Information security protection system for smart home

Abstract

The invention discloses an information security protection system for a smart home, and relates to the technical field of smart home information security. A plurality of pieces of privacy data in obtained personal information of a user are segmented through a slicing unit and are divided into a plurality of privacy data segments; each privacy data segment corresponds to a real-time mapping numerical value which is analyzed in real time according to the personal characteristics of the user, and the real-time mapping numerical value is formed by combining a plurality of element numerical values which are sequenced according to a rule, so that a mapping relation formed by the privacy data segments of the user and the real-time mapping numerical values is obtained; according to the method, the mapping relation of the user is uploaded to the fragment mapping table of the manufacturer server by means of the uploading unit, so that only corresponding fragment type privacy data can be stored in the manufacturer server, each piece of data is stored in the server section by section, and the personal privacy cannot be acquired even if the data is leaked.

Description

Technical Field

[0001] The present invention belongs to the technical field of smart home information security, and in particular relates to an information security protection system for smart homes. Background Art

[0002] The patent with publication number CN104426726A discloses a smart home system that protects user privacy and information security. The present invention provides a smart home system. The system includes a smart home network, the Internet, and a dynamic domain name server. The smart home network includes a network device, which is connected to the Internet; a home server, which is connected to the network device, is used to interact with the network device, receive information sent by the smart home terminal, and send a control signal to the smart home terminal to control the operation of the smart home terminal; several smart home terminals are connected to the home server; the dynamic domain name server is connected to the Internet, which is used to receive the dynamic IP address sent by the network device through the Internet, bind the dynamic IP address to the fixed domain name of the smart home network, and perform domain name resolution. The provided smart home system can realize functions such as video surveillance, leisure and entertainment, smart control of home appliances, and home environment monitoring, and can realize customized customization, combination and association; there is no external operation service platform, which can ensure information security.

[0003] However, with regard to the user's personal privacy data, how to provide a good protection for the manufacturer's ability to access the user's privacy, while preventing other personnel from obtaining the corresponding user's privacy data from the manufacturer's server, is a problem. Based on this, a solution is now provided. Summary of the invention

[0004] The present invention aims to solve at least one of the technical problems existing in the prior art.

[0005] To this end, the present invention proposes an information security protection system for smart homes, comprising:

[0006] A slicing unit is used to segment several private data in the obtained user's personal information into several private data segments, each of which corresponds to a real-time mapping value analyzed in real time according to the user's personal characteristics, and the real-time mapping value is composed of several element values ​​arranged in a regular order, so as to obtain a mapping relationship consisting of the user's private data segment and the real-time mapping value;

[0007] The uploading unit uploads the user's mapping relationship to the fragment mapping table of the manufacturer's server. The fragment mapping table includes past mapping values ​​and past privacy data segments. The past mapping values ​​are a series of combined values, generally composed of at least one element value. The past privacy data segments are several segments into which the corresponding privacy data has been divided, which are used for users who have verified their identity to read personal privacy data.

[0008] Furthermore, the slicing unit is also used to process the facial information of the personal information according to the real-time mapping value, retaining only the features of the key element values ​​corresponding to the real-time mapping value of the facial information, and covering or masking the rest in the form of coding, and retaining it as the corresponding calling feature in the slicing unit on the user side, and the calling feature will retain the number of characters of the leading data and the trailing data.

[0009] Furthermore, the personal information consisting of several pieces of privacy data of the user is acquired by the data acquisition unit.

[0010] Furthermore, the data acquisition unit will transmit the privacy data in the personal information to the slicing unit before uploading it, and the data acquisition unit will clear the personal information after the transmission is completed.

[0011] Furthermore, the slicing unit segments the privacy data in a sequential manner into a number of equally divided real-time privacy data segments, and the number of segments is preset by the administrator.

