Enterprise data security management method and system

Abstract

The present application relates to the field of data security technology, and in particular to a method and system for enterprise data security management. The method includes: obtaining file information and a parallel export parameter set, and on this basis, determining the export time series information; based on the file information and the parallel export parameter set, performing node randomization generation processing on the export time series information to determine the dynamic time node sequence information; based on the file information, generating a random file segment dynamic key set according to the dynamic time node sequence information; obtaining a real-time verification parameter set, based on the random file segment dynamic key set, and according to the real-time verification parameter set, performing real-time security verification on each file segment to determine the verification result sequence information; according to the verification result sequence information, judging whether to interrupt the file export operation, determining and outputting the real-time security verification information. The present application realizes efficient and high-security encryption of the exported files by means of real-time segmented encryption based on random time points.

Description

Technical Field

[0001] The present application relates to the field of data security technology, and in particular to an enterprise data security management method and system. Background Art

[0002] With the rapid development of big data and cloud computing, the amount of enterprise data has increased dramatically, making the need for data protection more urgent. Encryption ensures that even if security issues arise during data storage and transmission, the data itself remains safe.

[0003] When encrypting the export process of large batches of data files, the prior art usually adopts symmetric encryption to ensure the efficiency of the export process of large batches of files. Although this encryption method is fast, its security is relatively low, and the symmetric encryption method is difficult to prevent large batches of files from being tampered with during the export process. Summary of the invention

[0004] The present application provides an enterprise data security management method and system to solve the above technical problems.

[0005] In a first aspect, the present application provides an enterprise data security management method, the method comprising:

[0006] Acquire file information and a parallel export parameter set, and determine export time series information according to the file information and the parallel export parameter set;

[0007] Based on the file information and the parallel export parameter set, performing node randomization generation processing on the export time series information to determine dynamic time node sequence information;

[0008] Based on the file information, generating a random file segment dynamic key set according to the dynamic time node sequence information;

[0009] Acquire a real-time verification parameter set, perform a real-time security verification on each file segment based on the random file segment dynamic key set and the real-time verification parameter set, and determine verification result sequence information;

[0010] According to the verification result sequence information, it is determined whether to interrupt the file export operation, and the real-time security verification information is determined and output.

[0011] Through this scheme, the file information and the parallel export parameter set are analyzed to obtain the export time series information reflecting the export period corresponding to each file. On this basis, the export time series information is subjected to node randomization generation processing to determine a series of random time points in the export period corresponding to different files that can be used as the basis for creating encryption keys. In this way, dynamic time node sequence information is constructed, and a random file segment dynamic key set is further constructed. Through real-time segmented encryption based on random time points, efficient and high-security encryption of large batches of exported files is achieved. During the export process, based on the random file segment dynamic key set and the real-time verification parameter set, the exported files are verified in real time to ensure the integrity and consistency of the file export process. In the event of an abnormal situation, the file export operation is interrupted in time to reduce file loss and effectively prevent tampering during the file export process.

[0012] Optionally, the file information includes a file type set and a file size set, the parallel export parameter set includes parallel process information, export sequence information and an export performance index, and determining the export time series information according to the file information and the parallel export parameter set includes:

[0013] Based on the file type set and the file size set, and according to the export performance index, determine an estimated export time of each file;

[0014] Analyze the parallel process information and the export sequence information to determine the file export sequence corresponding to each export process;

[0015] According to the estimated export duration and the export sequence, an export time node of each file in each export process is determined, and this is used as the export time series information.

[0016] Through this solution, the estimated export duration of each file is determined based on the file type set and the file size set, combined with the export performance index. At the same time, the parallel process information and the export order information are analyzed to determine the corresponding file export order in each export process under the current export strategy. Through the fusion analysis of the estimated export duration and the file export order, the export timeline corresponding to several files under each export process can be obtained, and then the export time node corresponding to each file in the export timeline can be determined. This is used as the export time series information, which can adapt to the export duration evaluation under the parallel process and provide a reliable time data framework for the generation of subsequent random time nodes.

[0017] Optionally, the file information further includes a file importance index set, and the step of performing node randomization generation processing on the exported time series information based on the file information and the parallel export parameter set to determine the dynamic time node sequence information includes:

[0018] Analyze the file information and the parallel export parameter set, and divide all files under each export process into a plurality of export file segments based on unit files;

[0019] Based on the plurality of the export file segments, analyzing the export time sequence information and the parallel export parameter set, determining a start time node and a completion time node corresponding to each file segment under each export process;

[0020] Based on the file importance index set and the export performance index, and according to the start time node and the completion time node, determine the number of random time nodes corresponding to each file segment;

[0021] Generate a number of random interval factors according to the number of random time nodes, and determine a number of random time intervals corresponding to each file segment based on the number of random interval factors;

[0022] According to the starting time node, the completion time node and the random interval factors, a number of random time nodes corresponding to each file segment are determined, and the dynamic time node sequence information is constructed based on them.

[0023] Through this scheme, according to the file information and the parallel export parameter set, taking the unit file as the benchmark, several export file segments are divided under each export process, and the start time node and the completion time node of each file segment are determined in combination with the export time series information, and the number of random time nodes corresponding to different file segments is determined in combination with the file importance index set and the export performance index. On this basis, according to the random interval factor of the production, several random time intervals are obtained to determine several random time nodes, and dynamic time node sequence information is constructed to make the determination process of random time points unpredictable and irreversible, further ensuring the security of the subsequent key generation process, and at the same time, by controlling the number of random time nodes, the number of random time nodes meets the characteristic that the importance of the file is positively correlated with its required security.

[0024] Optionally, based on the file importance index set and the export performance index, the number of random time nodes corresponding to each file segment is determined according to the start time node and the completion time node, specifically as follows:

[0025] ;

[0026] in, For the Export process The number of random time nodes corresponding to the file segments, For the Export process The file importance index corresponding to each file segment in the file importance index set, To preset the impact amplification index, is the preset performance impact coefficient, is the derived performance index, is the preset adjustment coefficient, For the Export process The completion time node corresponding to the file segment, For the Export process The starting time node corresponding to the file segment, The preset time dimension.

[0027] Through this solution, mathematical analysis is used, based on the file importance index set and the export performance index, according to the start time node and the completion time node, to design a clear mathematical formula to describe the impact of the above parameters on the number of random nodes, so as to quantify the number of random time nodes that meet the current export file segment requirements, while ensuring data security performance, making the subsequent key generation process based on random time nodes meet the device performance, avoiding affecting the device performance and causing delays in data export.

