Electronic information one-way transmission method and system

Abstract

The invention is suitable for the technical field of information transmission, and provides an electronic information one-way transmission method and system, and the method comprises the steps: obtaining enterprise information, and obtaining one-way gateway information; distinguishing dimensions of the common information and the core information are obtained, the distinguishing dimensions comprise data sensitivity, service influences, standards for obtaining the distinguishing dimensions, comparison of a weighted total score and a threshold value, and if it is judged that the threshold value is exceeded, the common information and the core information are divided into the core information; the method comprises the following steps: acquiring a one-way transmission priority evaluation standard of core data, performing priority division on the core data according to the priority evaluation standard, acquiring transmission rates of different priorities, and transmitting the core data according to the divided priorities; the access permission is acquired according to the priority, the access permission is sent to the user terminal, and the access record of the user terminal is acquired. The problems that in the existing information one-way transmission process, core information cannot be screened out in a multi-dimensional mode, meanwhile, attention to common information is insufficient, and classification of the core information is indefinite are solved.

Description

Technical Field

[0001] The present invention belongs to the technical field of information transmission, and in particular relates to a method and system for one-way transmission of electronic information. Background Art

[0002] In modern information-based and digitalized enterprise management, the security and efficient management of core data have become the top priority of enterprise operations. Core data usually includes real-time order information, financial statements, production monitoring data, and historical logs. These data not only directly affect the daily operations of the enterprise, but also have important significance for strategic decision-making and customer trust. However, with the continuous growth of data scale and the increasing security requirements, enterprises are facing challenges.

[0003] In information-based enterprise management, the security and efficient management of core data are crucial, including real-time orders, financial statements, production monitoring data, and historical logs. The security threats and complex permission management of these data have exposed enterprises to challenges such as data leakage, access abuse, and slow disaster recovery. Traditional access permission management and backup technologies have obvious deficiencies in granular control, dynamic adjustment, and real-time auditing, and are unable to meet the requirements of modern enterprises for data security and efficient operations.

[0004] However, the existing one-way information transmission process has the problem of being unable to filter out core information in multiple dimensions and unclear classification of core information. Summary of the invention

[0005] The purpose of the embodiment of the present invention is to provide a method for one-way transmission of electronic information, aiming to solve the problem raised in the third part of the background technology.

[0006] The embodiment of the present invention is implemented as follows: a method for one-way transmission of electronic information, the method comprising: Acquire enterprise information, the enterprise information includes general information and core information, and acquire unidirectional gateway information, the unidirectional gateway adopts a port isolation mode; Obtaining the differentiation dimensions between common information and core information, wherein the differentiation dimensions include data sensitivity and business impact, obtaining the standard for differentiation dimensions, comparing the weighted total score with the threshold, and if it is determined that the weighted total score of the common information exceeds the threshold, the common information is classified as core information; Obtain the priority assessment criteria for one-way transmission of core data, prioritize the core data according to the priority assessment criteria, obtain the transmission rates of different priorities, and transmit the core data according to the prioritized priorities; Obtain access rights according to priority, send access rights to user terminals, and obtain user terminal access records.

[0007] Preferably, the step of obtaining the distinguishing dimensions of common information and core information, wherein the distinguishing dimensions include data sensitivity and business impact, obtaining the standard of the distinguishing dimensions, comparing the weighted total score with the threshold, and if it is determined that the weighted total score of the common information exceeds the threshold, classifying the common information as core information, specifically includes: Obtain the dimensions for distinguishing common information from core information, obtain the standards for distinguishing the dimensions, and divide the common information and core information in the enterprise information according to the standards; Obtaining a weighted score of information determined to be common, wherein the weighted score is the sum of the product of the weight corresponding to the distinction criteria of the common information and the score corresponding to the common information; A first threshold is obtained. The weighted score is used to measure the importance of common information. A weighted total score is obtained by summing up the weighted scores. The weighted total score is compared with the first threshold. If the weighted total score exceeds the first threshold, the common information is classified as core information.

[0008] Preferably, the steps of obtaining a priority assessment standard for unidirectional transmission of core data, prioritizing the core data according to the priority assessment standard, obtaining transmission rates of different priorities, and transmitting the core data according to the prioritized priorities specifically include: Obtaining the priority assessment criteria for one-way transmission of core data, the assessment criteria being a comprehensive score of data sensitivity and business impact; Prioritizing the core data according to a priority assessment standard, wherein the priority assessment standard includes low priority, medium priority and high priority; Obtain the transmission rates of different priorities and transmit the core data according to the divided priorities.

