Network information security processing method and system based on block chain

Abstract

The invention discloses a network information security processing method and system based on a block chain, and relates to the technical field of network information security processing, and the method comprises the steps: obtaining enterprise operation information, constructing block chain networks of an enterprise according to the enterprise operation information, and determining archiving nodes of each block chain network; generating a private key of each enterprise employee in the block chain network based on the enterprise employee information and the employee identity information; obtaining a detection period of the block chain network by using the current market information and the enterprise risk information, carrying out regular security detection on the block chain network of the enterprise based on the detection period of the block chain network, and then carrying out anomaly repair by using the archiving node of each block chain network; and carrying out private key logout, data isolation and task transfer processing on the designed enterprise employees. Efficient encryption and real-time monitoring of enterprise employee information and operation data are realized, data security and privacy protection are ensured, and response capability and transparency to network security threats are enhanced at the same time.

Description

Technical Field

[0001] The present invention relates to the technical field of network information security processing, and specifically to a network information security processing method and system based on blockchain. Background Art

[0002] As digital transformation accelerates, cybersecurity threats and attacks are increasing, such as data leaks, identity theft, malware, etc. These threats have had a serious impact on the operations and reputation of enterprises. In addition, the digitalization and informatization process of enterprises continues to deepen, bringing a large amount of operational data and employee information. The security and management requirements of this data are constantly increasing.

[0003] However, traditional systems often fail to effectively encrypt sensitive data, resulting in a high risk of information leakage. The information of many companies is stored in different systems, resulting in data silos that are difficult to integrate and analyze. In addition, traditional methods of risk monitoring often rely on regular audits and have a slow response. Many companies lack effective data processing mechanisms after employees leave, which may lead to data leakage, and the corresponding data changes are difficult to track, making audits difficult.

[0004] Therefore, in response to the above problems, there is an urgent need for a network information security processing method and system based on blockchain. Summary of the invention

[0005] In view of the shortcomings of the existing technology, the present invention provides a network information security processing method and system based on blockchain, which solves the problems of insufficient data privacy protection and security transparency, realizes efficient encryption and real-time monitoring of employee information and enterprise operation data, enhances the enterprise's ability to respond to network security threats, and improves the compliance and traceability of data management.

[0006] To achieve the above objectives, the present invention is implemented through the following technical solutions: a network information security processing method based on blockchain, comprising the following steps: obtaining enterprise operation information, the enterprise operation information includes enterprise branch operation information, enterprise branch department operation information and enterprise employee information; constructing the enterprise's blockchain network based on the enterprise operation information, and determining the archiving nodes of each blockchain network, the enterprise's blockchain network includes a primary blockchain network, a secondary blockchain network and a tertiary blockchain network; generating a private key of each enterprise employee in the blockchain network based on the enterprise employee information and employee identity information, and using the private key to encrypt the identity information and work task content of the enterprise employee; obtaining current market information and enterprise risk information, and then using the current market information and enterprise risk information to obtain the detection cycle of the blockchain network, and performing regular security detection on the enterprise's blockchain network based on the detection cycle of the blockchain network; tracking the security anomaly identified by the regular risk detection of the blockchain network using the blockchain network records, identifying the source of the anomaly, and using the archiving nodes of each blockchain network to repair the anomaly; real-time monitoring of the employment status of enterprise employees, and performing private key cancellation, data isolation and task transfer processing for resigned enterprise employees.

[0007] Furthermore, the enterprise branch operation information specifically includes enterprise branch basic information, enterprise branch financial information, enterprise branch operation indicator information and enterprise branch network security management information; the enterprise branch basic information specifically includes branch name, branch address and branch person in charge, the enterprise branch financial information specifically includes branch monthly income and branch monthly expenditure, the enterprise branch operation indicator information specifically includes branch monthly sales and branch customer satisfaction, and the enterprise branch network security management information specifically includes branch information leakage status and branch network attack status; the operation information of each department of each branch of the enterprise specifically includes department name, department person in charge, department performance indicators and department project progress; the enterprise employee information specifically includes the employee's department, employee name, employee entry time, employee salary, employee attendance record and employee performance evaluation.

[0008] Furthermore, the specific analysis of building the enterprise's blockchain network based on the enterprise's operating information is as follows: determining the enterprise's blockchain network structure level, the specific network structure levels include a primary blockchain network, a secondary blockchain network and a tertiary blockchain network; the primary blockchain network is responsible for the storage and management of the enterprise's branch operating information, the operating information of each branch of the enterprise forms each node of the primary blockchain, and each node of the primary blockchain is managed by the person in charge of each branch; the secondary blockchain network is specifically the blockchain network of each branch, and the blockchain network of each branch is responsible for the storage and management of the operating information of each department of each branch, and the operating information of each department of each branch forms each node of each secondary blockchain network, and each node of the secondary blockchain network is managed by the person in charge of each department; the third-level blockchain network is specifically the blockchain network of each department of each branch, and the blockchain network of each department of each branch is responsible for the storage and management of the enterprise employee information of each department, and the employee information of each enterprise forms each node of each third-level blockchain network, and each node of the third-level blockchain network is managed by each employee of each department.

[0009] Furthermore, the specific analysis of generating the private key of each enterprise employee in the blockchain network based on the enterprise employee information and employee identity information is as follows: obtaining employee identity information, the employee identity information including the employee's iris image and fingerprint image; extracting the employee's iris features and fingerprint features based on the employee identity information, and then combining the employee's department with the iris features and fingerprint features to generate the employee's unique identity feature; encrypting the employee's unique identity feature using a hash function to obtain a hash value of the unique identity feature; randomly generating a random number using a random number generator, combining the hash value of the unique identity feature with the random number, and then encrypting the combined result using a hash function to obtain an enhanced hash value of the unique identity feature, and using the enhanced hash value of the unique identity feature as the enterprise employee's private key in the blockchain network.

