps S101 to S106; S101: Establish a trusted network connection between the ear canal data collection terminal and the data management terminal, and authorize a one-way channel for data transmission; S102: Analyze the collected ear canal data, divide the ear canal data according to attributes, and obtain at least two ear canal sub-data with different attributes; and set a security management level for the ear canal sub-data based on the attributes; The attributes of ear canal data can be divided into: user privacy information, user distinguishing information, data collection parameters such as collection address and time, and the remaining information: can be made public; User privacy information includes name, age, and gender, and user distinguishing information includes work, headset usage, etc. In some embodiments, the ear canal data may not include user privacy information or user distinguishing information; Among them, the security management levels are: top secret, confidential, secret and public; Generally, the collected ear canal data does not involve top secret or confidential information, so the secret level can be divided into several sub-levels, such as: first-level secret, second-level secret, etc. For example, Figure 4 As shown, the step of analyzing the collected ear canal data and dividing the ear canal data according to attributes specifically includes: S401: Analyze the collected ear canal data, mine the user information to which the ear canal data belongs, and mark the source address of the ear canal data transmission; S402: Clean the transmitted ear canal data, delete noise and repeated information, and obtain ear canal feature data; S403: Determine the attributes of the data according to the analysis result, and divide the user information, the source address, and the ear canal feature data into first ear canal sub-data, second ear canal sub-data, and third ear canal sub-data according to the determined attributes; Exemplarily, the step of setting a security management level for the ear canal sub-data based on the attribute specifically includes: Based on the attribute, setting the first ear canal sub-data to a first security level, setting the second ear canal sub-data to a second security level, and setting the third ear canal sub-data to a third security level; The encryption levels of the first security level, the second security level and the third security level are decreasing; of course, this example is not limited to three security levels, and more levels can be set according to actual needs.
[0021] S103: desensitizing the ear canal sub-data at different security management levels, and selecting a designated encryption algorithm to perform encryption at different levels; For example, by desensitizing user privacy information and user distinguishing information, even if the remaining data is made public, it cannot be associated with the user, thus preventing possible security risks. The specified encryption algorithms include: AES encryption algorithm, DES encryption algorithm, RSA encryption algorithm and SHA encryption algorithm. The specific algorithm can be flexibly selected according to the security management level. You can choose one or more algorithms, which will not be described in detail here.
[0022] S104: After receiving all the ear canal sub-data, the data management terminal performs splicing and checks the integrity of the data; and, When data is spliced, reverse splicing is performed according to the divided positions; When dividing the ear canal sub-data, each divided sub-data can be sorted and numbered; Afterwards, the labels are transmitted synchronously when the data is transmitted, so as to facilitate the subsequent data splicing; S105: If incomplete, conduct omission check; By checking for omissions, we can find out whether there is a failure in the communication channel, and whether there is data theft or substitution, thus improving the security of data transmission. S106: If complete, decrypt all ear canal sub-data using a decryption algorithm that matches the encryption algorithm to generate an ear canal sample set; It is easy to understand that the encryption algorithm and decryption algorithm in this step can be a set of data processing algorithms, which can perform both encryption and decryption, such as the AES encryption algorithm in the symmetric encryption algorithm; Alternatively, the encryption algorithm and decryption algorithm use a pair of keys, namely a public key and a private key. The public key is used to encrypt data, and the private key is used to decrypt data.
[0023] For example: RSA encryption algorithm: is a very popular asymmetric encryption algorithm. During use, the data management terminal uses the RSA encryption algorithm to generate a pair of public and private keys, and discloses the public key to the ear canal data collection terminal. The ear canal data collection terminal uses the public key to encrypt the ear canal data and sends it to the data management terminal. The data management terminal uses the private key to decrypt it, ensuring the security of the ear canal data during transmission.
[0024] In an example of this embodiment, Figure 2 As shown, the steps of establishing a trusted network connection between the ear canal data collection terminal and the data management terminal and authorizing a one-way channel for data transmission specifically include: S201: When the ear canal data acquisition terminal is charged through a preset charging base, wireless communication is established with the charging base; In this step, one charging base can charge one ear canal data acquisition terminal, or one charging base can charge multiple ear canal data acquisition terminals. The charging base is provided with a communication module (such as a Bluetooth communication module, a wireless local area network or a mobile communication network), which can communicate with a 4G / 5G base station to facilitate data transmission with a cloud server.
