Data acquisition method and system based on dynamic encryption technology

Abstract

The invention provides a data acquisition method and system based on a dynamic encryption technology, and the system comprises a system acquisition module, a dynamic encryption module, a data transmission module, a data receiving module, a decryption verification module, and a safety monitoring module. The data acquisition method based on the dynamic encryption technology comprises the following steps that S1, a terminal initiates a data query request; s2, acquiring service source data from the data source; s3, dynamically encrypting and transmitting the data; s4, carrying out decryption processing on the data; s5, carrying out real-time monitoring; according to the method provided by the invention, by dynamically modifying the encryption key and the data content, the security of the data in the storage and transmission process is improved, and the data is effectively prevented from being illegally acquired or cracked; the data acquisition module can quickly and accurately read the data from the data source, and the data is encrypted through the dynamic encryption module, so that the data acquisition efficiency is improved.

Description

Technical Field

[0001] The present invention relates to the field of computer technology, and in particular to a data acquisition method and system based on dynamic encryption technology. Background Art

[0002] With the rapid development of information technology, data has become a key resource to promote the development of various industries. Especially in the context of digital transformation and big data applications, the storage, transmission and use of data have penetrated into all areas of enterprises and society; however, the resulting data security issues are becoming increasingly serious, especially the frequent occurrence of data leakage incidents involving sensitive data and personal privacy, which has caused huge economic losses and credibility crises to enterprises and users.

[0003] At present, many enterprises still rely on traditional security protection mechanisms, such as firewalls, encryption technology, etc., during data transmission and processing. However, these traditional technologies often have certain security risks, especially when the data transmission link is complex and involves multiple systems, traditional security protection often cannot fully cover potential security risks. Summary of the invention

[0004] The purpose of the present invention is to solve the shortcomings of the prior art and to propose a data acquisition method and system based on dynamic encryption technology.

[0005] To achieve the above object, the present invention adopts the following technical solutions: A data acquisition system based on dynamic encryption technology, including a system acquisition module, a dynamic encryption module, a data transmission module, a data receiving module, a decryption verification module, and a security monitoring module; The system acquisition module is used to acquire business source data corresponding to the data type identifier from the data source, and pass the acquired business source data to the dynamic encryption module; The dynamic encryption module is used to receive business source data and dynamically encrypt the data; The data transmission module is used to send the encrypted data to the data receiving module; The data receiving module is used to receive business source data and call the decryption verification module to decrypt the encrypted data; The security monitoring module is used to detect abnormal situations in the process of data acquisition, encryption, decryption, etc. in real time.

[0006] The present invention also proposes a data acquisition method based on dynamic encryption technology, comprising the following steps: S1: The terminal initiates a data query request; The terminal device initiates a data query request; The terminal refers to an intelligent device capable of network communication, including smart phones, computers, etc. The data query request contains a user identifier, an authority identifier, and a data type identifier; the user identifier is an identifier used to confirm the identity of the requester. The identification confirms whether the requester has the right to access the system and is unique; The permission identifier is used to identify the data level or range that the user can access. The system determines whether the user has the right to access data of a specific level based on the permission identifier. The data type identifier is used to indicate the type of data that the user needs to access, and the data type includes insurance policy underwriting data, payment and collection data, insurance type data, etc.; The insurance policy underwriting data includes the policy number, effective date, insurance period, payment period, etc.; The payment and collection data include receipt number, charging date, charging type, charging method, charging amount, etc.; The insurance type data includes insurance type code, insurance type name, sales start date, sales stop date, insurance type, etc.