[0010] Furthermore, the current market information and enterprise risk information are obtained, and then the specific analysis of the detection cycle of the blockchain network is obtained by using the current market information and the enterprise risk information: based on the current market information, the volatility of the current market is identified, and the volatility conditions include low volatility, stable volatility and large volatility; based on the enterprise risk information, the risk condition of the enterprise is identified, and the risk conditions include low risk, moderate risk and high risk; when the volatility condition of the current market is low volatility and the risk condition of the enterprise is low risk, the first detection cycle is matched for the blockchain network; when the volatility condition of the current market is stable volatility and the risk condition of the enterprise is moderate risk, the second detection cycle is matched for the blockchain network; when the volatility condition of the current market is large volatility and the risk condition of the enterprise is high risk, the third detection cycle is matched for the blockchain network.

[0011] Furthermore, the first detection cycle, the second detection cycle and the third detection cycle are specifically distinguished as follows: obtaining the upper and lower thresholds of the detection cycle, marking the detection cycle below the lower threshold of the detection cycle as the third detection cycle; marking the detection cycle below or equal to the upper threshold of the detection cycle and greater than or equal to the lower threshold of the detection cycle as the second detection cycle; marking the detection cycle greater than the upper threshold of the detection cycle as the first detection cycle.

[0012] Furthermore, the specific analysis of identifying the volatility of the current market based on the current market information is as follows: the current market information includes market trading volume volatility, unemployment rate and market interest rate change volatility; taking the average of the market trading volume volatility, unemployment rate and market interest rate change volatility as the volatility value of the current market, and then comparing the volatility value of the current market with the upper and lower thresholds of market volatility; when the volatility value is less than or equal to the lower threshold of market volatility, marking the volatility of the current market as low volatility; when the volatility value is less than the upper threshold of market volatility and greater than the lower threshold of market volatility, marking the volatility of the current market as stable volatility; when the volatility value is greater than or equal to the upper threshold of market volatility, marking the current The market volatility is large; the specific analysis of identifying the risk status of an enterprise based on enterprise risk information is as follows: the enterprise risk information specifically includes employee turnover rate and frequency of network attacks; the average of employee turnover rate and frequency of network attacks is taken as the enterprise's risk indicator, and then the enterprise's risk indicator is compared with the upper and lower thresholds of enterprise risk; when the risk indicator is less than or equal to the lower threshold of enterprise risk, the enterprise's risk status is marked as low risk; when the risk indicator is less than or equal to the upper threshold of enterprise risk and greater than the lower threshold of enterprise risk, the enterprise's risk status is marked as moderate risk; when the risk indicator is greater than or equal to the upper threshold of enterprise risk, the enterprise's risk status is marked as high risk.

[0013] Furthermore, the specific identification and analysis of the security anomaly is as follows: based on the detection cycle of the blockchain network, the security data of the enterprise blockchain network is obtained, and the security data includes the smart contract mobilization frequency and the transaction frequency; the security data obtained from each security detection is compared with the detection indicators of the current security detection, and the detection indicators include the smart contract mobilization indicator and the transaction indicator; when it is detected that the smart contract mobilization frequency is greater than the smart contract mobilization indicator or the transaction frequency is greater than the transaction indicator, there is a security anomaly in this security detection, based on the tamper-proof characteristics of the blockchain, the transaction status of each node in the enterprise blockchain network is tracked and traced back, the specific source of the anomaly is identified, and then the archive node is used to repair the anomaly.

[0014] Furthermore, the real-time monitoring of the employment status of enterprise employees and the specific analysis of private key cancellation, data isolation and task transfer processing for resigned enterprise employees are as follows: based on the human resources management system, the employee's employment status information is obtained in real time, and the employee's employment status information includes joining, leaving and taking leave; when the employee resignation status is monitored, the resigned employee processing flow is triggered; the specific resigned employee processing flow includes: identifying the enterprise blockchain network node that the resigned employee is responsible for managing, and then transferring the information in the enterprise blockchain network node that the resigned employee is responsible for managing to the archiving nodes of each blockchain network for isolation, and canceling the private key and access rights of the resigned employee in all blockchain networks; for the information transferred to the archiving node for isolation by the resigned employee, extract the list of projects that the resigned employee is responsible for, transfer the tasks through the blockchain network according to the urgency of the projects, and then update the task leader information in the blockchain network.

[0015] A network information security processing system based on blockchain, applying the above-mentioned network information security processing method based on blockchain, including: a data acquisition module, used to obtain enterprise operation information, the enterprise operation information includes enterprise branch operation information, enterprise branch department operation information and enterprise employee information; a blockchain network construction module, used to build the enterprise's blockchain network based on the enterprise operation information, and determine the archiving nodes of each blockchain network, the enterprise's blockchain network includes a primary blockchain network, a secondary blockchain network and a tertiary blockchain network; a private key generation and management module, used to generate the private key of each enterprise employee in the blockchain network based on the enterprise employee information and employee identity information, and use The private key encrypts the identity information and work task content of the enterprise employees; the risk detection module is used to obtain the current market information and enterprise risk information, and then use the current market information and enterprise risk information to obtain the detection cycle of the blockchain network, and conduct regular security detection of the enterprise's blockchain network based on the detection cycle of the blockchain network; the risk tracking and repair module is used to track the security anomalies identified by the regular security detection of the blockchain network using blockchain network records, identify the source of the anomalies, and use the archiving nodes of each blockchain network to repair the anomalies; the resignation processing module is used to monitor the employment status of enterprise employees in real time, and perform private key cancellation, data isolation and task transfer processing for resigned employees.

