Phone number encryption and contact protection method and platform for ERP (Enterprise Resource Planning) system

Abstract

The invention relates to a telephone number encryption and contact protection method and platform for an ERP (Enterprise Resource Planning) system, and the method comprises the steps: obtaining the sensitivity level of a number access request when the number access request is received; performing security authentication and authority authentication on the user side; when the security authentication and the authority authentication both pass, generating a dynamic key pair; performing dynamic encryption based on the dynamic encryption key; and sending the decryption key to the user side, and recording access information and operation information of the user side. According to the invention, security authentication and authority authentication based on the sensitive level of the request are carried out on the user side sending the number access request, so that the security and compliance of the request of the user side are verified; and after the verification is passed, a dynamic key is generated to dynamically encrypt and decrypt the telephone number data corresponding to the access request, and the access information and the operation information of the user side are recorded when the user side decrypts, so that the information security of the sensitive information such as the telephone number in the ERP system is improved.

Description

Technical Field

[0001] The present application relates to the technical field of data encryption and protection, and in particular to a method and platform for encrypting and protecting telephone numbers and contacts for an ERP system. Background Art

[0002] As a core tool for enterprise management, the Enterprise Resource Planning (ERP) system has been widely used in all walks of life. It integrates the data and processes of various departments of an enterprise, and realizes the unified management and optimized configuration of information. However, with the popularization of ERP systems, the large amount of sensitive information stored in them, especially the telephone numbers of employees and customers, faces increasingly severe security threats.

[0003] In order to prevent the leakage of sensitive information such as phone numbers and privacy, existing ERP systems generally use encrypted information data to protect them. However, although traditional encryption methods, such as static key encryption, provide a certain degree of protection, they still have significant defects: once the static key is leaked, all data encrypted with the key will be at risk of being cracked. In addition, traditional encryption methods often use a unified encryption strategy, which makes it difficult to distinguish access rights based on different user roles, which may lead to unauthorized access to sensitive information. Summary of the invention

[0004] In order to solve the above defects, improve the information security of sensitive information such as telephone numbers in the ERP system, and effectively protect them, the present application provides a telephone number encryption and contact protection method and platform for the ERP system.

[0005] The above-mentioned invention objective of the present application is achieved through the following technical solutions:

[0006] A telephone number encryption and contact protection method for an ERP system, comprising the steps of:

[0007] When receiving a number access request from a user terminal, obtaining a sensitivity level of the number access request;

[0008] Perform security authentication and authority authentication on the user terminal based on the authentication rules corresponding to the acquired sensitivity level preset;

[0009] When both the security authentication and the permission authentication are passed, a dynamic key pair is generated based on the access process corresponding to the sensitivity level preset and the role attribute of the user end, wherein the dynamic key pair includes an encryption key and a decryption key;

[0010] Dynamically encrypting information associated with the number access request based on the generated dynamic encryption key;

[0011] The decryption key is sent to the user, and its access information and operation information are recorded.

[0012] By adopting the above technical solution, when a number access request is received from a user terminal, the sensitivity level of the request is determined, and according to the authentication rules preset for the sensitivity level, the user terminal is subjected to security authentication involving verification of the user identity and environmental security and permission authentication for checking whether the user has access rights. When the user passes the security authentication and permission authentication, a pair of dynamic key pairs are generated according to the sensitivity level and the user's role attributes, which include an encryption key and a decryption key. The generated dynamic encryption key is used to encrypt the information associated with the number access request to ensure the security of the information during transmission. The decryption key is sent to the client so that the client can decrypt the corresponding encrypted information. At the same time, the user's access information and operation information are recorded for subsequent audit or analysis. The present application verifies the security and compliance of the user terminal's request by performing security authentication and permission authentication based on the sensitivity level of the request on the user terminal that issues the number access request. After the authentication is passed, a dynamic key pair is generated for dynamically encrypting and decrypting the phone number data corresponding to the access request, and the access information and operation information are recorded when the user terminal decrypts. This has the effect of improving the information security of sensitive information such as phone numbers in the ERP system.

