Data integrity verification and recovery method

Abstract

The invention discloses a data integrity verification and recovery method, and relates to the technical field of data processing, S1, a client performs security encryption processing on data to form composite storage data, and the composite storage data is stored in a data retrieval system; s2, regularly and automatically executing a data integrity verification program by the client, performing integrity verification on the composite storage data in the S1 to judge the data integrity, and generating detection data; s3, the client judges that the data is lost or tampered according to the detection data in the S2, a recovery program is automatically started, and complete and correct storage data is obtained; and S4, performing secure storage on the storage data in the S3. According to the method, the storage data can be encrypted to form the composite storage data, the integrity verification can be automatically carried out on the storage data, and the storage data can be repaired, so that the purposes of data integrity verification and recovery can be realized, and key confidential data of a company can be protected.

Description

Technical Field

[0001] The present invention relates to the technical field of data processing, and in particular to a data integrity verification and recovery method. Background Art

[0002] Data integrity refers to ensuring that data is not maliciously tampered with or can be quickly discovered after tampering during the transmission and storage of data. In the field of information security, hackers or users with ulterior motives can also change the corresponding numerical information by performing linear operations on ciphertext without obtaining the key to crack the ciphertext. When the system detects that the data has been tampered with, the system can automatically restore the tampered data and remind the user that the data has been tampered with.

[0003] Enterprises generally store important data inside computer hard drives. When the computer hard drive is damaged by the external environment or the computer is invaded by a virus, the important data stored in the computer hard drive may be lost or stolen or tampered with, causing serious property losses to the enterprise. Summary of the invention

[0004] The purpose of the present invention is to provide a data integrity verification and recovery method to solve the problem raised in the above background technology that when the computer hard disk is damaged by the external environment or the computer is invaded by a virus, important data stored in the computer hard disk may be lost or stolen and tampered with, thereby causing serious property losses to the enterprise.

[0005] To achieve the above object, the present invention provides the following technical solution: a data integrity verification and recovery method, comprising:

[0006] S1. The client performs secure encryption processing on the data to form composite storage data, and stores the composite storage data inside the data retrieval system;

[0007] S2, the client automatically executes the data integrity check program regularly, performs a complete check on the composite storage data in S1 to determine the data integrity, and generates test data;

[0008] S3, the client determines that the data is lost or tampered with based on the detection data of S2, and automatically starts the recovery program to obtain complete and correct stored data;

[0009] S4: Safely store the data stored in S3.

[0010] 3. Preferably, the security encryption processing of S1 includes the following steps:

[0011] S11, the client processes and encodes the data to generate security storage data and integrity detection data;

[0012] S12, identifying the security storage data of S11, generating a corresponding dynamic management key, and sending it to the key management system for centralized management;

[0013] S13, sending the dynamic management key of S12 to the user;

[0014] S14: The client compresses and integrates the security storage data and integrity detection data of S11 to form composite storage data, and uploads the security storage data to the cloud for confidential backup.

[0015] Preferably, the data retrieval system of S1 includes a data storage module, a data screening module, a data protection module and a data reading module. The data storage module is used to classify and store different composite storage data. The data screening module is used to screen target composite storage data according to keywords and data information provided by a user. The data protection module is used to resist attacks on the data retrieval system by external virus programs. The data reading module is used to decompress and split the composite storage data, and read and decrypt the security storage data to obtain the original storage data for user review.

[0016] Preferably, the key management system of S12 includes a key storage module, a key date supervision module, a key update module, an old key processing module and a key retrieval module. The key storage module is used to classify and store different types of management keys, the key date supervision module is used to record the usage time of the key, the key update module is used to update the content of the management key, the old key processing module is used to discard and delete the management key that has exceeded the usage time, and the key retrieval module is used for users to retrieve the management key corresponding to the stored data.

[0017] Preferably, the execution of the integrity check procedure in S2 comprises the following steps:

[0018] S21, read the composite storage data of S1, decompress and split the composite storage data to form security storage data and integrity detection data;

[0019] S22, analyzing the security storage data in combination with the integrity detection data of S21 to obtain detection data;

[0020] S23. Mark key points of the security storage data according to the detection data of S22.

[0021] Preferably, the detection data of S22 includes a storage data content integrity judgment result, an authenticity judgment result, and a tampered content marking area.

[0022] Preferably, the key point marking in S23 means that the client can specially mark the lost or tampered parts inside the security storage data according to the detection data.

