Safety management system and method for archive information

Abstract

The invention discloses a security management system and method for archive information, and relates to the field of information management, and the method comprises the following steps: carrying out the preprocessing of archive information data needing to be transmitted, and obtaining corresponding archive information data fragments; constructing an information data transmission link composed of a plurality of information data nodes, and progressively transmitting the archive information data fragments through the information data nodes in sequence; performing information data security evaluation on the archive information data fragments which are transmitted progressively, and executing a corresponding management strategy on the archive information data according to an information data security evaluation result; archive information transmission management is enhanced, and the security and efficiency of archive information transmission are improved.

Description

Technical Field

[0001] The present invention relates to the field of information interaction, and in particular to a security management system and method for archive information. Background Art

[0002] Archives, as the sedimentation and accumulation of history, provide the most fundamental basis for human development. With the continuous updating and development of modern technology, archival data management has gradually tended towards digitization and informatization. Archives are often important information files of companies, enterprises, institutions or individuals. The safe management of archives is of vital importance. The storage of electronic archives is related to the security of archival information.

[0003] In the prior art, the security management of archives is mostly achieved by storing the archives in the storage unit of the smart terminal and then setting a permission password for the electronic archives. Although this type of security management of electronic archives is safe, once the system is attacked and the document security permissions are changed during the archive information transmission process, all the information in the electronic archives will be lost. How to improve the security of transmission during the archive information transmission process? How to further improve the efficiency of archive transmission while improving the security? To this end, a security management method for archive information is now provided. Summary of the invention

[0004] In order to solve the above technical problems, the present invention aims to provide a method for secure management of archive information, comprising the following steps: Step S1: pre-processing the archive information data to be transmitted to obtain corresponding archive information data segments; Step S2: construct an information data transmission link composed of a number of information data nodes, and transmit the archive information data fragments progressively through the information data nodes in sequence; Step S3: Perform information data security assessment on the archive information data segments that have completed progressive transmission, and execute corresponding management strategies on the archive information data according to the information data security assessment results.

[0005] The process of preprocessing the archive information data to be transmitted to obtain the corresponding archive information data fragments includes: Classifying the archival information data to be transmitted to obtain corresponding archival information data types, wherein the archival information data types include primary archival information data, secondary archival information data, and tertiary archival information data; Different types of archival information data are segmented to obtain corresponding archival information data segments, and the archival information data segments are numbered.

[0006] Furthermore, the process of constructing an information data transmission link composed of a plurality of information data nodes includes: Set up archive management library; The information data node is a transmission node for the process of users uploading archive information data segments to the archive management library; Set the level of information data node; Classify all information data nodes on all information data transmission links; The information data transmission link is a transmission path formed by a user uploading archive information data fragments to the archive management library through a plurality of information data nodes, and the information data nodes forming the transmission path are associated.

[0007] Furthermore, the process of progressively transmitting the archive information data segments sequentially through the information data nodes includes: progressive transmission according to the archival information data type of the archival information data segment; Set the progressive transfer time; Set the hierarchical transmission sequence of archive information data segments; According to the progressive transmission time and the archive information data type of the archive information data segment, the same-level interval transmission time and the cross-level interval transmission time of the archive information data segment are obtained; Allocate cross-level transmission queues for archival information data according to the data type of the archival information data fragments, set corresponding same-level transmission queues according to the level transmission sequence of the archival information data fragments, and the archival information data fragments are transmitted according to the same-level transmission queues waiting for the same-level interval transmission time. After all the archival information data fragments in the same-level transmission queues are uploaded, perform archival information data transmission of other levels according to the cross-level transmission queues and the cross-level interval transmission time; The archive information data segment passes through the information data node, generating a transmission symbol of the archive information data segment; Insert the transmission symbol into the archive information data segment.