[0013] In a preferred example, the present application may be further configured as follows: when a number access request is received from a user terminal, the step of obtaining the sensitivity level of the number access request comprises the steps of:

[0014] Based on the received number access request and the role attributes and historical access data of the user terminal, obtain the corresponding sensitive parameter set;

[0015] Determine the sensitivity score of the number access request according to the acquired sensitive parameter set;

[0016] Match the corresponding sensitivity level based on the determined sensitivity score.

[0017] By adopting the above-mentioned technical solution, when a number access request is received from the user side, a set of sensitive parameter sets is obtained based on the request, the role attributes of the user side (user type, authority level, etc.) and the user's historical access data (which number information has been accessed in the past, access frequency, etc.), and a sensitivity score is calculated based on the sensitive parameter set to quantify the sensitivity of the number access request, and the corresponding sensitivity level is matched based on the sensitivity score, thereby achieving a matching determination of the sensitivity level.

[0018] In a preferred example, the present application can be further configured as follows: the sensitive parameter set includes a number data classification sensitivity coefficient, a number data access frequency coefficient, a user role attribute risk coefficient, and a system security maturity coefficient; the step of determining the sensitivity score of the number access request according to the acquired sensitive parameter set includes the steps of:

[0019] The sensitivity score is determined by:

[0020]

[0021] Among them, SV is the sensitivity score of the number access request, S ensi is the number data classification sensitivity coefficient, F reque is the number data access frequency coefficient, R ole is the user role attribute risk coefficient, G is the system security maturity coefficient;

[0022] The number data access frequency coefficient is determined in the following manner:

[0023]

[0024] Among them, Vi is the number of times the user terminal accesses the i-th level number data, and Ci is the preset coefficient corresponding to the i-th level number data.

[0025] By adopting the above technical solution, the sensitivity score is calculated and determined based on the number data classification sensitivity coefficient, the number data access frequency coefficient, the user role attribute risk coefficient and the system security maturity coefficient to indicate the sensitivity of the number access request.

[0026] In a preferred example, the present application may be further configured as follows: the step of performing security authentication and authority authentication on the user terminal based on the authentication rules corresponding to the acquired sensitivity level preset includes the following steps:

[0027] Based on the acquired sensitivity level and the preset authentication rule mapping table, determine the security authentication rule and permission authentication rule corresponding to the preset sensitivity level;

[0028] During the security authentication and authority authentication process, a multi-factor real-time authentication interval is used to authenticate the user terminal.

[0029] By adopting the above technical solution, according to the obtained sensitivity level, the preset authentication rule mapping table is searched to determine which specific security authentication and authority authentication steps need to be performed under the current sensitivity level. In the process of security authentication and authority authentication, a multi-factor real-time verification interval is used to verify the user terminal, that is, real-time verification is performed within a certain time interval to further ensure the security of the user terminal's access process.

[0030] In a preferred example, the present application can be further configured as follows: when both the security authentication and the permission authentication are passed, a dynamic key pair is generated based on the access process corresponding to the sensitivity level preset and the role attribute of the user end, and the dynamic key pair includes the steps of encrypting the key and decrypting the key, including the steps of:

[0031] According to the preset access process of the sensitivity level and the role attribute of the user end, the corresponding key generation algorithm is matched from the preset algorithm set;

[0032] Generate a unique dynamic key pair based on a matching key generation algorithm;

[0033] The generated dynamic key pair is bound to the identity information of the user terminal and the number access request.

[0034] By adopting the above technical solution, according to the preset access process of the sensitivity level and the role attributes of the user, the corresponding key generation algorithm is matched from the preset algorithm set to ensure the security and applicability of the key. Once a suitable key generation algorithm is matched, a unique dynamic key pair is generated based on the algorithm for subsequent encryption and decryption operations on the access request, and the generated dynamic key pair is bound to the identity information of the user and the number access request to ensure the security of access.

[0035] In a preferred example, the present application can be further configured as follows: the step of sending the decryption key to the user terminal and recording its access information and operation information includes the following steps:

[0036] Sending a decryption key with a validity period to the user end;

[0037] Monitor and record the user's operation information, and trigger the security response mechanism when abnormal operation behavior is detected.

[0038] By adopting the above technical solution, the decryption key generated and sent to the client has a validity period, that is, the decryption key is only valid within a specific time to enhance security. At the same time, the client's operation information is monitored and recorded. When any abnormal or suspicious operation behavior is detected, the security response mechanism is triggered, thereby further enhancing system security.