[0028] Optionally, generating a number of random interval factors according to the number of random time nodes, and determining a number of random time intervals corresponding to each file segment based on the number of random interval factors, specifically the following formula:

[0029] ;

[0030] in, For the Export process The corresponding file segment the random time intervals, is the preset distribution parameter, For the The random spacing factor, is the preset time ratio conversion coefficient, represent For interval The random number inside, For the Export process The number of random time nodes corresponding to the file segments, represent from Start traversing to .

[0031] Through this scheme, mathematical analysis methods are used to design mathematical formulas based on the number of random time nodes and several generated random interval factors to clearly quantify the random time intervals corresponding to different file segments under different export processes, so as to obtain time interval data with randomness guarantees, provide clear data support for the determination of random time points, and thus provide significant security enhancement for the subsequent key creation based on random time points.

[0032] Optionally, the file information further includes a file name and a last modification time, and the generating of a random file segment dynamic key set based on the file information and according to the dynamic time node sequence information includes:

[0033] Analyze the dynamic time node sequence information, perform character string conversion processing on each random time node, and determine the timestamp character string corresponding to each random time node;

[0034] Determine the time key seed corresponding to each random time node according to the timestamp character string;

[0035] Based on the file importance index, the export performance index and the file name corresponding to each file segment, and according to the time key seed, determine the dynamic key corresponding to each random time node;

[0036] The random file segment dynamic key set is constructed according to the dynamic key corresponding to each random time node and the last modification time of the corresponding file segment.

[0037] Through this solution, dynamic keys are generated by combining random time nodes and file characteristics, providing multi-level security for data protection, strengthening the randomness and unpredictability of keys, ensuring the confidentiality and integrity of data, and constructing a random file segment dynamic key set based on the dynamic key corresponding to each random time node and the last modification time of the corresponding file segment, so as to facilitate tracking of file tampering behavior.

[0038] Optionally, the dynamic key corresponding to each random time node is determined according to the time key seed, specifically as follows:

[0039] , ;

[0040] in, For the The dynamic key corresponding to a random time node, is a symmetric encryption function, is the key derivation function, is a hash function, For the The timestamp string corresponding to a random time node, For the The last modification time of the file segment corresponding to the random time node, is the conversion factor for the preset number of iterations, is the file importance index of the file segment corresponding to the current random time node, is the preset key length conversion factor, is the derived performance index, is the file name of the file segment corresponding to the current random time node, represent For interval The random number inside, represent from Start traversing to , is the number of random time nodes in the file segment corresponding to the current random time node.

[0041] Through this scheme, mathematical analysis is used to design formulas to describe the data encryption process and the key generation process in order to derive dynamic keys. The randomness of the timestamp string ensures the unpredictability of the dynamic key, reduces potential data security risks, and introduces the file importance index and the derived performance index to enable the key generation process to adapt to the security needs and performance requirements of different files, effectively protecting the confidentiality and integrity of the data.

[0042] Optionally, the real-time verification parameter set includes a verification timestamp string and a verification modification time, and the real-time security verification is performed on each file segment based on the random file segment dynamic key set and according to the real-time verification parameter set to determine the verification result sequence information, including:

[0043] Based on the verification timestamp string and the verification modification time, the decryption result corresponding to each verification timestamp is determined according to each dynamic key in the random file segment dynamic key set, specifically as the following formula:

[0044] ;

[0045] in, is the decryption result, is the symmetric decryption function, is the verification timestamp string, is the verification modification time, is the preset number of iterations conversion coefficient, is the file importance index of the file segment corresponding to the current random time node, is the preset key length conversion coefficient, is the derived performance index, For the The dynamic key corresponding to a random time node;

[0046] Each of the decryption results is compared with the corresponding file name to determine a number of string consistency comparison results, and the verification result sequence information is constructed based on them.

[0047] Through this solution, mathematical analysis is used to clearly describe how to decrypt data based on real-time verification parameters and dynamic keys, which can effectively verify the integrity and consistency of the data, improve the scientific nature of the decryption process, and effectively improve the security and reliability of data decryption.

[0048] Optionally, the method further includes:

[0049] After generating the random file segment dynamic key set, asymmetrically encrypt each of the dynamic keys in the random file segment dynamic key set based on a preset asymmetric encryption strategy to determine the corresponding encryption public key and encryption private key;

[0050] In the process of determining the decryption result corresponding to each verification timestamp according to each dynamic key in the random file segment dynamic key set based on the verification timestamp character string and the verification modification time, obtaining the encrypted private key, and verifying the encrypted private key based on the encrypted public key;

[0051] If the verification succeeds, access to the dynamic key is allowed during the real-time security verification process; if the verification fails, access to the dynamic key is not allowed during the real-time security verification process.

[0052] Through this solution, based on asymmetric encryption technology, a verification mechanism for accessing dynamic keys is established to limit access to dynamic keys and ensure that only verified encryption private key holders can access protected dynamic keys, providing multi-layer protection for data protection and further improving the security of the entire encryption and decryption process.

[0053] In a second aspect, the present application provides an enterprise data security management system, the system comprising:

[0054] A time analysis module, used for obtaining file information and a parallel export parameter set, and determining export time series information according to the file information and the parallel export parameter set;

[0055] A node analysis module, used to perform node randomization generation processing on the exported time series information based on the file information and the parallel export parameter set, and determine dynamic time node sequence information;

[0056] A key generation module, used to generate a random file segment dynamic key set based on the file information and the dynamic time node sequence information;

[0057] A file verification module, used to obtain a real-time verification parameter set, perform a real-time security verification on each file segment based on the random file segment dynamic key set and the real-time verification parameter set, and determine the verification result sequence information;

[0058] The output module is used to determine whether to interrupt the file export operation according to the verification result sequence information, and determine and output real-time security verification information. BRIEF DESCRIPTION OF THE DRAWINGS

[0059] In order to more clearly illustrate the embodiments of the present application or the technical solutions in the prior art, a brief introduction will be given below to the drawings required for use in the embodiments or the description of the prior art. Obviously, the drawings described below are some embodiments of the present application. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying any creative labor.

[0060] Figure 1 A schematic diagram of an application scenario provided for an embodiment of the present application;

[0061] Figure 2 A flowchart of an enterprise data security management method provided in one embodiment of the present application;

[0062] Figure 3 A schematic diagram of the structure of an enterprise data security management system provided in one embodiment of the present application. DETAILED DESCRIPTION

[0063] In order to make the purpose, technical scheme and advantages of the embodiments of the present application clearer, the technical scheme in the embodiments of the present application will be clearly and completely described below in conjunction with the drawings in the embodiments of the present application. Obviously, the described embodiments are part of the embodiments of the present application, not all of the embodiments. Based on the embodiments in the present application, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of this application.