[0012] Furthermore, the specific method of assigning a mapping value to each real-time privacy data segment is as follows:

[0013] Obtain facial information corresponding to the personal information, and then obtain a number of key element values ​​from the facial information, each key element value being used to reflect the value of a certain part of the face;

[0014] Then synchronize the fragment mapping table that has been stored in the database;

[0015] Different key element values ​​extracted from personal information corresponding to facial information are used to form real-time mapping values ​​corresponding to real-time privacy data segments; the specific method is:

[0016] First, a key element value that does not appear at the beginning of the mapped value is selected from the largest to the smallest and is used as the leading value.

[0017] If a key element value is not selected, it will automatically extend to two key element values ​​in sequence. It will be used as the leading value and compared with all other mapped values ​​starting from the first character. If there is no consistent value, the second key element value will still be selected in descending order.

[0018] For the number of private data items, obtain the leading value of the corresponding number of private data items;

[0019] Then, the same privacy data is divided into several real-time privacy data segments, and the corresponding number of leading values ​​is obtained;

[0020] Then select the non-repeated trailing data from the remaining key element values ​​in descending order;

[0021] The front data and the back data are merged to form a real-time mapping value. Each real-time mapping value is combined with the real-time privacy data segments arranged in sequence according to the preceding and following data from large to small to form a new mapping relationship. The slicing unit is used to upload the new mapping relationship to the manufacturer server through the uploading unit. The manufacturer server is used to add the received mapping relationship to the fragment mapping table. The manufacturer server only stores the fragment mapping table consisting of the real-time mapping value and its corresponding privacy data segment.

[0022] Furthermore, the following data is obtained as follows:

[0023] First, the next key element value is selected from the remaining key element values ​​after removing the leading data in a descending order and used as the trailing data. If the number of key element values ​​is less than the number of privacy data segments, a combination method is adopted to select a different key element value to form a combination of two key element values. The first key element value in the trailing data is selected in a descending order. After the selection, the second key element value is selected from the remaining key element values ​​in a descending order. If two are still not enough, a third one is selected until the number of privacy data segments is met. The selected key element values ​​are combined to form new trailing data.

[0024] Furthermore, the slicing unit is also used to process the facial information of the personal information according to the real-time mapping value, retaining only the features of the key element values ​​corresponding to the real-time mapping value of the facial information, and covering or masking the rest in the form of coding, and retaining it as the corresponding calling feature in the slicing unit on the user side, and the calling feature will retain the number of characters of the leading data and the trailing data.

[0025] Furthermore, when the user needs to call his or her own private data, the call will be processed through the local calling unit. After the user's identity is verified multiple times through face verification or other verification methods, the call features stored on the local end are obtained, and the corresponding private data segments are matched to the manufacturer's server based on the call features.

[0026] Furthermore, the specific method of calling the private data segment is:

[0027] The number of characters of the leading data in the call feature is first obtained to determine how many leading data exist, and then the characters are listed in ascending order.

[0028] Select the smallest number of characters, obtain all element values ​​from the call feature, and then select the element values ​​corresponding to the number of characters in descending order, thus obtaining the leading data;

[0029] Then, the corresponding rear data is selected from the remaining element values ​​according to the number of characters in the order from largest to smallest, and the first rear data selected is combined with the first front data selected first. Then, the rear data corresponding to the number of privacy data segments are selected according to the number of times and combined with the front data in sequence, and the real-time mapping value of each privacy data segment of the first privacy data is obtained. The privacy data segment corresponding to the real-time mapping value in the corresponding segment mapping table is obtained, and they are combined to restore into one privacy data;

[0030] Then restore the remaining private data in sequence.

[0031] Compared with the prior art, the present invention has the following beneficial effects:

[0032] The present application segments the obtained user's personal information into several privacy data segments through a slicing unit. Each privacy data segment corresponds to a real-time mapping value analyzed in real time according to the user's personal characteristics. The real-time mapping value is composed of several element values ​​arranged in a regular order, thereby obtaining a mapping relationship consisting of the user's privacy data segment and the real-time mapping value.