[0008] Furthermore, the generation process of the transmission symbol includes: Obtain the data length of the archive information data passing through the information data node; Divide the archive information data passing through the information data node into n data segments, recorded as archive information data sub-segments; If the data lengths of the archive information data sub-segments are inconsistent, the archive information data sub-segments are padded; Performing base conversion on the archival information data sub-segment, and recording the archival information data sub-segment obtained after the base conversion as an archival information matrix item; Obtain the number of archive information matrix items, and label each archive information matrix item; Construct a k*k blank matrix, import the obtained archive information matrix items into the blank matrix in sequence, and obtain the corresponding archive information matrix; Determine whether there are blank items in the archive information matrix. If there are blank items in the archive information matrix, fill in the blanks in the archive information matrix. Iteratively calculate the obtained archive information matrix items to obtain iteration coefficients; Convert the obtained combined data into binary data according to the iteration coefficient, the transmission time data of the archive information data and the transmission start data; The obtained binary data is divided into several data blocks, and the shift operation is performed on the several data blocks respectively, and the obtained data blocks are interleaved with each other to generate transmission symbols of the archive information data fragments.

[0009] Furthermore, the process of performing information data security assessment on the archive information data segments that have completed progressive transmission includes: Recording the archive information data segments that have completed progressive transmission as archive information data to be stored; The actual size of the data volume of the archive information data to be stored is recorded as the archive information volume value; The actual time of the archive information transmission process is recorded as the actual transmission time; Disassemble and analyze the transmission symbols to obtain the data volume, transmission time data and transmission start data of the archive information data fragment; Record the data volume of the archive information data as the archive information evaluation value; The transmission time data of the archive information data are summarized and recorded as the total transmission time; Performing information data security assessment on the archive information data fragments according to the transmission start data, the archive information assessment value and the total transmission time to obtain the information data security assessment result; The information data security assessment results include normal signals of file transmission points, normal signals of file data, normal signals of file transmission, abnormal signals of file transmission points, external abnormal signals and internal abnormal signals; Execute corresponding management strategies for archival information data based on the information data security assessment results.

[0010] Furthermore, the process of executing corresponding management strategies on archive information data according to the information data security assessment results includes: According to the internal abnormal transmission signal, the archive information data to be stored is cleared; Sending internal abnormal transmission signals to users and response signals to each information data transmission link; Obtaining the level of the information data node, and obtaining the information data node of the level corresponding to the data type of the archive information data to be stored; The node that receives the response signal fastest among the information data nodes is recorded as a transmission node, and the archive information data fragment is re-uploaded to the archive management library through the transmission node; According to the external abnormal transmission signal or the abnormal signal of the file transmission point, the file information data to be stored is cleared; Send external abnormal transmission signals to users and continuously send monitoring signals to each information data transmission link; Send external abnormal transmission signals to users and continuously send monitoring signals to each information data transmission link; When abnormal behavior is encountered during the transmission process, the abnormal reaction generated by the monitoring signal is sent to the management center. The management center detects the IP address that causes the alarm signal, sets the IP address to the blacklist, and re-uploads the archive information data fragment to the archive management library.

[0011] In another embodiment of the present invention, the present invention further discloses a security management system for archival information, including a management center, wherein the management center is communicatively connected with an archival information collection module, an archival information transmission module, and an archival information management module; The archive information acquisition module is used to pre-process the archive information data to be transmitted to obtain corresponding archive information data segments; The archive information transmission module is used to construct an information data transmission link composed of a plurality of information data nodes, and transmit the archive information data segments progressively through the information data nodes in sequence; The archive information management module is used to perform information data security assessment on the archive information data segments that have completed progressive transmission, and execute corresponding management strategies on the archive information data according to the information data security assessment results.

[0012] Compared with the prior art, the beneficial effects of the present invention are: performing segmented encryption processing on archival information data to ensure the basic security of archival information, constructing information data nodes and information data transmission links between users and archival management libraries, setting transmission queues for archival information data segments according to the levels of archival information data segments and progressive transmission time, progressively transmitting archival information data segments through information data nodes, and generating transmission symbols to further improve the security of archival information transmission; when archival information data segments are transmitted to the archival management library, the transmission process is evaluated by transmission evaluation values ​​to see if there are abnormalities; if there are abnormalities, the abnormal process is further analyzed by node evaluation values ​​to determine whether it is an internal factor or an external factor, and security management of archival information data is performed based on the analysis results to improve the security of archival information data. BRIEF DESCRIPTION OF THE DRAWINGS

[0013] Figure 1 This is a schematic diagram of a method for secure management of archival information according to an embodiment of the present application.