[0039] The second object of the invention is achieved by the following technical solutions:

[0040] A telephone number encryption and contact protection platform for an ERP system, comprising:

[0041] A sensitivity level acquisition module, used to acquire the sensitivity level of a number access request when receiving a number access request from a user terminal;

[0042] An authentication module is used to perform security authentication and authority authentication on the user terminal based on the authentication rules corresponding to the acquired sensitivity level preset;

[0043] A key generation module, used to generate a dynamic key pair based on the access process corresponding to the sensitivity level preset and the role attribute of the user terminal when both the security authentication and the permission authentication are passed, wherein the dynamic key pair includes an encryption key and a decryption key;

[0044] A dynamic encryption module, used for dynamically encrypting information associated with the number access request based on a generated dynamic encryption key;

[0045] The information processing module is used to send the decryption key to the user end and record its access information and operation information.

[0046] By adopting the above technical solution, the sensitivity level acquisition module is used to obtain the sensitivity level of the number access request when receiving the number access request from the user terminal; the authentication module is used to perform security authentication and authority authentication on the user terminal based on the authentication rules corresponding to the acquired sensitivity level preset; the key generation module is used to generate a dynamic key pair based on the access process corresponding to the sensitivity level preset and the role attributes of the user terminal when both the security authentication and the authority authentication are passed, and the dynamic key pair includes an encryption key and a decryption key; the dynamic encryption module is used to dynamically encrypt the information associated with the number access request based on the generated dynamic encryption key; the information processing module is used to send the decryption key to the user terminal and record its access information and operation information.

[0047] In a preferred example, the present application can be further configured as follows: the sensitivity level acquisition module includes:

[0048] A sensitive parameter set acquisition submodule, used to acquire a corresponding sensitive parameter set based on a received number access request and a user's role attributes and historical access data;

[0049] A sensitivity score determination submodule, used to determine the sensitivity score of the number access request according to the acquired sensitive parameter set;

[0050] The sensitivity level matching submodule is used to match the corresponding sensitivity level based on the determined sensitivity score.

[0051] By adopting the above-mentioned technical solution, the sensitive parameter set acquisition submodule is used to obtain the corresponding sensitive parameter set based on the received number access request and the role attributes and historical access data of the user terminal; the sensitivity score determination submodule is used to determine the sensitivity score of the number access request according to the acquired sensitive parameter set; and the sensitivity level matching submodule is used to match the corresponding sensitivity level based on the determined sensitivity score.

[0052] In summary, the present application includes at least one of the following beneficial technical effects:

[0053] 1. This application verifies the security and compliance of the user's request by performing security authentication and authority authentication based on the sensitivity level of the request on the user who issues the number access request. After the verification is passed, a dynamic key pair is generated for dynamic encryption and decryption of the phone number data corresponding to the access request, and the access information and operation information are recorded when the user decrypts. This has the effect of improving the information security of sensitive information such as phone numbers in the ERP system;

[0054] 2. During the security authentication and authority authentication process, a multi-factor real-time authentication interval is used to authenticate the user terminal, that is, real-time authentication is performed within a certain time interval to further ensure the security of the user terminal's access process. BRIEF DESCRIPTION OF THE DRAWINGS

[0055] Figure 1 This is a flow chart of an embodiment of a method for encrypting and protecting telephone numbers and contacts in an ERP system of the present application;

[0056] Figure 2 This is a flowchart of an implementation of step S10 in an embodiment of a method for encrypting and protecting telephone numbers in an ERP system of the present application;

[0057] Figure 3 This is a flowchart for implementing step S30 in an embodiment of a method for encrypting and protecting telephone numbers in an ERP system of the present application. DETAILED DESCRIPTION

[0058] The following is combined with Figure 1-3 This application is described in further detail.

[0059] In one embodiment, if Figure 1 As shown, the present application discloses a method for encrypting and protecting telephone numbers and contacts for an ERP system, which specifically includes the following steps:

[0060] S10: when receiving a number access request from a user terminal, obtaining a sensitivity level of the number access request;

[0061] In this embodiment, the user end is a member end in the ERP system; the number access request is a request instruction issued to access the corresponding phone number and its associated related information; the sensitivity level is information indicating the sensitivity of the phone number and its associated related information corresponding to the number access request;

[0062] Furthermore, the sensitivity level preset includes a low level representing ordinary employee phone numbers and their associated related information, a medium level representing management employee phone numbers and their associated related information, and a high level representing customer and specific personnel phone numbers and their associated related information;

[0063] Specifically, when a request for accessing number information is received from a user terminal, the sensitivity level of the request is determined based on the access information object identity corresponding to the request.