[0033] The user's mapping relationship is uploaded to the fragment mapping table of the manufacturer's server with the help of the uploading unit, so that the manufacturer's server can only store the corresponding fragment-type privacy data. In this way, each data is stored in the server in segments, and even if it is leaked, personal privacy will not be obtained; the present invention is simple, effective, and easy to use. BRIEF DESCRIPTION OF THE DRAWINGS

[0034] Figure 1 is a system block diagram of Embodiment 1 of the present invention;

[0035] Figure 2 This is a system block diagram of Embodiment 2 of the present invention. DETAILED DESCRIPTION

[0036] The technical solution of the present invention will be clearly and completely described below in conjunction with the embodiments. Obviously, the described embodiments are only part of the embodiments of the present invention, rather than all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0037] See also Figure 1 The present application provides an information security protection system for smart home, as the first embodiment of the present application, which specifically:

[0038] It includes a data acquisition unit, which is used to acquire the personal information stored by the user in the smart home. The personal information includes a number of private data. Each private data can refer to any of identity information, face or other private information, including face of video authentication and other content. Generally, all the content involving user privacy is counted here;

[0039] The data acquisition unit will then transfer the private data in the personal information to the slicing unit before uploading it. After the transmission is completed, the data acquisition unit will clear the personal information. After that, the slicing unit will process the data locally. The specific processing method is as follows:

[0040] Select any personal information, any private data from the personal information, and split it into several equal real-time private data segments. The number of segments is preset by the administrator.

[0041] Get several real-time privacy data segments that are split sequentially, and assign a mapping value to each real-time privacy data segment. The specific assignment method is as follows:

[0042] After obtaining the facial information corresponding to the personal information, the facial information is analyzed to obtain the key element values ​​of the face. The key element values ​​include the longest value of the left eye, the longest value of the right eye, the longest value of the nose, the distance between the ears and other element values ​​set by the administrator. These will form an element table. These elements can be uniquely obtained from the picture. The personal information is collected in the following way:

[0043] Obtain the length value represented by a single pixel when the corresponding face information is collected, then obtain the pixel points occupied by any element value in the element table, and then convert it into a value to obtain the corresponding element value;

[0044] Then synchronize the stored fragment mapping table in the database. The fragment mapping table includes past mapping values ​​and past private data segments. Past mapping values ​​are a series of values ​​formed by combinations, generally composed of at least one element value. Past private data segments are the corresponding private data divided into several segments.

[0045] Different key element values ​​extracted from the facial information corresponding to the personal information are used to form real-time mapping values ​​corresponding to the real-time privacy data segment; the specific method is:

[0046] First, a key element value that does not appear at the beginning of the mapped value is selected from the largest to the smallest and is used as the leading value.

[0047] If a key element value is not selected, it will automatically extend to two key element values ​​in sequence. It will be used as the leading value and compared with all other mapped values ​​starting from the first character. If there is no consistent value, the second key element value will still be selected from large to small. For example, if there is a mapped value 5655789420, if it is a key element value, it cannot be 56. If it is two key element values ​​in any order, the combined value cannot be 5655.

[0048] Here, we need to obtain the number of private data items. If there are any private data items, we need to obtain the leading value of the corresponding number of private data items.

[0049] Then, for the same privacy data divided into several real-time privacy data segments, obtain the corresponding number of front values, and then select the next key element value from the remaining key element values ​​in a descending order, and use it as the back data. If the number of key element values ​​is less than the number of privacy data segments, a combination method is adopted to select a different key element value, and the combination of two key element values ​​is formed. The first key element value in the back data is selected in a descending order, and after the selection, the second key element value is selected from the remaining key element values ​​in a descending order. If two are still not enough, the third one is selected until the number of privacy data segments is met, and the selected key element values ​​are combined to form new back data;

[0050] The front data and the back data are merged to form a real-time mapping value. Each real-time mapping value is combined with the real-time privacy data segments arranged in order according to the data before and after it from large to small to form a new mapping relationship. The slicing unit is used to upload the new mapping relationship to the manufacturer server through the uploading unit. The manufacturer server is used to add the received mapping relationship to the segment mapping table. The manufacturer server only stores the segment mapping table consisting of the real-time mapping value and its corresponding privacy data segment.