[0064] In addition, the term "and / or" in this article is only a description of the association relationship of associated objects, indicating that there can be three relationships. For example, A and / or B can represent: A exists alone, A and B exist at the same time, and B exists alone. In addition, the character " / " in this article, unless otherwise specified, generally means that the associated objects before and after are in an "or" relationship.

[0065] The embodiments of the present application are further described in detail below in conjunction with the drawings in the specification.

[0066] When encrypting the export process of large batches of data files, the prior art usually adopts symmetric encryption to ensure the efficiency of the export process of large batches of files. Although this encryption method is fast, its security is relatively low, and the symmetric encryption method is difficult to prevent large batches of files from being tampered with during the export process.

[0067] Based on this, the present application provides an enterprise data security management method and system. File information and parallel export parameter sets are analyzed to obtain export time series information reflecting the export period corresponding to each file, and on this basis, node randomization generation processing is performed on the export time series information to determine a series of random time points that can be used as the basis for creating encryption keys in the export period corresponding to different files, so as to construct dynamic time node sequence information, and further construct a random file segment dynamic key set, and realize efficient and high-security encryption of large batches of exported files through real-time segmented encryption means based on random time points, and in the export process, based on the random file segment dynamic key set, according to the real-time verification parameter set, the exported files are verified in real time to ensure the integrity and consistency of the file export process, and the file export operation is interrupted in time when an abnormal situation occurs, so as to reduce file loss and effectively prevent tampering during the file export process.

[0068] Figure 1 A schematic diagram of an application scenario provided by this application. In the process of exporting files in large quantities, the method provided by this application is applied to dynamically encrypt the exported files, effectively preventing the files from being tampered with while ensuring the export efficiency.

[0069] Specifically, the method of the present application is applied to any server, which communicates with the file export system, obtains and analyzes the file information and parallel export parameter set provided by the file export system through the server, and obtains the export time series information reflecting the export period corresponding to each file, and on this basis, the export time series information is subjected to node randomization generation processing, and a series of random time points that can be used as the basis for creating encryption keys in the export period corresponding to different files are determined, so as to construct dynamic time node sequence information, and further construct a random file segment dynamic key set, and realize efficient and high-security encryption of large batches of exported files through real-time segmented encryption means based on random time points, and in the export process, based on the random file segment dynamic key set, according to the real-time verification parameter set, the exported file is verified in real time, and the real-time verification information is provided to the system maintenance personnel to ensure the integrity and consistency of the file export process, and timely interrupt the file export operation when an abnormal situation occurs, reduce file loss, and effectively prevent the file from being tampered with during the export process. The specific implementation method can refer to the following embodiments.

[0070] Figure 2This is a flow chart of an enterprise data security management method provided in an embodiment of the present application. The method of this embodiment can be applied to the server in the above scenario. Figure 2 As shown, the method includes:

[0071] S201. Obtain file information and a parallel export parameter set, and determine export time series information according to the file information and the parallel export parameter set.

[0072] The file information may be attribute parameters of a series of files to be exported, such as file type, file size, etc. The file information may be provided by a file export system.

[0073] The parallel export parameter set may be a set of parameters used to set export behaviors during the file export process, such as the number of parallel tasks, the export order, etc. The parallel export parameter set may be provided by the file export system.

[0074] The export time series information may be a time series generated based on the file information and the parallel export parameter set and used to represent each key time node in the file export process.

[0075] Specifically, when faced with the encryption work of the large-scale file export process, the existing general encryption technology is difficult to ensure high-security encryption of files while efficiently exporting files. This brings about the contradiction that the high-security encryption technology is inefficient when dealing with large-scale file exports, while the security of the encryption technology that can ensure export efficiency cannot be well guaranteed. In order to solve this problem, it is necessary to ensure the security of encryption while avoiding the overall serial encryption of the exported files with large data volumes.

[0076] The main purpose of file encryption is to protect the confidentiality of file content. The logic of encryption technology is to encrypt files by converting the original file content into unreadable encrypted data and setting a key for reverse parsing the encrypted file. Then the file encryption process can be regarded as a process of strongly marking the file with a unique identifier, and only users with the above unique identifier are allowed to parse and modify the file. Existing encryption technology usually uses the hash value of the file as the basis for creating the key (i.e., the unique identifier). This requires that before the file is encrypted, the hash value of the entire file needs to be calculated by a hash algorithm. This method can meet the needs when dealing with files with small data volumes, but when dealing with multi-type and large-volume files, its efficiency is difficult to satisfy users. Therefore, finding suitable data as the basis for creating keys is particularly critical in the process of achieving export efficiency and encryption security. In order to make the data used as the basis for creating keys highly random and unpredictable, this solution uses the time point in the file export process as the basis for creating keys, which significantly reduces the amount of calculation while effectively ensuring the unique directionality of the data. By comprehensively analyzing the file information and the parallel export parameter set, the export time periods corresponding to different files under the current export strategy are quantified, providing a data basis for determining subsequent random time points.

[0077] S202: Based on the file information and the parallel export parameter set, perform node randomization generation processing on the exported time series information to determine dynamic time node sequence information.

[0078] The node randomization generation process may be a process of randomly generating a time node used as a basis for subsequent key generation based on the export time series information and on the basis of each file export time period.

[0079] The dynamic time node sequence information may be a series of time node information generated through node randomization.

[0080] Specifically, in the process of using time points as the basis for key creation, if a fixed algorithm is used to calculate the time points corresponding to different files, there is a risk that the time point data will be reversely parsed, making it difficult to ensure data security. This solution uses mathematical analysis methods based on file information and parallel export parameter sets to introduce random numbers to extract a random number of random time points within the export period corresponding to each file. The number of random time points corresponding to each export period is positively correlated with the importance of the file and the system performance, so as to ensure encryption efficiency, enable random time points to cover each file export period, and make the determination process of random time points unable to be reverse parsed, thereby ensuring the security of the keys subsequently obtained on this basis.

[0081] S203. Generate a random file segment dynamic key set based on the file information and the dynamic time node sequence information.

[0082] The random file segment dynamic key set may be a set of keys generated based on different random time nodes and used to encrypt the corresponding file segments.

[0083] Specifically, since there are several random time points serving as the basis for key creation within the export period corresponding to each exported file, mathematical analysis is used to create corresponding keys according to different random time points within the same period, and a corresponding random file segment dynamic key set is constructed. Different keys in the random file segment dynamic key set can be used to strongly mark different stages in the export process of different files, thereby achieving efficient segmented encryption of the exported files. At the same time, when the data is tampered with, the tampered time period of the corresponding file can be located, thereby providing a basis for maintenance personnel to track and investigate the corresponding attack behavior.