[0009] Preferably, the steps of obtaining access rights according to priority, sending access rights to a user terminal, and obtaining access records of the user terminal specifically include: Obtain access rights based on priority, and determine the amount of core data access based on the access rights; Send access rights to the user terminal and obtain the user terminal access record; Back up access records and core data.

[0010] Preferably, the sum of the weighted scores is 100%.

[0011] Another object of an embodiment of the present invention is to provide a one-way transmission system for electronic information, the system comprising: An enterprise information module is used to obtain enterprise information, including general information and core information, and to obtain unidirectional gateway information, wherein the unidirectional gateway adopts a port isolation mode; A dimension module obtains the dimensions for distinguishing common information from core information, wherein the distinguishing dimensions include data sensitivity and business impact, obtains the standards for distinguishing the dimensions, compares the weighted total score with the threshold, and if it is determined that the weighted total score of the common information exceeds the threshold, the common information is classified as core information; The priority module obtains the priority assessment standard for one-way transmission of core data, prioritizes the core data according to the priority assessment standard, obtains the transmission rates of different priorities, and transmits the core data according to the prioritized priorities; The permission module obtains access rights according to priority, sends access rights to user terminals, and obtains user terminal access records.

[0012] Preferably, the dimension module includes: Dimension unit, obtains the distinguishing dimensions of general information and core information, obtains the distinguishing criteria of dimensions, and divides the general information and core information in the enterprise information according to the distinguishing criteria; A weighting unit, which obtains a weighted score of information determined as ordinary information, wherein the weighted score is the sum of the product of the weight corresponding to the distinction standard of ordinary information and the score corresponding to the ordinary information; The core unit obtains the first threshold value. The weighted score is used to measure the importance of the common information. The weighted total score is obtained by summing the weighted scores. The weighted total score is compared with the first threshold value. If the weighted total score exceeds the first threshold value, the common information is classified as the core information.

[0013] Preferably, the priority module includes: A scoring unit, which obtains a priority assessment standard for one-way transmission of core data, wherein the assessment standard is a comprehensive score of data sensitivity and business impact; A priority unit, which prioritizes the core data according to a priority assessment standard, wherein the priority assessment standard includes a low priority, a medium priority, and a high priority; The transmission unit obtains the transmission rates of different priorities and transmits the core data according to the divided priorities.

[0014] Preferably, the authority module includes: The permission unit obtains access rights according to priority and determines the amount of access data to the core data based on the access rights; An access unit sends access rights to a user terminal and obtains access records of the user terminal; The backup unit backs up access records and core data.

[0015] Preferably, the sum of the weighted scores is 100%.

[0016] An embodiment of the present invention provides a one-way transmission method for electronic information, which includes obtaining enterprise information, the enterprise information including general information and core information, obtaining one-way gateway information, obtaining a distinguishing dimension between general information and core information, obtaining a standard for distinguishing the dimension, dividing general information and core information in the enterprise information according to the distinguishing standard, obtaining a weighted score determined as general information, the weighted score being a weight corresponding to the distinguishing standard for general information, obtaining a first threshold, the weighted score being used to measure the importance of general information, obtaining a weighted total score by summing the weighted scores, comparing the weighted total score with the first threshold, and if the weighted total score exceeds the first threshold, classifying the general information into core information, obtaining a priority assessment standard for one-way transmission of core data, and assessing The standard is a comprehensive score for data sensitivity and business impact, and a priority assessment standard is obtained. The core data is prioritized according to the priority assessment standard, and the priority assessment standard includes low priority, medium priority and high priority. The transmission rates of different priorities are obtained, and the core data is transmitted according to the divided priorities. Access rights are obtained according to the priority, and the amount of access data to the core data is determined according to the access rights. The access rights are sent to the user terminal, the user terminal access records are obtained, and the access records and core data are backed up. This solves the problems of the inability to screen out core information in multiple dimensions during the existing one-way information transmission process, insufficient attention to ordinary information, and unclear classification of core information. BRIEF DESCRIPTION OF THE DRAWINGS