[0051] The slicing unit is also used to process the facial information of the personal information according to the real-time mapping value, retaining only the features of the key element values ​​corresponding to the real-time mapping value of the facial information, covering or masking the rest in the form of coding, and retaining it as the corresponding call feature in the slicing unit of the user end. The call feature will retain the number of characters of the leading data and the trailing data. For example, if there are five private data, there will be the number of characters of the leading data and the trailing data corresponding to the five private data;

[0052] As the second embodiment of the present application, this embodiment is implemented on the basis of the first embodiment. The difference between this embodiment and the first embodiment is that when the user needs to call his own private data, the call processing will be performed through the local calling unit. The specific method of the call processing is:

[0053] First, after the user's identity is verified by face verification or other verification methods, the call features stored on the local end are obtained. According to the call features, the manufacturer's server is matched with the corresponding privacy data segment. The call method is also relatively simple, that is, the number of characters in the leading data in the call features is obtained first to see how many leading data exist, and then the characters are listed in ascending order;

[0054] Select the smallest number of characters, obtain all element values ​​from the call feature, and then select the element values ​​corresponding to the number of characters in descending order, thus obtaining the leading data;

[0055] Then, the corresponding rear data is selected from the remaining element values ​​according to the number of characters in the order from largest to smallest, and the first rear data selected is combined with the first front data selected first. Then, the rear data corresponding to the number of privacy data segments are selected according to the number of times and combined with the front data in sequence, and the real-time mapping value of each privacy data segment of the first privacy data is obtained. The privacy data segment corresponding to the real-time mapping value in the corresponding segment mapping table is obtained, and they are combined to restore into one privacy data;

[0056] Then restore the remaining private data in sequence.

[0057] Some of the data in the above formula are calculated by removing the dimensions and taking their numerical values. The formula is a formula that is closest to the actual situation obtained by software simulation of a large amount of collected data; the preset parameters and preset thresholds in the formula are set by technical personnel in this field according to actual conditions or obtained through simulation of a large amount of data.

[0058] The above embodiments are only used to illustrate the technical method of the present invention rather than to limit it. Although the present invention has been described in detail with reference to the preferred embodiments, those skilled in the art should understand that the technical method of the present invention may be modified or replaced by equivalents without departing from the spirit and scope of the technical method of the present invention.

Claims

1. An information security protection system for smart home, characterized in that: include: A slicing unit, which is used to segment a plurality of private data in the acquired user personal information into a plurality of private data segments, each of which corresponds to a real-time mapping value analyzed in real time according to the user's personal characteristics; The uploading unit is used to upload the user's private data segment and real-time mapping value to the segment mapping table of the manufacturer's server. The segment mapping table includes past mapping values ​​and past private data segments, which is used for users who have verified their identity to read their personal private data.

2. The smart home information security protection system according to claim 1, characterized in that: The real-time mapping value is composed of a number of element values ​​arranged in a regular order, including a mapping relationship between a user privacy data segment and a real-time mapping value; the past mapping value is a string of combined values, and the past privacy data segment is a number of segments into which the corresponding privacy data has been divided.

3. The smart home information security protection system according to claim 1, characterized in that: The personal information consisting of several pieces of privacy data of the user is acquired by the data acquisition unit.

4. The smart home information security protection system according to claim 3, characterized in that: The data acquisition unit transmits the privacy data in the personal information to the slicing unit before uploading the privacy data, and the data acquisition unit clears the personal information after the uploading is completed.