[0016] The present invention has the following beneficial effects:

[0017] The network information security processing method and system based on blockchain ensures the hierarchical protection of enterprise branch, department and employee information through the multi-level network structure and private key encryption technology of blockchain, prevents unauthorized access or information leakage, and improves the overall security of enterprise information; the distributed ledger characteristics of blockchain and the backup mechanism of archiving nodes ensure the integrity of data, which is not easy to be tampered with. Even if malicious attacks or data loss occur, data can be quickly restored through the backup of archiving nodes to ensure business continuity; by analyzing market information and risk information, the detection cycle is dynamically adjusted to achieve continuous monitoring of potential risks, tracking and tracing the identified risk sources, which can improve the efficiency of enterprises in responding to security threats, help quickly locate the source of problems and repair risks in a timely manner. ; Generate a unique private key for each employee, and implement identity authentication based on biometric binding. Only the employee himself can decrypt his personal information and work tasks, which protects employee privacy and reduces the risk of data leakage due to resignation or authority changes; Real-time monitoring of employee status and automatic resignation processing, including private key cancellation, data isolation and task transfer, can promptly protect corporate information security after the resigned employee exits the system, while ensuring the smooth handover of work tasks and reducing the impact of resignation on the business; Through the multi-level structure of the blockchain, permissions are managed in a hierarchical manner, and the permissions of nodes at all levels are clear and unambiguous, which not only supports temporary permission adjustments for employees across departments, but also prevents unauthorized access. The dynamic permission management mechanism of smart contracts provides a guarantee for enterprises to achieve flexible and secure data access. BRIEF DESCRIPTION OF THE DRAWINGS

[0018] Figure 1 This is a flow chart of a network information security processing method based on blockchain in the present invention.

[0019] Figure 2 This is a structural diagram of a network information security processing system based on blockchain in the present invention. DETAILED DESCRIPTION

[0020] The embodiment of the present application realizes efficient encryption and real-time monitoring of enterprise employee information and operational data through a blockchain-based network information security processing method and system, ensures data security and privacy protection, and enhances the responsiveness and transparency to network security threats.

[0021] The overall idea of ​​the problem in the embodiment of this application is as follows:

[0022] Divide the different levels of the enterprise into multiple blockchain network layers, forming a hierarchical structure from the company headquarters, branches to departments and employees; generate a unique private key for each employee to encrypt the employee's identity information and work tasks; combine current market information and internal enterprise risk information to set and dynamically adjust the risk detection cycle of the blockchain network; set up archiving nodes at each blockchain network level for data backup and risk repair. When the system detects an abnormality, it will be repaired in time through the data recovery function of the archiving node to ensure system stability and data integrity; monitor the employee's employment status in real time. For employees who leave, the system automatically cancels their private keys, isolates their data, and transfers unfinished tasks to their successors or supervisors, ensuring information security while achieving a smooth handover of business.

[0023] See also Figure 1 The embodiment of the present invention provides a technical solution: a network information security processing method based on blockchain, comprising the following steps: obtaining enterprise operation information, the enterprise operation information includes enterprise branch operation information, enterprise branch department operation information and enterprise employee information; constructing the enterprise's blockchain network based on the enterprise operation information, and determining the archiving nodes of each blockchain network, the enterprise's blockchain network includes a primary blockchain network, a secondary blockchain network and a tertiary blockchain network; generating a private key of each enterprise employee in the blockchain network based on the enterprise employee information and employee identity information, and using the private key to encrypt the enterprise employee's identity information and work task content; obtaining current market information and enterprise risk information, and then using the current market information and enterprise risk information to obtain the detection cycle of the blockchain network, and performing regular security detection on the enterprise's blockchain network based on the detection cycle of the blockchain network; tracking the security anomaly identified by the regular risk detection of the blockchain network using the blockchain network record, identifying the source of the anomaly, and using the archiving nodes of each blockchain network to repair the anomaly; real-time monitoring of the employment status of enterprise employees, and performing private key cancellation, data isolation and task transfer processing for resigned enterprise employees.

[0024] Specifically, the enterprise branch operation information includes the basic information of the enterprise branch, the financial information of the enterprise branch, the operation indicator information of the enterprise branch and the network security management information of the enterprise branch; the basic information of the enterprise branch includes the branch name, the address of the branch and the person in charge of the branch; the financial information of the enterprise branch includes the monthly income and monthly expenditure of the branch; the operation indicator information of the enterprise branch includes the monthly sales of the branch and the customer satisfaction of the branch; the network security management information of the enterprise branch includes the information leakage status of the branch and the network attack status of the branch; the operation information of each department of each branch of the enterprise includes the department name, the person in charge of the department, the performance indicators of the department and the progress of the department project; the enterprise employee information includes the department of the employee, the employee's name, the time of employment, the employee's salary, the employee's attendance record and the employee's performance evaluation.