[0017] Figure 1 A flowchart of a one-way transmission method of electronic information provided by an embodiment of the present invention; Figure 2 A flowchart of the steps of obtaining the distinguishing dimensions of general information and core information, obtaining the standard for distinguishing the dimensions, and comparing the weighted total score with a threshold value provided in an embodiment of the present invention; Figure 3 A flowchart of the steps of prioritizing core data according to a priority evaluation standard and transmitting the core data according to the prioritized priorities provided by an embodiment of the present invention; Figure 4 A flowchart of the steps of obtaining access rights according to priority and obtaining user terminal access records provided in an embodiment of the present invention; Figure 5 An architecture diagram of a one-way electronic information transmission system provided by an embodiment of the present invention; Figure 6 An architectural diagram of a dimension module provided in an embodiment of the present invention; Figure 7 An architectural diagram of a priority module provided in an embodiment of the present invention; Figure 8 An architectural diagram of a permission module provided in an embodiment of the present invention. DETAILED DESCRIPTION

[0018] In order to make the purpose, technical solution and advantages of the present invention more clearly understood, the present invention is further described in detail below in conjunction with the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are only used to explain the present invention and are not intended to limit the present invention.

[0019] It is understood that the terms "first", "second", etc. used in this application may be used herein to describe various elements, but unless otherwise specified, these elements are not limited by these terms. These terms are only used to distinguish a first element from another element. For example, without departing from the scope of this application, a first xx script may be referred to as a second xx script, and similarly, a second xx script may be referred to as a first xx script.

[0020] like Figure 1 As shown, a method for one-way transmission of electronic information provided by an embodiment of the present invention includes: S100, obtaining enterprise information, the enterprise information including general information and core information, obtaining unidirectional gateway information, the unidirectional gateway adopting a port isolation mode.

[0021] In this step, enterprise information is obtained. Enterprise information includes general information and core information. General information refers to information that has no significant sensitivity or business impact on the operation of the enterprise. This type of information is usually used for daily operations and non-sensitive communications, and its leakage or loss will not cause serious consequences to the enterprise. General information includes the company name, address and contact information; Core information is information that is critical to the operation, competitiveness or legal compliance of the enterprise. This type of data requires special attention to ensure high security during transmission and storage. Core information includes annual income statements, key financials, corporate strategic plans and future investment plans; Get the information of unidirectional gateway. The unidirectional gateway adopts port isolation mode. The unidirectional gateway is a device used to realize unidirectional data transmission. It ensures that data can only flow from one network to another through hardware and logical isolation, and cannot be transmitted in the opposite direction. The unidirectional gateway using port isolation mode will achieve this goal through strict port configuration and physical isolation mechanism. The port isolation mode ensures that data can only flow in one direction by physically and logically separating the input port (source network) and output port (destination network) of the gateway device, preventing the destination network from any access to the source network.

[0022] S200, obtaining the distinguishing dimensions between common information and core information, wherein the distinguishing dimensions include data sensitivity and business impact, obtaining the standard for distinguishing the dimensions, comparing the weighted total score with the threshold, and if it is determined that the weighted total score of the common information exceeds the threshold, the common information is classified as core information.

[0023] In this step, we obtain the dimensions of general information and core information, including data sensitivity and business impact. Based on these two dimensions, we conduct quantitative assessment through clear standards. Data sensitivity refers to the risks that data leakage, loss or misuse may cause to the enterprise, customers or legal compliance. Obtain the criteria for differentiating dimensions. The criteria for data sensitivity include financial impact, legal consequences, privacy protection, and data abuse risks. The criteria for business impact include core business dependency, operational disruption risk, customer experience, and recovery costs. Compare the weighted total score with the threshold. The threshold can be set at 7 points, the total score is 10 points, and the threshold for core information can be set to ≥ 7 points. If the sensitivity score or business impact score exceeds the threshold, the data should be classified as core information.

[0024] S300, obtaining a core data unidirectional transmission priority evaluation standard, prioritizing the core data according to the priority evaluation standard, obtaining transmission rates of different priorities, and transmitting the core data according to the prioritized priorities.

[0025] In this step, the priority assessment criteria for one-way transmission of core data are obtained. The priority assessment criteria include real-time requirements, business impact, data importance, and recovery cost. The priority score = (real-time score × 40%) + (business impact score × 30%) + (data importance score × 20%) + (recovery cost score × 10%). According to the priority assessment criteria, the core data is prioritized into low priority, medium priority and high priority. The transmission rates of different priorities are obtained. According to the different priorities, the transmission rates are allocated to the core data to ensure the real-time and security of high-priority data. The core data is transmitted according to the divided priorities.

[0026] S400, obtaining access rights according to priority, sending the access rights to the user terminal, and obtaining user terminal access records.

