Multi-verification-based carbon transaction data security management system and method

Abstract

The invention discloses a multi-verification-based carbon transaction data security management system and method, and relates to the technical field of data management, and the system comprises a request obtaining module which is used for interacting with a user side to obtain a data access request; the request analysis module is used for analyzing the data access request, acquiring access field information and extracting identity information for identity verification, and the data access request is a ciphertext request; the multi-dimensional verification module is used for calling a multi-dimensional verification matrix to carry out multi-dimensional fitting verification based on the identity verification result and generating a verification result, and the verification result comprises verification passing ability and a corresponding data access strategy; and the data management module is used for carrying out carbon transaction data management based on the verification result. Therefore, the technical effects of ensuring the data accuracy and improving the data security and the management level are achieved.

Description

Technical Field

[0001] The present invention relates to the technical field of data management, and in particular to a carbon trading data security management system and method based on multiple verifications. Background Art

[0002] The carbon trading market allows companies to achieve emission reduction targets by buying and selling carbon emission quotas, thereby promoting environmental protection and sustainable development. Carbon trading data involves a large amount of confidential and sensitive information, which is highly sensitive and secure, so it is necessary to ensure the security of data during access. However, the existing data management system lacks systematic and comprehensive security management of carbon trading data, and the single identity authentication method is easily cracked. There are technical problems such as extensive data management, single verification method, and impact on data security. Summary of the invention

[0003] The purpose of this application is to provide a carbon trading data security management system and method based on multiple verifications, so as to solve the technical problems in the prior art of extensive data management, single verification means and impact on data security.

[0004] In view of the above technical problems, the present application provides a carbon trading data security management system and method based on multiple verifications.

[0005] In a first aspect, the present application provides a carbon trading data security management system based on multiple verifications, wherein the system comprises:

[0006] The request acquisition module is used to interact with the user end and acquire a data access request.

[0007] A request parsing module is used to parse the data access request, obtain access field information, and extract identity information for identity authentication, wherein the data access request is a ciphertext request.

[0008] A multi-dimensional verification module is used to call a multi-dimensional verification matrix based on the identity authentication result, perform multi-dimensional fitting verification, and generate a verification result, wherein the verification result includes verification passability and a corresponding data access strategy.

[0009] A data management module is used to manage carbon trading data based on the verification result.

[0010] In an optional implementation, before calling the multi-dimensional verification matrix based on the identity authentication result, the execution steps include:

[0011] Acquire zoning topology information and business process information, perform multi-level authorization division, and acquire a multi-authorization network, wherein the multi-authorization network includes multiple access blocks;

[0012] Based on the multiple authorization networks, define multiple authentication strategies, and establish the multi-dimensional authentication matrix according to the multiple authentication strategies;

[0013] Extracting an access role set from an interactive target scenario, wherein the access role set includes a plurality of access roles and corresponding access block sets;

[0014] An association mapping between the multi-dimensional authentication matrix and the access role set is established.

[0015] In an optional implementation, based on the identity authentication result, a multidimensional verification matrix is ​​called to perform multidimensional fitting verification and generate a verification result. The execution steps include:

[0016] Based on the identity authentication result, an object is matched with the access role set to obtain a target access role;

[0017] Interacting the association mapping, calling the target item of the multidimensional verification matrix, and outputting the calling result as a multidimensional verification sequence;

[0018] The data access request is subjected to multi-dimensional fitting verification according to the multi-dimensional verification sequence, and a verification result is output.

[0019] In an optional implementation, carbon trading data management is performed based on the verification result, and the carbon trading data management at least includes data access control, security control, security audit, residual information protection and timeout lock.

[0020] In an optional implementation, the data access request is parsed, access field information is obtained, and identity information is extracted for identity authentication. The execution steps include:

[0021] Identify the header byte, perform request decoding, and obtain the access field information;

[0022] Based on a preset data format, locate and extract the identity information, wherein the identity information includes device identity information and account identity information;

[0023] The identity information is compared with the identity database. If the device identity information and the account identity information both meet the consistency requirement, the identity authentication is passed, and the identity information is returned as the identity authentication result.

[0024] In an optional implementation, the execution step of the system further includes:

[0025] Performing a credential quality assurance assessment of the multi-dimensionally verified credential based on the multi-dimensional verification matrix;

[0026] According to the credential quality assurance evaluation result, an update constraint set is set, wherein the credential quality assurance evaluation result includes a first quality assurance period and a second quality assurance period;

[0027] According to the update constraint set, the interactive user terminal performs constraint update on the multi-dimensional authentication credential.