[0084] S204. Obtain a real-time verification parameter set, perform a real-time security verification on each file segment based on the random file segment dynamic key set and the real-time verification parameter set, and determine the verification result sequence information.

[0085] The real-time verification parameter set may be a set of parameters collected during the file export process and used to verify the security of the file segment. The real-time verification parameter set may be obtained through an export parameter monitoring system.

[0086] The verification result sequence information may be a series of information obtained through a real-time security verification process and used to characterize whether a corresponding file segment has a security risk.

[0087] Specifically, during the file export process, the corresponding real-time verification parameter set is obtained in real time. Through mathematical analysis, the file segment is reversely verified based on the real-time verification parameter set and the dynamic key set of the random file segment to determine whether the file data corresponding to the current real-time verification parameter set is consistent with the original file. The consistency judgment results for different file segments are integrated into verification result sequence information to facilitate timely detection of abnormal situations in the export process.

[0088] S205. Determine whether to interrupt the file export operation based on the verification result sequence information, and determine and output real-time security verification information.

[0089] The real-time security verification information may be feedback information generated based on the verification result, and is used to notify the user or the system of abnormal conditions in the current file export status.

[0090] Specifically, the consistency judgment results of different file segments in the verification result sequence information are analyzed. If the consistency judgment result corresponding to a certain file segment is inconsistent, it means that the integrity and consistency of the file segment are destroyed during the export process. At this time, the file export operation should be interrupted immediately to avoid further data loss. If it is consistent, the file export operation should be continued, and then the various information in the verification process is visualized and integrated through data visualization technology to obtain real-time security verification information. The real-time security verification information is provided to system maintenance personnel through human-computer interaction equipment, so that system maintenance personnel can grasp the status of the file export process in real time.

[0091] Through this scheme, the file information and the parallel export parameter set are analyzed to obtain the export time series information reflecting the export period corresponding to each file. On this basis, the export time series information is subjected to node randomization generation processing to determine a series of random time points in the export period corresponding to different files that can be used as the basis for creating encryption keys. In this way, dynamic time node sequence information is constructed, and a random file segment dynamic key set is further constructed. Through real-time segmented encryption based on random time points, efficient and high-security encryption of large batches of exported files is achieved. During the export process, based on the random file segment dynamic key set and the real-time verification parameter set, the exported files are verified in real time to ensure the integrity and consistency of the file export process. In the event of an abnormal situation, the file export operation is interrupted in time to reduce file loss and effectively prevent tampering during the file export process.

[0092] In some embodiments, based on a file type set and a file size set, the estimated export time for each file is determined according to the export performance index; the parallel process information and the export order information are analyzed to determine the file export order corresponding to each export process; based on the estimated export time and the export order, the export time node for each file under each export process is determined, and this is used as the export time series information.

[0093] The file information includes a file type set and a file size set.

[0094] The file type set may be a set containing file type information corresponding to each file to be exported, and the file type set may be obtained by batch identification of file types by the file export system.

[0095] The file size set may be a set containing file size values ​​corresponding to each file to be exported, and the file size set may be obtained by batch identification of file sizes by the file export system.

[0096] The export performance index may be a quantitative value used to characterize the file processing performance of the corresponding hardware device equipped with the current file export system. The export performance index may be obtained by measuring and evaluating the analysis of historical export data.

[0097] The estimated export duration may be an estimated duration required for exporting the file segment on the current device.

[0098] The export process may be a system process responsible for exporting the current file segment. A file export system usually has multiple parallel export processes to improve the file export efficiency.

[0099] The file export sequence may be the export sequence of a series of file segments corresponding to a single export process.

[0100] The export time node may be a time point at which different file segments start to be exported in a corresponding export process.

[0101] Specifically, the time required for a file to be exported is mainly affected by the file size, file type, and device performance: the larger the file size, the longer the corresponding export time; different file types (such as text, image, audio, video, etc.) have different internal structures and storage formats, resulting in differences in the total processing and conversion time during the export process; and the ability of different devices to calculate and process files also varies, which will also affect the time required for the file to be exported. Therefore, through mathematical analysis and the use of a linear fitting algorithm, the direct influence relationship between the export performance index and the file type and file size can be obtained based on historical export data, and then the corresponding conversion coefficient can be determined to quantify the estimated export time required for the current device to handle the current type and size of file export work. At the same time, the parallel process information and export order information are analyzed to determine the corresponding file export order in each export process under the current export strategy. Through the fusion analysis of the estimated export time and the file export order, the export time axis corresponding to several files under each export process can be obtained, and then the export time node corresponding to each file in the export time axis can be determined. This can be used as the export time series information, which can adapt to the export time evaluation under the parallel process and provide a reliable time data framework for the generation of subsequent random time nodes.

[0102] Through this solution, the estimated export duration of each file is determined based on the file type set and the file size set, combined with the export performance index. At the same time, the parallel process information and the export order information are analyzed to determine the corresponding file export order in each export process under the current export strategy. Through the fusion analysis of the estimated export duration and the file export order, the export timeline corresponding to several files under each export process can be obtained, and then the export time node corresponding to each file in the export timeline can be determined. This is used as the export time series information, which can adapt to the export duration evaluation under the parallel process and provide a reliable time data framework for the generation of subsequent random time nodes.

[0103] In some embodiments, file information and parallel export parameter sets are analyzed, and all files under each export process are divided into several export file segments based on unit files; based on the several export file segments, the export time series information and the parallel export parameter sets are analyzed, and the start time node and the completion time node corresponding to each file segment under each export process are determined; based on the file importance index set and the export performance index, the number of random time nodes corresponding to each file segment is determined according to the start time node and the completion time node; based on the number of random time nodes, several random interval factors are generated, and based on the several random interval factors, several random time intervals corresponding to each file segment are determined; based on the start time node, the completion time node and the several random interval factors, several random time nodes corresponding to each file segment are determined, and dynamic time node sequence information is constructed accordingly.

[0104] The file information also includes a file importance index set, which may be a collection of indices representing the importance of each file segment. The file importance index set may be obtained based on expert evaluation results or historical analysis data.

[0105] The exported file segment may be a file segment to be exported within a corresponding export timeline under the same export process.

[0106] The start time node may be a time point at which the export file segment starts to be exported.

[0107] The completion time node may be a time point at which the export of the export file segment ends.

[0108] The number of random time nodes may be the total number of random time nodes required to be used as a basis for key creation within an export period corresponding to a single export file segment.

[0109] The random time interval may be an interval duration value used as a basis for determining the random time point.

[0110] The random interval factor may be a mathematical random factor used to adjust the random time interval.

