Multi-application environment encryption communication method and system for user privacy protection

Abstract

The invention provides a multi-application environment encryption communication method and system for user privacy protection, and the method comprises the steps: recognizing risk factors and types in a current application environment, and evaluating the risk coefficient of each risk factor based on a communication knowledge system; receiving to-be-communicated private data, analyzing the to-be-communicated private data, and determining data attributes of each unit data in the to-be-communicated private data and a topological relation among all the unit data; determining the multi-level attack intensity of the current application environment to each unit data based on the type of the risk factor in the current application environment, the risk coefficient and the data attribute and topological relation of each unit data; and determining an encryption communication mode of the to-be-communicated private data based on the multi-level attack intensity, and performing encryption communication on the to-be-communicated private data based on the encryption communication mode. According to the invention, the security of user privacy data communication is improved, and meanwhile, the flexibility of encrypting communication data in different application environments is improved.

Description

Technical Field

[0001] The present invention relates to the field of data processing technology, and in particular to a multi-application environment encrypted communication method and system for protecting user privacy. Background Art

[0002] At present, with the rapid development of information technology, people are interacting with a large amount of information in different application environments. However, in a multi-application environment, user privacy faces many risks and challenges; On the one hand, different applications may collect and process a large amount of user data. If this data is not properly protected, it is easy to be leaked or abused. On the other hand, the network environment is becoming increasingly complex, and security threats such as hacker attacks and data theft always exist; However, traditional communication encryption methods may have limitations in multiple application scenarios. For example, they cannot adapt well to the characteristics and requirements of different applications, or the encryption security is not high enough or flexible enough, which may lead to the leakage or theft of user privacy data during the communication process, greatly reducing the communication security. Therefore, the present invention provides a multi-application environment encrypted communication method and system for protecting user privacy. Summary of the invention

[0003] The present invention provides a multi-application environment encryption communication method and system for protecting user privacy, which are used to identify the types and risk factors of risk factors in the current application environment, thereby facilitating the evaluation of the attack degree caused by different risk factors on communication data. At the same time, the privacy data to be communicated is analyzed to determine the topological relationship between different unit data, so as to accurately and effectively determine the multi-level attack strength of each unit data. Finally, based on the multi-level attack strength of the unit data attacked by risk factors in the current application environment, the encryption communication mode of the privacy data to be communicated is reasonably determined, so as to achieve user privacy protection through different encryption communication modes for different application environments, improve the security of user privacy data communication, and at the same time, improve the flexibility of encrypting communication data in different application environments, which greatly adapts to the communication needs and characteristics in different application environments.

[0004] The present invention provides a multi-application environment encrypted communication method for protecting user privacy, comprising: Step 1: Identify the risk factors and types in the current application environment, and evaluate the risk factor of each risk factor based on the communication knowledge system; Step 2: Receive the private data to be communicated, parse the private data to be communicated, and determine the data attributes of each unit data in the private data to be communicated and the topological relationship between all the unit data; Step 3: Determine the multi-level attack intensity of the current application environment on each unit data based on the type and risk coefficient of the risk factors in the current application environment and the data attributes and topological relationship of each unit data; Step 4: Determine an encryption communication method for treating the communication privacy data based on the multi-level attack strength, and perform encryption communication on the communication privacy data based on the encryption communication method.

[0005] Preferably, in a multi-application environment encrypted communication method for protecting user privacy, in step 1, identifying the risk factors and types existing in the current application environment includes: Obtaining the environment composition of the current application environment, and determining the detection dimension for performing danger detection on the current application environment based on the environment composition; Extract the detection object node corresponding to each detection dimension, and call the corresponding detection protocol from the preset management library based on the detection dimension; Based on the detection protocol, a global traversal is performed on the detection object nodes corresponding to each detection dimension, and the full-process operation status of each detection object node is obtained based on the global traversal result; Based on the running status of the whole process, the risk factors existing in the current application environment are obtained, and based on the state characterization of the risk factors, the types of risk factors are obtained.

[0006] Preferably, in a multi-application environment encrypted communication method for protecting user privacy, in step 1, the risk factor of each risk factor is evaluated based on the communication knowledge system, including: Obtain the communication knowledge system and risk factor assessment indicators, and determine the impact of each risk factor on communication based on the communication knowledge system; Based on the impact range, historical data under the influence of various risk factors are retrieved from the corresponding preset database, and the historical data is analyzed to obtain the communication abnormality characteristics caused by various risk factors; Based on the risk factor assessment index, the risk level of each risk factor is assessed according to the communication abnormality characteristics, and the corresponding sub-risk assessment coefficient is obtained; The weight of each risk factor assessment indicator is determined based on the communication knowledge system, and based on the weight, the sub-risk assessment coefficients of each risk factor under different risk factor assessment indicators are comprehensively analyzed to obtain the risk factor of each risk factor.

[0007] Preferably, a multi-application environment encrypted communication method for user privacy protection obtains the risk coefficient of each risk factor, including: Obtain the risk factor obtained, and record the risk factor of each current risk factor; Track the real-time status of each risk factor based on the recorded results, and determine the status change trend of each risk factor over time based on the tracking results; The weight of each risk factor assessment indicator is dynamically adjusted based on the state change trend, and the risk factor of each risk factor is synchronously updated based on the dynamic adjustment result.

[0008] Preferably, a multi-application environment encrypted communication method for user privacy protection, in step 2, receiving the privacy data to be communicated, parsing the privacy data to be communicated, determining the data attributes of each unit data in the privacy data to be communicated and the topological relationship between all the unit data, including: Receiving the private data to be communicated, parsing the private data to be communicated, and determining a data source of the private data to be communicated; A data interaction channel is constructed between the main control center and the data source terminal based on the data source, and the document specifications of the private data to be communicated are obtained based on the data interaction channel; Determine a key summary of the private data to be communicated based on the document specification, and obtain data attributes of each unit of data based on the key summary; Analyze the basic parameter representation of each unit data based on data attributes, obtain the structure tree corresponding to each unit data, and determine the branch state of each unit data based on the structure tree; Determine the data service execution logic between branches of different unit data based on the branch status, and obtain the association relationship between different unit data based on the data service execution logic; The association relationship is visualized to obtain the topological relationship between all unit data.