[0027] In this step, access rights are obtained based on priority. In the access management of core data, allocating appropriate access rights based on priority is a key task. In order to achieve safe and efficient management, the system needs to obtain access rights corresponding to the priority, send the rights to the user terminal, and record the user's access behavior in real time; Obtain user terminal access records and record each user's access behavior on the terminal for security auditing and behavior analysis. Combine access records to analyze user behavior and detect abnormal access behavior.

[0028] like Figure 2As shown, as a preferred embodiment of the present invention, the step of obtaining the distinguishing dimensions of common information and core information, wherein the distinguishing dimensions include data sensitivity and business impact, obtaining the standard of the distinguishing dimensions, comparing the weighted total score with the threshold, and if it is determined that the weighted total score of the common information exceeds the threshold, classifying the common information as core information, specifically includes: S201, obtaining the distinguishing dimensions between common information and core information, obtaining the standards for distinguishing the dimensions, and dividing the common information and core information in the enterprise information according to the distinguishing standards.

[0029] In this step, we obtain the dimensions of general information and core information, including data sensitivity and business impact. Based on these two dimensions, we conduct quantitative assessment through clear standards. Data sensitivity refers to the risks that data leakage, loss or misuse may cause to the enterprise, customers or legal compliance. Obtain the criteria for distinguishing dimensions, set evaluation criteria, adopt a 0-10-point scoring system, and weight the total score of sensitivity and business impact. The threshold for classification as core information is set at 7 points or above, and the general information and core information in the enterprise information are divided according to the distinction criteria. Data sensitivity weighted formula: Sensitivity score = (financial impact score × 30%) + (legal consequence score × 30%) + (privacy protection score × 20%) + (data abuse risk score × 20%); Business impact weighted formula: Business impact score = (core business dependency score × 40%) + (operational interruption risk score × 30%) + (customer experience score × 20%) + (recovery cost score × 10%).

[0030] S202, obtaining a weighted score of information determined to be common information, wherein the weighted score is the sum of the product of the weight corresponding to the distinction criteria of the common information and the score corresponding to the common information.

[0031] In this step, the weighted score of the information determined as ordinary is obtained. Each dimension is scored from 0 to 10 points, with 0 indicating no impact or risk and 10 indicating the highest impact or risk. The total score of the data is the weighted sum of the sensitivity score and the business impact score. If the weighted total score of ordinary information is less than 7 points, it is considered that the data will not have a significant impact on the operation and security of the enterprise. Weighted total score = data sensitivity score + business impact score Data sensitivity weighted formula: Sensitivity score = (financial impact score × 30%) + (legal consequence score × 30%) + (privacy protection score × 20%) + (data abuse risk score × 20%); Business impact weighted formula: Business impact score = (core business dependency score × 40%) + (operational interruption risk score × 30%) + (customer experience score × 20%) + (recovery cost score × 10%).

[0032] S203, obtaining a first threshold, the weighted score is used to measure the importance of the common information, the weighted total score is obtained by summing the weighted scores, and the weighted total score is compared with the first threshold. If the weighted total score exceeds the first threshold, the common information is classified as core information.

[0033] In this step, the first threshold is obtained. The first threshold is used to determine whether the information is core information and is a key reference standard in data classification. The sensitivity score and business impact score of the data are weighted and compared with the preset first threshold. If the weighted total score exceeds the threshold, the data is classified as core information; For example, the data sensitivity score of the annual financial statement is: Financial impact: 9 points, Legal consequences: 8 points, Privacy protection: 7 points, Data abuse risk: 9 points, Data sensitivity score = (9×30%) + (8×30%) + (7×20%) + (9×20%) = 8.3; Business impact: core business dependency: 9 points, operational interruption risk: 8 points, customer experience impact: 6 points, recovery cost: 7 points, business impact score = (9×40%) + (8×30%) + (6×20%) + (7×10%) = 8.1; Weighted total score = 8.3 + 8.1 = 16.4, Result: The score was 16.4, which was higher than the threshold of 7 points and was judged to be core information.

[0034] like Figure 3 As shown, as a preferred embodiment of the present invention, the steps of obtaining a priority assessment standard for unidirectional transmission of core data, prioritizing the core data according to the priority assessment standard, obtaining transmission rates of different priorities, and transmitting the core data according to the divided priorities specifically include: S301, obtaining a core data one-way transmission priority assessment standard, wherein the assessment standard is a comprehensive score of data sensitivity and business impact.