[0111] The random time node may be a time point determined based on a random time interval within an export period corresponding to the export file segment and may be used as a basis for key creation.

[0112] Specifically, in the process of determining the random time point used as the basis for key creation, it is first necessary to allocate the corresponding number of random time points to the export time periods corresponding to different export file segments according to the importance of different export file segments. The more random time points there are in an export time period, the more keys will be subsequently mapped to the export file segments corresponding to the export time period. The smaller the interval between the corresponding time points of the keys is, the higher the security is. This conforms to the characteristic that the importance of a file is positively correlated with its required security. Based on the file information, the series of files that each export process recorded in the parallel export parameter set is responsible for exporting is analyzed, and the above series of files is divided into several export file segments based on the unit files in the file information, and combined with Export time series information, extract the start time node and completion time node of each exported file segment on the export time axis, the time period between the start time node and the completion time node is the export time period of the corresponding exported file segment under the corresponding export process, on this basis, according to the file importance index set and the export performance set, through mathematical analysis, the number of random time nodes required for different file segments under the influence of the device and its importance is obtained, and further mathematical analysis is used, combined with the random interval factor, to obtain several random time intervals in the corresponding export period of different file segments, based on these random time intervals, divide several random time points in the corresponding export period, so as to construct dynamic time node sequence information.

[0113] Through this scheme, according to the file information and the parallel export parameter set, taking the unit file as the benchmark, several export file segments are divided under each export process, and the start time node and the completion time node of each file segment are determined in combination with the export time series information, and the number of random time nodes corresponding to different file segments is determined in combination with the file importance index set and the export performance index. On this basis, according to the random interval factor of the production, several random time intervals are obtained to determine several random time nodes, and dynamic time node sequence information is constructed to make the determination process of random time points unpredictable and irreversible, further ensuring the security of the subsequent key generation process, and at the same time, by controlling the number of random time nodes, the number of random time nodes meets the characteristic that the importance of the file is positively correlated with its required security.

[0114] In some embodiments, based on the file importance index set and the derived performance index, the number of random time nodes corresponding to each file segment is determined according to the start time node and the completion time node, specifically as follows:

[0115] (1);

[0116] in, For the Export process The number of random time nodes corresponding to each file segment, For the Export process The file importance index corresponding to each file segment in the file importance index set, To preset the impact amplification index, is the preset performance impact coefficient, To derive the performance index, is the preset adjustment coefficient, For the Export process The completion time node corresponding to each file segment, For the Export process The starting time node corresponding to each file segment, The preset time dimension.

[0117] The preset impact amplification index may be a quantitative index used to adjust the degree of influence of the importance of a file on the number of random time nodes. The preset impact amplification index may be obtained by analyzing historical export data.

[0118] The preset performance impact coefficient may be a value representing the degree of impact of device performance on the number of random time nodes, and the preset performance impact coefficient may be obtained by analyzing historical export data.

[0119] The preset adjustment coefficient may be a value used to adjust the influence of the export performance index on the number of random time nodes, and the preset adjustment coefficient may be obtained by analyzing historical export data.

[0120] The preset time dimension may be a quantitative value that controls the time conversion unit, and is used to convert the time period unit into a specified unit, such as the conversion from seconds to minutes. The preset time dimension may be set according to requirements.

[0121] Specifically, through formula (1) Reflects the dual impact of file importance and device export performance on the number of random time nodes, where the exponential function is used to Amplify the direct impact of the file importance index on the number of random time nodes, through the logarithmic function form To reflect the gradual impact and marginal decreasing effect of device export performance on the number of random time nodes, when the device export performance is high, its impact on the number of random time nodes will not be significant. At this time, the specific impact will be inclined to the importance of the file and will be calculated through It reflects the impact of the length of the export period, and then quantifies the number of random time nodes that meet the current export file segment requirements.

[0122] Through this solution, mathematical analysis is used, based on the file importance index set and the export performance index, according to the start time node and the completion time node, to design a clear mathematical formula to describe the impact of the above parameters on the number of random nodes, so as to quantify the number of random time nodes that meet the current export file segment requirements, while ensuring data security performance, making the subsequent key generation process based on random time nodes meet the device performance, avoiding affecting the device performance and causing delays in data export.

[0123] In some embodiments, a number of random interval factors are generated according to the number of random time nodes, and a number of random time intervals corresponding to each file segment are determined based on the number of random interval factors, specifically the following formula (2):

[0124] (2);

[0125] in, For the Export process The corresponding file segment Random time intervals, is the preset distribution parameter, For the A random spacing factor, is the preset time ratio conversion coefficient, represent For interval The random number inside, For the Export process The number of random time nodes corresponding to each file segment, represent from Start traversing to .

[0126] The preset distribution parameter may be a distribution index of an average processing rate of a file by the export process, and the preset distribution parameter may be obtained by analyzing historical export data.

[0127] The preset time ratio conversion coefficient may be a coefficient used to convert a random time interval value into a corresponding time unit, and the preset distribution parameter may be obtained by analyzing historical export data.

[0128] Specifically, different random interval factors are generated through the random number generation function, and the random number generation function is used to generate different random interval factors through the formula (2). , based on the random interval factor, the random time interval is described using the negative exponential distribution form, and then the preset time ratio conversion coefficient is introduced The generated random interval is converted into the required time unit to quantify the corresponding random time interval, providing clear data support for the determination of random time points, and thus providing significant security enhancement for the subsequent key creation based on random time points.

[0129] Through this scheme, mathematical analysis methods are used to design mathematical formulas based on the number of random time nodes and several generated random interval factors to clearly quantify the random time intervals corresponding to different file segments under different export processes, so as to obtain time interval data with randomness guarantees, provide clear data support for the determination of random time points, and thus provide significant security enhancement for the subsequent key creation based on random time points.

[0130] In some embodiments, the dynamic time node sequence information is analyzed, and string conversion is performed on each random time node to determine the timestamp string corresponding to each random time node; based on the timestamp string, the time key seed corresponding to each random time node is determined; based on the file importance index, the export performance index and the file name corresponding to each file segment, the dynamic key corresponding to each random time node is determined according to the time key seed; based on the dynamic key corresponding to each random time node and the last modification time of the corresponding file segment, a random file segment dynamic key set is constructed.

[0131] File information also includes the file name and last modified time.

[0132] The timestamp character string may be character string format data corresponding to the timestamp of the time node.

[0133] The time key seed may be a seed value generated according to a timestamp string, and the seed value is used to generate a dynamic key.

[0134] The dynamic key may be a key generated based on a time key seed and used to encrypt a file segment.