[0025] In this implementation plan, the operating information of the enterprise branch is obtained through the enterprise's internal human resources management system and the enterprise database; financial information is obtained by extracting relevant financial statements through the financial management system; operating indicator information is obtained through the sales management system and customer satisfaction surveys; the information leakage status specifically indicates whether the branch has experienced an information leakage incident and its severity, the network attack status indicates the frequency and impact of network attacks on the branch, and network security management information is specifically obtained through the network security management system and incident response records; the department performance indicators in the operating information of each department of each branch of the enterprise indicate the performance of the department, such as the sales target achievement rate, etc., the department project progress indicates the ongoing projects of the department and its completion progress, and the specific operating information of each department is obtained through the project management system and the department performance evaluation system; enterprise employee information is obtained through the human resources management system and the attendance system.

[0026] Specifically, the specific analysis of building an enterprise's blockchain network based on the enterprise's operating information is as follows: determine the enterprise's blockchain network structure level, and the specific network structure levels include the first-level blockchain network, the second-level blockchain network and the third-level blockchain network; the first-level blockchain network is responsible for the storage and management of the enterprise's branch operating information, and the operating information of each branch of the enterprise forms each node of the first-level blockchain, and each node of the first-level blockchain is managed by the person in charge of each branch; the second-level blockchain network is specifically the blockchain network of each branch, and the blockchain network of each branch is responsible for the storage and management of the operating information of each department of each branch, and the operating information of each department of each branch forms each node of each second-level blockchain network, and each node of the second-level blockchain network is managed by the person in charge of each department; the third-level blockchain network is specifically the blockchain network of each department of each branch, and the blockchain network of each department of each branch is responsible for the storage and management of the enterprise employee information of each department, and the employee information of each enterprise forms each node of each third-level blockchain network, and each node of the third-level blockchain network is managed by each employee of each department.

[0027] In this implementation plan, the blockchain network is divided into three levels, and the responsibilities and managers of each level are clearly defined, which helps to improve management efficiency and sense of responsibility; each branch and department can manage relevant information in its own blockchain network, reducing the complexity of cross-level communication; data is stored on multiple nodes, reducing the risk of single point failure and enhancing data security; through clear management levels, it is ensured that only relevant persons in charge and employees can access and manage specific information, protecting the privacy of employee and corporate data; the tamper-proof nature of blockchain makes all data records transparent and visible, improving trust; all operation records can be traced, which helps audit and compliance, and timely discover and solve problems; the blockchain network can be flexibly adjusted according to the development and needs of the enterprise, supporting the addition of new departments or new branches, providing an innovative technical foundation for each branch and department, and supporting future smart contracts and automated operations; blockchain networks at all levels can achieve real-time data updates and monitoring, improve the grasp of business operation status, and information can flow quickly to relevant levels, improving the response speed and accuracy of decision-making.

[0028] Specifically, the specific analysis of generating the private key of each enterprise employee in the blockchain network based on the enterprise employee information and employee identity information is as follows: obtaining the employee identity information, which includes the employee's iris image and fingerprint image; extracting the employee's iris features and fingerprint features based on the employee identity information, and then combining the employee's department with the iris features and fingerprint features to generate the employee's unique identity features; using the hash function to encrypt the employee's unique identity features to obtain the hash value of the unique identity features, and the specific unique identity feature hash value is expressed as: H B =H(B), where H B The hash value represents the unique identity feature, H() represents the adopted hash function, such as MD5, SHA-1, and B represents the unique identity feature of the employee; a random number generator is used to randomly generate a random number, the hash value of the unique identity feature is combined with the random number, and then the combined result is encrypted using the hash function to obtain an enhanced hash value of the unique identity feature. The specific enhanced hash value of the unique identity feature is expressed as: k=H[H(B)||r], where k is the enhanced hash value of the unique identity feature, H(B)||r represents the combination result of the hash value of the unique identity feature and the random number, || represents the combination operation of the hash value of the unique identity feature and the random number, and r represents the random number; the enhanced hash value of the unique identity feature is used as the private key of the enterprise employee in the blockchain network.

[0029] In this implementation scheme, the employee's iris image and fingerprint image are obtained through biometric equipment or related applications; the iris feature and fingerprint feature represent unique feature points extracted from the iris image and fingerprint image, and are specifically obtained by processing the iris and fingerprint images through a biometric recognition algorithm to extract corresponding features; the hash value of the unique identity feature represents the result obtained after applying a hash function to the unique identity feature, and is specifically obtained by hashing the unique identity feature using a secure hash algorithm (such as SHA-256); the randomly generated value is used to enhance the randomness of the private key.

[0030] The specific method for generating an employee's unique identity feature by combining iris features and fingerprint features is as follows: extract feature points of the iris image using a biometric algorithm (such as Hamming distance or Gabor filter) to obtain a feature vector, extract features of the fingerprint image using a fingerprint recognition algorithm (such as Minutiae point extraction) to obtain another feature vector; standardize the extracted iris features and fingerprint features to ensure that the two feature vectors are on the same scale for effective combination; directly concatenate the iris feature vector and the fingerprint feature vector into a new feature vector, i.e., the unique identity feature. For example, if the iris feature is a 128-dimensional vector and the fingerprint feature is a 64-dimensional vector, the combined feature vector will be 192-dimensional.

[0031] Specifically, the combination operation of combining the hash value of the unique identity feature with the random number can be in the form of a product or a summation.

[0032] By using biometrics to generate private keys, a highly secure authentication method is provided, reducing the risk of traditional passwords being cracked; combining department information with biometrics to generate unique identity features ensures that each employee's private key is unique and unpredictable, reducing the possibility of identity forgery; through the generation of hash functions and enhanced hash values, the integrity of the private key is ensured, and any modification to the original data will result in a change in the private key; the process of automatically generating private keys simplifies employee identity management and reduces the possibility of human error.