[0035] In this step, the priority assessment criteria for one-way transmission of core data are obtained. The priority assessment criteria include real-time requirements, business impact, data importance, and recovery cost. The priority score = (real-time score × 40%) + (business impact score × 30%) + (data importance score × 20%) + (recovery cost score × 10%). Data sensitivity score = (financial impact score × 30%) + (legal consequence score × 30%) + (privacy protection score × 20%) + (data abuse risk score × 20%); Business impact score = (core business dependency score × 40%) + (operation interruption risk score × 30%) + (customer experience score × 20%) + (recovery cost score × 10%); High-priority data needs to be transmitted in real time or with priority, with a priority score ≥ 8 points; medium-priority data needs to be transmitted in a short time, with a priority score of 8 points > 5 points; low-priority data can be transmitted in batches or with delay, with a priority score ≤ 5 points.

[0036] S302, prioritize the core data according to a priority evaluation standard, where the priority evaluation standard includes low priority, medium priority, and high priority.

[0037] In this step, the core data is prioritized according to the priority assessment criteria. High-priority data needs to be transmitted in real time or with priority, with a priority score of ≥8 points. Medium-priority data needs to be transmitted in a short time, with a priority score of 8 points > 5 points. Low-priority data can be transmitted in batches or with delay, with a priority score of ≤5 points. For example, the data sensitivity score of real-time order data is: Financial impact: 8 points, Legal consequences: 7 points, Privacy protection: 9 points, Data abuse risk: 9 points, Data sensitivity score = (8×30%) + (7×30%) + (9×20%) + (9×20%) = 8.2; Business impact score: core business dependency: 10 points, operational interruption risk: 9 points, customer experience impact: 8 points, recovery cost: 7 points, business impact score = (10 × 40%) + (9 × 30%) + (8 × 20%) + (7 × 10%) = 9.0; Priority score = 8.2 + 9.0 = 17.2 High priority (total score ≥ 8), real-time transmission is required.

[0038] S303, acquiring transmission rates of different priorities, and transmitting core data according to the divided priorities.

[0039] In this step, the transmission rates of different priorities are obtained, and according to the timeliness and importance of the core data of different priorities, the transmission rates are reasonably allocated to ensure that the high-priority data is transmitted first and the network resources are effectively utilized; High-priority data transmission requires real-time transmission. Data loss or delay will lead to business interruption or serious consequences. The data volume is usually small, but the transmission timeliness requirement is extremely high. The transmission requirements are to allocate the highest transmission rate (6-8 Gbps), ensure the delay is at the millisecond level, and support low-latency protocols; Medium priority data transmission has high data importance, but allows for a short delay. The data volume is large and requires a stable transmission rate. The transmission requirement is to allocate a medium transmission rate (2-3 Gbps) to ensure that the transmission is completed within the set time window.

[0040] Low priority data transfers have low data sensitivity and business impact scores. The transfer time is flexible and suitable for batch processing. The transfer requirement is to allocate a minimum transfer rate (1-2 Gbps), and the transfer process can be scheduled during non-peak hours.

[0041] like Figure 4 As shown, as a preferred embodiment of the present invention, the steps of obtaining access rights according to priority, sending access rights to a user terminal, and obtaining access records of the user terminal specifically include: S401, obtaining access rights according to priority, and determining the amount of access data of core data according to the access rights.

[0042] In this step, access rights are obtained based on priority. In the access management of core data, dividing access rights based on priority is an important means to ensure data security and business efficiency. Access rights of different priorities will directly affect the scope, depth and frequency of users' access to core data; The amount of core data that can be accessed is determined based on access permissions. Full permissions allow you to view, edit, delete, and manage core data, which is suitable for access needs of real-time data and sensitive data; partial permissions allow you to view and edit data within a limited range, which is suitable for mid-level managers or analysts in specific business areas; read-only permissions allow you to only view data but not edit or download complete data, which is suitable for reference data or low-priority data.

[0043] S402: Send access permission to the user terminal to obtain the user terminal access record.

[0044] In this step, the access rights are sent to the user terminal. In the process of managing core data access, distributing access rights to user terminals and obtaining access records in real time is an important step to ensure data security and user operation transparency. Access rights are generated according to the user's identity, role and data priority. After the user terminal receives the permission package, the permission activation is completed, and the permission activation time and terminal device information are recorded; Obtain user terminal access records, which include user name, role, user terminal unique identifier, data access details, access time and access results.