[0135] Specifically, through the string conversion function tool, the timestamp corresponding to the random time point in the dynamic time node sequence information is converted into the corresponding string to achieve the unification of the time format and ensure the consistent understanding of the time node in the subsequent processing process. Then, mathematical analysis is used in combination with the call of the seed generation function and the key creation function to generate the corresponding time key seed according to the timestamp string, and create a dynamic key in combination with the important index, the export performance index and the file name corresponding to each file segment to ensure the uniqueness, dynamism and unpredictability of the key, while ensuring that there is a close association between the dynamic key and the corresponding file. Furthermore, according to the dynamic key corresponding to each random time node and the last modification time of the corresponding file segment, a random file segment dynamic key set is constructed with the dynamic key as the index and the last modification time as the corresponding element to facilitate the tracking of file tampering behavior.

[0136] Through this solution, dynamic keys are generated by combining random time nodes and file characteristics, providing multi-level security for data protection, strengthening the randomness and unpredictability of keys, ensuring the confidentiality and integrity of data, and constructing a random file segment dynamic key set based on the dynamic key corresponding to each random time node and the last modification time of the corresponding file segment, so as to facilitate tracking of file tampering behavior.

[0137] In some embodiments, the dynamic key corresponding to each random time node is determined according to the time key seed, specifically as follows:

[0138] , (3);

[0139] in, For the The dynamic key corresponding to a random time node, is a symmetric encryption function, is the key derivation function, is a hash function, For the The timestamp string corresponding to a random time node, For the The last modification time of the file segment corresponding to the random time node, is the conversion factor for the preset number of iterations, is the file importance index of the file segment corresponding to the current random time node, is the preset key length conversion factor, To derive the performance index, is the file name of the file segment corresponding to the current random time node, represent For interval The random number inside, represent from Start traversing to , The number of random time nodes in the file segment corresponding to the current random time node.

[0140] The symmetric encryption function may be a function used to symmetrically encrypt a file and generate a corresponding key. The symmetric encryption function may adopt AES (Advanced Encryption Standard).

[0141] The key derivation function may be a function used to generate a key seed, and the key derivation function may adopt PBKDF2 (Password-Based Key Derivation Function 2, password-based key derivation function).

[0142] The hash function may be a function used to calculate a hash value corresponding to data, and the hash function may adopt SHA-2 (Secure Hash Algorithm-2).

[0143] The preset iteration number conversion coefficient may be a quantitative value used to reflect the degree of influence of the file importance index on the key iteration number, and the preset iteration number conversion coefficient may be obtained by analyzing historical encryption log data.

[0144] The preset key length conversion coefficient may be a quantitative value used to reflect the degree of influence of the export performance index on the key length, and the preset key length conversion coefficient may be obtained by analyzing historical encryption log data.

[0145] Specifically, through formula (3) The timestamp string is hashed to generate a fixed-length output value that represents the unique characteristics of the time node. The hash output is combined with other parameters to generate a key seed using a key derivation function. The key derivation function usually includes a salt, number of iterations, and other inputs to ensure that the generated key can prevent brute force attacks and replay attacks. Here, the hash result is passed to the key derivation function and the last modification time of the file segment is introduced. , Document Importance Index , export performance index , preset conversion factor and Used to adjust the complexity of key derivation and the length of the output key, and then use symmetric encryption functions ,According to the key seed and the corresponding file name, symmetric encryption is performed to obtain the corresponding dynamic key, ensuring that the generated dynamic key is secure and related to the specific file segment.

[0146] Through this scheme, mathematical analysis is used to design formulas to describe the data encryption process and the key generation process in order to derive dynamic keys. The randomness of the timestamp string ensures the unpredictability of the dynamic key, reduces potential data security risks, and introduces the file importance index and the derived performance index to enable the key generation process to adapt to the security needs and performance requirements of different files, effectively protecting the confidentiality and integrity of the data.

[0147] In some embodiments, based on the verification timestamp string and the verification modification time, the decryption result corresponding to each verification timestamp is determined according to each dynamic key in the random file segment dynamic key set, specifically as the following formula (4):

[0148] (4);

[0149] in, To decrypt the result, is the symmetric decryption function, To verify the timestamp string, To verify the modification time, is the conversion factor for the preset number of iterations, is the file importance index of the file segment corresponding to the current random time node, is the preset key length conversion factor, To derive the performance index, For the A dynamic key corresponding to a random time node is generated; each decryption result is compared with the corresponding file name, and several string consistency comparison results are determined to construct the verification result sequence information.

[0150] The real-time verification parameter set includes a verification timestamp string and a verification modification time.

[0151] The verification timestamp character string may be a timestamp character string introduced during the verification process.

[0152] The verification modification time may be the last modification time of the corresponding file introduced during the verification process.

[0153] The character consistency comparison result may be a comparison result of whether the character strings are consistent. If they are consistent, the comparison result is true; if they are inconsistent, the comparison result is false.

[0154] Specifically, in the data verification stage, through formula (4) Derivation of the decryption key seed and use of a symmetric decryption function , based on the decryption key seed, according to the dynamic key, data verification is performed to obtain the interface decryption result. If the verification is successful, the decryption result should be consistent with the file name of the corresponding file segment. If the verification fails, the decryption result is inconsistent with the file name of the corresponding file segment. Therefore, by comparing each decryption result with the corresponding file name, several string consistency comparison results are determined, thereby constructing the verification result sequence information, so that the verification results of different files can be clearly displayed in the verification result sequence information.

[0155] Through this solution, mathematical analysis is used to clearly describe how to decrypt data based on real-time verification parameters and dynamic keys, which can effectively verify the integrity and consistency of the data, improve the scientific nature of the decryption process, and effectively improve the security and reliability of data decryption.

[0156] In some embodiments, after generating a random file segment dynamic key set, each dynamic key in the random file segment dynamic key set is asymmetrically encrypted based on a preset asymmetric encryption strategy to determine the corresponding encryption public key and encryption private key; in the process of determining the decryption result corresponding to each verification timestamp according to each dynamic key in the random file segment dynamic key set based on the verification timestamp string and the verification modification time, the encryption private key is obtained, and the encryption private key is verified based on the encryption public key; if the verification is successful, access to the dynamic key is allowed during the real-time security verification process; if the verification fails, access to the dynamic key is not allowed during the real-time security verification process.

[0157] The preset asymmetric encryption strategy may be a strategy for encrypting and storing a dynamic key using an asymmetric encryption algorithm.

[0158] The encrypted public key may be public key data used to encrypt a dynamic key and distributed to a verification object.

[0159] The encrypted private key can be the private key data used to decrypt the dynamic key, and the private key must be kept strictly.