[0064] S20: Performing security authentication and authority authentication on the user terminal based on the authentication rules preset corresponding to the acquired sensitivity level;

[0065] In this embodiment, security authentication is to authenticate the user identity and environmental security; authority authentication is to authenticate whether the user has access rights;

[0066] Specifically, according to the authentication rules preset for the sensitivity level, the user terminal is subjected to security authentication involving verification of the user identity and environmental security and permission authentication to check whether the user has access rights, thereby verifying the security and compliance of its access request.

[0067] S30: When both the security authentication and the authority authentication are passed, a dynamic key pair is generated based on the access process corresponding to the sensitivity level preset and the role attribute of the user terminal, wherein the dynamic key pair includes an encryption key and a decryption key;

[0068] In this embodiment, the access process corresponding to the sensitivity level preset is the encryption process and encryption level preset based on each sensitivity level respectively; the role attribute of the user end is the attribute definition contained in the role in the ERP system corresponding to its identity information, including ordinary employees, management employees, specific personnel, etc.; the dynamic key pair is the corresponding dynamic encryption key and dynamic decryption key generated temporarily;

[0069] Specifically, after the user passes the security authentication and permission authentication, a dynamic key pair is generated according to the sensitivity level corresponding to the request and the user's role attributes, which includes an encryption key and a decryption key.

[0070] S40: Dynamically encrypting information associated with the number access request based on the generated dynamic encryption key;

[0071] In this embodiment, dynamic encryption is to encrypt the corresponding information using the generated dynamic key pair;

[0072] Specifically, the generated dynamic encryption key is used to encrypt the information associated with the number access request to ensure the security of the information during transmission.

[0073] S50: Send the decryption key to the user terminal and record its access information and operation information;

[0074] In this embodiment, the decryption key is a key used to decrypt encrypted information; the access information is a log recording the user's access request and related circumstances of the access behavior; and the operation information is a log recording the operations performed by the user when performing the access behavior.

[0075] Specifically, the decryption key is sent to the client so that the client can decrypt the corresponding encrypted information. At the same time, the user's access information and operation information are recorded for subsequent audit or analysis.

[0076] In one embodiment, if Figure 2 As shown, step S10 includes the steps of:

[0077] S11: based on the received number access request and the role attributes and historical access data of the user terminal, obtain a corresponding sensitive parameter set;

[0078] S12: determining the sensitivity score of the number access request according to the acquired sensitive parameter set;

[0079] S13: matching the corresponding sensitivity level based on the determined sensitivity score;

[0080] In this embodiment, the historical access data is preset record data information including the number information and the frequency of the number accessed by the user terminal in the past; the sensitive parameter set is a parameter set used to calculate the sensitivity score; the sensitive score is a quantitative value used to quantify the sensitivity of the number access request, which is calculated based on the sensitive parameter set by a preset algorithm or rule;

[0081] Specifically, when a number access request is received from the user side, a set of sensitive parameter sets is obtained based on the request, the role attributes of the user side (user type, authority level, etc.) and the user's historical access data (which number information has been accessed in the past, access frequency, etc.), and a sensitivity score is calculated based on the sensitive parameter set to quantify the sensitivity of the number access request, and the corresponding sensitivity level is matched based on the sensitivity score, thereby achieving a match and determination of the sensitivity level.