[0007] S2: Obtain business source data from the data source; The system acquisition module acquires the data query request sent by the terminal device, determines the type of data requested by the user according to the data type identifier in the data query request, and acquires the corresponding business source data according to the data type; Passing data to a dynamic encryption module; the data includes business source data, user identification, authority identification, and data type identification; Furthermore, the business source data may come from different business systems. When the business source data may come from different business systems, the system acquisition module acquires corresponding data from the corresponding business systems respectively; For example, if the user requests claim data, the system acquisition module acquires the corresponding business source data from the claim system; the claim data includes claim serial number, policy number, claim liability, claim amount, claim status, etc.; Furthermore, different user identifiers and authority identifiers in the system are matched with different data display templates, and the data display templates are pre-configured with necessary data fields for display; different data display templates display different data fields and display methods; After the system acquisition module queries the business source data, it matches the corresponding data display template according to the user ID and the authority ID; the data display template displays the corresponding business source data; S3: Dynamically encrypt and transmit data; The following sub-steps are included: S31: Dynamically encrypt data; The dynamic encryption module receives the business source data, user identification, authority identification, data type identification, and encrypts the received business source data; Specifically, the dynamic encryption module generates and updates the encryption key in real time according to the preset algorithm, rules and the user identification and authority identification in the acquired business source data; and encrypts the business source data in real time through the encryption key; Furthermore, the encryption key generated by the dynamic encryption module each time is unique.

[0008] S32: The encrypted data is transmitted to the data receiving module; After the data encryption is completed, the terminal user performs identity authentication through an identity authentication mechanism, which includes a user name, password, etc.; The terminal user who has successfully authenticated his / her identity initiates a data request and transmits the data to the data receiving module in real time; By authenticating the user and transmitting the encrypted data to the data receiving module, it is possible to prevent the data from being stolen or tampered with by hackers during the transmission process.

[0009] S4: decrypt the data; The data receiving module receives the data and calls the decryption verification module to decrypt the encrypted data; Specifically, the decryption verification module uses the same algorithm and rules as the dynamic encryption module to generate a corresponding decryption key, and uses the decryption key to decrypt the encrypted data; the decrypted data is restored to the original data and can be viewed and processed normally.

[0010] S5: Conduct real-time monitoring; The security monitoring module monitors abnormal situations in the process of data acquisition, encryption, and decryption in real time; once abnormal behavior is found, such as access by unauthorized users, abnormal data tampering, etc., the alarm mechanism is immediately triggered, and measures such as terminating unauthorized user access and restoring tampered data according to system logs are taken to protect data security.

[0011] Compared with the prior art, the present invention has the following beneficial effects: The data acquisition method based on dynamic encryption technology proposed in the present invention increases the security of data in the storage and transmission process by dynamically modifying the encryption key and data content, and effectively prevents the data from being illegally acquired or cracked; the data acquisition module can quickly and accurately read data from the data source, and encrypt the data through the dynamic encryption module, thereby improving the efficiency of data acquisition; the security monitoring module monitors the abnormal situation in the data acquisition process in real time, ensures the integrity and authenticity of the data, and prevents the data from being tampered with or damaged. BRIEF DESCRIPTION OF THE DRAWINGS

[0012] Figure 1The present invention is a module flow chart of a data acquisition method based on dynamic encryption technology. DETAILED DESCRIPTION

[0013] In order to provide a further understanding of the purpose, structure, features, and functions of the present invention, the following detailed description is given in conjunction with the embodiments.

[0014] like Figure 1 As shown, a data acquisition system based on dynamic encryption technology includes a system acquisition module, a dynamic encryption module, a data transmission module, a data receiving module, a decryption verification module, and a security monitoring module; The system acquisition module is used to acquire business source data corresponding to the data type identifier from the data source, and pass the acquired business source data to the dynamic encryption module; The dynamic encryption module is used to receive business source data and dynamically encrypt the data; The data transmission module is used to send the encrypted data to the data receiving module; The data receiving module is used to receive business source data and call the decryption verification module to decrypt the encrypted data; The security monitoring module is used to detect abnormal situations in the process of data acquisition, encryption, decryption, etc. in real time.

[0015] The data acquisition system based on dynamic encryption technology is a C / S architecture, that is, a client-server architecture, where the client is the user device, the server is used to store data and process client requests, and the user accesses the system through a browser; Furthermore, the system can be a network platform shared by multiple users, and when users log into the system, they use a pre-registered username and password to identify themselves.