[0009] Preferably, a multi-application environment encrypted communication method for user privacy protection, in step 3, based on the type and risk coefficient of the risk factors in the current application environment and the data attributes and topological relationship of each unit data, the multi-level attack intensity of the current application environment on each unit data is determined, including: The type and risk coefficient of the risk factors in the current application environment and the data attributes of each unit data are obtained, and at the same time, the basic communication parameters of the current application environment are obtained, and a virtual application environment of the current application environment is constructed in the computer based on the basic communication parameters; Based on the type and risk factor of the risk factor, basic operating parameters of the virtual application environment are configured in the operating background of the computer, and a simulated communication environment of the current application environment is obtained based on the configuration result; Based on the simulated communication environment, simulated communication is performed on each unit data according to the data attribute of each unit data, and based on the simulated communication result, an operation log of each unit data in the simulated communication environment is obtained; Parse the operation log to obtain the behavior status of each unit data, and determine the state change threshold of each unit data based on the behavior status; Determine the attack range and attack traces of each unit data based on the state change threshold, and analyze the attack range and attack traces based on the preset evaluation indicators to obtain the initial personalized attack intensity of each unit data in the current application environment; Obtaining the topological relationship between all unit data, and splitting the unit data with associated relationships into multiple unit data groups based on the topological relationship; Determine the logical characteristics between the unit data in each unit data group based on the association relationship, and determine the business dependency scope between the unit data in each unit data group based on the logical characteristics; Based on the business dependency range, the initial personalized attack strength between each unit data in each unit data group is corrected, and based on the correction result, the initial macro attack strength of each unit data in the topological relationship is obtained; Based on the initial personalized attack strength and initial macro attack strength of each unit data, the multi-level attack strength of each unit data is obtained.

[0010] Preferably, a multi-application environment encrypted communication method for protecting user privacy, in step 4, determining an encrypted communication method for treating communication privacy data based on multi-level attack strength, and performing encrypted communication on the communication privacy data based on the encrypted communication method, including: Obtain the multi-level attack strength of the current application environment on each unit of data, and determine the vulnerable data range and attack type of each unit of data based on the multi-level attack strength; Extract target data fragments within the vulnerable data range and extract basic parameters of the target data fragments; Determine the user rights and application scenarios of each unit data based on basic parameters, and determine the generalization parameter range of the target data segment based on user rights and application scenarios; Desensitize the target data fragments based on the generalized parameter interval, and match the attack type of each unit data with the reference encryption method comparison table to obtain the encryption communication method for each unit data; The desensitized unit data is encrypted and communicated based on the encrypted communication method.

[0011] Preferably, in a multi-application environment encrypted communication method for protecting user privacy, in step 4, determining an encrypted communication method for treating communication privacy data based on multi-level attack strength includes: Obtain the encrypted communication methods for treating communication privacy data with multiple levels of attack strength in different application environments, and simulate and test the encrypted communication methods in different application environments on a computer; Determine the encryption performance of encryption communication methods in different application environments based on the simulation test results, and record the application environments that meet the encryption performance and the corresponding encryption communication methods; Determine the mapping relationship between different application environments and encrypted communication methods based on the recording results, and construct a reference table of encrypted communication methods for private data to be communicated in different application environments based on the mapping relationship; The obtained encrypted communication method reference table is fed back to the management terminal for record keeping, and the record objects in the encrypted communication method reference table are updated in real time.

[0012] The present invention provides a multi-application environment encrypted communication system for protecting user privacy, comprising: The risk factor and risk coefficient determination module is used to identify the risk factors and types existing in the current application environment and evaluate the risk coefficient of each risk factor based on the communication knowledge system; The attribute and topological relationship determination module is used to receive the private data to be communicated, parse the private data to be communicated, and determine the data attribute of each unit data in the private data to be communicated and the topological relationship between all the unit data; An attack intensity determination module is used to determine the multi-level attack intensity of the current application environment on each unit data based on the type of risk factors in the current application environment, the risk coefficient, and the data attributes and topological relationship of each unit data; The encryption communication module is used to determine the encryption communication method for treating the communication privacy data based on the multi-level attack strength, and to perform encryption communication on the communication privacy data based on the encryption communication method.

[0013] Preferably, a multi-application environment encrypted communication system for user privacy protection, a risk factor and risk coefficient determination module, comprises: A dimension determination unit, used to obtain the environment composition of the current application environment, and determine the detection dimension for performing danger detection on the current application environment based on the environment composition; A protocol determination unit, used to extract the detection object node corresponding to each detection dimension, and retrieve the corresponding detection protocol from a preset management library based on the detection dimension; A parameter determination unit, used to perform a global traversal of the detection object nodes corresponding to each detection dimension based on the detection protocol, and obtain the full-process operation status of each detection object node based on the global traversal result; The risk factor determination unit is used to obtain the risk factors existing in the current application environment based on the full process operation status, and obtain the type of the risk factor based on the state representation of the risk factor.

[0014] Compared with the prior art, the present invention has the following beneficial effects: 1. By identifying the types and risk factors of the risk factors in the current application environment, it is convenient to evaluate the degree of attack caused by different risk factors on the communication data. At the same time, the privacy data to be communicated is analyzed to determine the topological relationship between different unit data, so as to accurately and effectively determine the multi-level attack strength of each unit data. Finally, based on the multi-level attack strength of the unit data attacked by risk factors in the current application environment, the encryption communication method of the privacy data to be communicated is reasonably determined, so that the privacy of the user is protected through different encryption communication methods for different application environments, which improves the security of the user's privacy data communication. At the same time, it improves the flexibility of encrypting communication data in different application environments, which greatly adapts to the communication needs and characteristics in different application environments.