[0028] In an optional implementation, the execution step of the system also includes: when performing carbon trading data management based on the verification result, synchronously recording and outputting a carbon trading data management log, wherein the carbon trading data management log includes transaction object information, transaction intrinsic information, and data change information.

[0029] In a second aspect, the present application also provides a carbon trading data security management method based on multiple verifications, wherein the method comprises:

[0030] Interactive client, obtains data access request.

[0031] The data access request is parsed to obtain access field information and extract identity information for identity authentication, wherein the data access request is a ciphertext request.

[0032] Based on the identity authentication result, a multi-dimensional verification matrix is ​​called to perform multi-dimensional fitting verification to generate a verification result, wherein the verification result includes verification passability and a corresponding data access strategy.

[0033] Carbon trading data management is performed based on the verification results.

[0034] One or more technical solutions provided in this application have at least the following technical effects or advantages:

[0035] The request acquisition module interacts with the user end to obtain the data access request; the request parsing module parses the data access request, extracts the access field information, and obtains the identity information for identity authentication. The data access request is an encrypted request; the multi-dimensional verification module calls the multi-dimensional verification matrix according to the identity authentication result, performs multi-dimensional fitting verification, and generates a verification result, which includes verification passability and corresponding data access strategy; the data management module implements the security management and processing of carbon trading data according to the verification result. This achieves the technical effect of ensuring data accuracy, improving data security and management level.

[0036] The above description is only an overview of the technical solution of the present application. In order to more clearly illustrate the technical means of the present application and to implement it in accordance with the contents of the specification, and to make the above and other purposes, features and advantages of the present application more obvious and easy to understand, the specific implementation methods of the present application are listed below. BRIEF DESCRIPTION OF THE DRAWINGS

[0037] The embodiments of the present invention and the following brief description are illustrated in conjunction with the accompanying drawings, which are described as follows:

[0038] Figure 1 This is a schematic diagram of the structure of the carbon trading data security management system based on multiple verifications for this application;

[0039] Figure 2 This is a flowchart of the carbon trading data security management method based on multiple verifications for this application;

[0040] Explanation of the reference numerals: request acquisition module 11 , request parsing module 12 , multi-dimensional verification module 13 , data management module 14 . DETAILED DESCRIPTION

[0041] This application solves the technical problems faced by the prior art, such as extensive data management, single verification method and impact on data security, by providing a carbon trading data security management system and method based on multiple verifications.

[0042] The solution in the embodiment of the present technology, in order to solve the above problems, adopts the following overall ideas:

[0043] First, the interactive user side obtains a data access request; then, the data access request is parsed to obtain access field information, and identity information is extracted for identity authentication, wherein the data access request is a ciphertext request; then, based on the identity authentication result, a multidimensional verification matrix is ​​called to perform multidimensional fitting verification to generate a verification result, wherein the verification result includes verification passability and a corresponding data access strategy; then, based on the verification result, data access rights are determined; then, the corresponding data access strategy is applied; finally, based on the verification result, management operations of carbon trading data are performed.

[0044] In order to better understand the above technical solution, the above technical solution will be described in detail below in conjunction with the drawings and specific implementation methods of the specification. It should be noted that the described embodiments are only part of the embodiments of the present application, rather than all of the embodiments of the present application. It should be understood that the present application is not limited to the example embodiments described herein. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention. It should also be noted that for the sake of ease of description, only the parts related to the present invention are shown in the drawings, rather than all of them.

[0045] Embodiment 1

[0046] like Figure 1 As shown, the present application provides a carbon trading data security management system based on multiple verifications, the system comprising:

[0047] The request acquisition module 11 is used to interact with the user end and acquire a data access request.

[0048] Specifically, the user terminal refers to an interface or device for user operation, which is used to interact with the system for data. It can be a desktop application, mobile application or web interface. Through the user terminal, the carbon trading data access request raised by the user can be obtained.

[0049] Exemplarily, the user end includes a data request component and a result display component, wherein the user selects or inputs specific data access request content through the data request component, such as carbon emission data, carbon trading records, account information, etc. The result display component is used to display the query results returned by the system and provide data viewing, analysis or downloading for the user.

