Data security verification method based on Openreset verification parameters

Abstract

A data security verification method based on Openreset verification parameters comprises the steps that parameters needing to be verified are registered and integrated, and a registration verification parameter set is constructed; issuing the API information, and generating a parameter verification rule according to a preset rule; data information to be transmitted is preprocessed and encrypted; performing centralized processing on the to-be-transmitted data information to generate a to-be-transmitted data abstract; encrypting the transmission data abstract to generate a verification parameter; according to the method, unified management is carried out on APIs of services in all business fields, interception verification is carried out according to configuration verification parameter data security rules, the verification rules can be changed in real time and take effect in time, and the method has the advantages that the verification efficiency is improved, and the service safety is improved. And the data security is enhanced while the verification accuracy is improved, and the method is flexible and efficient.

Description

Technical Field

[0001] The present invention relates to the field of data security and is implemented based on an Openrestry platform, and in particular to a data security verification method based on an Openrestry verification parameter. Background Art

[0002] With the rapid development of information technology, data security has become the focus of attention for enterprises and individuals. In the process of data storage, transmission and processing, data often faces security threats such as hacker attacks, internal leaks, network theft, etc. Data security is not only a technical issue, but also a legal and ethical issue. The development of efficient data security verification methods is of great significance to improving the overall information security level. In order to ensure the integrity and security of data during transmission, various verification technologies have emerged. Security incidents such as data leakage, data tampering and illegal access occur frequently, causing huge economic losses and information risks to enterprises and individuals. Traditional data security methods often focus on data encryption and access control, but still face many challenges in ensuring data integrity, accuracy and timeliness.

[0003] Data verification has gone through a development process from simple verification and encoding to complex encryption and authentication. In the early days, data verification mainly relied on simple verification and algorithms. Although such algorithms can detect some basic errors, they are almost powerless against complex security threats. With the advancement of information technology, modern data verification technology has gradually introduced encryption algorithms, digital signatures, and authentication mechanisms to form a relatively complete security protection system. However, the existing data verification methods cannot adapt to the development of technology, and the verification accuracy rate is gradually reduced. The verification efficiency cannot meet the development needs, and there is no strong, flexible and efficient implementation platform to achieve data security verification. Summary of the invention

[0004] The purpose of the present invention is to overcome the shortcomings of the prior art and provide a data security verification method based on Openrestry verification parameters. Through this method, unified management of APIs of services in various business fields can be achieved, interception verification can be performed according to the configuration verification parameter data security rules, and the verification rules can be changed in real time and take effect in time, thereby improving the verification accuracy while strengthening data security, which is flexible and efficient.

[0005] The data security verification method based on Openrestry verification parameters provided by the present invention comprises the following steps performed in sequence:

[0006] (1) In the API management platform, register the parameters that need to be verified, and integrate the registered parameters to build a registration verification parameter set;

[0007] (2) Publish API information, generate parameter verification rules according to preset rules, and synchronize them to the Openrestry service gateway;

[0008] (3) When preparing to call the API information, first pre-process the data information to be transmitted, generate the corresponding pre-processed data digest and encrypt it;

[0009] (4) Based on the results of the preprocessing, the data information to be transmitted is centrally processed to generate a summary of the data to be transmitted;

[0010] (5) Encrypt the transmission data summary using the configured algorithm to generate a verification parameter; send the verification parameter together with the data to be transmitted to the receiver;

[0011] (6) After receiving the data, the receiver performs the same processing and algorithm encryption on the data to be transmitted to generate new verification parameters; the verification parameters generated by the receiver are compared with the verification parameters of the sender. If they are consistent, the data transmission is relatively safe; otherwise, there may be security issues during the data transmission process.

[0012] Furthermore, the rules preset in step (2) are parameter verification rules pre-configured by the user, the parameter verification rules include information of registration parameters and related verification rules, and the parameter verification rules are synchronized with the OpenResty service gateway.

[0013] Furthermore, the step (3) specifically comprises the following steps:

[0014] (3.1) Grouping the data in the registration verification parameter set according to the transmission requirements to construct multiple registration verification parameter subsets;

[0015] (3.2) performing correlation analysis on the data in the registration verification parameter subsets respectively to obtain correlation indexes between the data in different registration verification parameter subsets;

[0016] (3.3) sorting the data in the registration verification parameter subset according to the size of the relevant index, and setting an encryption coefficient for the data in the registration verification parameter subset;

[0017] (3.4) generating a subset digest based on the data in the registration verification parameter subset and the corresponding encryption coefficient, wherein the subset digest includes the corresponding encryption coefficient information;

[0018] (3.5) Based on the generated subset digests, the subset digests are encrypted again respectively.