[0045] S403, back up the access records and core data.

[0046] In this step, access records and core data are backed up. Backing up access records and core data is an important part of data management. It can ensure the recoverability of data in the event of accidental loss or system failure, and provide support for auditing and compliance.

[0047] like Figure 5 As shown, a one-way electronic information transmission system provided by an embodiment of the present invention includes: The enterprise information module 100 is used to obtain enterprise information, which includes general information and core information, and obtain unidirectional gateway information, which adopts a port isolation mode.

[0048] In this system, the enterprise information module 100 obtains enterprise information, which includes general information and core information. General information refers to information that has no significant sensitivity or business impact on the operation of the enterprise. This type of information is usually used for daily operations and non-sensitive communications, and its leakage or loss will not cause serious consequences to the enterprise. General information includes enterprise name, address and contact information; Core information is information that is critical to the operation, competitiveness or legal compliance of the enterprise. This type of data requires special attention to ensure high security during transmission and storage. Core information includes annual income statements, key financials, corporate strategic plans and future investment plans; Get the information of unidirectional gateway. The unidirectional gateway adopts port isolation mode. The unidirectional gateway is a device used to realize unidirectional data transmission. It ensures that data can only flow from one network to another through hardware and logical isolation, and cannot be transmitted in the opposite direction. The unidirectional gateway using port isolation mode will achieve this goal through strict port configuration and physical isolation mechanism. The port isolation mode ensures that data can only flow in one direction by physically and logically separating the input port (source network) and output port (destination network) of the gateway device, preventing the destination network from any access to the source network.

[0049] Dimension module 200 is used to obtain the distinguishing dimensions between common information and core information, wherein the distinguishing dimensions include data sensitivity and business impact, obtain the standards for distinguishing the dimensions, compare the weighted total score with the threshold, and if it is determined that the weighted total score of the common information exceeds the threshold, the common information is classified as core information.

[0050] In this system, the dimension module 200 obtains the differentiation dimensions of general information and core information, and the differentiation dimensions include data sensitivity and business impact. Based on the two dimensions of data sensitivity and business impact, quantitative assessment is performed through clear standards. Data sensitivity refers to the risks that data leakage, loss or abuse may cause to the enterprise, customers or legal compliance; Obtain the criteria for differentiating dimensions. The criteria for data sensitivity include financial impact, legal consequences, privacy protection, and data abuse risks. The criteria for business impact include core business dependency, operational disruption risk, customer experience, and recovery costs. Compare the weighted total score with the threshold. The threshold can be set at 7 points, the total score is 10 points, and the threshold for core information can be set to ≥ 7 points. If the sensitivity score or business impact score exceeds the threshold, the data should be classified as core information.

[0051] The priority module 300 is used to obtain a core data unidirectional transmission priority evaluation standard, prioritize the core data according to the priority evaluation standard, obtain transmission rates of different priorities, and transmit the core data according to the prioritized priorities.

[0052] In this system, the priority module 300 obtains the core data one-way transmission priority assessment criteria, which include real-time requirements, business impact, data importance and recovery cost. The priority score = (real-time score × 40%) + (business impact score × 30%) + (data importance score × 20%) + (recovery cost score × 10%); According to the priority assessment criteria, the core data is prioritized into low priority, medium priority and high priority. The transmission rates of different priorities are obtained. According to the different priorities, the transmission rates are allocated to the core data to ensure the real-time and security of high-priority data. The core data is transmitted according to the divided priorities.

[0053] The permission module 400 is used to obtain access rights according to priority, send the access rights to the user terminal, and obtain the user terminal access record.

[0054] In this system, the permission module 400 obtains access rights according to priority. In the access management of core data, allocating appropriate access rights according to priority is a key task. In order to achieve safe and efficient management, the system needs to obtain access rights corresponding to the priority, send the rights to the user terminal, and record the user's access behavior in real time; Obtain user terminal access records and record each user's access behavior on the terminal for security auditing and behavior analysis. Combine access records to analyze user behavior and detect abnormal access behavior.

[0055] like Figure 6 As shown, as a preferred embodiment of the present invention, the dimension module 200 includes: The dimension unit 201 is used to obtain the dimension for distinguishing common information from core information, obtain the standard for distinguishing the dimension, and divide the common information and core information in the enterprise information according to the standard.