[0050] Specifically, the data access request represents the user's carbon trading data needs. The request content includes request ID, request parameters, authentication credentials and other information. Among them, the request ID is a unique request ID attached to each data access request for easy tracking and management, including account ID, address IP, device ID, etc. Request parameters include query conditions entered by the user, such as time range, data type, etc. Authentication information is user identity information used for multiple verifications to ensure that the request comes from a legitimate user, such as passwords, security questions, tokens, verification codes, biometric information, geographic location information, behavioral information, etc.

[0051] The request parsing module 12 is used to parse the data access request, obtain access field information, and extract identity information for identity verification, wherein the data access request is a ciphertext request.

[0052] Specifically, the data access request is transmitted from the user end to the system end in an encrypted form (ciphertext). The ciphertext request ensures that the data will not be illegally intercepted and tampered with during the transmission process, ensuring the security of the request. The system decrypts the ciphertext request using a pre-shared key or a private key of an asymmetric encryption system to obtain access field information, which is used to determine the user subject and the specific data that the user wants to access.

[0053] Specifically, the access field information obtained by parsing also includes user identity information for identity verification. The identity information includes: user name, authentication credentials, digital signature, etc. The system searches the user database of the system according to the user name in the request, thereby matching the user identity for identity verification. This verification is a preliminary identity verification, which is used to determine the relationship between the user identity claimed by the data access request and the user identity existing in the user database.

[0054] In some embodiments, the data access request is parsed, access field information is obtained, and identity information is extracted for identity authentication, and the execution steps include:

[0055] Identify the header byte, perform request decoding, and obtain the access field information.

[0056] Based on a preset data format, the identity information is located and extracted, wherein the identity information includes device identity information and account identity information.

[0057] The identity information is compared with the identity database. If the device identity information and the account identity information both meet the consistency requirement, the identity authentication is passed, and the identity information is returned as the identity authentication result.

[0058] Specifically, first, identify the header byte of the data access request and decode it according to the header byte, where the header byte contains the metadata of the request, such as the request type, length, and encoding format. According to the information in the header byte, the system can select the corresponding decoding method to decode the request, convert the original ciphertext request data into a readable format, and output it as access field information.

[0059] Specifically, after obtaining the access field information, the identity information is located according to the preset data format. The preset data format defines the arrangement and structure of each field in the request, such as JSON, XML, TLV, etc. The identity information includes device identity information and account identity information. Exemplarily, the device identity information includes device ID, MAC address, serial number, etc. Account identity information includes user name, user ID, digital certificate, token, etc.

[0060] Furthermore, the extracted device identity information is compared with the records in the identity database to confirm whether the device identity information is consistent with the records in the database. At the same time, the extracted account identity information is compared with the records in the identity database to confirm whether the account identity information is consistent with the records in the database. Among them, the identity database stores the information of all legal users and the corresponding information of all legal devices.

[0061] Specifically, if both the device identity information and the account identity information meet the consistency requirements, that is, the device identity information and the account identity information are both in the identity database and have a consistent correspondence, then the identity authentication is successful, and the system returns the identity information as the identity authentication result, allowing the access request to continue processing.

[0062] Optionally, if the authentication is successful, the system will also return the corresponding data access policy. These policies determine the specific access rights and operations of the user to system resources after the authentication. If the authentication fails, the result of authentication failure is returned, and the authentication failure information is recorded and a security reminder is triggered as appropriate.

[0063] The above steps use the method of header byte recognition, decoding and format parsing to enable data access requests to be processed quickly and accurately, improving the system response speed. Through strict identity information comparison, the system can effectively prevent unauthorized access and terminate the verification process in advance, saving system resources while ensuring data security and stable system operation.

[0064] The multi-dimensional verification module 13 is used to call the multi-dimensional verification matrix based on the identity authentication result, perform multi-dimensional fitting verification, and generate a verification result, wherein the verification result includes the verification pass and the corresponding data access strategy.

[0065] Specifically, the verification result includes verification pass and data access policy, where verification pass is a Boolean value indicating whether the identity authentication is successful. If verification passes, the user is allowed to continue to access the requested data, and if verification fails, access is denied. The data access policy is based on the user identity, device information, and verification results, which data the user has access to and what operations can be performed (such as reading, modifying, downloading, etc.).