[0023] Preferably, the recovery procedure in S3 comprises the following steps:

[0024] S31, analyzing key point marks, determining the lost or tampered security storage data content, and generating target acquisition instructions;

[0025] S32, downloading the missing or tampered part of the security storage data content from the cloud according to the target acquisition instruction of S31;

[0026] S33, using the downloaded storage data to integrate and repair the missing or tampered security storage data;

[0027] S34, encrypting the security storage data restored in S33.

[0028] Preferably, the integrated repair in S33 refers to the client referring to the key point marks on the security storage data to sequentially insert the downloaded security storage data into the missing or tampered security storage data.

[0029] Preferably, the secure storage of S4 includes the following steps:

[0030] S41, compressing and integrating the restored security storage data with the integrity detection data again to obtain new composite storage data;

[0031] S42: The client replaces the new composite storage data and deletes the damaged composite storage data.

[0032] Compared with the prior art, the present invention has the following beneficial effects:

[0033] 1. In the present invention, the client encrypts the stored data to form composite stored data, and performs integrity check on the stored data at the same time. When it is detected that the stored data is lost or tampered with, the client automatically starts the recovery program to determine the missing or tampered part of the stored data, and integrates and repairs the missing or tampered security storage data in combination with the missing or tampered part of the security storage data downloaded from the cloud, thereby achieving the purpose of data integrity check and recovery and protecting the company's key confidential data.

[0034] 2. In the present invention, by storing data processing code, security storage data and integrity detection data are generated, which is convenient for protecting storage data. When hackers invade computers to obtain storage data, they cannot crack and translate the security storage data. Different security storage data correspond to dynamic management keys. The management keys will be replaced regularly to avoid the situation where the keys are known to others and the storage data are leaked, thereby improving the security of the storage data.

[0035] 3. In the present invention, when performing integrity check on stored data, the client analyzes the security stored data in combination with the integrity detection data, and quickly detects and analyzes the security stored data based on the detection nodes and detection programs provided by the integrity detection data, thereby improving the efficiency of integrity detection, and can accurately determine the location area of ​​missing or tampered data, facilitating subsequent repair of the stored data. BRIEF DESCRIPTION OF THE DRAWINGS

[0036] Figure 1 A system block diagram of a data integrity verification and recovery method of the present invention;

[0037] Figure 2 A system block diagram of a data retrieval system in a data integrity verification and recovery method of the present invention;

[0038] Figure 3 The present invention provides a system block diagram of a key management system in a data integrity verification and recovery method.

[0039] In the figure: 1. Data retrieval system; 11. Data storage module; 12. Data screening module; 13. Data protection module; 14. Data reading module; 2. Key management system; 21. Key storage module; 22. Key date supervision module; 23. Key update module; 24. Old key processing module; 25. Key retrieval module. DETAILED DESCRIPTION

[0040] The following will be combined with the drawings in the embodiments of the present invention to clearly and completely describe the technical solutions in the embodiments of the present invention. Obviously, the implementation regulations described are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0041] See also Figure 1 The present invention provides a technical solution: a data integrity verification and recovery method, comprising the following steps:

[0042] Step 1: The client performs secure encryption processing on the data to form composite storage data, and stores the composite storage data inside the hard disk.

[0043] The security encryption process of step one includes the following steps:

[0044] 11. The client processes and encodes the data to generate security storage data and integrity detection data;

[0045] 12. Identify the security storage data and generate the corresponding dynamic management key;

[0046] 13. Send the dynamic management key to the user;

[0047] 14. The client compresses and integrates the security storage data and integrity detection data to form composite storage data, and uploads the security storage data to the cloud for confidential backup.

[0048] Among them, the data retrieval system 1 includes a data storage module 11, a data screening module 12, a data protection module 13 and a data reading module 14. The data storage module 11 is used to classify and store different composite storage data. The data screening module 12 is used to screen the target composite storage data according to the keywords and data information provided by the user. The data protection module 13 is used to resist the attack of external virus programs on the data retrieval system 1. The data reading module 14 is used to decompress and split the composite storage data, and read and decrypt the security storage data to obtain the original storage data for user reference.

[0049] The key management system 2 includes a key storage module 21, a key date supervision module 22, a key update module 23, an old key processing module 24 and a key retrieval module 25. The key storage module 21 is used to classify and store different types of management keys, the key date supervision module 22 is used to record the key usage time, the key update module 23 is used to update the content of the management key, the old key processing module 24 is used to discard and delete the management key that has exceeded the usage time, and the key retrieval module 25 is used for users to retrieve the management key corresponding to the stored data.

[0050] Security storage data consists of encrypted characters and needs to be read and decrypted by the client before it can be converted into original data; dynamic management keys are centrally managed by the key management system and will be replaced regularly, and old management keys will be invalidated.