[0014] Figure 2 This is a flow chart of a security management system for archival information according to an embodiment of the present application. DETAILED DESCRIPTION

[0015] like Figure 1 As shown, a method for secure management of archive information includes the following steps: Step S1: pre-processing the archive information data to be transmitted to obtain corresponding archive information data segments; Step S2: construct an information data transmission link composed of a number of information data nodes, and transmit the archive information data fragments progressively through the information data nodes in sequence; Step S3: Perform information data security assessment on the archive information data segments that have completed progressive transmission, and execute corresponding management strategies on the archive information data according to the information data security assessment results.

[0016] It should be further explained that, in the specific implementation process, the specific process of preprocessing the archive information data to be transmitted and obtaining the corresponding archive information data fragments includes: The archival information data to be transmitted is classified into primary archival information data, secondary archival information data and tertiary archival information data, and the archival information data level is recorded as i and associated with the corresponding archival information data; The first-level archive information data refers to the common information data in the archive information data to be transmitted; The secondary archive information data refers to the sensitive information data in the archive information data that needs to be transmitted; The third-level archive information data refers to the confidential information data in the archive information data that needs to be transmitted; Different types of archival information data are segmented respectively, and each level of archival information data is divided into several archival information data segments of the same length to obtain corresponding archival information data segments. The archival information data segments are numbered in sequence according to the arrangement order of the archival information, denoted as j, where j=1, 2, ..., n, n>0 and n is an integer, and are associated with corresponding archival information data segments.

[0017] It should be further explained that, in the specific implementation process, the specific process of constructing an information data transmission link composed of a number of information data nodes and progressively transmitting the archive information data fragments through the information data nodes in sequence includes: Set up archive management library; The information data nodes are transmission nodes in the process of users uploading archive information data to the archive management library, and each information data node is related to each other; The information data transmission link is a transmission path formed by a user uploading archive information data to an archive management library through a number of information data nodes, obtaining transmission time data and transmission start data of the archive information data, and associating the transmission time data and transmission start data with the information data nodes; associating information data nodes forming a transmission path, and associating the information data nodes with each information data node; progressive transmission according to archival information data classification of archival information data segments; Set the progressive transmission time, denoted as t; Set the hierarchical transmission sequence of archive information data segments; Obtaining the interval transmission time of the archive information data segment according to the progressive transmission time and the archive information data type of the archive information data segment; According to the progressive transmission time and the level of the archive information data segment, the same-level interval transmission time and the cross-level interval transmission time of the archive information data segment are obtained; Allocate cross-level transmission queues for archival information data according to the data types of archival information data fragments, allocate same-level transmission queues for archival information data fragments of each level according to the level transmission sequence of archival information data fragments, and archival information data fragments are transmitted according to the same-level transmission queues while waiting for the corresponding same-level interval transmission time. After all archival information data fragments of the same level are uploaded, archival information data of other levels are transmitted according to the cross-level transmission queues and the cross-level interval transmission time. The progressive transmission queue of the archive information data fragment is a fixed transmission queue, and queue transmission is performed according to the fragment number. The transmission queue of each level of archive information data fragment is different, and the higher the level, the higher the level of the corresponding level transmission sequence.