[0066] Specifically, users with different identities have their own verification strategies in different scenarios. These verification strategies are represented by the above-mentioned multi-dimensional verification matrix. The multi-dimensional verification matrix is ​​a verification model containing multiple dimensions, which is used to comprehensively evaluate the user's identity information, device information, historical operation records, behavior patterns, etc., and verify identity and permissions from multiple angles. By combining multiple parameters (dimensions) for verification, it is possible to more accurately determine whether the current user and device meet the data access conditions, ensuring system security and correct data access.

[0067] Exemplarily, verification dimensions include: Device dimension, including the device's hardware information, device ID, device geographic location, device registration status, etc., to ensure that the request is issued from a trusted device. Account dimension, including the user's account information, role permissions, historical operation behavior, etc., to ensure that the user has sufficient permissions to access the requested data. Behavior pattern dimension, including the user's operation history and behavior pattern (such as login time, geographic location, frequent access paths, etc.), is used to detect whether there are abnormal behavior patterns. Security dimension, combined with security requirements (such as requests sent from a trusted network and using secure communication protocols), ensures that data access complies with the system's security policy.

[0068] In some embodiments, before invoking the multi-dimensional authentication matrix based on the identity authentication result, the execution steps include:

[0069] Acquire the zoning topology information and the business process information, perform multi-level authorization division, and acquire a multi-authorization network, wherein the multi-authorization network includes a plurality of access blocks.

[0070] Based on the multiple authorization networks, multiple authentication strategies are defined, and the multi-dimensional authentication matrix is ​​established according to the multiple authentication strategies.

[0071] The interactive target scenario extracts an access role set, wherein the access role set includes a plurality of access roles and corresponding access block sets.

[0072] An association mapping between the multi-dimensional authentication matrix and the access role set is established.

[0073] Specifically, the zoning topology information is a description of the logical architecture of the carbon trading data structure, showing the interrelationships and composition relationships between different parts, nodes or categories of information in the carbon trading data. Business process information refers to the business logic and data flow rules in carbon trading, reflecting the business behaviors of each operation node and their interdependencies. This information is used to determine the authorization strategy in different business scenarios. For example, in the carbon trading platform, business process information involves transaction processes, data recording processes, etc.

[0074] Specifically, based on the zoning topology and business process information, the system divides different areas, nodes, and operations according to the permission level to form a multi-level authorization structure and output it as a multi-authorization network. Among them, each level of authorization represents a different access right and operation permission range, and the multi-authorization network is an authorization structure composed of multiple access right blocks, each of which contains the operation, data or resource access rules within a specific permission range.

[0075] For example, first, different permission levels are defined based on the zoning topology and business process information, such as management level, user level, audit level, etc. Then, in the multi-authorization network, multiple access blocks or combinations of blocks are divided according to the permission levels, and each block or combination of blocks contains a specific data access range and operation permissions, representing the access permissions of different users.

[0076] Specifically, the multi-factor authentication strategy specifies how to authenticate different roles or operations at different authorization levels. That is, it defines the authentication method and strength required for each access block, such as single-factor authentication, two-factor authentication, device authentication, etc. For example, an ordinary user's transaction record query may only require basic authentication, while an administrator may need two-factor authentication and device authentication to modify permissions.

[0077] Specifically, based on the multiple verification strategy, a multi-dimensional verification matrix is ​​established, which comprehensively evaluates the legitimacy of each user or device through different dimensions (such as identity verification, device verification, behavior pattern verification, etc.). The rows in the multi-dimensional verification matrix represent a multiple verification strategy, and the elements in each row represent the dimensions that need to be verified. For example, identity verification dimension, device verification dimension, behavior pattern verification dimension, etc.

[0078] Specifically, the access role set is a set of roles divided according to the operation behaviors, responsibilities and permissions of different users in the target scenario. Each access role represents the authorization scope of one or more permission blocks. Association mapping refers to the correspondence between each verification dimension of the multidimensional verification matrix and the access role set. By associating and mapping each access role set with the different verification dimensions in the multidimensional verification matrix, it is ensured that each role can trigger the corresponding verification mechanism when initiating a data access request. For example, access role 1 (ordinary user) is associated and mapped to the first matrix row of the multidimensional verification matrix, indicating that ordinary users only need to perform basic identity authentication.

[0079] The above steps, through multi-level authorization division and multiple verification strategies, can accurately control the access rights of each user, ensure that different roles can only access data consistent with their responsibilities, and avoid unauthorized operations. Through the establishment of a multi-dimensional verification matrix and the definition of multiple verification strategies, it is determined how to verify users from multiple perspectives such as identity, equipment, and behavior, thereby enhancing the security of the system. Finally, establishing an association mapping between the access role set and the multi-dimensional verification matrix helps to dynamically manage and adjust the verification methods and permissions of different roles to meet the security needs in different scenarios.