[0019] Furthermore, the grouping in the step (3.1) is performed in the form of the same category or the same data magnitude.

[0020] Furthermore, the encryption coefficient in the step (3.3) is set based on sorting.

[0021] Furthermore, the data summary to be transmitted in step (4) includes an encryption coefficient and subset summary encryption information.

[0022] Furthermore, the transmission data summary, the preprocessing data summary and their corresponding encrypted contents are stored in different spaces respectively.

[0023] Furthermore, the step (5) further includes sending the subset digests and their corresponding encrypted contents to the recipient and the third party respectively.

[0024] Furthermore, the step (6) also includes, when there may be a security problem, performing the same preprocessing and encryption on the data to be transmitted, generating a subset digest for verification and its corresponding encrypted content, and then comparing them with the stored subset digest and its corresponding encrypted content. If they are consistent, the data transmission is absolutely safe; otherwise, there is a security problem in the data transmission process, and a warning is immediately issued to the user and the data is refused to be accepted.

[0025] Compared with the prior art, the data security verification method based on Openrestry verification parameters of the present invention can achieve:

[0026] (1) When authorizing access to the gateway API, different callers can verify the data security rules according to the verification parameters configured when publishing the API when accessing different APIs. The verification rules can be changed in real time and take effect immediately without the need to modify the business API itself.

[0027] (2) Utilize the related processing methods, in the form of preprocessing and processing, based on the generated summary, respectively, and combine the added multiple encryption methods to make good use of the data advantages for optimized processing, and perform encryption intervention respectively to improve processing efficiency and security; by verifying the security of the data, conduct comparative verification, ensure the security of the data, prevent false alarms, and warn the user and refuse to accept the data when security problems occur. BRIEF DESCRIPTION OF THE DRAWINGS

[0028] Figure 1 The figure is a flowchart of a data security verification method based on Openrestry verification parameters. DETAILED DESCRIPTION

[0029] The specific implementation of the present invention is described in detail below. It is necessary to point out that the following implementation is only used for further explanation of the present invention and cannot be understood as limiting the scope of protection of the present invention. Some non-essential improvements and adjustments made to the present invention by persons skilled in the art based on the above-mentioned content of the present invention still fall within the scope of protection of the present invention.

[0030] The present invention provides a data security verification method based on Openrestry verification parameters, and its specific implementation is as shown in the attached Figure 1 As shown. Figure 1 The following is a flow chart of the data security verification method based on Openrestry verification parameters. The following is a detailed introduction to the periodic detection method based on time series.

[0031] Openresty is an efficient Web server that integrates Nginx and Lua scripting languages, providing developers with an extensible, high-performance development environment. The platform can not only handle high concurrent requests, but also allow developers to use Lua language to write complex logic, enhancing flexibility and customizability. The present invention uses the Openresty platform to build a dynamic verification parameter mechanism, set up corresponding verification parameters at the nodes of the data transmission process, and monitor the status of data and the integrity of its transmission in real time.

[0032] API (Application Programming Interface) is an important bridge for interaction between different software systems, and its security and reliability are particularly important. Effective API management is not only related to the effective transmission of data, but also to the protection of data security and user privacy. In the API management platform, parameter verification is an important link to ensure data security and integrity. The present invention uniformly manages the APIs of various business services, starting from registering the APIs that need to verify parameters in the API management platform, and gradually explores the implementation of API publishing, data preprocessing and parameter verification processes to ensure the security of the data transmission process.

[0033] The present invention provides a data security verification method based on Openrestry verification parameters, and the specific implementation process is as shown in the attached Figure 1 As shown. Figure 1 As shown, the data security verification method based on Openrestry verification parameters provided by the present invention includes the following steps performed in sequence:

[0034] First, in the API management platform, register the parameters that need to be verified, and integrate the registered parameters to build a registration verification parameter set. During the registration process, it is necessary to define various parameters of the API, including but not limited to data format, type, and whether it is required. This not only determines the basic functions of the API, but also lays the foundation for the formulation of subsequent parameter verification rules. By clarifying the parameter requirements, the system can effectively verify the input data when receiving the request, thereby avoiding system errors or security defects caused by illegal parameters. For example, when registering, you can specify that a parameter must be an integer and within a certain range (such as 1-100). If the parameters passed in by the user do not meet these conditions, the system will actively reject the request. This early parameter verification mechanism not only improves the robustness of the system, but also reduces the risk of errors in subsequent processing to a certain extent.