[0056] In this module, the dimension unit 201 obtains the differentiation dimensions of general information and core information. The differentiation dimensions include data sensitivity and business impact. Based on the two dimensions of data sensitivity and business impact, a quantitative assessment is performed through clear standards. Data sensitivity refers to the risks that data leakage, loss or misuse may cause to the enterprise, customers or legal compliance; Obtain the criteria for distinguishing dimensions, set evaluation criteria, adopt a 0-10-point scoring system, and weight the total score of sensitivity and business impact. The threshold for classification as core information is set at 7 points or above, and the general information and core information in the enterprise information are divided according to the distinction criteria. Data sensitivity weighted formula: Sensitivity score = (financial impact score × 30%) + (legal consequence score × 30%) + (privacy protection score × 20%) + (data abuse risk score × 20%); Business impact weighted formula: Business impact score = (core business dependency score × 40%) + (operational interruption risk score × 30%) + (customer experience score × 20%) + (recovery cost score × 10%).

[0057] The weighting unit 202 is used to obtain a weighted score of information determined to be common information, wherein the weighted score is the sum of the product of the weight corresponding to the distinction standard of the common information and the score corresponding to the common information.

[0058] In this module, the weighting unit 202 obtains the weighted score of the information determined as ordinary information. Each dimension score is 0-10 points, 0 points indicates no impact or risk, 10 points indicates the highest impact or risk, and the total score of the data is composed of the weighted sum of the sensitivity score and the business impact score. If the weighted total score of ordinary information is less than 7 points, it is considered that the data will not have a significant impact on the operation and security of the enterprise; Weighted total score = data sensitivity score + business impact score Data sensitivity weighted formula: Sensitivity score = (financial impact score × 30%) + (legal consequence score × 30%) + (privacy protection score × 20%) + (data abuse risk score × 20%); Business impact weighting formula: Business impact score = (core business dependency score × 40%) + (operational interruption risk score × 30%) + (customer experience score × 20%) + (recovery cost score × 10%).

[0059] The core unit 203 is used to obtain the first threshold. The weighted score is used to measure the importance of the common information. The weighted total score is obtained by summing the weighted scores. The weighted total score is compared with the first threshold. If the weighted total score exceeds the first threshold, the common information is classified as core information.

[0060] In this module, the core unit 203 obtains a first threshold value, which is used to determine whether information is core information and is a key reference standard in data classification. By weighted calculation of the sensitivity score and business impact score of the data, and comparing them with the preset first threshold value, if the weighted total score exceeds the threshold value, the data is classified as core information; For example, the data sensitivity score of the annual financial statement is: Financial impact: 9 points, Legal consequences: 8 points, Privacy protection: 7 points, Data abuse risk: 9 points, Data sensitivity score = (9×30%) + (8×30%) + (7×20%) + (9×20%) = 8.3; Business impact: core business dependency: 9 points, operational interruption risk: 8 points, customer experience impact: 6 points, recovery cost: 7 points, business impact score = (9×40%) + (8×30%) + (6×20%) + (7×10%) = 8.1; Weighted total score = 8.3 + 8.1 = 16.4, Result: The score was 16.4, which was higher than the threshold of 7 points and was judged to be core information.

[0061] like Figure 7 As shown, as a preferred embodiment of the present invention, the priority module 300 includes: The scoring unit 301 is used to obtain a core data one-way transmission priority assessment standard, where the assessment standard is a comprehensive score of data sensitivity and business impact.

[0062] In this module, the scoring unit 301 obtains the core data one-way transmission priority assessment criteria, which include real-time requirements, business impact, data importance and recovery cost. The priority score = (real-time score × 40%) + (business impact score × 30%) + (data importance score × 20%) + (recovery cost score × 10%); Data sensitivity score = (financial impact score × 30%) + (legal consequence score × 30%) + (privacy protection score × 20%) + (data abuse risk score × 20%); Business impact score = (core business dependency score × 40%) + (operation interruption risk score × 30%) + (customer experience score × 20%) + (recovery cost score × 10%); High-priority data needs to be transmitted in real time or with priority, with a priority score ≥ 8 points; medium-priority data needs to be transmitted in a short time, with a priority score of 8 points > 5 points; low-priority data can be transmitted in batches or with delay, with a priority score ≤ 5 points.

[0063] The priority unit 302 is used to prioritize the core data according to a priority evaluation standard, where the priority evaluation standard includes low priority, medium priority and high priority.