[0080] In some embodiments, based on the identity authentication result, a multi-dimensional verification matrix is ​​called to perform multi-dimensional fitting verification and generate a verification result. The execution steps include:

[0081] Based on the identity authentication result, an object is matched with the access role set to obtain a target access role.

[0082] The association mapping is interacted, a target item call is performed on the multi-dimensional verification matrix, and the call result is output as a multi-dimensional verification sequence.

[0083] The data access request is subjected to multi-dimensional fitting verification according to the multi-dimensional verification sequence, and a verification result is output.

[0084] Specifically, the user information in the identity authentication result is matched with the role information in the access role set to confirm the access role to which the user belongs and determine the target access role of the user. The target access role indicates the scope of authority and access level of the user in the current operation. For example, if the user in the identity authentication result is an administrator, the "Administrator" role is matched from the access role set.

[0085] Specifically, the associated mapping is searched through the matched target access role to determine the verification mechanism corresponding to the role in the multi-dimensional verification matrix. Different access roles correspond to different verification dimensions in the multi-dimensional verification matrix (such as identity verification, device verification, behavior pattern verification, etc.). Then, according to the instructions of the associated mapping, the target item (element of the matrix row) in the multi-dimensional verification matrix is ​​called, that is, the verification dimension for the current access role.

[0086] Specifically, the target item of the call may include multiple verification dimensions. For example, the administrator role may need to perform multiple steps such as identity verification, device verification, and two-factor verification. Then, the system combines these verification dimensions in sequence to generate a multi-dimensional verification sequence, which is the execution plan for the subsequent verification process.

[0087] Furthermore, each verification step in the multidimensional verification sequence is fitted with the user's current data access request, and each verification step in the multidimensional verification sequence is executed in sequence. Each verification step corresponds to a verification dimension, and the legitimacy and security of the access request are determined by comparing the information of each dimension.

[0088] Specifically, if the multi-dimensional fitting verification shows that the matching degree between each dimension is high, the system determines that the verification is passed and generates a verification pass result, allowing the user to continue to access the requested data. If some dimensions (such as device location or behavior pattern) are abnormal, the system may determine that the verification has failed, reject the data access request, or require the user to perform additional verification steps (such as re-entering a one-time password or performing further identity confirmation).

[0089] Furthermore, if the verification is passed, the system generates corresponding data access policies based on the user's account permissions, device security, and operation behavior, and imposes corresponding restrictions when the data is returned. In other words, different user and device combinations have different access rights. For example, some users can only read some sensitive data, while administrators can modify or delete data.

[0090] Specifically, if the fit verification is passed, the system returns a verification result, allowing the user to continue to access the requested data. This result includes the verification pass and the corresponding data access policy.

[0091] The above steps are verified from multiple angles (such as devices, accounts, behavior patterns, etc.) through a multi-dimensional verification matrix, which improves the accuracy of identity authentication and system security. Even if there is a problem in one dimension, other dimensions can still provide supplementary verification to avoid misjudgment of a single dimension. At the same time, based on the multi-dimensional verification results, data access policies can be dynamically generated to ensure that only verified users and devices can access the corresponding data, and the access scope and operation permissions match the user identity.

[0092] The data management module 14 is used to manage the carbon trading data based on the verification result.

[0093] In some embodiments, carbon trading data management is performed based on the verification result, and the carbon trading data management includes at least data access control, security control, security audit, residual information protection and timeout lock.

[0094] Optionally, access to carbon trading data is strictly controlled based on the verification results after the user passes the multi-dimensional verification. The verification results determine the user's access level (access rights) and access scope (reading transaction data, modifying transaction records, viewing account balances, etc.). For example, ordinary users can only view their own transaction records, while administrators can view the transaction records of all users. If the verification fails, the system denies the user's access request or prompts the user to perform additional identity verification steps.

[0095] Specifically, security control involves encryption in data transmission and storage, user authority control, and detection and prevention measures for abnormal behavior. Ensure the security of carbon trading data throughout its life cycle. For example, all carbon trading data is protected by encryption protocols such as SSL / TLS during transmission to prevent data leakage. Carbon trading data stored in the database uses encryption algorithms such as AES to protect sensitive data.