[0033] Specifically, the current market information and enterprise risk information are obtained, and then the specific analysis of the detection cycle of the blockchain network is obtained by using the current market information and the enterprise risk information: based on the current market information, the volatility of the current market is identified, and the volatility conditions include low volatility, stable volatility and large volatility; based on the enterprise risk information, the risk conditions of the enterprise are identified, and the risk conditions include low risk, moderate risk and high risk; when the volatility of the current market is low volatility and the risk condition of the enterprise is low risk, the first detection cycle is matched for the blockchain network; when the volatility of the current market is stable volatility and the risk condition of the enterprise is moderate risk, the second detection cycle is matched for the blockchain network; when the volatility of the current market is large volatility and the risk condition of the enterprise is high risk, the third detection cycle is matched for the blockchain network.

[0034] In this implementation scheme, the first detection cycle, the second detection cycle and the third detection cycle are specifically distinguished as follows: obtaining the upper and lower thresholds of the detection cycle, marking the detection cycle below the lower threshold of the detection cycle as the third detection cycle; marking the detection cycle below or equal to the upper threshold of the detection cycle and greater than or equal to the lower threshold of the detection cycle as the second detection cycle; marking the detection cycle greater than the upper threshold of the detection cycle as the first detection cycle.

[0035] The specific analysis of identifying the volatility of the current market based on the current market information is as follows: the current market information includes market trading volume volatility, unemployment rate and market interest rate change volatility; the average of market trading volume volatility, unemployment rate and market interest rate change volatility is taken as the volatility value of the current market, and then the volatility value of the current market is compared with the upper and lower thresholds of market volatility; when the volatility value is less than or equal to the lower threshold of market volatility, the volatility condition of the current market is marked as low volatility; when the volatility value is less than the upper threshold of market volatility and greater than the lower threshold of market volatility, the volatility condition of the current market is marked as stable volatility; when the volatility value is greater than or equal to the upper threshold of market volatility, the volatility condition of the current market is marked as large volatility.

[0036] The specific analysis of identifying the risk status of an enterprise based on enterprise risk information is as follows: enterprise risk information specifically includes employee turnover rate and frequency of network attacks; the average of employee turnover rate and frequency of network attacks is taken as the enterprise's risk indicator, and then the enterprise's risk indicator is compared with the upper and lower thresholds of enterprise risk; when the risk indicator is less than or equal to the lower threshold of enterprise risk, the enterprise's risk status is marked as low risk; when the risk indicator is less than or equal to the upper threshold of enterprise risk and greater than the lower threshold of enterprise risk, the enterprise's risk status is marked as moderate risk; when the risk indicator is greater than or equal to the upper threshold of enterprise risk, the enterprise's risk status is marked as high risk.

[0037] The volatility of market trading volume reflects the level of activity of market trading activities. The greater the volatility, the more frequent the market activities. It is identified by obtaining market trading data through financial market monitoring tools or data providers; the unemployment rate is an important indicator reflecting the health of the economy. A rise in the unemployment rate usually means a weak economy. It is identified by obtaining unemployment rate data through relevant economic research institutions; the volatility of market interest rate changes reflects the fluctuation of interest rates, which affects lending and investment decisions and is obtained through banks or financial institutions; the upper and lower thresholds of market volatility are specifically the boundary values ​​used to judge the market volatility, which are divided into lower thresholds and upper thresholds, determined through historical data analysis or set based on professionals in related fields; the employee turnover rate represents the proportion of employee resignations, reflecting the stability of the enterprise and employee satisfaction, and is identified by extracting employee resignation data through the human resources management system; the frequency of cyber attacks represents the frequency of cyber attacks suffered by the enterprise, reflecting the network security status of the enterprise, and is obtained through the attack event data recorded by the network security monitoring system; the upper and lower thresholds of enterprise risk represent the boundary values ​​used to judge the risk status of the enterprise, which are divided into lower thresholds and upper thresholds, determined through historical data analysis or set based on professionals in related fields.

[0038] The first detection cycle corresponds to the detection cycle with low market volatility and low corporate risk, with the lowest frequency, such as six months or one year; the second detection cycle corresponds to the detection cycle with stable market volatility and moderate corporate risk, with a moderate frequency, such as two months or three months; the third detection cycle corresponds to the detection cycle with large market volatility and high corporate risk, with the highest frequency, such as every week or every day.

[0039] By monitoring market fluctuations and corporate risks in real time, the detection cycle can be adjusted according to environmental changes, improving the flexibility and adaptability of risk management; matching the detection cycle according to the risk situation allows more frequent detection during high-risk periods, enhancing the ability to respond to potential security threats; by reasonably arranging the detection cycle, resource allocation can be optimized to avoid wasting too many resources on unnecessary frequent detection when the risk and volatility are low; through the combination of volatility conditions and risk conditions, a more effective early warning mechanism can be established to identify potential risks in advance.

[0040] Specifically, the specific identification and analysis of security anomalies are as follows: based on the detection cycle of the blockchain network, the security data of the enterprise blockchain network is obtained, and the security data includes the frequency of smart contract mobilization and the frequency of transactions; the security data obtained from each security detection is compared with the detection indicators of the current security detection, and the detection indicators include the smart contract mobilization indicator and the transaction indicator; when it is detected that the frequency of smart contract mobilization is greater than the smart contract mobilization indicator or the transaction frequency is greater than the transaction indicator, there is a security anomaly in this security detection. Based on the tamper-proof characteristics of the blockchain, the transaction status of each node in the enterprise blockchain network is tracked and traced back, the specific source of the anomaly is identified, and the archived node is used to repair the anomaly.