[0025] S202: When the wireless communication connection is established, a connection request of the charging base is triggered, so that the charging base communicates with the data management terminal, and the data management terminal performs identity authentication for the communication connection; One scenario is: the ear canal data collection terminal is docked with the charging base and starts charging. At this time, the charging base establishes a wireless communication connection to collect the ear canal data collected by the ear canal data collection terminal; at the same time, the connection request of the charging base is triggered to connect with the cloud server (i.e., the data management terminal). The cloud server verifies the charging base. If the verification is successful, the charging base can communicate with the data management terminal. S203: after the data management terminal confirms that the identity authentication is passed, a one-way channel authorization for data transmission is performed, and the ear canal data collected by the ear canal data collection terminal is obtained through the charging base; Wherein, the one-way channel allows data to be transmitted one-way from the ear canal data acquisition terminal to the data management terminal via the charging base; Of course, in some scenarios, the data management terminal can be temporarily allowed to send system data to the charging base and ear canal data collection terminal, such as system upgrades, bug repairs, etc.
[0026] In an example of this embodiment, the unidirectional channel denies the ear canal data acquisition terminal from transmitting data to the data management terminal when not charging; in this way, data leakage of the ear canal data acquisition terminal can be physically isolated, privacy information can be protected, and data management security can be improved.
[0027] In one embodiment, Figure 3 As shown, the method also includes: S301, establishing a monitoring and auditing unit to monitor the use of the charging base; And, audit and analyze the monitoring records and generate audit reports.
[0028] In an example of this embodiment, the usage of the charging base is the number of times it is used, the location of use, the time of use, etc. within a certain period of time.
[0029] In one embodiment, Figure 5 As shown, before the step of performing desensitization operation on the ear canal sub-data of different security management levels, the method further includes: S501: Establishing a corresponding relationship between security management level and data sensitivity level; S502: Select two or more desensitizing operation measures, and establish a one-to-one mapping relationship between the desensitizing operation measures and the data sensitivity levels.
[0030] Among them, if there are three security management levels, then there can also be three data sensitivity levels; Correspondingly, three desensitization operation measures can be set, such as: garbled characters, random sorting, deletion, addition, etc.
[0031] The collected ear canal data is analyzed and divided according to the attributes, which can be realized by machine learning, specifically a reinforcement learning model. The attribute types can be generated by machine learning, or edited and classified by senior experts.
[0032] In another embodiment, Figure 6 As shown, a data security management system is used for the method described, and the system includes: The authority management module 100 is used to establish a trusted network connection between the ear canal data collection terminal and the data management terminal, and to authorize a one-way channel for data transmission; The data partitioning module 200 is used to analyze the collected ear canal data, partition the ear canal data according to attributes, and obtain at least two ear canal sub-data with different attributes; and set a security management level for the ear canal sub-data based on the attributes; The data encryption and decryption module 300 is used to perform desensitization operations on ear canal sub-data of different security management levels, and select a specified encryption algorithm to perform encryption at different levels; The data processing module 400 is used to splice and check the integrity of the data after the data management terminal receives all the ear canal sub-data. If it is incomplete, it will check for omissions; if it is complete, all the ear canal sub-data will be decrypted by a decryption algorithm matching the encryption algorithm to facilitate the formation of an ear canal sample set.
[0033] In one example of this embodiment, Figure 7 As shown, the rights management module 100 includes: The charging matching unit 110 is used to establish a wireless communication connection with the charging base when the ear canal data acquisition terminal is charged through a preset charging base; The communication authentication unit 120 is used to trigger a connection request of the charging base when the wireless communication connection is established, so that the charging base communicates with the data management terminal, and the data management terminal performs identity authentication for the communication connection; The channel establishing unit 130 is used to authorize a one-way channel for data transmission after the data management terminal confirms that the identity authentication is passed, and obtain the ear canal data collected by the ear canal data collection terminal through the charging base.
[0034] In one embodiment, a computer device includes a processor and a memory, wherein the memory stores a computer program, and when the processor executes the computer program, steps S101 to S106 of the method are implemented.