[0082] In one embodiment, the sensitive parameter set includes a number data classification sensitivity coefficient, a number data access frequency coefficient, a user role attribute risk coefficient, and a system security maturity coefficient. Step S12 includes the following steps:

[0083] S121: Determine the sensitivity score by the following method:

[0084]

[0085] Among them, SV is the sensitivity score of the number access request, Sensi is the number data classification sensitivity coefficient, F reque is the number data access frequency coefficient, R ole is the user role attribute risk coefficient, G is the system security maturity coefficient;

[0086] The number data access frequency coefficient is determined in the following manner:

[0087]

[0088] Wherein, Vi is the number of times the user terminal accesses the i-th level number data, and Ci is the preset coefficient corresponding to the i-th level number data;

[0089] In this embodiment, the number data classification sensitivity coefficient is a quantitative coefficient used to represent the sensitivity of different categories of number data, wherein the number data classification sensitivity coefficient is also used to represent the quantitative coefficient of access data associated with the number data, that is, personal information data associated with the number data is also taken into consideration, such as identity card, marital status, rank, power, equity information and other personal privacy data information; the number data access frequency coefficient is a coefficient representing the frequency of user end access to number data of different levels; the user role attribute risk coefficient is a quantitative coefficient representing the risk level of the user role attribute; the system security maturity coefficient is a quantitative coefficient used to represent the security maturity of the system;

[0090] Specifically, the sensitivity score is calculated and determined based on the number data classification sensitivity coefficient, the number data access frequency coefficient, the user role attribute risk coefficient, and the system security maturity coefficient to indicate the sensitivity of the number access request.

[0091] In one embodiment, step S20 includes the steps of:

[0092] S21: Based on the acquired sensitivity level and the preset authentication rule mapping table, determine the security authentication rule and permission authentication rule corresponding to the sensitivity level preset;

[0093] S22: During the security authentication and authority authentication process, the user terminal is authenticated at intervals using a multi-factor real-time authentication;

[0094] In this embodiment, the authentication rule mapping table is a preset table for defining security authentication rules and authority authentication rules corresponding to different sensitivity levels; multi-factor real-time verification is to verify whether the user terminal is currently operating manually or has abnormal operation behavior by combining multiple verification factors;

[0095] Specifically, according to the obtained sensitivity level, the preset authentication rule mapping table is searched to determine which specific security authentication and authority authentication steps need to be performed under the current sensitivity level. During the security authentication and authority authentication process, a multi-factor real-time verification interval is used to verify the user terminal, that is, real-time verification is performed within a certain time interval to further ensure the security of the user terminal's access process.

[0096] In one embodiment, if Figure 3 As shown, step S30 includes the steps of:

[0097] S31: matching a corresponding key generation algorithm from a preset algorithm set according to the access process preset by the sensitivity level and the role attribute of the user terminal;

[0098] S32: Generate a unique dynamic key pair based on a matching key generation algorithm;

[0099] S33: Binding the generated dynamic key pair with the identity information of the user terminal and the number access request;

[0100] In this embodiment, the key generation algorithm is an algorithm for generating encryption keys and decryption keys, and different algorithms have different security and applicability; the generated dynamic key pair is bound to the identity information of the user terminal and the number access request, specifically, the dynamic key pair is associated with the identity information of the user terminal and the number access request, then only the user holding the correct key pair can decrypt the access request.

[0101] Specifically, according to the preset access process of the sensitivity level and the role attributes of the user, the corresponding key generation algorithm is matched from the preset algorithm set to ensure the security and applicability of the key. Once a suitable key generation algorithm is matched, a unique dynamic key pair is generated based on the algorithm for subsequent encryption and decryption operations on the access request. The generated dynamic key pair is bound to the user's identity information and the number access request to ensure the security of access.

[0102] In one embodiment, step S50 includes the steps of:

[0103] S51: Sending the decryption key with a validity period to the user terminal;

[0104] S52: monitor and record the operation information of the user end, and trigger a security response mechanism when abnormal operation behavior is detected;

[0105] In this embodiment, the validity period is a restriction that makes the decryption key valid only within a specific time; abnormal operation behavior is behavior that does not conform to normal or preset usage patterns; and the security response mechanism is a pre-set response measure when a security threat or abnormal behavior is detected.

[0106] Specifically, the decryption key generated and sent to the client has a validity period, that is, the decryption key is only valid within a specific time to enhance security. At the same time, the client's operation information is monitored and recorded. When any abnormal or suspicious operation behavior is detected, the security response mechanism is triggered, thereby further enhancing system security.

[0107] It should be understood that the size of the serial numbers of the steps in the above embodiments does not mean the order of execution. The execution order of each process should be determined by its function and internal logic, and should not constitute any limitation on the implementation process of the embodiments of the present application.