5. The smart home information security protection system according to claim 1, characterized in that: The slicing unit segments the privacy data in the following manner: splitting the data into a number of equally divided real-time privacy data segments in sequence, and the number of segments is preset by the administrator.

6. The smart home information security protection system according to claim 1, characterized in that: The slicing unit assigns a real-time mapping value to each real-time privacy data segment in the following manner: Obtaining facial information corresponding to the personal information, and obtaining a number of key element values ​​from the facial information, each key element value being used to reflect the value of a certain part of the face; Synchronize the fragment mapping table that has been stored in the database; Different key element values ​​extracted from the facial information corresponding to the personal information are used to form real-time mapping values ​​corresponding to the real-time privacy data segment; the specific method is: Select a key element value that does not appear at the beginning of the mapped value from largest to smallest and use it as the leading value; If a key element value is not selected, it will automatically extend to two key element values ​​in sequence. The first value will be compared with all other mapped values ​​starting from the first character. If there is no consistent value, the second key element value will be selected in descending order. For the number of private data items, obtain the leading value of the corresponding number of private data items; The same privacy data is divided into several real-time privacy data segments, and the corresponding number of leading values ​​is obtained; Select non-repeated trailing data from the remaining key element values ​​in descending order; The front data and the back data are merged to form a real-time mapping value. Each real-time mapping value is combined with the real-time privacy data segments arranged in order from large to small according to the front and back data to form a new mapping relationship. The slicing unit is used to upload the new mapping relationship to the manufacturer server through the uploading unit, and the manufacturer server is used to add the received mapping relationship to the fragment mapping table. The manufacturer server only stores the fragment mapping table consisting of the real-time mapping value and its corresponding privacy data segment.

7. The smart home information security protection system according to claim 6, characterized in that: The following data is obtained as follows: Select the next key element value from the remaining key element values ​​after removing the leading data in a descending order and use it as the trailing data; If the number of key factor values ​​is less than the number of privacy data segments, a combination method is adopted to select a different key factor value, and the result is composed of two key factor values. The first key factor value in the posterior data is selected in descending order, and then the second key factor value is selected from the remaining key factor values ​​in descending order. If two are still not enough, the third one is selected until the number of privacy data segments is met. The selected key factor values ​​are combined to form new posterior data.

8. The smart home information security protection system according to claim 1, characterized in that: The slicing unit is also used to process the facial information of the personal information according to the real-time mapping value, retaining only the features of the key element values ​​corresponding to the real-time mapping value of the facial information, covering or masking the rest in the form of coding, and retaining it as the corresponding calling feature in the slicing unit on the user side, and the calling feature will retain the number of characters of the leading data and the trailing data.

9. The smart home information security protection system according to claim 1, characterized in that: When a user needs to call up his or her own private data, the call will be processed through the local calling unit. After multiple verifications of the user's identity through face verification or other verification methods, the call features stored on the local side will be obtained, and the corresponding private data segments will be matched to the manufacturer's server based on the call features.

10. The smart home information security protection system according to claim 9, characterized in that: The specific method of calling the privacy data segment is: The number of characters of the leading data in the call feature is first obtained to determine how many leading data exist, and then the characters are listed in ascending order. Select the smallest number of characters, obtain all element values ​​from the call feature, and then select the element values ​​corresponding to the number of characters in descending order, thus obtaining the leading data; Then, the corresponding rear data is selected from the remaining element values ​​according to the number of characters in the order from largest to smallest, and the first rear data selected is combined with the first front data selected first. Then, the rear data corresponding to the number of privacy data segments are selected according to the number of times and combined with the front data in sequence, and the real-time mapping value of each privacy data segment of the first privacy data is obtained. The privacy data segment corresponding to the real-time mapping value in the corresponding segment mapping table is obtained, and they are combined to restore into one privacy data; Then restore the remaining private data in sequence.

Images