[0051] Step 2: The client automatically executes the data integrity check procedure regularly, performs a complete check on the composite storage data in step 1 to determine the data integrity, and generates test data.

[0052] The execution integrity check procedure in step 2 includes the following steps:

[0053] 21. Read the composite storage data in step 1, decompress and split the composite storage data to form security storage data and integrity detection data;

[0054] 22. Analyze the security storage data in combination with the integrity test data to obtain the test data;

[0055] 23. Mark key points of security storage data based on detection data.

[0056] The detection data includes the integrity judgment result of the stored data content, the authenticity judgment result and the tampered content marking area; the key point marking means that the client can specially mark the lost and tampered parts of the security storage data based on the detection data.

[0057] Step 3: The client determines that the data is lost or tampered with based on the detection data in step 2, and automatically starts the recovery program to obtain complete and correct stored data.

[0058] The recovery procedure in step three includes the following steps:

[0059] 31. Analyze key point marks, determine the content of lost or tampered security storage data, and generate target acquisition instructions;

[0060] 32. Download the missing or tampered part of the secure storage data content from the cloud according to the target acquisition instruction;

[0061] 33. Use the downloaded storage data to integrate and repair the missing or tampered security storage data;

[0062] 34. Encrypt the restored security storage data.

[0063] Integration repair means that the client refers to the key mark on the security storage data and inserts the downloaded security storage data into the missing and tampered security storage data in sequence.

[0064] Step 4: Safely store the data stored in step 3.

[0065] The secure storage in step 4 includes the following steps:

[0066] 41. Compress and integrate the restored security storage data with the integrity detection data again to obtain new composite storage data;

[0067] 42. The client replaces the new composite storage data and deletes the damaged composite storage data

[0068] Working principle of this method: the client uploads the data to be stored to the client, and this step is completed under the guidance of the user interface. After receiving the data, the client will use the encryption algorithm to securely encrypt the uploaded data. In this process, the client generates two sets of key data: security storage data and integrity detection data. The security storage data is generated by applying symmetric or asymmetric encryption technology to the original data to ensure that its content cannot be accessed or modified without authorization. These data are composed of encrypted characters, tightly arranged and encoded, so as to visually and logically hide the true meaning of the original information. The integrity detection data is used to verify whether the data has been tampered with during transmission or storage to ensure that the integrity of the data is protected. The client will compress and integrate these two types of data, and merge the security storage data and integrity detection data into composite storage data. This integration not only improves the efficiency of data transmission and storage, but also provides convenience for subsequent processing. The composite storage data formed will be processed intelligently. Among them, the security storage data will be uploaded to the cloud separately for confidential backup. When hackers invade the computer to obtain the stored data, due to the lack of necessary keys and decryption algorithms, hackers cannot crack and translate the security storage data.

[0069] In addition, the security storage data will be identified one by one, and the corresponding dynamic management key will be generated. The client will send the management key to the key management system 2 for centralized management. The key storage module 21 in the key management system 2 will classify and store the management key according to the date, keywords and remarks. When the key date supervision module 22 identifies that the usage time of a management key exceeds the prescribed time, the management key will be sent to the key update module 23 and the old key processing module 24 respectively. The key update module 23 will generate a new management key corresponding to the date, keywords and remarks of the management key, and the old key processing module 24 will record the scrapping date of the management key and scrap the management key. When the user needs to check the management key, the key retrieval module 25 will search according to the target storage data and related information of the management key provided by the user, and send the target management key stored in the key storage module 21 to the user in a confidential manner.

[0070] When the user needs to retrieve and review the stored data, the data retrieval system 1 in the client retrieves the stored data to be reviewed, inputs the current management key, and the data screening module 12 retrieves the corresponding composite storage data from the inside of the data storage module 11 according to the management key. The data reading module 14 decompresses and splits the composite storage data to extract the security storage data, and then reads and decrypts the security storage data to obtain the original storage data for the user to review. When the data retrieval system 1 is attacked by a virus program, the data protection module 13 will resist the virus program and issue a corresponding alarm program. When the user forgets the specific name of the stored data, the date, keywords and notes of the stored data can be input into the data screening module 12, and the data screening module 12 can filter the target storage data according to the above date, keywords and notes.

[0071] The client will automatically execute the data integrity verification program regularly to perform a complete verification of the composite storage data to determine the data integrity. First, the client decompresses and splits the composite storage data to form security storage data and integrity detection data, and analyzes the security storage data in combination with the integrity detection data to obtain detection data. When it is detected that the security storage data is lost or tampered with, the client will specially mark the lost or tampered part of the security storage data and automatically start the recovery program.