[0035] The present invention provides a data security management method, and based on the method provides a data security management system. Compared with the prior art, this method can continuously collect ear canal data of different users through an ear canal data acquisition terminal, and a sufficient number of ear canal data acquisition terminals can obtain ear canal data of a considerable magnitude. Compared with methods such as questionnaires, the lack of manual participation in the collection can avoid errors caused by subjective judgment, and can avoid data leakage in the data processing process. In addition, the data collection has a high degree of automation. In the process of transmitting data from the ear canal data acquisition terminal to the data management terminal, different security management levels can be set according to the attributes of the data division, and then different levels of encryption can be performed to ensure data security and high efficiency of data processing. A sufficient number of ear canal data is conducive to supporting the quality and efficiency improvement of in-ear headphone design.
[0036] In this embodiment, Fig. 9The internal structure diagram of a computer device in an embodiment is shown. The computer device includes a processor, a memory, a network interface, an input device and a display screen (or a mobile phone, a laptop computer, an intelligent pager) connected through a system bus. Among them, the memory includes a non-volatile storage medium and an internal memory. The non-volatile storage medium of the computer device stores an operating system and may also store a computer program. When the computer program is executed by the processor, the processor can implement a data security management system, specifically, it can implement the steps of each functional module in the system. The internal memory may also store a computer program. When the computer program is executed by the processor, the processor can execute the steps of the data security management method. The display screen of the computer device may be a liquid crystal display screen or an electronic ink display screen. The input device of the computer device may be a touch layer covered on the display screen, or a key, trackball or touchpad provided on the housing of the computer device, or an external keyboard, touchpad or mouse.
[0037] Those skilled in the art will understand that Fig. 9 The structure shown in the figure is only a block diagram of a part of the structure related to the solution of the present application, and does not constitute a limitation on the computer device to which the solution of the present application is applied. The specific computer device may include more or fewer components than those shown in the figure, or combine certain components, or have a different arrangement of components.
[0038] It should be understood that, although each step in the flow chart of each embodiment of the present invention is shown in sequence according to the indication of the arrow, these steps are not necessarily performed in sequence according to the order indicated by the arrow. Unless there is a clear explanation in this article, the execution of these steps does not have a strict order restriction, and these steps can be performed in other orders. Moreover, at least a portion of the steps in each embodiment may include a plurality of sub-steps or a plurality of stages, and these sub-steps or stages are not necessarily performed at the same time, but can be performed at different times, and the execution order of these sub-steps or stages is not necessarily performed in sequence, but can be performed in turn or alternately with at least a portion of other steps or sub-steps or stages of other steps.
[0039] Those skilled in the art can understand that all or part of the processes in the above-mentioned embodiment methods can be completed by instructing the relevant hardware through a computer program, and the program can be stored in a non-volatile computer-readable storage medium. When the program is executed, it can include the processes of the embodiments of the above-mentioned methods. Among them, any reference to memory, storage, database or other media used in the embodiments provided in this application may include non-volatile and / or volatile memory. Non-volatile memory may include read-only memory (ROM), programmable ROM (PROM), electrically programmable ROM (EPROM), electrically erasable programmable ROM (EEPROM) or flash memory. Volatile memory may include random access memory (RAM) or external cache memory. As an illustration and not limitation, RAM is available in many forms, such as static RAM (SRAM), dynamic RAM (DRAM), synchronous DRAM (SDRAM), double data rate SDRAM (DDRSDRAM), enhanced SDRAM (ESDRAM), synchronous link (Synchlink) DRAM (SLDRAM), memory bus (Rambus) direct RAM (RDRAM), direct memory bus dynamic RAM (DRDRAM), and memory bus dynamic RAM (RDRAM).
[0040] The above description is only a preferred embodiment of the present invention and is not intended to limit the present invention. Any modifications, equivalent substitutions and improvements made within the spirit and principles of the present invention should be included in the protection scope of the present invention.
Claims
1. A data security management method, characterized in that: The method comprises: Establish a trusted network connection for the ear canal data collection terminal and data management terminal, and authorize a one-way channel for data transmission; Analyze the collected ear canal data, divide the ear canal data according to attributes, and obtain at least two ear canal sub-data with different attributes; and set a security management level for the ear canal sub-data based on the attributes; Desensitize the ear canal sub-data at different security management levels, and select the specified encryption algorithm to perform encryption at different levels; After receiving all the ear canal sub-data, the data management terminal splices them and checks the integrity of the data. If it is incomplete, it checks for omissions; if it is complete, all the ear canal sub-data are decrypted using a decryption algorithm that matches the encryption algorithm to make an ear canal sample set.