[0018] It should be further explained that, in the specific implementation process, the same-level transmission queue and the cross-level transmission queue of the archival information data fragment are specifically the transmission queues for the archival information data allocated according to the level of the archival information data, firstly transmit the first-level archival information data fragment, and transmit it through the information data transmission link according to the transmission sequence of the first-level archival information data fragment, and the transmission interval time of each first-level archival information data fragment is t, after the last fragment of the first-level archival information data is transmitted, the second-level archival information data fragment is transmitted after the transmission interval time t, and the above transmission behavior is repeated until the transmission of all archival information data fragments is completed; Get the data length of the archive information data segment passing through the information data node, recorded as cd; The archive information data passing through the information data node is divided into n data segments, which are recorded as archive information data sub-segments, wherein the data length of each archive information data sub-segment is the same, which is recorded as ; when If it is not an integer, the archive information data segment is padded; Label each sub-segment of the archive information data, denoted as p; Then, the archival information data sub-segment labeled p is converted into a binary system, and the archival information data sub-segment obtained after the conversion is recorded as an archival information matrix item, and the number of the obtained archival information matrix items is recorded as m; Label each archive information matrix item, denoted as f, f=1,2,3...,h, where f is an integer; The archive information matrix item labeled f is denoted as [Q f ]; Construct a k*k blank matrix, import the obtained archive information matrix items into the blank matrix in sequence, and obtain the corresponding archive information matrix; Determine whether there is a blank item in the archive information matrix. If there is a blank item in the archive information matrix, fill the blank in the archive information matrix by filling the binary unit code 1 into the blank item in the archive information matrix; Iterate the obtained archive information matrix items to obtain the iteration coefficient, recorded as Qx T ; Qx T =[Q j ]*[Q j+1 ]; Where T is the number of iterations; The iteration coefficient Qx T Combined in parallel with the transmission time data and the transmission start data of the archive information data, the obtained combined data is converted into binary data; Divide the obtained binary data into a plurality of data blocks, perform multiple shift operations on the plurality of data blocks respectively, and insert spaces between the obtained data blocks to generate transmission symbols; The generated transmission symbol is inserted into the archive information data.

[0019] It should be further explained that, in the specific implementation process, the information data security assessment is performed on the archive information data segments that have completed the progressive transmission, and the specific process of executing the corresponding management strategy on the archive information data according to the information data security assessment results includes: Recording the archive information data segments that have completed progressive transmission as archive information data to be stored; Disassemble and analyze the transmission symbols to obtain the data volume of the archive information data, the transmission time data of the archive information data, and the transmission start data; The data volume of the archive information data is recorded as the archive information evaluation value PG; The transmission time data of the archive information data are summarized to generate the total transmission time, which is recorded as SJ; It should be further explained that, in the specific implementation process, the process of disassembling and analyzing the transmission symbols is: separating the transmission symbols of the archive information data segment from the archive information data to be stored, further disassembling the obtained transmission symbols, obtaining each transmission symbol generated by each information data node through which the archive information data passes, restoring each transmission symbol, and obtaining the original data of the archive information data segment; Compare the transmission start data of the archive information data with the node uploaded by the user; When the transmission start data of the archive information data is consistent with the node uploaded by the user, a normal signal of the archive transmission point is generated; When the transmission start data of the archive information data is inconsistent with the user upload node, it means that the location of the uploaded data has changed, and there is a risk in the archive information data, and an abnormal signal of the archive transmission point is generated; Obtain the data volume of the archive information data to be stored, recorded as the archive information volume value fe; Compare the archive information evaluation value PG with the archive information quantity value fe; When the archive information evaluation value PG is equal to the archive information quantity value fe, the data content of the archive information data is complete, and a normal archive data signal is generated; When the archive information evaluation value PG is not equal to the archive information quantity value fe, it means that the data content of the archive information data has missing or redundant parts, and an external abnormal signal is generated; Get the actual time of the archive information transmission process, recorded as the actual transmission time st; Compare the actual time of the archival information transfer process with the total transfer time; When the actual time of the archive information transmission process is equal to the total transmission time, there is no delay in the archive information data transmission, and a normal archive transmission signal is generated; When the actual time of the archive information transmission process is not equal to the total transmission time, it means that there is an abnormality in the archive information data transmission process, and an internal abnormality signal is generated; It should be further explained that, in the specific implementation process, internal anomalies refer to network congestion, router failure, delay and other problems in the data transmission process of the archive information to be stored; It should be further explained that, in the specific implementation process, external anomalies refer to data content leakage problems such as data interception, data tampering, and data theft during the data transmission process of the archive information to be stored; According to the internal abnormal transmission signal, the archive information data to be stored is cleared, the internal abnormal transmission signal is sent to the user, and a response signal is sent to each information data transmission link; Set the level of information data node; The first node of the information data transmission link is recorded as a first-level information data node, the second node of the information data transmission link is recorded as a second-level information data node, and so on, all information data nodes on all information data transmission links are divided into levels; The response signal that reaches the first-level information data node fastest is recorded as the first-level transmission node, and the first-level information data node sends the response signal to the second-level information data node on the same information data transmission link. The second-level information data node that receives the response signal fastest is recorded as the second-level transmission node, and the second-level information data node sends the response signal to the third-level information data node on the same information data transmission link, and so on, and the archive information data fragments are re-uploaded to the archive management library through the transmission node; According to the external abnormal transmission signal or the abnormal signal of the archive transmission point, the archive information data to be stored is cleared, and the external abnormal transmission signal is sent to the user, and the user re-uploads the archive information data, and before the user re-uploads the archive information data, the monitoring signal is continuously sent to each information data transmission link; When problems such as data interception, data tampering, and data theft occur during the transmission process, the monitoring signal will generate an alarm signal and send it to the management center. The management center will detect the IP address that caused the alarm signal, set the IP address to the blacklist, and re-upload the archive information data fragment to the archive management library.