[0072] When performing the recovery procedure, the client analyzes the key point marks, determines the lost or tampered security storage data content, generates a target acquisition instruction, downloads the missing or tampered part of the security storage data content from the cloud, and refers to the key point marks on the security storage data to fill the downloaded security storage data into the missing or tampered security storage data in sequence, thereby completing the repair operation of the storage data.

[0073] After the repair is completed, the restored security storage data will be compressed and integrated with the integrity detection data again to obtain new composite storage data. The client replaces the new composite storage data and deletes the damaged composite storage data.

[0074] Although the present invention has been described in detail with reference to the aforementioned embodiments, it is still possible for those skilled in the art to modify the technical solutions described in the aforementioned embodiments, or to make equivalent substitutions for some of the technical features therein. Any modifications, equivalent substitutions, improvements, etc. made within the spirit and principles of the present invention should be included in the protection scope of the present invention.

Claims

1. A data integrity verification and recovery method, characterized in that: The following steps are involved: S1, the client performs secure encryption processing on the data to form composite storage data, and stores the composite storage data inside the data retrieval system (1); S2, the client automatically executes the data integrity check program regularly, performs a complete check on the composite storage data in S1 to determine the data integrity, and generates test data; S3, the client determines that the data is lost or tampered with based on the detection data of S2, and automatically starts the recovery program to obtain complete and correct stored data; S4: Safely store the data stored in S3.

2. A data integrity verification and recovery method according to claim 1, characterized in that: The security encryption process of S1 includes the following steps: S11, the client processes and encodes the data to generate security storage data and integrity detection data; S12, identifying the security storage data of S11, generating a corresponding dynamic management key, and sending it to the key management system (2) for centralized management; S13, sending the dynamic management key of S12 to the user; S14: The client compresses and integrates the security storage data and integrity detection data of S11 to form composite storage data, and uploads the security storage data to the cloud for confidential backup.

3. A data integrity verification and recovery method according to claim 1, characterized in that: The data retrieval system (1) of S1 comprises a data storage module (11), a data screening module (12), a data protection module (13) and a data reading module (14), wherein the data storage module (11) is used for storing different composite storage data in a classified manner, the data screening module (12) is used for screening target composite storage data according to keywords and data information provided by a user, the data protection module (13) is used for resisting attacks on the data retrieval system (1) by external virus programs, and the data reading module (14) is used for decompressing and splitting the composite storage data, and reading and decrypting the security storage data to obtain the original storage data for the user to consult.

4. A data integrity verification and recovery method according to claim 2, characterized in that: The key management system (2) of S12 comprises a key storage module (21), a key date supervision module (22), a key update module (23), an old key processing module (24) and a key retrieval module (25), wherein the key storage module (21) is used to classify and store different types of management keys, the key date supervision module (22) is used to record the usage time of the key, the key update module (23) is used to update the content of the management key, the old key processing module (24) is used to discard and delete the management key that has exceeded the usage time, and the key retrieval module (25) is used for users to retrieve the management key corresponding to the stored data.

5. A data integrity verification and recovery method according to claim 1, characterized in that: The execution integrity check procedure in S2 comprises the following steps: S21, read the composite storage data of S1, decompress and split the composite storage data to form security storage data and integrity detection data; S22, analyzing the security storage data in combination with the integrity detection data of S21 to obtain detection data; S23. Mark key points of the security storage data according to the detection data of S22.

6. A data integrity verification and recovery method according to claim 5, characterized in that: The detection data of S22 includes the storage data content integrity judgment result, the authenticity judgment result and the tampered content marking area.

7. A data integrity verification and recovery method according to claim 6, characterized in that: The key point marking of S23 means that the client can specially mark the lost or tampered parts inside the security storage data according to the detection data.

8. A data integrity verification and recovery method according to claim 1, characterized in that: The recovery procedure in S3 includes the following steps: S31, analyzing key point marks, determining the lost or tampered security storage data content, and generating target acquisition instructions; S32, downloading the missing or tampered part of the security storage data content from the cloud according to the target acquisition instruction of S31; S33, using the downloaded storage data to integrate and repair the missing or tampered security storage data; S34, encrypting the security storage data restored in S33.

9. A data integrity verification and recovery method according to claim 5, characterized in that: The integration and repair of S33 refers to the client referring to the key point marks on the security storage data to sequentially fill in the downloaded security storage data into the missing or tampered security storage data.

10. A data integrity verification and recovery method according to claim 1, characterized in that: The secure storage of S4 includes the following steps: S41, compressing and integrating the restored security storage data with the integrity detection data again to obtain new composite storage data; S42: The client replaces the new composite storage data and deletes the damaged composite storage data.

Images