[0015] 2. By determining the environmental composition of the current application environment, the detection dimensions for hazard detection in the current application environment are determined. Secondly, the detection object nodes corresponding to each detection dimension are determined, and effective global traversal of the detection object nodes is achieved according to the detection protocol under the corresponding dimension, so as to accurately and effectively identify and determine the dangerous factors in the current application environment. Finally, the type of dangerous factors is locked according to the state representation of the dangerous factors, which facilitates the subsequent determination of the attack intensity of the dangerous factors on the data.

[0016] Other features and advantages of the present invention will be described in the following description, and partly become apparent from the description, or understood by practicing the present invention. The purpose and other advantages of the present invention can be realized and obtained by the structures specifically pointed out in this application document.

[0017] The technical solution of the present invention is further described in detail below through the accompanying drawings and embodiments. BRIEF DESCRIPTION OF THE DRAWINGS

[0018] The accompanying drawings are used to provide a further understanding of the present invention and constitute a part of the specification. Together with the embodiments of the present invention, they are used to explain the present invention and do not constitute a limitation of the present invention. In the accompanying drawings: Figure 1 This is a flow chart of a multi-application environment encrypted communication method for user privacy protection in an embodiment of the present invention; Figure 2 This is a flowchart of step 1 of a multi-application environment encrypted communication method for user privacy protection in an embodiment of the present invention; Figure 3 This is a structural diagram of a multi-application environment encrypted communication system for protecting user privacy in an embodiment of the present invention. DETAILED DESCRIPTION

[0019] The preferred embodiments of the present invention are described below in conjunction with the accompanying drawings. It should be understood that the preferred embodiments described herein are only used to illustrate and explain the present invention, and are not used to limit the present invention.

[0020] Embodiment 1: This embodiment provides a multi-application environment encrypted communication method for protecting user privacy. Figure 1 As shown, including: Step 1: Identify the risk factors and types in the current application environment, and evaluate the risk factor of each risk factor based on the communication knowledge system; Step 2: Receive the private data to be communicated, parse the private data to be communicated, and determine the data attributes of each unit data in the private data to be communicated and the topological relationship between all the unit data; Step 3: Determine the multi-level attack intensity of the current application environment on each unit data based on the type and risk coefficient of the risk factors in the current application environment and the data attributes and topological relationship of each unit data; Step 4: Determine an encryption communication method for treating the communication privacy data based on the multi-level attack strength, and perform encryption communication on the communication privacy data based on the encryption communication method.

[0021] In this embodiment, the risk factors refer to risk factors such as network congestion, loopholes, malware, and equipment failures existing in the application environment.

[0022] In this embodiment, the communication knowledge system is known in advance and is used to record the composition of the communication mechanism and the impact of each risk factor on the communication effect.

[0023] In this embodiment, the risk coefficient is used to characterize the impact of different risk factors on communication privacy data during the communication process. The larger the value, the greater the impact on the communication.

[0024] In this embodiment, the private data to be communicated refers to data that needs to be encrypted for transmission.

[0025] In this embodiment, the unit data refers to a data sequence in the private data to be communicated.

[0026] In this embodiment, data attributes refer to information such as the data type corresponding to the singular data, the corresponding transmission security requirements during the transmission process, and the corresponding component composition.

[0027] In this embodiment, the topological relationship refers to the interaction relationship and association relationship between all unit data.

[0028] In this embodiment, multi-level attack strength refers to the attack strength that each unit data suffers in the application environment, as well as the attack strength that each unit data suffers under the influence of the topological relationship, determined based on the type of risk factor, risk coefficient, data attributes and topological relationship of each unit data.

[0029] In this embodiment, the encryption communication method is determined according to the multi-level attack strength, including other encryption methods such as asymmetric encryption.

[0030] The working principle and beneficial effects of the above technical solution are: by identifying the types and risk factors of risk factors in the current application environment, it is convenient to evaluate the degree of attack caused by different risk factors on communication data. At the same time, the privacy data to be communicated is analyzed to determine the topological relationship between different unit data, so as to accurately and effectively determine the multi-level attack strength of each unit data. Finally, based on the multi-level attack strength of the unit data attacked by risk factors in the current application environment, the encryption communication method of the privacy data to be communicated is reasonably determined, so as to achieve user privacy protection through different encryption communication methods for different application environments, improve the security of user privacy data communication, and at the same time, improve the flexibility of encrypting communication data in different application environments, which greatly adapts to the communication needs and characteristics in different application environments.

[0031] Example 2 Based on Example 1, this example provides a multi-application environment encrypted communication method for user privacy protection, such as Figure 2 As shown, in step 1, identify the risk factors and types existing in the current application environment, including: Step 101: Obtain the environment composition of the current application environment, and determine the detection dimension for performing danger detection on the current application environment based on the environment composition; Step 102: extracting the detection object node corresponding to each detection dimension, and retrieving the corresponding detection protocol from the preset management library based on the detection dimension; Step 103: Perform a global traversal of the detection object nodes corresponding to each detection dimension based on the detection protocol, and obtain the full-process operation status of each detection object node based on the global traversal result; Step 104: based on the whole process running status, obtain the risk factors existing in the current application environment, and based on the state representation of the risk factors, obtain the type of the risk factors.

[0032] In this embodiment, the environment composition refers to the components of the current application environment, including the network and hardware devices.

[0033] In this embodiment, the detection dimension refers to the type of risk detection performed on the current application environment, such as network operation status, whether there is a device fault, and software compatibility.

[0034] In this embodiment, the detection object node refers to a specific detection object corresponding to each detection dimension.