[0096] Specifically, security auditing is a management process that records all data access, modification operations and other related behaviors of users, ensuring that system administrators and auditors can trace back and check all data operation behaviors. The content of security auditing includes access logs, abnormal operation records, operation logs, etc. For example, security auditing is achieved by recording all user operations in real time and generating detailed audit reports regularly or on demand for auditors or managers to conduct compliance checks and security assessments.

[0097] Specifically, residual information protection refers to cleaning and protecting sensitive data that no longer needs to be accessed to prevent data leakage. Even data that is temporarily stored or cached should be protected. Different user roles and different types of data correspond to different cleaning constraints. For example, for important carbon trading data, after the user session ends, the trading data in the temporary cache is automatically cleaned up immediately to ensure that it will not be accidentally leaked.

[0098] Specifically, when a user does not operate for a long time, the system will automatically lock the user's session to prevent unauthorized access, that is, perform timeout lock management. At this time, the user needs to re-authenticate to continue the operation. The time threshold of the timeout lock is set according to different users or roles. For example, the administrator's session timeout is shorter, and the time for ordinary users is longer.

[0099] The above steps ensure the security of carbon trading data during storage, transmission and access through a variety of security control measures, such as data encryption, access control, security auditing, and residual information protection. At the same time, user management strategies can be dynamically adjusted based on verification results, improving the flexibility of the system.

[0100] Furthermore, the execution steps of the system also include:

[0101] A credential quality assurance assessment of the multi-dimensionally verified credential is performed based on the multi-dimensional verification matrix.

[0102] An update constraint set is set according to a credential quality assurance evaluation result, wherein the credential quality assurance evaluation result includes a first quality assurance period and a second quality assurance period.

[0103] According to the update constraint set, the interactive user terminal performs constraint update on the multi-dimensional authentication credential.

[0104] Specifically, the warranty assessment is used to detect the validity, integrity and security of the verification credentials. Through the assessment, the system can determine whether there are security risks, predict the warranty period of the credentials and formulate an update strategy. Among them, the credential warranty assessment results reflect the length of time that the verification credentials can maintain security and validity without being updated. The validity period of the credential depends on the type of credential (such as password, device verification, two-factor verification key, etc.), security and risk level.

[0105] Specifically, the update constraint set is a set of rules generated based on the warranty assessment results, which specifies the update conditions, timing and strategy of the verification credential. The update constraint set predicts the validity period of the credential based on the assessment results, including the first warranty period (reminder to update the credential) and the second warranty period (restriction of functions before updating the credential). The length of the warranty period is related to the security and risk level of the credential.

[0106] Specifically, the first warranty period refers to the initial validity period of the verification certificate. During this period, the certificate is still valid, but when it is close to its expiration time, the system will send a reminder to the user to notify the user to update the certificate, where the reminder can be sent in a variety of ways, such as email, in-app notification, etc. The second warranty period is when the user has not updated the certificate after the end of the first warranty period, the system further sets a functional restriction period. During this period, the user can continue to use the certificate, but the system will restrict some functions until the user completes the update to prevent security risks caused by unupdated credentials. For example, the user may not be able to perform high-risk operations (such as fund transfers, modifying transaction information, etc.), but can still perform queries and basic operations. After the update is completed, the user's functional permissions return to normal.

[0107] Optionally, the second warranty period length and function restriction policy corresponding to different credential information are different. For example, if the user has not updated the password, the user may be prohibited from logging into the account. If the device credential has not been updated, the user may be restricted from accessing sensitive data.

[0108] Optionally, the update constraint set can be dynamically adjusted based on the usage of the credentials, potential security threats, etc. For example, if a user's password is found to be affected in a data breach, its warranty period can be shortened and the user can be immediately reminded to update it.

[0109] The above steps, through credential quality assurance evaluation and warranty period setting, can dynamically manage and monitor users' multi-dimensional verification credentials to ensure that the credentials remain secure and credible during the validity period. Furthermore, through reminders in the first warranty period and functional restrictions in the second warranty period, it can effectively prevent security risks caused by credential failure or expiration and ensure the long-term reliability of the credentials.

[0110] Furthermore, the execution step of the system also includes: when performing carbon trading data management based on the verification result, synchronously recording and outputting a carbon trading data management log, wherein the carbon trading data management log includes transaction object information, transaction intrinsic information, and data change information.