[0041] In this implementation scheme, the smart contract mobilization frequency indicates the number of times a smart contract is executed within a certain period of time, reflecting the frequency of use of the smart contract, and is identified by extracting the smart contract call records through the logs or monitoring tools of the blockchain network; the transaction frequency indicates the number of transactions completed within a certain period of time, reflecting the transaction activity of the network, and is obtained by counting the number of transactions within a specific time period through the transaction records of the blockchain network.

[0042] The smart contract mobilization indicator represents the preset smart contract call frequency threshold, which is used to determine whether there is an anomaly. The benchmark value set based on historical data analysis or expert advice is used as the smart contract mobilization indicator; the transaction indicator represents the preset transaction frequency threshold, which is used to determine whether there is an anomaly. The benchmark value set based on historical data analysis or expert advice is used as the transaction indicator.

[0043] Through real-time detection of security data, potential security anomalies can be discovered in a timely manner, reducing losses and risks; the tamper-proof nature of blockchain can be utilized to ensure the transparency and integrity of data and enhance the company's trust in security conditions; once an anomaly is identified, the specific source of the anomaly can be quickly traced to reduce processing time and costs; by setting clear detection indicators, a systematic security management mechanism can be formed to improve the company's security protection capabilities.

[0044] Specifically, the specific analysis of real-time monitoring of the employment status of enterprise employees, cancellation of private keys, data isolation and task transfer processing for resigned employees is as follows: based on the human resources management system, real-time acquisition of employee employment status information, employee employment status information includes joining, leaving and vacation; when monitoring the existence of employee resignation, triggering the resigned employee processing flow; the specific resigned employee processing flow includes: identifying the enterprise blockchain network nodes that the resigned employee is responsible for managing, and then transferring the information in the enterprise blockchain network nodes that the resigned employee is responsible for managing to the archiving nodes of each blockchain network for isolation, and canceling the private key and access rights of the resigned employee in all blockchain networks; for the information transferred to the archiving node for isolation by the resigned employee, extracting the list of projects that the resigned employee is responsible for, transferring tasks through the blockchain network according to the urgency of the projects, and then updating the task leader information in the blockchain network.

[0045] In this implementation plan, the information nodes in the blockchain network managed by the resigned employees are queried and marked through smart contracts or databases. The private keys and access rights of the resigned employees are cancelled in a timely manner to prevent information leakage and improper access, and enhance the data security of the enterprise; the information managed by the resigned employees is isolated and transferred to the archiving node to ensure the integrity and traceability of the information within the enterprise; by evaluating the urgency of the project, efficient task transfer is achieved to ensure that the continuity and progress of the project are not affected; the resigned employee processing process is automated to reduce the work pressure of human resources and management and improve work efficiency; ensure that the information processing of resigned employees meets compliance requirements and provide a basis for subsequent audits.

[0046] See also Figure 2, a network information security processing system based on blockchain, applying the above-mentioned network information security processing method based on blockchain, including: a data acquisition module, used to obtain enterprise operation information, the enterprise operation information includes enterprise branch operation information, enterprise branch department operation information and enterprise employee information; a blockchain network construction module, used to build the enterprise's blockchain network based on the enterprise operation information, and determine the archiving nodes of each blockchain network, the enterprise's blockchain network includes a primary blockchain network, a secondary blockchain network and a tertiary blockchain network; a private key generation and management module, used to generate the private key of each enterprise employee in the blockchain network based on the enterprise employee information and employee identity information, and use the The private key encrypts the identity information and work task content of the enterprise employees; the risk detection module is used to obtain the current market information and enterprise risk information, and then use the current market information and enterprise risk information to obtain the detection cycle of the blockchain network, and conduct regular security detection of the enterprise's blockchain network based on the detection cycle of the blockchain network; the risk tracking and repair module is used to track the security anomalies identified by the regular security detection of the blockchain network using the blockchain network records, identify the source of the anomalies, and use the archiving nodes of each blockchain network to repair the anomalies; the resignation processing module is used to monitor the employment status of the enterprise employees in real time, and perform private key cancellation, data isolation and task transfer processing for the resigned employees.

[0047] In summary, this application has at least the following effects:

[0048] By building a multi-level blockchain network, hierarchical management of enterprise operation information is achieved, and the confidentiality and integrity of information are improved; the identity information and work task content of enterprise employees are encrypted with private keys to ensure the security of information during transmission and storage; regular security inspections of the blockchain network, as well as tracking and repair of security anomalies, further enhance the system's security protection capabilities; blockchain technology itself has the characteristics of being tamper-proof and traceable, which makes the recording and query of enterprise operation information more reliable and transparent; when security anomalies occur, blockchain records can be used for tracking, the source of the anomaly can be quickly identified, and the efficiency of problem solving can be improved; by obtaining current market information and enterprise risk information to determine the detection cycle of the blockchain network, security management can be more flexible and efficient; real-time monitoring of the employment status of enterprise employees, and private key cancellation, data isolation and task transfer processing for resigned employees, help maintain the continuity and stability of enterprise operations.

[0049] It should be understood by those skilled in the art that the embodiments of the present invention may be provided as methods and systems. Therefore, the present invention may take the form of a complete hardware embodiment, a complete software embodiment, or an embodiment combining software and hardware. Moreover, the present invention may take the form of a computer program product implemented on one or more computer-usable storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) containing computer-usable program codes.