[0160] Specifically, the dynamic key is encrypted according to the asymmetric encryption strategy to ensure that the key is effectively protected during transmission and storage to avoid leakage. By verifying the encrypted private key, it is ensured that only the verified encrypted private key holder can access the protected dynamic key. By establishing a verification mechanism for accessing the dynamic key, the access to the dynamic key is limited to reduce security risks.

[0161] Through this solution, based on asymmetric encryption technology, a verification mechanism for accessing dynamic keys is established to limit access to dynamic keys and ensure that only verified encryption private key holders can access protected dynamic keys, providing multi-layer protection for data protection and further improving the security of the entire encryption and decryption process.

[0162] Figure 3 A schematic diagram of the structure of an enterprise data security management system provided in one embodiment of the present application is shown in FIG. Figure 3 As shown, an enterprise data security management system 300 of this embodiment includes: a time analysis module 301, a node analysis module 302, a key generation module 303, a file verification module 304 and an output module 305.

[0163] The time analysis module 301 is used to obtain file information and a parallel export parameter set, and determine export time series information according to the file information and the parallel export parameter set;

[0164] A node analysis module 302 is used to perform node randomization generation processing on the export time series information based on the file information and the parallel export parameter set to determine dynamic time node sequence information;

[0165] A key generation module 303 is used to generate a random file segment dynamic key set based on the file information and the dynamic time node sequence information;

[0166] The file verification module 304 is used to obtain a real-time verification parameter set, perform a real-time security verification on each file segment based on the random file segment dynamic key set and the real-time verification parameter set, and determine the verification result sequence information;

[0167] The output module 305 is used to determine whether to interrupt the file export operation according to the verification result sequence information, and determine and output real-time security verification information.

[0168] Optionally, the time analysis module 301 is specifically used for:

[0169] Based on the file type set and the file size set, and according to the export performance index, determine an estimated export time of each file;

[0170] Analyze the parallel process information and the export sequence information to determine the file export sequence corresponding to each export process;

[0171] According to the estimated export duration and the export sequence, an export time node of each file in each export process is determined, and this is used as the export time series information.

[0172] Optionally, the node analysis module 302 is specifically used to:

[0173] Analyze the file information and the parallel export parameter set, and divide all files under each export process into a plurality of export file segments based on unit files;

[0174] Based on the plurality of the export file segments, analyzing the export time sequence information and the parallel export parameter set, determining a start time node and a completion time node corresponding to each file segment under each export process;

[0175] Based on the file importance index set and the export performance index, and according to the start time node and the completion time node, determine the number of random time nodes corresponding to each file segment;

[0176] Generate a number of random interval factors according to the number of random time nodes, and determine a number of random time intervals corresponding to each file segment based on the number of random interval factors;

[0177] According to the starting time node, the completion time node and the random interval factors, a number of random time nodes corresponding to each file segment are determined, and the dynamic time node sequence information is constructed based on them.

[0178] Optionally, when the node analysis module 302 determines the number of random time nodes corresponding to each file segment based on the file importance index set and the export performance index according to the start time node and the completion time node, it is specifically the following formula:

[0179] ;

[0180] in, For the Export process The number of random time nodes corresponding to the file segments, For the Export process The file importance index corresponding to each file segment in the file importance index set, To preset the impact amplification index, is the preset performance impact coefficient, is the derived performance index, is the preset adjustment coefficient, For the Export process The completion time node corresponding to the file segment, For the Export process The starting time node corresponding to the file segment, The preset time dimension.

[0181] Optionally, the node analysis module 302 generates a number of random interval factors according to the number of random time nodes, and determines a number of random time intervals corresponding to each file segment based on the number of random interval factors, specifically using the following formula:

[0182] ;

[0183] in, For the Export process The corresponding file segment the random time intervals, is the preset distribution parameter, For the The random spacing factor, is the preset time ratio conversion coefficient, represent For interval The random number inside, For the Export process The number of random time nodes corresponding to the file segments, represent from Start traversing to .

[0184] Optionally, the key generation module 303 is specifically used to:

[0185] Analyze the dynamic time node sequence information, perform character string conversion processing on each random time node, and determine the timestamp character string corresponding to each random time node;

[0186] Determine the time key seed corresponding to each random time node according to the timestamp character string;

[0187] Based on the file importance index, the export performance index and the file name corresponding to each file segment, and according to the time key seed, determine the dynamic key corresponding to each random time node;

[0188] The random file segment dynamic key set is constructed according to the dynamic key corresponding to each random time node and the last modification time of the corresponding file segment.

[0189] Optionally, when the key generation module 303 determines the dynamic key corresponding to each random time node according to the time key seed, it is specifically the following formula:

[0190] , ;

[0191] in, For the The dynamic key corresponding to a random time node, is a symmetric encryption function, is the key derivation function, is a hash function, For the The timestamp string corresponding to a random time node, For the The last modification time of the file segment corresponding to the random time node, is the conversion factor for the preset number of iterations, is the file importance index of the file segment corresponding to the current random time node, is the preset key length conversion factor, is the derived performance index, is the file name of the file segment corresponding to the current random time node, represent For interval The random number inside, represent from Start traversing to , is the number of random time nodes in the file segment corresponding to the current random time node.

[0192] Optionally, the file verification module 304 performs real-time security verification on each file segment based on the random file segment dynamic key set and according to the real-time verification parameter set to determine the verification result sequence information, specifically for:

[0193] Based on the verification timestamp string and the verification modification time, the decryption result corresponding to each verification timestamp is determined according to each dynamic key in the random file segment dynamic key set, specifically as the following formula:

[0194] ;

[0195] in, is the decryption result, is the symmetric decryption function, is the verification timestamp string, is the verification modification time, is the preset number of iterations conversion coefficient, is the file importance index of the file segment corresponding to the current random time node, is the preset key length conversion coefficient, is the derived performance index, For the The dynamic key corresponding to a random time node; each of the decryption results is compared with the corresponding file name, and several string consistency comparison results are determined, and the verification result sequence information is constructed based on them.

[0196] Optionally, the system 300 further includes an asymmetric encryption module 306, which is specifically used to:

[0197] After generating the random file segment dynamic key set, asymmetrically encrypt each of the dynamic keys in the random file segment dynamic key set based on a preset asymmetric encryption strategy to determine the corresponding encryption public key and encryption private key;

[0198] In the process of determining the decryption result corresponding to each verification timestamp according to each dynamic key in the random file segment dynamic key set based on the verification timestamp character string and the verification modification time, obtaining the encrypted private key, and verifying the encrypted private key based on the encrypted public key;

[0199] If the verification succeeds, access to the dynamic key is allowed during the real-time security verification process; if the verification fails, access to the dynamic key is not allowed during the real-time security verification process.