[0035] In this embodiment, the preset management library is set in advance and is used to store a variety of different detection protocols, wherein the detection protocol refers to the method to be adopted for performing danger detection under different detection dimensions and the degree of rigor of the detection.

[0036] In this embodiment, global traversal refers to detecting all parameters or operation links of the detection object node.

[0037] In this embodiment, the full-process running status refers to the running status corresponding to all running links of the detection object node.

[0038] In this embodiment, the state representation refers to the phenomenon presented by the risk factor, for example, it may be a specific fault condition of the equipment.

[0039] The working principle and beneficial effects of the above technical solution are: by determining the environmental composition of the current application environment, the detection dimension for danger detection in the current application environment is determined; secondly, the detection object node corresponding to each detection dimension is determined, and an effective global traversal of the detection object node is achieved according to the detection protocol under the corresponding dimension, thereby achieving accurate and effective identification and determination of the dangerous factors existing in the current application environment; finally, the type of dangerous factors is locked according to the state representation of the dangerous factors, which provides convenience for the subsequent determination of the attack intensity of the dangerous factors on the data.

[0040] Embodiment 3: Based on Example 1, this embodiment provides a multi-application environment encrypted communication method for user privacy protection. In step 1, the risk factor of each risk factor is evaluated based on the communication knowledge system, including: Obtain the communication knowledge system and risk factor assessment indicators, and determine the impact of each risk factor on communication based on the communication knowledge system; Based on the impact range, historical data under the influence of various risk factors are retrieved from the corresponding preset database, and the historical data is analyzed to obtain the communication abnormality characteristics caused by various risk factors; Based on the risk factor assessment index, the risk level of each risk factor is assessed according to the communication abnormality characteristics, and the corresponding sub-risk assessment coefficient is obtained; The weight of each risk factor assessment indicator is determined based on the communication knowledge system, and based on the weight, the sub-risk assessment coefficients of each risk factor under different risk factor assessment indicators are comprehensively analyzed to obtain the risk factor of each risk factor.

[0041] In this embodiment, the risk factor evaluation index is known in advance and is a standard and value requirement for evaluating the risk level of the risk factor.

[0042] In this embodiment, the impact range refers to the type of impact of different risk factors on the communication of communication privacy data, such as network congestion.

[0043] In this embodiment, the preset database is known in advance and is used to record the historical data corresponding to different risk factors, wherein the historical data is the specific operation status of the privacy data to be communicated during the communication process.

[0044] In this embodiment, the communication abnormality feature refers to a specific abnormal communication situation generated by historical data under the influence of dangerous factors, for example, the specific degree of delay or the amount of leaked data.

[0045] In this embodiment, the sub-risk assessment coefficient refers to the result obtained by respectively assessing the risk situation of each risk factor through the risk coefficient assessment index and the communication abnormality feature, that is, the assessment result corresponding to each risk coefficient assessment index.

[0046] The working principle and beneficial effects of the above technical solution are: by accurately and effectively determining the impact scope of individual risk factors on communication based on the communication knowledge system and risk factor assessment indicators, secondly, retrieving corresponding historical data from the corresponding database according to the impact scope, and analyzing the historical data, to accurately and effectively determine the communication anomaly characteristics caused by the risk factors to the communication data, and finally, according to the risk factor assessment indicators, the risk factor of each risk factor is accurately and effectively determined according to the communication anomaly characteristics, which provides a reference for determining the encryption communication method for treating communication privacy data.

[0047] Embodiment 4: On the basis of Example 1, this embodiment provides a multi-application environment encrypted communication method for user privacy protection, and obtains the risk coefficient of each risk factor, including: Obtain the risk factor obtained, and record the risk factor of each current risk factor; Track the real-time status of each risk factor based on the recorded results, and determine the status change trend of each risk factor over time based on the tracking results; The weight of each risk factor assessment indicator is dynamically adjusted based on the state change trend, and the risk factor of each risk factor is synchronously updated based on the dynamic adjustment result.

[0048] In this embodiment, the state change trend refers to the change in the severity of the impact of different risk factors on communication data during the communication process as the application environment changes.

[0049] The working principle and beneficial effect of the above technical solution are: by real-time monitoring of the real-time status of each risk factor, it is convenient to adjust the corresponding weight value in time when the status of the risk factor changes, thereby ensuring the accuracy and reliability of the risk coefficient of each risk factor.

[0050] Embodiment 5: Based on Example 1, this embodiment provides a multi-application environment encrypted communication method for user privacy protection. In step 2, the private data to be communicated is received, and the private data to be communicated is parsed to determine the data attributes of each unit data in the private data to be communicated and the topological relationship between all the unit data, including: Receiving the private data to be communicated, parsing the private data to be communicated, and determining a data source of the private data to be communicated; A data interaction channel is constructed between the main control center and the data source terminal based on the data source, and the document specifications of the private data to be communicated are obtained based on the data interaction channel; Determine a key summary of the private data to be communicated based on the document specification, and obtain data attributes of each unit of data based on the key summary; Analyze the basic parameter representation of each unit data based on data attributes, obtain the structure tree corresponding to each unit data, and determine the branch state of each unit data based on the structure tree; Determine the data service execution logic between branches of different unit data based on the branch status, and obtain the association relationship between different unit data based on the data service execution logic; The association relationship is visualized to obtain the topological relationship between all unit data.

[0051] In this embodiment, the data source refers to the device terminal corresponding to the private data to be communicated.

[0052] In this embodiment, the data interaction channel is a communication link for connecting the main control center and the data source terminal.

[0053] In this embodiment, the document specification refers to information such as the component composition of the private data to be communicated obtained from the data source terminal.

[0054] In this embodiment, the key summary refers to the summary data information corresponding to the private data to be communicated.

[0055] In this embodiment, the basic parameter representation refers to the specific value range corresponding to each unit data and the corresponding data characteristics and composition and other information.