[0020] like Figure 2 As shown, in another embodiment of the present invention, the present invention further discloses a security management system for archive information, including a management center, wherein the management center is communicatively connected with an archive information collection module, an archive information transmission module and an archive information management module; The archive information acquisition module is used to pre-process the archive information data to be transmitted to obtain corresponding archive information data segments; The archive information transmission module is used to construct an information data transmission link composed of a plurality of information data nodes, and transmit the archive information data segments progressively through the information data nodes in sequence; The archive information management module is used to perform information data security assessment on the archive information data segments that have completed progressive transmission, and execute corresponding management strategies on the archive information data according to the information data security assessment results.

[0021] The above embodiments are only used to illustrate the technical method of the present invention rather than to limit it. Although the present invention has been described in detail with reference to the preferred embodiments, those skilled in the art should understand that the technical method of the present invention may be modified or replaced by equivalents without departing from the spirit and scope of the technical method of the present invention.

Claims

1. A method for secure management of archival information, characterized in that: The following steps are involved: Step S1: pre-processing the archive information data to be transmitted to obtain corresponding archive information data segments; Step S2: construct an information data transmission link composed of a number of information data nodes, and transmit the archive information data fragments progressively through the information data nodes in sequence; Step S3: Perform information data security assessment on the archive information data segments that have completed progressive transmission, and execute corresponding management strategies on the archive information data according to the information data security assessment results.

2. A method for secure management of archival information according to claim 1, characterized in that: The process of preprocessing the archive information data to be transmitted to obtain the corresponding archive information data fragments includes: Classifying the archival information data to be transmitted to obtain corresponding archival information data types, wherein the archival information data types include primary archival information data, secondary archival information data, and tertiary archival information data; Different types of archival information data are segmented to obtain corresponding archival information data segments, and the archival information data segments are numbered.

3. A method for secure management of archival information according to claim 2, characterized in that: The process of building an information data transmission link composed of several information data nodes includes: Set up archive management library; The information data node is a transmission node for the process of users uploading archive information data segments to the archive management library; Set the level of information data node; Classify all information data nodes on all information data transmission links; The information data transmission link is a transmission path formed by a user uploading archive information data fragments to the archive management library through a plurality of information data nodes, and the information data nodes forming the transmission path are associated.

4. A method for secure management of archival information according to claim 3, characterized in that: The process of progressively transmitting archive information data segments through information data nodes in sequence includes: progressive transmission according to the archival information data type of the archival information data segment; Set the progressive transfer time; Set the hierarchical transmission sequence of archive information data segments; According to the progressive transmission time and the archive information data type of the archive information data segment, the same-level interval transmission time and the cross-level interval transmission time of the archive information data segment are obtained; Allocate cross-level transmission queues for archival information data according to the data type of the archival information data fragments, set corresponding same-level transmission queues according to the level transmission sequence of the archival information data fragments, and the archival information data fragments are transmitted according to the same-level transmission queues waiting for the same-level interval transmission time. After all the archival information data fragments in the same-level transmission queues are uploaded, perform archival information data transmission of other levels according to the cross-level transmission queues and the cross-level interval transmission time; The archive information data segment passes through the information data node, generating a transmission symbol of the archive information data segment; Insert the transmission symbol into the archive information data segment.