[0035] Next, the API information is published, parameter verification rules are generated according to the preset rules, and synchronized to the Openrestry service gateway. The preset rules can be parameter verification rules pre-configured by the user. The parameter verification rules include the information of the registered parameters and the relevant verification rules, so as to facilitate the parameter verification during the subsequent implementation of the call. At the same time, the parameter verification rules also need to be synchronized with the OpenResty service gateway. OpenResty, as the data entry point, matches and verifies the incoming request data. With the help of the previously generated parameter verification rules, OpenResty can quickly determine the legitimacy of the request parameters, thereby improving the security of data processing.

[0036] Then, when preparing to call the API information, the data information to be transmitted is preprocessed first to generate the corresponding preprocessed data summary. The data summary is a compressed representation generated by processing the data, which can protect the privacy of the data to a certain extent, while reflecting the summary of the API information, effectively reflecting the content of the data without leaking specific information. The preprocessed data summary is the summary information generated in the preprocessing stage, reflecting the summary of the preprocessing process.

[0037] Afterwards, when the data information to be transmitted is preprocessed, the specific steps include: first, grouping the data in the registration verification parameter set according to the transmission requirements to construct multiple registration verification parameter subsets. Among them, the registration verification parameter subsets are not only simple parameters, but also other data that reflect the content of the data information. Specifically, the grouping is carried out in the form of the same category or the same data magnitude, that is, the data is aggregated. Second, the data in the registration verification parameter subsets are respectively subjected to correlation analysis and processing to obtain the correlation index between the data in different registration verification parameter subsets. Third, the data in the registration verification parameter subsets are sorted according to the size of the correlation index, and the encryption coefficient is set for the data in the registration verification parameter subsets after sorting, wherein the encryption coefficient can be implemented based on the sorting when setting, reflecting the difference in encryption; fourth, a subset summary is generated based on the data in the registration verification parameter subsets and the corresponding encryption coefficient, wherein the subset summary must contain the corresponding encryption coefficient information, so that effective encryption can be achieved; fifth, based on the generated subset summary, the subset summary is encrypted again, so that each subset summary has its corresponding encryption coefficient and a further encryption based on its characteristics. It should be noted that when calculating the correlation index for relevant data, there may be a situation where a certain data has a high correlation index with two or more other data. In this case, the repeated data at the end of the sorting can be deleted after sorting. In this way, the data advantage can be well utilized for optimization processing, and encryption intervention is performed separately, so as to improve processing efficiency and security.

[0038] Next, based on the results of preprocessing, the data information to be transmitted is centrally processed to generate a summary of the data to be transmitted; wherein the summary of the data to be transmitted includes encryption coefficients and subset summary encryption information. The summary of the transmitted data, the summary of the preprocessed data and their corresponding encrypted contents are stored in different spaces. It should be noted that the data summary can not only effectively reduce the storage requirements, but also improve the efficiency of subsequent analysis and processing. During the processing, the key features of the data should be retained to form an effective data summary, which is convenient for subsequent access and utilization.

[0039] Then, after the transmission data summary is generated, the transmission data summary is encrypted using the configured algorithm to generate the verification parameter; the verification parameter is sent to the receiver together with the data to be transmitted, and the subset summary and its corresponding encrypted content are sent to the receiver and the third party respectively. The configured encryption algorithm can ensure the security of the data to be transmitted, and the verification parameter is sent to the receiver together with the data to be transmitted to form a complete request.

[0040] Finally, after the receiver (gateway) receives the data, it performs the same processing and algorithm encryption on the data to be transmitted to generate new verification parameters; the verification parameters generated by the receiver are compared with the verification parameters of the sender. If they are consistent, the data transmission is relatively safe; otherwise, there may be security issues during the data transmission process; when there may be security issues, the data to be transmitted is preprocessed and encrypted in the same way, and a subset summary for verification and its corresponding encrypted content are generated, which are then compared with the stored subset summary and its corresponding encrypted content. If they are consistent, the data transmission is absolutely safe; otherwise, there are security issues during the data transmission process.