[0016] The present invention also proposes a data acquisition method based on dynamic encryption technology, comprising the following steps: S1: The terminal initiates a data query request; The terminal device initiates a data query request; The terminal refers to an intelligent device capable of network communication, including smart phones, computers, etc.; The data query request contains a user ID, an authority ID, and a data type ID; the user ID is an identifier used to confirm the identity of the requester. The identification confirms whether the requester has the right to access the system and is unique; The permission identifier is used to identify the data level or range that the user can access. The system determines whether the user has the right to access data of a specific level based on the permission identifier. The data type identifier is used to indicate the type of data that the user needs to access, and the data type includes insurance policy underwriting data, payment and collection data, insurance type data, etc.; The insurance policy underwriting data includes the policy number, effective date, insurance period, payment period, etc.; The payment and collection data include receipt number, charging date, charging type, charging method, charging amount, etc.; The insurance type data includes insurance type code, insurance type name, sales start date, sales stop date, insurance type, etc.

[0017] S2: Obtain business source data from the data source; The system acquisition module acquires the data query request sent by the terminal device, determines the type of data requested by the user according to the data type identifier in the data query request, and acquires the corresponding business source data according to the data type; Passing data to a dynamic encryption module; the data includes business source data, user identification, authority identification, and data type identification; Furthermore, the business source data may come from different business systems. When the business source data may come from different business systems, the system acquisition module acquires corresponding data from the corresponding business systems respectively; For example, if the user requests claim data, the system acquisition module acquires the corresponding business source data from the claim system; the claim data includes claim serial number, policy number, claim liability, claim amount, claim status, etc.; Furthermore, different user identifiers and authority identifiers in the system are matched with different data display templates, and the data display templates are pre-configured with necessary data fields for display; different data display templates display different data fields and display methods; After the system acquisition module queries the business source data, it matches the corresponding data display template according to the user ID and the authority ID; the data display template displays the corresponding business source data; Pre-configure necessary data fields through data display templates, display corresponding data according to different user permissions, ensure the security of sensitive data, and do not require users to manually filter or adjust display content, thus reducing the user's operating burden and improving efficiency. Displaying the fields that need to be displayed as specified in the template helps ensure data integrity and consistency; it helps identify potential errors or omissions. If the template requires a field to be filled in, but the value of the field is missing in the business source data, the system can promptly prompt the user or administrator.

[0018] S3: Dynamically encrypt and transmit data; The following sub-steps are included: S31: Dynamically encrypt data; The dynamic encryption module receives the business source data, user identification, authority identification, data type identification, and encrypts the received business source data; Specifically, the dynamic encryption module generates and updates the encryption key in real time according to the preset algorithm, rules and the user identification and authority identification in the acquired business source data; and encrypts the business source data in real time through the encryption key; Furthermore, the encryption key generated by the dynamic encryption module each time is unique.

[0019] Through encryption, data is protected from man-in-the-middle attacks (MITM attacks) and other types of network attacks during transmission, thus preventing data leakage; S32: The encrypted data is transmitted to the data receiving module; After the data encryption is completed, the terminal user performs identity authentication through an identity authentication mechanism, which includes a user name, password, etc.; The terminal user who has successfully authenticated his / her identity initiates a data request and transmits the data to the data receiving module in real time; By authenticating the user and transmitting the encrypted data to the data receiving module, it is possible to prevent the data from being stolen or tampered with by hackers during the transmission process.

[0020] S4: decrypt the data; The data receiving module receives the data and calls the decryption verification module to decrypt the encrypted data; Specifically, the decryption verification module uses the same algorithm and rules as the dynamic encryption module to generate a corresponding decryption key, and uses the decryption key to decrypt the encrypted data; the decrypted data is restored to the original data and can be viewed and processed normally.

[0021] S5: Conduct real-time monitoring; The security monitoring module monitors abnormal situations in the process of data acquisition, encryption, and decryption in real time; once abnormal behavior is found, such as access by unauthorized users, abnormal data tampering, etc., the alarm mechanism is immediately triggered, and measures such as terminating unauthorized user access and restoring tampered data according to system logs are taken to protect data security.