[0056] In this embodiment, the structure tree refers to displaying the composition of each unit data and the relationship between the data in a structural manner.

[0057] In this embodiment, the branch status refers to the distribution and structure of each data component in each unit data.

[0058] In this embodiment, the data service execution logic refers to the association relationship between branches of different unit data.

[0059] The working principle and beneficial effects of the above technical solution are: by parsing the privacy data for communication, the data source of the privacy data for communication can be effectively determined. At the same time, a data interaction channel between the main control center and the data source terminal is constructed according to the determined data source, so that the key summary of the privacy data for communication can be determined from the data source terminal according to the data interaction channel. Secondly, the data attributes of each unit data are locked according to the obtained key summary, and the structure tree corresponding to each unit data is determined according to the data attributes. Finally, the association relationship between different unit data is determined according to the structure tree, and the topological structure between different unit data is determined according to the association relationship, so that it is convenient to determine the degree of attack of different unit data in the current application environment according to the topological structure, which is conducive to reliable data encryption of the privacy data for communication.

[0060] Embodiment 6: On the basis of Example 1, this embodiment provides a multi-application environment encrypted communication method for user privacy protection. In step 3, based on the type and risk coefficient of the risk factors in the current application environment and the data attributes and topological relationship of each unit data, the multi-level attack intensity of the current application environment on each unit data is determined, including: The type and risk coefficient of the risk factors in the current application environment and the data attributes of each unit data are obtained, and at the same time, the basic communication parameters of the current application environment are obtained, and a virtual application environment of the current application environment is constructed in the computer based on the basic communication parameters; Based on the type and risk factor of the risk factor, basic operating parameters of the virtual application environment are configured in the operating background of the computer, and a simulated communication environment of the current application environment is obtained based on the configuration result; Based on the simulated communication environment, simulated communication is performed on each unit data according to the data attribute of each unit data, and based on the simulated communication result, an operation log of each unit data in the simulated communication environment is obtained; Parse the operation log to obtain the behavior status of each unit data, and determine the state change threshold of each unit data based on the behavior status; Determine the attack range and attack traces of each unit data based on the state change threshold, and analyze the attack range and attack traces based on the preset evaluation indicators to obtain the initial personalized attack intensity of each unit data in the current application environment; Obtaining the topological relationship between all unit data, and splitting the unit data with associated relationships into multiple unit data groups based on the topological relationship; Determine the logical characteristics between the unit data in each unit data group based on the association relationship, and determine the business dependency scope between the unit data in each unit data group based on the logical characteristics; Based on the business dependency range, the initial personalized attack strength between each unit data in each unit data group is corrected, and based on the correction result, the initial macro attack strength of each unit data in the topological relationship is obtained; Based on the initial personalized attack strength and initial macro attack strength of each unit data, the multi-level attack strength of each unit data is obtained.

[0061] In this embodiment, the basic communication parameters refer to the communication mode, communication rate, network status, etc. in the current application environment.

[0062] In this embodiment, the virtual application environment refers to a virtual environment that is constructed in a computer and is consistent with the current application environment, in order to facilitate determination of the impact of risk factors in the current application environment.

[0063] In this embodiment, the basic operating parameters refer to the parameter improvement of the virtual application environment in the computer according to the type and risk coefficient of the risk factor, that is, the corresponding risk factors and the risk degree of the risk factors are constructed in the virtual application environment.

[0064] In this embodiment, the operation log refers to the specific operation status of each unit data in the simulated communication environment.

[0065] In this embodiment, the behavior state refers to the specific communication situation presented by each unit data under the influence of the risk factor.

[0066] In this embodiment, the state change threshold refers to the specific procedure at which the communication status of each unit data changes under the influence of the risk factor.

[0067] In this embodiment, the attack range and attack trace are used to characterize the data impact range caused by the risk factor on each unit data and the attack mark left when being attacked, so as to facilitate the determination of the attack intensity of each unit data.

[0068] In this embodiment, the preset evaluation indicators are known in advance and are used to analyze the attack scope and attack traces to determine the initial personalized attack intensity of the current application environment on each unit data, wherein the initial personalized attack intensity is the attack situation of the current application environment on each unit data without considering the association relationship between the unit data.

[0069] In this embodiment, the unit data group refers to the division of the unit data with associated relationships into components, that is, the unit data with associated relationships are divided into a group, so as to facilitate the determination of the initial macro attack intensity of each unit data in the topological relationship.

[0070] In this embodiment, the logical feature refers to the data association logic or business execution logic between each unit data.

[0071] In this embodiment, the business dependency range refers to the degree of mutual limitation between the unit data in each unit data group, that is, the causal strength of the result of each unit data on the next unit data.

[0072] In this embodiment, the initial macro attack strength refers to the attack strength corresponding to each unit data under the current topological relationship limitation, which is finally obtained after the initial personalized attack strength of each unit data is considered in the topological relationship.

[0073] The working principle and beneficial effects of the above technical solution are: by obtaining the basic communication parameters of the current application environment, a virtual application environment of the current application environment is constructed in the computer according to the basic communication parameters, which provides convenience for determining the attack intensity of different risk factors on unit data. Secondly, the specific parameters of the risk factors are fully configured in the virtual application environment, and after the configuration is fully configured, each unit data is simulated for communication according to the data attributes of each unit data. During the simulated communication, the operation log of each unit data in the simulated communication environment is obtained in real time, so as to facilitate the analysis of the operation log, determine the state change threshold of each unit data, and then realize the state change threshold according to the state change threshold. The attack range and attack traces of each unit data are locked. Finally, the initial personalized attack strength of each unit data is accurately and reliably determined based on the attack range and attack traces. At the same time, the topological relationship between all unit data is considered, and the initial personalized attack strength of each unit data is corrected according to the topological relationship to achieve the determination of the initial macro attack strength of each unit data in the topological relationship. Finally, the multi-level attack strength of each unit data is obtained according to the initial personalized attack strength and initial macro attack strength of each unit data, which is convenient for reasonably determining the encrypted communication method of the privacy data to be communicated, and greatly adapts to the communication needs and characteristics in different application environments.