[0041] Among them, when the gateway of the receiver receives the data, the same preprocessing steps need to be performed. First, the data to be transmitted is hashed to generate a new data summary; then, the data summary is encrypted to generate the verification parameters of the receiver. At this time, the receiver determines the security of data transmission by comparing the verification parameters generated by the sender and the receiver. If the verification parameters of the two are consistent, this preliminarily indicates that the data has not been tampered with during the transmission process and the integrity and security of the data transmission are guaranteed; otherwise, if the verification parameters are inconsistent, it means that there may be security issues in the data transmission process, such as being attacked by a man-in-the-middle or data tampering. Due to false alarms and errors in the encryption process, different forms of data comparison are performed again for confirmation to avoid data misreporting and verify the absolute security of the data. If there are still security issues at this time, the user should be warned immediately and the data should be refused.

[0042] Although exemplary embodiments of the present invention have been described for the purpose of illustration, it will be understood by those skilled in the art that various modifications, additions and substitutions may be made in form and detail without departing from the scope and spirit of the invention disclosed in the appended claims, and all such changes shall fall within the scope of protection of the appended claims of the present invention, and the various steps in the various departments and methods of the products claimed by the present invention may be combined together in any combination. Therefore, the description of the embodiments disclosed in the present invention is not intended to limit the scope of the present invention, but is used to describe the present invention. Accordingly, the scope of the present invention is not limited by the above embodiments, but is defined by the claims or their equivalents.

Claims

1. A data security verification method based on Openrestry verification parameters, characterized in that: The method comprises the following steps in sequence: (1) In the API management platform, register the parameters that need to be verified, and integrate the registered parameters to build a registration verification parameter set; (2) Publish API information, generate parameter verification rules according to preset rules, and synchronize them to the Openrestry service gateway; (3) When preparing to call the API information, first pre-process the data information to be transmitted, generate the corresponding pre-processed data digest and encrypt it; (4) Based on the results of the preprocessing, the data information to be transmitted is centrally processed to generate a summary of the data to be transmitted; (5) Encrypt the transmission data summary using the configured algorithm to generate verification parameters; Send the verification parameters together with the data to be transmitted to the receiver; (6) After receiving the data, the receiver performs the same processing and algorithm encryption as the transmitted data to generate new verification parameters; the verification parameters generated by the receiver are compared with the verification parameters of the sender. If they are consistent, the data transmission is relatively safe; Otherwise, there may be security issues during data transmission.

2. The method according to claim 1, characterized in that: The preset rules in step (2) are parameter verification rules pre-configured by the user. The parameter verification rules include information of registration parameters and related verification rules. The parameter verification rules are synchronized with the OpenResty service gateway.

3. The method according to claim 1 or 2, characterized in that The step (3) specifically comprises the following steps: (3.1) Grouping the data in the registration verification parameter set according to the transmission requirements to construct multiple registration verification parameter subsets; (3.2) performing correlation analysis on the data in the registration verification parameter subsets respectively to obtain correlation indexes between the data in different registration verification parameter subsets; (3.3) sorting the data in the registration verification parameter subset according to the size of the relevant index, and setting an encryption coefficient for the data in the registration verification parameter subset; (3.4) generating a subset digest based on the data in the registration verification parameter subset and the corresponding encryption coefficient, wherein the subset digest includes the corresponding encryption coefficient information; (3.5) Based on the generated subset digests, the subset digests are encrypted again respectively.

4. The method according to claim 4, characterized in that: The grouping in the step (3.1) is performed in the form of data of the same category or the same data magnitude.

5. The method according to claim 4, characterized in that: The encryption coefficients in the step (3.3) are set based on the sorting.

6. The method according to claim 5, characterized in that: The data summary to be transmitted in step (4) includes encryption coefficients and subset summary encryption information.

7. The method according to claim 6, characterized in that: The transmission data summary, the pre-processed data summary and their corresponding encrypted contents are stored in different spaces respectively.

8. The method according to claim 7, characterized in that: The step (5) also includes sending the subset digests and their corresponding encrypted contents to the recipient and the third party respectively.

9. The method according to claim 8, characterized in that: The step (6) also includes, when there may be a security problem, performing the same preprocessing and encryption on the data to be transmitted, generating a subset digest for verification and its corresponding encrypted content, and then comparing them with the stored subset digest and its corresponding encrypted content. If they are consistent, the data transmission is absolutely safe; otherwise, there is a security problem in the data transmission process, and a warning is immediately issued to the user and the data is refused to be accepted.

Images