5. A method for secure management of archival information according to claim 4, characterized in that: The generation process of the transmission symbol includes: Obtain the data length of the archive information data passing through the information data node; Divide the archive information data passing through the information data node into n data segments, recorded as archive information data sub-segments; If the data lengths of the archive information data sub-segments are inconsistent, the archive information data sub-segments are padded; Performing base conversion on the archival information data sub-segment, and recording the archival information data sub-segment obtained after the base conversion as an archival information matrix item; Obtain the number of archive information matrix items, and label each archive information matrix item; Construct a k*k blank matrix, import the obtained archive information matrix items into the blank matrix in sequence, and obtain the corresponding archive information matrix; Determine whether there are blank items in the archive information matrix. If there are blank items in the archive information matrix, fill in the blanks in the archive information matrix. Iteratively calculate the obtained archive information matrix items to obtain iteration coefficients; Convert the obtained combined data into binary data according to the iteration coefficient, the transmission time data of the archive information data and the transmission start data; The obtained binary data is divided into several data blocks, and the shift operation is performed on the several data blocks respectively, and the obtained data blocks are interleaved with each other to generate transmission symbols of the archive information data fragments.

6. A method for secure management of archival information according to claim 5, characterized in that: The process of conducting information data security assessment on archive information data segments that have completed progressive transmission includes: Recording the archive information data segments that have completed progressive transmission as archive information data to be stored; The actual size of the data volume of the archive information data to be stored is recorded as the archive information volume value; The actual time of the archive information transmission process is recorded as the actual transmission time; Disassemble and analyze the transmission symbols to obtain the data volume, transmission time data and transmission start data of the archive information data fragment; Record the data volume of the archive information data as the archive information evaluation value; The transmission time data of the archive information data are summarized and recorded as the total transmission time; Performing information data security assessment on the archive information data fragments according to the transmission start data, the archive information assessment value and the total transmission time to obtain the information data security assessment result; The information data security assessment results include normal signals of file transmission points, normal signals of file data, normal signals of file transmission, abnormal signals of file transmission points, external abnormal signals and internal abnormal signals; Execute corresponding management strategies for archival information data based on the information data security assessment results.

7. A method for secure management of archival information according to claim 6, characterized in that: The process of implementing corresponding management strategies for archival information data based on the information data security assessment results includes: According to the internal abnormal transmission signal, the archive information data to be stored is cleared; Sending internal abnormal transmission signals to users and response signals to each information data transmission link; Obtaining the level of the information data node, and obtaining the information data node of the level corresponding to the data type of the archive information data to be stored; The node that receives the response signal fastest among the information data nodes is recorded as a transmission node, and the archive information data fragment is re-uploaded to the archive management library through the transmission node; According to the external abnormal transmission signal or the abnormal signal of the file transmission point, the file information data to be stored is cleared; Send external abnormal transmission signals to users and continuously send monitoring signals to each information data transmission link; Send external abnormal transmission signals to users and continuously send monitoring signals to each information data transmission link; When abnormal behavior is encountered during the transmission process, the abnormal reaction generated by the monitoring signal is sent to the management center. The management center detects the IP address that causes the alarm signal, sets the IP address to the blacklist, and re-uploads the archive information data fragment to the archive management library.

8. A security management system for archival information, specifically applied to a security management method for archival information as claimed in any one of claims 1 to 7, comprising a management center, characterized in that: The management center is communicatively connected with an archive information collection module, an archive information transmission module and an archive information management module; The archive information acquisition module is used to pre-process the archive information data to be transmitted to obtain corresponding archive information data segments; The archive information transmission module is used to construct an information data transmission link composed of a plurality of information data nodes, and transmit the archive information data segments progressively through the information data nodes in sequence; The archive information management module is used to perform information data security assessment on the archive information data segments that have completed progressive transmission, and execute corresponding management strategies on the archive information data according to the information data security assessment results.

Images