2. The method according to claim 1, characterized in that The steps of establishing a trusted network connection between the ear canal data collection terminal and the data management terminal and authorizing a one-way channel for data transmission specifically include: When the ear canal data acquisition terminal is being charged through a preset charging base, a wireless communication connection is established with the charging base; When the wireless communication connection is established, a connection request of the charging base is triggered, so that the charging base communicates with the data management terminal, and the data management terminal performs identity authentication for the communication connection; After the data management terminal confirms that the identity authentication is passed, a one-way channel authorization for data transmission is performed, and the ear canal data collected by the ear canal data collection terminal is obtained through the charging base; The one-way channel allows data to be transmitted from the ear canal data acquisition terminal to the data management terminal via the charging base.
3. The method according to claim 2, characterized in that The one-way channel prohibits the ear canal data acquisition terminal from transmitting data to the data management terminal in a non-charging state.
4. The method according to claim 2, characterized in that: The method further comprises: Establish a monitoring and auditing unit to monitor the use of charging bases; And, audit and analyze the monitoring records and generate audit reports.
5. The method according to claim 1, characterized in that The step of analyzing the collected ear canal data and dividing the ear canal data according to attributes specifically includes: Analyze the collected ear canal data, mine the user information to which the ear canal data belongs, and mark the source address of the ear canal data transmission; Clean the transmitted ear canal data, remove noise and repeated information, and obtain ear canal feature data; The attributes of the data are determined according to the analysis results, and the user information, the source address, and the ear canal feature data are divided into first ear canal sub-data, second ear canal sub-data, and third ear canal sub-data according to the determined attributes.
6. The method according to claim 5, characterized in that The step of setting a security management level for the ear canal sub-data based on the attribute specifically includes: Based on the attribute, setting the first ear canal sub-data to a first security level, setting the second ear canal sub-data to a second security level, and setting the third ear canal sub-data to a third security level; The encryption levels of the first security level, the second security level and the third security level decrease in descending order.
7. The method according to claim 1, characterized in that Before the step of performing a desensitization operation on the ear canal sub-data at different security management levels, the method further includes: Establish the corresponding relationship between security management level and data sensitivity level; Select two or more desensitizing operation measures and establish a one-to-one mapping relationship between the desensitizing operation measures and the data sensitivity level.
8. The method according to claim 1, characterized in that The specified encryption algorithms include: AES encryption algorithm, DES encryption algorithm, RSA encryption algorithm, and SHA encryption algorithm.
9. A data security management system, used in the method according to any one of claims 1 to 8, characterized in that: The system comprises: The authority management module is used to establish a trusted network connection between the ear canal data collection terminal and the data management terminal, and to authorize a one-way channel for data transmission; A data partitioning module, used to analyze the collected ear canal data, partition the ear canal data according to attributes, and obtain at least two ear canal sub-data with different attributes; and set a security management level for the ear canal sub-data based on the attributes; The data encryption and decryption module is used to desensitize the ear canal sub-data of different security management levels and select the specified encryption algorithm to perform encryption at different levels; The data processing module is used to splice and check the integrity of the data after the data management terminal receives all the ear canal sub-data. If it is incomplete, it will check for omissions; if it is complete, all the ear canal sub-data will be decrypted by a decryption algorithm matching the encryption algorithm to facilitate the formation of an ear canal sample set.
10. The system according to claim 9, characterized in that The rights management module includes: A charging matching unit, used for wirelessly connecting the ear canal data acquisition terminal with the charging base when the ear canal data acquisition terminal is charged through a preset charging base; A communication authentication unit, used to trigger a connection request of the charging base when the wireless communication connection is established, so that the charging base communicates with the data management terminal, and the data management terminal performs identity authentication for the communication connection; The channel establishment unit is used to authorize a one-way channel for data transmission after the data management terminal confirms that the identity authentication has passed, and obtain the ear canal data collected by the ear canal data collection terminal through the charging base.