[0074] Embodiment 7: On the basis of Example 1, this embodiment provides a multi-application environment encrypted communication method for user privacy protection. In step 4, an encrypted communication method for treating communication privacy data is determined based on the multi-level attack strength, and encrypted communication is performed on the communication privacy data based on the encrypted communication method, including: Obtain the multi-level attack strength of the current application environment on each unit of data, and determine the vulnerable data range and attack type of each unit of data based on the multi-level attack strength; Extract target data fragments within the vulnerable data range and extract basic parameters of the target data fragments; Determine the user rights and application scenarios of each unit data based on basic parameters, and determine the generalization parameter range of the target data segment based on user rights and application scenarios; Desensitize the target data fragments based on the generalized parameter interval, and match the attack type of each unit data with the reference encryption method comparison table to obtain the encryption communication method for each unit data; The desensitized unit data is encrypted and communicated based on the encrypted communication method.

[0075] In this embodiment, the vulnerable data range refers to the portion of each unit data that is vulnerable to attack in the current application environment.

[0076] In this embodiment, the target data segment refers to specific data information corresponding to the vulnerable data range.

[0077] In this embodiment, the basic parameters refer to the core content of the target data segment and the problems that can be solved.

[0078] In this embodiment, the generalized parameter interval refers to a reference interval when generalizing the core content of the target data segment, that is, the target data segment is desensitized by the generalized parameter interval to reduce the attack intensity and attack sensitivity.

[0079] In this embodiment, the reference encryption method comparison table is set in advance and is used to record encryption methods corresponding to different attack types.

[0080] The working principle and beneficial effects of the above technical solution are: by analyzing the multi-level attack intensity, the vulnerable data range and attack type of each unit data can be accurately and effectively determined; secondly, the corresponding target data segment is determined according to the vulnerable data range, and the generalized parameter interval of the target data segment is determined according to the basic parameters of the target data segment; finally, the target data segment is desensitized according to the generalized parameter interval, which effectively reduces the attack intensity and attack sensitivity; at the same time, the encryption communication method is selected from the reference encryption method comparison table according to the attack type of each unit data, and the encrypted communication of the desensitized unit data is realized according to the selected encryption communication method, which improves the flexibility of encrypting communication data in different application environments and ensures the security of user privacy data communication.

[0081] Embodiment 8: On the basis of Example 1, this embodiment provides a multi-application environment encrypted communication method for user privacy protection. In step 4, the encrypted communication method for treating communication privacy data is determined based on the multi-level attack strength, including: Obtain the encrypted communication methods for treating communication privacy data with multiple levels of attack strength in different application environments, and simulate and test the encrypted communication methods in different application environments on a computer; Determine the encryption performance of encryption communication methods in different application environments based on the simulation test results, and record the application environments that meet the encryption performance and the corresponding encryption communication methods; Determine the mapping relationship between different application environments and encrypted communication methods based on the recording results, and construct a reference table of encrypted communication methods for private data to be communicated in different application environments based on the mapping relationship; The obtained encrypted communication method reference table is fed back to the management terminal for record keeping, and the record objects in the encrypted communication method reference table are updated in real time.

[0082] In this embodiment, the simulation test can be a performance test of the encrypted communication method under different application environments in the computer, specifically including: encryption strength test, which is used to measure the difficulty of the encryption algorithm to resist cracking; encryption efficiency test, which is the resource consumption and processing speed during the encryption and decryption process; encryption reliability test and encryption stability test, etc.

[0083] In this embodiment, encryption performance may be used to describe the ability and effect of an encrypted communication method in protecting data security, and specifically includes: encryption strength, encryption efficiency, encryption reliability, encryption stability, etc.

[0084] In this embodiment, the application environment that will meet the encryption performance may be that the encryption performance of the encryption communication method is different in different application environments. When the parameters involved in the encryption performance reach a preset threshold in the application environment, it is an application environment that meets the encryption performance. For example: when the encryption performance is encryption strength, when there is an application environment where the encryption strength is equal to or greater than the preset threshold, then the application environment is an application environment that meets the encryption performance.

[0085] In this embodiment, the mapping relationship can be information such as which encryption communication method performs best in different application environments, clarifying the correspondence between different application environments (such as specific software, systems, scenarios, etc.) and the most suitable encryption communication method corresponding to the application environment.

[0086] In this embodiment, the encrypted communication method reference table can list different application environments and the encrypted communication methods for treating communication privacy data that should be adopted in different application environments in a table according to the mapping relationship. The purpose of this is to quickly and accurately find the most suitable encrypted communication method according to the specific application environment in actual applications to ensure data security and privacy.

[0087] The working principle and beneficial effects of the above technical solution are: by obtaining the encrypted communication method for communicating privacy data with multi-level attack strengths under different application environments, and simulating and testing the encrypted communication methods under different application environments in a computer, it is beneficial to determine the encryption performance of the encrypted communication method under different application environments based on the simulation test results, record the application environment that meets the encryption performance and the corresponding encrypted communication method, effectively determine the mapping relationship between different application environments and encrypted communication methods, and thus construct an encrypted communication method reference table for communicating privacy data under different application environments through the mapping relationship, and feed the obtained encrypted communication method reference table back to the management terminal for recording and archiving, and update the record objects in the encrypted communication method reference table in real time, which not only effectively improves data security and ensures that privacy data is reliably protected in various application environments, but also improves the pertinence and efficiency of encryption, enhances the overall security and stability of the system, and ensures smooth and secure communication in different application scenarios.