[0108] In one embodiment, a telephone number encryption and contact protection platform for an ERP system is provided, and the telephone number encryption and contact protection platform for an ERP system corresponds one-to-one to the telephone number encryption and contact protection method for an ERP system in the above embodiment. The telephone number encryption and contact protection platform for an ERP system includes:

[0109] A sensitivity level acquisition module, used to acquire the sensitivity level of a number access request when receiving a number access request from a user terminal;

[0110] An authentication module is used to perform security authentication and authority authentication on the user terminal based on the authentication rules corresponding to the acquired sensitivity level preset;

[0111] A key generation module, used to generate a dynamic key pair based on the access process corresponding to the sensitivity level preset and the role attribute of the user terminal when both the security authentication and the permission authentication are passed, wherein the dynamic key pair includes an encryption key and a decryption key;

[0112] A dynamic encryption module, used for dynamically encrypting information associated with the number access request based on a generated dynamic encryption key;

[0113] An information processing module is used to send the decryption key to the user end and record its access information and operation information;

[0114] Optionally, the sensitivity level acquisition module includes:

[0115] A sensitive parameter set acquisition submodule, used to acquire a corresponding sensitive parameter set based on a received number access request and a user's role attributes and historical access data;

[0116] A sensitivity score determination submodule, used to determine the sensitivity score of the number access request according to the acquired sensitive parameter set;

[0117] A sensitivity level matching submodule, used to match the corresponding sensitivity level based on the determined sensitivity score;

[0118] Optionally, the sensitive parameter set includes a number data classification sensitivity coefficient, a number data access frequency coefficient, a user role attribute risk coefficient, and a system security maturity coefficient. The sensitive classification determination submodule is specifically used for:

[0119] The sensitivity score is determined by:

[0120]

[0121] Among them, SV is the sensitivity score of the number access request, S ensi is the number data classification sensitivity coefficient, F reque is the number data access frequency coefficient, R ole is the user role attribute risk coefficient, G is the system security maturity coefficient;

[0122] The number data access frequency coefficient is determined in the following manner:

[0123]

[0124] Wherein, Vi is the number of times the user terminal accesses the i-th level number data, and Ci is the preset coefficient corresponding to the i-th level number data;

[0125] Optionally, also include:

[0126] A rule determination module, used to determine the security authentication rules and permission authentication rules corresponding to the sensitivity level preset based on the acquired sensitivity level and the preset authentication rule mapping table;

[0127] A multi-factor authentication module is used to authenticate the user terminal using multi-factor real-time authentication intervals during security authentication and authority authentication;

[0128] Optionally, also include:

[0129] The key generation algorithm matching module is used to match the corresponding key generation algorithm from the preset algorithm set according to the access process preset by the sensitivity level and the role attribute of the user end;

[0130] A key binding module, used to bind the generated dynamic key pair with the identity information of the user terminal and the number access request;

[0131] Optionally, also include:

[0132] A key sending module is used to send a decryption key with a validity period to a user terminal;

[0133] The monitoring module is used to monitor and record the operation information of the user end, and trigger the security response mechanism when abnormal operation behavior is detected.

[0134] For the specific definition of a telephone number encryption and contact protection platform for an ERP system, please refer to the definition of a telephone number encryption and contact protection method for an ERP system mentioned above, which will not be repeated here. Each module in the above-mentioned telephone number encryption and contact protection platform for an ERP system can be implemented in whole or in part by software, hardware and a combination thereof. The above-mentioned modules can be embedded in or independent of the processor in the computer device in the form of hardware, or can be stored in the memory of the computer device in the form of software, so that the processor can call and execute the operations corresponding to the above modules.

[0135] The embodiments described above are only used to illustrate the technical solutions of the present application, rather than to limit them. Although the present application has been described in detail with reference to the aforementioned embodiments, a person skilled in the art should understand that the technical solutions described in the aforementioned embodiments may still be modified, or some of the technical features may be replaced by equivalents. Such modifications or replacements do not deviate the essence of the corresponding technical solutions from the spirit and scope of the technical solutions of the embodiments of the present application, and should all be included in the protection scope of the present application.