[0111] Specifically, the carbon trading data management log is a record file generated by the system when managing carbon trading data. It contains all key information in the transaction process, such as the transaction object, transaction content, data change process, etc., which is used for auditing, compliance inspection and fault tracking. Among them, the transaction object information records all relevant subject information involved in the transaction, including user ID, account information, device information, etc. Intrinsic information refers to the core data of the transaction itself, such as the type, amount, time, status, etc. of the transaction, which is used to record the specific content and details of each transaction. Data change information records the data changes involved in the transaction process to ensure that any data modification can be traced, including data before change, data after change, reason for change, change time, change operator, etc.

[0112] Through the automated synchronous logging function, each carbon transaction can be tracked and audited in detail to ensure the transparency and legality of the data, help verify whether each transaction is executed as expected, ensure the consistency of transaction results and system data, and promptly detect potential abnormal behavior or security threats to improve the security of the system.

[0113] In summary, the carbon trading data security management system based on multiple verifications provided by the present invention has the following technical effects:

[0114] The request acquisition module interacts with the user end to obtain the data access request. The request parsing module parses the data access request, extracts the access field information, and obtains the identity information for identity authentication. The data access request is an encrypted request. The multidimensional verification module calls the multidimensional verification matrix according to the identity authentication result, performs multidimensional fitting verification, and generates a verification result. The verification result includes the verification passability and the corresponding data access strategy. The data management module implements the security management and processing of carbon trading data according to the verification result. This achieves the technical effect of ensuring data accuracy, improving data security and management level.

[0115] Embodiment 2

[0116] Based on the same concept as the carbon trading data security management system based on multiple verification in the above embodiment, Figure 2 As shown, the present application also provides a carbon trading data security management method based on multiple verifications, the method comprising:

[0117] Interactive client, obtains data access request.

[0118] The data access request is parsed to obtain access field information and extract identity information for identity authentication, wherein the data access request is a ciphertext request.

[0119] Based on the identity authentication result, a multi-dimensional verification matrix is ​​called to perform multi-dimensional fitting verification to generate a verification result, wherein the verification result includes verification passability and a corresponding data access strategy.

[0120] Carbon trading data management is performed based on the verification results.

[0121] Furthermore, before calling the multi-dimensional verification matrix based on the identity verification result, including:

[0122] Acquire zoning topology information and business process information, perform multi-level authorization division, and acquire a multi-authorization network, wherein the multi-authorization network includes multiple access blocks. Based on the multi-authorization network, define multiple verification strategies, and establish the multi-dimensional verification matrix according to the multiple verification strategies. Extract the access role set according to the interactive target scenario, wherein the access role set includes multiple access roles and corresponding access block sets. Establish an association mapping between the multi-dimensional verification matrix and the access role set.

[0123] Furthermore, based on the identity authentication result, the multi-dimensional verification matrix is ​​called to perform multi-dimensional fitting verification and generate verification results, including:

[0124] Based on the identity authentication result, an object is matched with the access role set to obtain a target access role. The association mapping is interacted, a target item is called on the multidimensional verification matrix, and the call result is output as a multidimensional verification sequence. The data access request is multidimensionally fitted and verified according to the multidimensional verification sequence, and a verification result is output.

[0125] Furthermore, carbon trading data management is performed based on the verification result, and the carbon trading data management at least includes data access control, security control, security audit, residual information protection and timeout lock.

[0126] Further, parsing the data access request, obtaining access field information, and extracting identity information for identity authentication includes:

[0127] Identify the header byte, perform request decoding, and obtain the access field information. Based on the preset data format, locate and extract the identity information, wherein the identity information includes device identity information and account identity information. Compare the identity information with the identity database. If the device identity information and the account identity information both meet the consistency requirements, the identity authentication is passed, and the identity information is returned as the identity authentication result.

[0128] Furthermore, the method further comprises:

[0129] Based on the multi-dimensional verification matrix, a credential quality assurance evaluation is performed on the multi-dimensional verification credential. According to the credential quality assurance evaluation result, an update constraint set is set, wherein the credential quality assurance evaluation result includes a first quality assurance period and a second quality assurance period. According to the update constraint set, the interactive user terminal performs constraint update on the multi-dimensional verification credential.

[0130] Furthermore, the method also includes: when performing carbon trading data management based on the verification result, synchronously recording and outputting a carbon trading data management log, wherein the carbon trading data management log includes transaction object information, transaction intrinsic information, and data change information.