[0088] Embodiment 9: This embodiment provides a multi-application environment encrypted communication system for user privacy protection, such as Figure 3 As shown, including: The risk factor and risk coefficient determination module is used to identify the risk factors and types existing in the current application environment and evaluate the risk coefficient of each risk factor based on the communication knowledge system; The attribute and topological relationship determination module is used to receive the private data to be communicated, parse the private data to be communicated, and determine the data attribute of each unit data in the private data to be communicated and the topological relationship between all the unit data; An attack intensity determination module is used to determine the multi-level attack intensity of the current application environment on each unit data based on the type of risk factors in the current application environment, the risk coefficient, and the data attributes and topological relationship of each unit data; The encryption communication module is used to determine the encryption communication method for treating the communication privacy data based on the multi-level attack strength, and to perform encryption communication on the communication privacy data based on the encryption communication method.

[0089] The working principle and beneficial effects of the above technical solution are: by identifying the types and risk factors of risk factors in the current application environment, it is convenient to evaluate the degree of attack caused by different risk factors on communication data. At the same time, the privacy data to be communicated is analyzed to determine the topological relationship between different unit data, so as to accurately and effectively determine the multi-level attack strength of each unit data. Finally, based on the multi-level attack strength of the unit data attacked by risk factors in the current application environment, the encryption communication method of the privacy data to be communicated is reasonably determined, so as to achieve user privacy protection through different encryption communication methods for different application environments, improve the security of user privacy data communication, and at the same time, improve the flexibility of encrypting communication data in different application environments, which greatly adapts to the communication needs and characteristics in different application environments.

[0090] Embodiment 10: Based on Example 9, this embodiment provides a multi-application environment encrypted communication system for user privacy protection, and a risk factor and risk coefficient determination module, including: A dimension determination unit, used to obtain the environment composition of the current application environment, and determine the detection dimension for performing danger detection on the current application environment based on the environment composition; A protocol determination unit, used to extract the detection object node corresponding to each detection dimension, and retrieve the corresponding detection protocol from a preset management library based on the detection dimension; A parameter determination unit, used to perform a global traversal of the detection object nodes corresponding to each detection dimension based on the detection protocol, and obtain the full-process operation status of each detection object node based on the global traversal result; The risk factor determination unit is used to obtain the risk factors existing in the current application environment based on the full process operation status, and obtain the type of the risk factor based on the state representation of the risk factor.

[0091] The working principle and beneficial effects of the above technical solution are: by determining the environmental composition of the current application environment, the detection dimension for danger detection in the current application environment is determined; secondly, the detection object node corresponding to each detection dimension is determined, and an effective global traversal of the detection object node is achieved according to the detection protocol under the corresponding dimension, thereby achieving accurate and effective identification and determination of the dangerous factors existing in the current application environment; finally, the type of dangerous factors is locked according to the state representation of the dangerous factors, which provides convenience for the subsequent determination of the attack intensity of the dangerous factors on the data.

[0092] Obviously, those skilled in the art can make various changes and modifications to the present invention without departing from the spirit and scope of the present invention. Thus, if these modifications and variations of the present invention fall within the scope of the claims of the present invention and their equivalents, the present invention is also intended to include these modifications and variations.

Claims

1. A multi-application environment encrypted communication method for user privacy protection, characterized in that: include: Step 1: Identify the risk factors and types in the current application environment, and evaluate the risk factor of each risk factor based on the communication knowledge system; Step 2: Receive the private data to be communicated, parse the private data to be communicated, and determine the data attributes of each unit data in the private data to be communicated and the topological relationship between all the unit data; Step 3: Determine the multi-level attack intensity of the current application environment on each unit data based on the type and risk coefficient of the risk factors in the current application environment and the data attributes and topological relationship of each unit data; Step 4: Determine an encryption communication method for treating the communication privacy data based on the multi-level attack strength, and perform encryption communication on the communication privacy data based on the encryption communication method.

2. According to claim 1, a multi-application environment encrypted communication method for user privacy protection is characterized in that: In step 1, identify the risk factors and types in the current application environment, including: Obtaining the environment composition of the current application environment, and determining the detection dimension for performing danger detection on the current application environment based on the environment composition; Extract the detection object node corresponding to each detection dimension, and call the corresponding detection protocol from the preset management library based on the detection dimension; Based on the detection protocol, a global traversal is performed on the detection object nodes corresponding to each detection dimension, and the full-process operation status of each detection object node is obtained based on the global traversal result; Based on the running status of the whole process, the risk factors existing in the current application environment are obtained, and based on the state characterization of the risk factors, the types of risk factors are obtained.

3. According to claim 1, a multi-application environment encrypted communication method for user privacy protection is characterized in that: In step 1, the risk factor of each risk factor is evaluated based on the communication knowledge system, including: Obtain the communication knowledge system and risk factor assessment indicators, and determine the impact of each risk factor on communication based on the communication knowledge system; Based on the impact range, historical data under the influence of various risk factors are retrieved from the corresponding preset database, and the historical data is analyzed to obtain the communication abnormality characteristics caused by various risk factors; Based on the risk factor assessment index, the risk level of each risk factor is assessed according to the communication abnormality characteristics, and the corresponding sub-risk assessment coefficient is obtained; The weight of each risk factor assessment indicator is determined based on the communication knowledge system, and based on the weight, the sub-risk assessment coefficients of each risk factor under different risk factor assessment indicators are comprehensively analyzed to obtain the risk factor of each risk factor.

4. The method for encrypted communication in multiple application environments with user privacy protection according to claim 3, characterized in that: Get the risk factor for each risk factor, including: Obtain the risk factor obtained, and record the risk factor of each current risk factor; Track the real-time status of each risk factor based on the recorded results, and determine the status change trend of each risk factor over time based on the tracking results; The weight of each risk factor assessment indicator is dynamically adjusted based on the state change trend, and the risk factor of each risk factor is synchronously updated based on the dynamic adjustment result.