[0050] The present invention is described with reference to the flowcharts and structure diagrams of the methods and systems according to the embodiments of the present invention. It should be understood that each process and combination of modules in the flowcharts and structure diagrams can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, a special-purpose computer, an embedded processor or other programmable data processing device to produce a machine, so that the instructions executed by the processor of the computer or other programmable data processing device generate instructions for implementing the processes in the flowcharts. Figure 1 process or processes and structures Figure 1 A device that specifies functionality in a module or modules.

[0051] These computer program instructions may also be stored in a computer-readable memory capable of directing a computer or other programmable data processing device to operate in a specific manner, so that the instructions stored in the computer-readable memory produce an article of manufacture comprising an instruction device, which implements the process Figure 1 process or processes and structures Figure 1 A function specified in a module or multiple modules.

[0052] These computer program instructions can also be loaded onto a computer or other programmable data processing device so that a series of operating steps are executed on the computer or other programmable device to produce a computer-implemented process, thereby providing instructions for implementing the process. Figure 1 process or processes and structures Figure 1 Steps to specify functionality in a module or multiple modules.

[0053] Although the preferred embodiments of the present invention have been described, those skilled in the art may make other changes and modifications to these embodiments once they have learned the basic creative concept. Therefore, the appended claims are intended to be interpreted as including the preferred embodiments and all changes and modifications that fall within the scope of the present invention.

[0054] Obviously, those skilled in the art can make various changes and modifications to the present invention without departing from the spirit and scope of the present invention. Thus, if these modifications and variations of the present invention fall within the scope of the claims of the present invention and their equivalents, the present invention is also intended to include these modifications and variations.

Claims

1. A network information security processing method based on blockchain, characterized in that: The following steps are involved: Obtaining enterprise operation information, including enterprise branch operation information, enterprise branch department operation information, and enterprise employee information; Building the enterprise's blockchain network based on the enterprise's operation information and determining the archiving nodes of each blockchain network, wherein the enterprise's blockchain network includes a primary blockchain network, a secondary blockchain network and a tertiary blockchain network; Generate the private key of each enterprise employee in the blockchain network based on the enterprise employee information and employee identity information, and use the private key to encrypt the enterprise employee's identity information and work task content; Obtain current market information and enterprise risk information, and then use the current market information and enterprise risk information to obtain the detection cycle of the blockchain network, and conduct regular security detection of the enterprise's blockchain network based on the detection cycle of the blockchain network; For security anomalies identified by regular risk detection of blockchain networks, blockchain network records are used to track and identify the source of anomalies, and archive nodes of each blockchain network are used to repair anomalies; Monitor the employment status of corporate employees in real time, and cancel private keys, isolate data, and transfer tasks for employees who leave the company.

2. According to a blockchain-based network information security processing method according to claim 1, it is characterized in that: The enterprise branch operation information specifically includes enterprise branch basic information, enterprise branch financial information, enterprise branch operation indicator information and enterprise branch network security management information; The basic information of the enterprise branch includes the branch name, branch address and branch manager; the financial information of the enterprise branch includes the branch monthly income and branch monthly expenditure; the operating indicator information of the enterprise branch includes the branch monthly sales and branch customer satisfaction; the network security management information of the enterprise branch includes the branch information leakage status and branch network attack status; The operational information of each department of each branch of the enterprise specifically includes the department name, department head, department performance indicators and department project progress; The enterprise employee information specifically includes the employee's department, employee name, employee entry time, employee salary, employee attendance record and employee performance evaluation.

3. According to a blockchain-based network information security processing method according to claim 1, it is characterized in that: The specific analysis of building an enterprise's blockchain network based on enterprise operation information is as follows: Determine the enterprise's blockchain network structure level, which includes the primary blockchain network, the secondary blockchain network, and the tertiary blockchain network; The first-level blockchain network is responsible for the storage and management of the enterprise branch operation information. The operation information of each branch of the enterprise forms each node of the first-level blockchain. Each node of the first-level blockchain is managed by the person in charge of each branch. The secondary blockchain network is specifically the blockchain network of each branch company. The blockchain network of each branch company is responsible for the storage and management of the operation information of each department of each branch company. The operation information of each department of each branch company forms each node of each secondary blockchain network. Each node of the secondary blockchain network is managed by the head of each department. The three-level blockchain network is specifically the blockchain network of each department of each branch company. The blockchain network of each department of each branch company is responsible for the storage and management of the employee information of each department. The employee information of each enterprise forms each node of each three-level blockchain network, and each node of the three-level blockchain network is managed by each employee of each department.

4. According to a blockchain-based network information security processing method according to claim 2, it is characterized in that: The specific analysis of generating the private key of each enterprise employee in the blockchain network based on the enterprise employee information and employee identity information is as follows: Acquiring employee identity information, wherein the employee identity information includes an iris image and a fingerprint image of the employee; Extract the employee's iris features and fingerprint features based on the employee's identity information, and then combine the employee's department with the iris features and fingerprint features to generate the employee's unique identity features; Using a hash function to encrypt the employee's unique identity feature to obtain a hash value of the unique identity feature; A random number is randomly generated using a random number generator, the hash value of the unique identity feature is combined with the random number, and then the combined result is encrypted using a hash function to obtain an enhanced hash value of the unique identity feature, and the enhanced hash value of the unique identity feature is used as the private key of the enterprise employee in the blockchain network.