[0131] It should be understood that the embodiments mentioned in this specification focus on their differences from other embodiments. The specific embodiments in the aforementioned embodiment one are also applicable to the carbon trading data security management method based on multiple verifications described in embodiment two. For the sake of brevity of the specification, they will not be further elaborated here.

[0132] It should be understood that the embodiments disclosed in this application and the above description can enable those skilled in the art to use this application to implement this application. At the same time, this application is not limited to the above-mentioned embodiments, and obvious modifications, combinations and substitutions of the embodiments mentioned in this application also fall within the scope of protection of this application.

Claims

1. A carbon trading data security management system based on multiple verifications, characterized by: The system comprises: A request acquisition module, the request acquisition module is used to interact with the user end to obtain a data access request; A request parsing module, the request parsing module is used to parse the data access request, obtain access field information, and extract identity information for identity authentication, wherein the data access request is a ciphertext request; A multi-dimensional verification module, which is used to call a multi-dimensional verification matrix based on the identity authentication result, perform multi-dimensional fitting verification, and generate a verification result, wherein the verification result includes verification passability and a corresponding data access strategy; A data management module is used to manage carbon trading data based on the verification result.

2. The carbon trading data security management system based on multiple verifications as claimed in claim 1, characterized in that: Before calling the multi-dimensional authentication matrix based on the authentication result, the execution steps include: Acquire zoning topology information and business process information, perform multi-level authorization division, and acquire a multi-authorization network, wherein the multi-authorization network includes multiple access blocks; Based on the multiple authorization networks, define multiple authentication strategies, and establish the multi-dimensional authentication matrix according to the multiple authentication strategies; Extracting an access role set from an interactive target scenario, wherein the access role set includes a plurality of access roles and corresponding access block sets; An association mapping between the multi-dimensional authentication matrix and the access role set is established.

3. The carbon trading data security management system based on multiple verifications as claimed in claim 2 is characterized in that: Based on the identity authentication result, the multi-dimensional verification matrix is ​​called to perform multi-dimensional fitting verification and generate the verification result. The execution steps include: Based on the identity authentication result, an object is matched with the access role set to obtain a target access role; Interacting the association mapping, calling the target item of the multidimensional verification matrix, and outputting the calling result as a multidimensional verification sequence; The data access request is subjected to multi-dimensional fitting verification according to the multi-dimensional verification sequence, and a verification result is output.

4. The carbon trading data security management system based on multiple verifications as claimed in claim 3 is characterized in that: Carbon trading data management is performed based on the verification results, and the carbon trading data management at least includes data access control, security control, security audit, residual information protection and timeout lock.

5. The carbon trading data security management system based on multiple verifications as claimed in claim 4 is characterized in that: Parsing the data access request, obtaining access field information, and extracting identity information for identity authentication, the execution steps include: Identify the header byte, perform request decoding, and obtain the access field information; Based on a preset data format, locate and extract the identity information, wherein the identity information includes device identity information and account identity information; The identity information is compared with the identity database. If the device identity information and the account identity information both meet the consistency requirement, the identity authentication is passed, and the identity information is returned as the identity authentication result.

6. The carbon trading data security management system based on multiple verifications as claimed in claim 1, characterized in that: The execution steps of the system also include: Performing a credential quality assurance assessment of the multi-dimensionally verified credential based on the multi-dimensional verification matrix; According to the credential quality assurance evaluation result, an update constraint set is set, wherein the credential quality assurance evaluation result includes a first quality assurance period and a second quality assurance period; According to the update constraint set, the interactive user terminal performs constraint update on the multi-dimensional authentication credential.

7. The carbon trading data security management system based on multiple verifications as claimed in claim 1, characterized in that: The execution step of the system also includes: when performing carbon trading data management based on the verification result, synchronously recording and outputting a carbon trading data management log, wherein the carbon trading data management log includes transaction object information, transaction intrinsic information, and data change information.

8. A carbon trading data security management method based on multiple verifications, characterized in that: The method comprises: Interactive user side, obtains data access request; Parsing the data access request, obtaining access field information, and extracting identity information for identity authentication, wherein the data access request is a ciphertext request; Based on the identity authentication result, a multi-dimensional verification matrix is ​​called to perform multi-dimensional fitting verification and generate a verification result, wherein the verification result includes verification passability and a corresponding data access strategy; Carbon trading data management is performed based on the verification results.

Images