Claims

1. A telephone number encryption and contact protection method for an ERP system, characterized in that: Includes steps: When receiving a number access request from a user terminal, obtaining a sensitivity level of the number access request; Perform security authentication and authority authentication on the user terminal based on the authentication rules corresponding to the acquired sensitivity level preset; When both the security authentication and the permission authentication are passed, a dynamic key pair is generated based on the access process corresponding to the sensitivity level preset and the role attribute of the user end, wherein the dynamic key pair includes an encryption key and a decryption key; Dynamically encrypting information associated with the number access request based on the generated dynamic encryption key; The decryption key is sent to the user, and its access information and operation information are recorded.

2. A telephone number encryption and contact protection method for an ERP system according to claim 1, characterized in that: The step of obtaining the sensitivity level of a number access request when receiving the number access request from the user terminal comprises the steps of: Based on the received number access request and the role attributes and historical access data of the user terminal, obtain the corresponding sensitive parameter set; Determine the sensitivity score of the number access request according to the acquired sensitive parameter set; Match the corresponding sensitivity level based on the determined sensitivity score.

3. A telephone number encryption and contact protection method for an ERP system according to claim 2, characterized in that: The sensitive parameter set includes a number data classification sensitivity coefficient, a number data access frequency coefficient, a user role attribute risk coefficient, and a system security maturity coefficient. The step of determining the sensitivity score of the number access request according to the acquired sensitive parameter set includes the steps of: determining the sensitivity score by: Among them, SV is the sensitivity score of the number access request, S ensi is the number data classification sensitivity coefficient, F reque is the number data access frequency coefficient, R ole is the user role attribute risk coefficient, G is the system security maturity coefficient; The number data access frequency coefficient is determined in the following manner: Among them, Vi is the number of times the user terminal accesses the i-th level number data, and Ci is the preset coefficient corresponding to the i-th level number data.

4. The method for encrypting and protecting telephone numbers and contacts in an ERP system according to claim 1, characterized in that: The step of performing security authentication and authority authentication on the user terminal based on the authentication rules corresponding to the acquired sensitivity level preset includes the steps of: Based on the acquired sensitivity level and the preset authentication rule mapping table, determine the security authentication rule and permission authentication rule corresponding to the preset sensitivity level; During the security authentication and authority authentication process, a multi-factor real-time authentication interval is used to authenticate the user terminal.

5. The method for encrypting and protecting telephone numbers and contacts in an ERP system according to claim 1, characterized in that: When both the security authentication and the permission authentication are passed, a dynamic key pair is generated based on the access process corresponding to the sensitivity level preset and the role attribute of the user end, and the dynamic key pair includes the steps of encrypting the key and decrypting the key, including the steps of: According to the preset access process of the sensitivity level and the role attribute of the user end, the corresponding key generation algorithm is matched from the preset algorithm set; Generate a unique dynamic key pair based on a matching key generation algorithm; The generated dynamic key pair is bound to the identity information of the user terminal and the number access request.

6. A telephone number encryption and contact protection method for an ERP system according to claim 1, characterized in that: The step of sending the decryption key to the user terminal and recording its access information and operation information comprises the steps of: Sending a decryption key with a validity period to the user end; Monitor and record the user's operation information, and trigger the security response mechanism when abnormal operation behavior is detected.

7. A telephone number encryption and contact protection platform for an ERP system, characterized by: include: A sensitivity level acquisition module, used to acquire the sensitivity level of a number access request when receiving a number access request from a user terminal; An authentication module is used to perform security authentication and authority authentication on the user terminal based on the authentication rules corresponding to the acquired sensitivity level preset; A key generation module, used to generate a dynamic key pair based on the access process corresponding to the sensitivity level preset and the role attribute of the user terminal when both the security authentication and the permission authentication are passed, wherein the dynamic key pair includes an encryption key and a decryption key; A dynamic encryption module, used for dynamically encrypting information associated with the number access request based on a generated dynamic encryption key; The information processing module is used to send the decryption key to the user end and record its access information and operation information.

8. The telephone number encryption and contact protection platform for ERP system according to claim 7, characterized in that: The sensitivity level acquisition module includes: A sensitive parameter set acquisition submodule, used to acquire a corresponding sensitive parameter set based on a received number access request and a user's role attributes and historical access data; A sensitivity score determination submodule, used to determine the sensitivity score of the number access request according to the acquired sensitive parameter set; The sensitivity level matching submodule is used to match the corresponding sensitivity level based on the determined sensitivity score.

Images