5. According to a blockchain-based network information security processing method according to claim 1, it is characterized in that: Obtain current market information and enterprise risk information, and then use the current market information and enterprise risk information to obtain the specific analysis of the detection cycle of the blockchain network: Identify the volatility of the current market based on current market information, where the volatility includes low volatility, stable volatility and large volatility; Identify the risk status of the enterprise based on the enterprise risk information, which includes low risk, moderate risk and high risk; When the current market volatility is low and the enterprise's risk is low, the blockchain network is matched with the first detection cycle; When the current market volatility is stable and the enterprise's risk profile is moderate, the blockchain network is matched with a second detection cycle; When the current market volatility is large and the enterprise's risk situation is high, the blockchain network is matched with the third detection cycle.

6. A network information security processing method based on blockchain according to claim 5, characterized in that: The specific distinction between the first detection cycle, the second detection cycle and the third detection cycle is as follows: Obtain the upper and lower thresholds of the detection cycle, and mark the detection cycle below the lower threshold of the detection cycle as the third detection cycle; Marking a detection cycle that is lower than or equal to the detection cycle upper threshold and greater than or equal to the detection cycle lower threshold as a second detection cycle; A detection cycle greater than the detection cycle upper threshold is marked as a first detection cycle.

7. According to claim 5, a network information security processing method based on blockchain is characterized in that: The specific analysis of identifying the current market fluctuations based on current market information is as follows: Current market information includes market trading volume volatility, unemployment rate and market interest rate volatility; Take the average of market trading volume volatility, unemployment rate and market interest rate volatility as the current market volatility value, and then compare the current market volatility value with the upper and lower thresholds of market volatility; When the volatility value is less than or equal to the lower threshold of market volatility, the current market volatility is marked as low volatility; when the volatility value is less than the upper threshold of market volatility and greater than the lower threshold of market volatility, the current market volatility is marked as stable volatility; when the volatility value is greater than or equal to the upper threshold of market volatility, the current market volatility is marked as high volatility; The specific analysis of identifying the risk status of an enterprise based on enterprise risk information is as follows: Enterprise risk information specifically includes employee turnover rate and frequency of cyber attacks; Take the average of employee turnover rate and frequency of cyber attacks as the enterprise risk indicator, and then compare the enterprise risk indicator with the upper and lower risk thresholds; When the risk indicator is less than or equal to the enterprise risk lower threshold, the enterprise's risk status is marked as low risk; When the risk indicator is less than or equal to the enterprise risk upper threshold and greater than the enterprise risk lower threshold, the enterprise’s risk status is marked as moderate risk; When the risk indicator is greater than or equal to the upper risk threshold of the enterprise, the risk status of the enterprise is marked as high risk.

8. According to a blockchain-based network information security processing method according to claim 5, it is characterized in that: The specific identification and analysis of the abnormal security situation is as follows: Obtaining security data of the enterprise blockchain network based on a detection cycle of the blockchain network, wherein the security data includes smart contract mobilization frequency and transaction frequency; Compare the security data obtained from each security test with the detection indicators of the current security test, where the detection indicators include smart contract mobilization indicators and transaction indicators; When it is detected that the frequency of smart contract mobilization is greater than the smart contract mobilization index or the transaction frequency is greater than the transaction index, there is a security anomaly in this security detection. Based on the tamper-proof nature of blockchain, the transaction status of each node in the enterprise blockchain network is tracked and traced back, the specific source of the anomaly is identified, and the archive node is used to repair the anomaly.

9. A blockchain-based network information security processing method according to claim 1, characterized in that: Real-time monitoring of the employment status of enterprise employees, and the specific analysis of private key cancellation, data isolation and task transfer for employees who have left the company are as follows: Based on the human resources management system, real-time information on employee status is obtained, including employee entry, resignation and vacation; When monitoring of employee resignation, trigger the resignation employee processing process; The specific process of handling resigned employees includes: identifying the enterprise blockchain network nodes managed by the resigned employee, transferring the information in the enterprise blockchain network nodes managed by the resigned employee to the archiving nodes of each blockchain network for isolation, and canceling the private key and access rights of the resigned employee in all blockchain networks; With respect to the information of the resigned employee transferred to the archiving node for isolation, a list of projects for which the resigned employee is responsible is extracted, and tasks are transferred through the blockchain network according to the urgency of the projects, and then the information of the task leader is updated in the blockchain network.

10. A network information security processing system based on blockchain, applying a network information security processing method based on blockchain according to any one of claims 1 to 9, characterized in that: include: A data acquisition module is used to acquire enterprise operation information, which includes enterprise branch operation information, enterprise branch department operation information and enterprise employee information; A blockchain network construction module, used to construct the enterprise's blockchain network based on the enterprise's operation information and determine the archiving nodes of each blockchain network, wherein the enterprise's blockchain network includes a primary blockchain network, a secondary blockchain network and a tertiary blockchain network; The private key generation and management module is used to generate the private key of each enterprise employee in the blockchain network based on the enterprise employee information and employee identity information, and use the private key to encrypt the enterprise employee's identity information and work task content; The risk detection module is used to obtain current market information and enterprise risk information, and then use the current market information and enterprise risk information to obtain the detection cycle of the blockchain network, and conduct regular security detection of the enterprise's blockchain network based on the detection cycle of the blockchain network; The risk tracking and repair module is used to track the security anomalies identified by regular security detection of the blockchain network, identify the source of the anomalies using blockchain network records, and repair the anomalies using the archive nodes of each blockchain network; The resignation processing module is used to monitor the employment status of enterprise employees in real time, and to cancel private keys, isolate data and transfer tasks for employees who have resigned.

Images