5. According to claim 1, a multi-application environment encrypted communication method for user privacy protection is characterized in that: In step 2, the private data to be communicated is received and parsed to determine the data attributes of each unit data in the private data to be communicated and the topological relationship between all the unit data, including: Receiving the private data to be communicated, parsing the private data to be communicated, and determining a data source of the private data to be communicated; A data interaction channel is constructed between the main control center and the data source terminal based on the data source, and the document specifications of the private data to be communicated are obtained based on the data interaction channel; Determine a key summary of the private data to be communicated based on the document specification, and obtain data attributes of each unit of data based on the key summary; Analyze the basic parameter representation of each unit data based on data attributes, obtain the structure tree corresponding to each unit data, and determine the branch state of each unit data based on the structure tree; Determine the data service execution logic between branches of different unit data based on the branch status, and obtain the association relationship between different unit data based on the data service execution logic; The association relationship is visualized to obtain the topological relationship between all unit data.

6. The method for encrypted communication in multiple application environments with user privacy protection according to claim 1, characterized in that: In step 3, based on the type and risk factor of the risk factors in the current application environment and the data attributes and topological relationships of each unit data, the multi-level attack intensity of the current application environment on each unit data is determined, including: The type and risk coefficient of the risk factors in the current application environment and the data attributes of each unit data are obtained, and at the same time, the basic communication parameters of the current application environment are obtained, and a virtual application environment of the current application environment is constructed in the computer based on the basic communication parameters; Based on the type and risk factor of the risk factor, basic operating parameters of the virtual application environment are configured in the operating background of the computer, and a simulated communication environment of the current application environment is obtained based on the configuration result; Based on the simulated communication environment, simulated communication is performed on each unit data according to the data attribute of each unit data, and based on the simulated communication result, an operation log of each unit data in the simulated communication environment is obtained; Parse the operation log to obtain the behavior status of each unit data, and determine the state change threshold of each unit data based on the behavior status; Determine the attack range and attack traces of each unit data based on the state change threshold, and analyze the attack range and attack traces based on the preset evaluation indicators to obtain the initial personalized attack intensity of each unit data in the current application environment; Obtaining the topological relationship between all unit data, and splitting the unit data with associated relationships into multiple unit data groups based on the topological relationship; Determine the logical characteristics between the unit data in each unit data group based on the association relationship, and determine the business dependency scope between the unit data in each unit data group based on the logical characteristics; Based on the business dependency range, the initial personalized attack strength between each unit data in each unit data group is corrected, and based on the correction result, the initial macro attack strength of each unit data in the topological relationship is obtained; Based on the initial personalized attack strength and initial macro attack strength of each unit data, the multi-level attack strength of each unit data is obtained.

7. The method for encrypted communication in multiple application environments with user privacy protection according to claim 1, characterized in that: In step 4, an encryption communication method for treating the communication privacy data is determined based on the multi-level attack strength, and encryption communication is performed on the communication privacy data based on the encryption communication method, including: Obtain the multi-level attack strength of the current application environment on each unit of data, and determine the vulnerable data range and attack type of each unit of data based on the multi-level attack strength; Extract target data fragments within the vulnerable data range and extract basic parameters of the target data fragments; Determine the user rights and application scenarios of each unit data based on basic parameters, and determine the generalization parameter range of the target data segment based on user rights and application scenarios; Desensitize the target data fragments based on the generalized parameter interval, and match the attack type of each unit data with the reference encryption method comparison table to obtain the encryption communication method for each unit data; The desensitized unit data is encrypted and communicated based on the encrypted communication method.

8. The method for encrypted communication in multiple application environments with user privacy protection according to claim 1, characterized in that: In step 4, the encryption communication method for treating the communication privacy data is determined based on the multi-level attack strength, including: Obtain the encrypted communication methods for treating communication privacy data with multiple levels of attack strength in different application environments, and simulate and test the encrypted communication methods in different application environments in a computer; Determine the encryption performance of encryption communication methods in different application environments based on the simulation test results, and record the application environments that meet the encryption performance and the corresponding encryption communication methods; Determine the mapping relationship between different application environments and encrypted communication methods based on the recording results, and construct an encrypted communication method reference table for the private data to be communicated in different application environments based on the mapping relationship; The obtained encrypted communication method reference table is fed back to the management terminal for record keeping, and the record objects in the encrypted communication method reference table are updated in real time.

9. A multi-application environment encrypted communication system for user privacy protection, characterized in that: include: The risk factor and risk coefficient determination module is used to identify the risk factors and types existing in the current application environment and evaluate the risk coefficient of each risk factor based on the communication knowledge system; The attribute and topological relationship determination module is used to receive the private data to be communicated, parse the private data to be communicated, and determine the data attribute of each unit data in the private data to be communicated and the topological relationship between all the unit data; An attack intensity determination module is used to determine the multi-level attack intensity of the current application environment on each unit data based on the type of risk factors in the current application environment, the risk coefficient, and the data attributes and topological relationship of each unit data; The encryption communication module is used to determine the encryption communication method for treating the communication privacy data based on the multi-level attack strength, and to perform encryption communication on the communication privacy data based on the encryption communication method.

10. The multi-application environment encrypted communication system for user privacy protection according to claim 9, characterized in that: The module for determining risk factors and risk coefficients includes: A dimension determination unit, used to obtain the environment composition of the current application environment, and determine the detection dimension for performing danger detection on the current application environment based on the environment composition; A protocol determination unit, used to extract the detection object node corresponding to each detection dimension, and retrieve the corresponding detection protocol from a preset management library based on the detection dimension; A parameter determination unit, used to perform a global traversal of the detection object nodes corresponding to each detection dimension based on the detection protocol, and obtain the full-process operation status of each detection object node based on the global traversal result; The risk factor determination unit is used to obtain the risk factors existing in the current application environment based on the full process operation status, and obtain the type of the risk factor based on the state representation of the risk factor.

Images