[0022] The present invention has been described by the above-mentioned relevant embodiments, however, the above-mentioned embodiments are only examples for implementing the present invention. It must be pointed out that the disclosed embodiments do not limit the scope of the present invention. On the contrary, changes and modifications made without departing from the spirit and scope of the present invention are all within the scope of patent protection of the present invention.

Claims

1. A data acquisition method based on dynamic encryption technology, characterized in that: The following steps are involved: S1: The terminal initiates a data query request; The terminal device initiates a data query request; The terminal refers to an intelligent device capable of network communication, and the data query request includes a user identifier, an authority identifier, and a data type identifier; S2: Obtain business source data from the data source; The system acquisition module acquires the data query request sent by the terminal device, determines the type of data requested by the user according to the data type identifier in the data query request, and acquires the corresponding business source data according to the data type; Passing data to a dynamic encryption module; the data includes business source data, user identification, authority identification, and data type identification; S3: Dynamically encrypt and transmit data; The following sub-steps are included: S31: Dynamically encrypt data; The dynamic encryption module receives the business source data, user identification, authority identification, data type identification, and encrypts the received business source data; S32: The encrypted data is transmitted to the data receiving module; S4: decrypt the data; The data receiving module receives the data and calls the decryption verification module to decrypt the encrypted data; S5: Conduct real-time monitoring; The security monitoring module monitors abnormal situations in the process of data acquisition, encryption, decryption and transmission in real time; once abnormal behavior is found, the alarm mechanism is immediately triggered and corresponding security measures are taken to protect data security.

2. The data acquisition method based on dynamic encryption technology as claimed in claim 1, characterized in that: The user ID is an identifier used to confirm the identity of the requester. The identification confirms whether the requester has the right to access the system and is unique; The permission identifier is used to identify the data level or range that the user can access. The system determines whether the user has the right to access data of a specific level based on the permission identifier. The data type identifier is used to indicate the type of data that the user needs to access.

3. The data acquisition method based on dynamic encryption technology as claimed in claim 1, characterized in that: In step S2, when the business source data may come from different business systems, the system acquisition module obtains the corresponding data from the corresponding business systems respectively; Different user IDs and permission IDs in the system are matched with different data display templates. The data display templates are pre-configured with necessary data fields for display. Different data display templates display different data fields and display methods. After the system acquisition module queries the business source data, it matches the corresponding data display template according to the user ID and permission ID; The data display template displays the corresponding business source data.

4. The data acquisition method based on dynamic encryption technology as claimed in claim 1, characterized in that: In step S31, the dynamic encryption module generates and updates the encryption key in real time according to the preset algorithm, rules and the user identification and authority identification in the acquired business source data; and encrypts the business source data in real time using the encryption key; Furthermore, the encryption key generated by the dynamic encryption module each time is unique.

5. The data acquisition method based on dynamic encryption technology as claimed in claim 1, characterized in that: After the data encryption is completed, the terminal user is authenticated through the identity authentication mechanism. The terminal user who successfully authenticates the identity initiates a data request and transmits the data to the data receiving module in real time.

6. The data acquisition method based on dynamic encryption technology as claimed in claim 1, characterized in that: In step S4, the decryption verification module uses the same algorithm and rules as the dynamic encryption module to generate a corresponding decryption key, and uses the decryption key to decrypt the encrypted data; the decrypted data is restored to the original data and can be viewed and processed normally.

7. A data acquisition system based on dynamic encryption technology, used to implement the data acquisition method based on dynamic encryption technology according to any one of claims 1 to 6, comprising a system acquisition module, a dynamic encryption module, a data transmission module, a data receiving module, a decryption verification module, and a security monitoring module; The system acquisition module is used to acquire business source data corresponding to the data type identifier from the data source, and pass the acquired business source data to the dynamic encryption module; The dynamic encryption module is used to receive business source data and dynamically encrypt the data; The data transmission module is used to send the encrypted data to the data receiving module; The data receiving module is used to receive business source data and call the decryption verification module to decrypt the encrypted data; The security monitoring module is used to detect abnormal situations in the process of data acquisition, encryption, decryption and transmission in real time.

Images