[0200] The system of this embodiment can be used to execute the method of any of the above embodiments. The implementation principles and technical effects are similar and will not be described in detail here.

Claims

1. A method for enterprise data security management, characterized in that: include: Acquire file information and a parallel export parameter set, and determine export time series information according to the file information and the parallel export parameter set; Based on the file information and the parallel export parameter set, performing node randomization generation processing on the export time series information to determine dynamic time node sequence information; Based on the file information, generating a random file segment dynamic key set according to the dynamic time node sequence information; Acquire a real-time verification parameter set, perform a real-time security verification on each file segment based on the random file segment dynamic key set and the real-time verification parameter set, and determine verification result sequence information; According to the verification result sequence information, determine whether to interrupt the file export operation, and determine and output real-time security verification information; The file information includes a file type set and a file size set, the parallel export parameter set includes parallel process information, export sequence information and an export performance index, and the export time series information is determined according to the file information and the parallel export parameter set, including: Based on the file type set and the file size set, and according to the export performance index, determine an estimated export time of each file; Analyze the parallel process information and the export sequence information to determine the file export sequence corresponding to each export process; Determine the export time node of each file in each export process according to the estimated export duration and the export sequence, and use this as the export time series information; The file information also includes a file importance index set. Based on the file information and the parallel export parameter set, performing node randomization generation processing on the export time series information to determine the dynamic time node sequence information includes: Analyze the file information and the parallel export parameter set, and divide all files under each export process into a plurality of export file segments based on unit files; Based on the plurality of the export file segments, analyzing the export time sequence information and the parallel export parameter set, determining a start time node and a completion time node corresponding to each file segment under each export process; Based on the file importance index set and the export performance index, and according to the start time node and the completion time node, determine the number of random time nodes corresponding to each file segment; Generate a number of random interval factors according to the number of random time nodes, and determine a number of random time intervals corresponding to each file segment based on the number of random interval factors; According to the starting time node, the completion time node and the random interval factors, a number of random time nodes corresponding to each file segment are determined, and the dynamic time node sequence information is constructed based on them.

2. The method according to claim 1, characterized in that The number of random time nodes corresponding to each file segment is determined based on the file importance index set and the export performance index according to the start time node and the completion time node, specifically as follows: ； in, For the Export process The number of random time nodes corresponding to the file segments, For the Export process The file importance index corresponding to each file segment in the file importance index set, To preset the impact amplification index, is the preset performance impact coefficient, is the derived performance index, is the preset adjustment coefficient, For the Export process The completion time node corresponding to the file segment, For the Export process The starting time node corresponding to the file segment, The preset time dimension.

3. The method according to claim 1, characterized in that According to the number of random time nodes, a number of random interval factors are generated, and based on the random interval factors, a number of random time intervals corresponding to each file segment are determined, specifically as follows: ； in, For the Export process The corresponding file segment the random time intervals, is the preset distribution parameter, For the The random spacing factor, is the preset time ratio conversion coefficient, represent For interval The random number inside For the Export process The number of random time nodes corresponding to the file segments, represent from Start traversing to .

4. The method according to claim 3, characterized in that The file information also includes a file name and a last modification time. The generating of a random file segment dynamic key set based on the file information and the dynamic time node sequence information includes: Analyze the dynamic time node sequence information, perform character string conversion processing on each random time node, and determine the timestamp character string corresponding to each random time node; Determine the time key seed corresponding to each random time node according to the timestamp character string; Based on the file importance index, the export performance index and the file name corresponding to each file segment, and according to the time key seed, determine the dynamic key corresponding to each random time node; The random file segment dynamic key set is constructed according to the dynamic key corresponding to each random time node and the last modification time of the corresponding file segment.

5. The method according to claim 4, characterized in that The dynamic key corresponding to each random time node is determined according to the time key seed, specifically as follows: ， ； in, For the The dynamic key corresponding to a random time node, is a symmetric encryption function, is the key derivation function, is a hash function, For the The timestamp string corresponding to a random time node, For the The last modification time of the file segment corresponding to the random time node, is the conversion factor for the preset number of iterations, is the file importance index of the file segment corresponding to the current random time node, is the preset key length conversion factor, is the derived performance index, is the file name of the file segment corresponding to the current random time node, represent For interval The random number inside represent from Start traversing to , is the number of random time nodes in the file segment corresponding to the current random time node.

6. The method according to claim 5, characterized in that The real-time verification parameter set includes a verification timestamp string and a verification modification time. The real-time security verification is performed on each file segment based on the random file segment dynamic key set according to the real-time verification parameter set to determine the verification result sequence information, including: Based on the verification timestamp string and the verification modification time, the decryption result corresponding to each verification timestamp is determined according to each dynamic key in the random file segment dynamic key set, specifically as the following formula: ； in, is the decryption result, is the symmetric decryption function, is the verification timestamp string, is the verification modification time, is the preset number of iterations conversion coefficient, is the file importance index of the file segment corresponding to the current random time node, is the preset key length conversion coefficient, is the derived performance index, For the The dynamic key corresponding to a random time node; Each of the decryption results is compared with the corresponding file name to determine a number of string consistency comparison results, and the verification result sequence information is constructed based on them.

7. The method according to claim 6, characterized in that The method further comprises: After generating the random file segment dynamic key set, asymmetrically encrypt each of the dynamic keys in the random file segment dynamic key set based on a preset asymmetric encryption strategy to determine the corresponding encryption public key and encryption private key; In the process of determining the decryption result corresponding to each verification timestamp according to each dynamic key in the random file segment dynamic key set based on the verification timestamp character string and the verification modification time, obtaining the encrypted private key, and verifying the encrypted private key based on the encrypted public key; If the verification succeeds, access to the dynamic key is allowed during the real-time security verification process; if the verification fails, access to the dynamic key is not allowed during the real-time security verification process.

8. An enterprise data security management system, characterized in that: The method as claimed in any one of claims 1 to 7 comprises: A time analysis module, used for acquiring file information and a parallel export parameter set, and determining export time series information according to the file information and the parallel export parameter set; A node analysis module, used to perform node randomization generation processing on the exported time series information based on the file information and the parallel export parameter set, and determine dynamic time node sequence information; A key generation module, used to generate a random file segment dynamic key set based on the file information and the dynamic time node sequence information; A file verification module, used to obtain a real-time verification parameter set, perform a real-time security verification on each file segment based on the random file segment dynamic key set and the real-time verification parameter set, and determine the verification result sequence information; The output module is used to determine whether to interrupt the file export operation according to the verification result sequence information, and determine and output real-time security verification information.

Images