[0064] In this module, the priority unit 302 prioritizes the core data according to the priority assessment criteria. High-priority data needs to be transmitted in real time or with priority, with a priority score of ≥8 points; medium-priority data needs to be transmitted in a short time, with a priority score of 8 points>>5 points; low-priority data can be transmitted in batches or delayed, with a priority score of ≤5 points; For example, the data sensitivity score of real-time order data is: Financial impact: 8 points, Legal consequences: 7 points, Privacy protection: 9 points, Data abuse risk: 9 points, Data sensitivity score = (8×30%) + (7×30%) + (9×20%) + (9×20%) = 8.2; Business impact score: core business dependency: 10 points, operational interruption risk: 9 points, customer experience impact: 8 points, recovery cost: 7 points, business impact score = (10 × 40%) + (9 × 30%) + (8 × 20%) + (7 × 10%) = 9.0; Priority score = 8.2 + 9.0 = 17.2 High priority (total score ≥ 8), real-time transmission is required.

[0065] The transmission unit 303 is used to obtain transmission rates of different priorities and transmit core data according to the divided priorities.

[0066] In this module, the transmission unit 303 obtains the transmission rates of different priorities, and reasonably allocates the transmission rates according to the timeliness and importance of the core data of different priorities to ensure that the high-priority data is transmitted first, while effectively utilizing network resources; High-priority data transmission requires real-time transmission. Data loss or delay will lead to business interruption or serious consequences. The data volume is usually small, but the transmission timeliness requirement is extremely high. The transmission requirements are to allocate the highest transmission rate (6-8 Gbps), ensure the delay is at the millisecond level, and support low-latency protocols; Medium priority data transmission has high data importance, but allows for a short delay. The data volume is large and requires a stable transmission rate. The transmission requirement is to allocate a medium transmission rate (2-3 Gbps) to ensure that the transmission is completed within the set time window.

[0067] Low priority data transfers have low data sensitivity and business impact scores. The transfer time is flexible and suitable for batch processing. The transfer requirement is to allocate a minimum transfer rate (1-2 Gbps), and the transfer process can be scheduled during non-peak hours.

[0068] like Figure 8 As shown, as a preferred embodiment of the present invention, the authority module 400 includes: The permission unit 401 is used to obtain access rights according to the priority, and determine the amount of access data of the core data according to the access rights.

[0069] In this module, the permission unit 401 obtains access rights according to priority. In the access management of core data, dividing access rights according to priority is an important means to ensure data security and business efficiency. Access rights of different priorities will directly affect the scope, depth and frequency of users' access to core data; The amount of core data that can be accessed is determined based on access permissions. Full permissions allow you to view, edit, delete, and manage core data, which is suitable for access needs of real-time data and sensitive data; partial permissions allow you to view and edit data within a limited range, which is suitable for mid-level managers or analysts in specific business areas; read-only permissions allow you to only view data but not edit or download complete data, which is suitable for reference data or low-priority data.

[0070] The access unit 402 is used to send access permissions to the user terminal and obtain the user terminal access record.

[0071] In this module, the access unit 402 sends access rights to the user terminal. In the process of managing core data access, distributing access rights to the user terminal and obtaining access records in real time is an important link to ensure data security and user operation transparency. Access rights are generated according to the user's identity, role and data priority. After the user terminal receives the permission package, the permission activation is completed and the permission activation time and terminal device information are recorded; Obtain user terminal access records, which include user name, role, user terminal unique identifier, data access details, access time and access results.

[0072] The backup unit 403 is used to back up the access records and core data.

[0073] In this module, the backup unit 403 backs up the access records and core data. Backing up the access records and core data is an important part of data management, which can ensure the recoverability of data in the event of accidental loss or system failure, and provide support for auditing and compliance.

[0074] In one embodiment, a computer device is provided, the computer device comprising a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein when the processor executes the computer program, the following steps are implemented: Acquire enterprise information, the enterprise information includes general information and core information, and acquire unidirectional gateway information, the unidirectional gateway adopts a port isolation mode; Obtaining the differentiation dimensions between common information and core information, wherein the differentiation dimensions include data sensitivity and business impact, obtaining the standard for differentiation dimensions, comparing the weighted total score with the threshold, and if it is determined that the weighted total score of the common information exceeds the threshold, the common information is classified as core information; Obtain the priority assessment criteria for one-way transmission of core data, prioritize the core data according to the priority assessment criteria, obtain the transmission rates of different priorities, and transmit the core data according to the prioritized priorities; Obtain access rights according to priority, send access rights to user terminals, and obtain user terminal access records.

[0075] In one embodiment, a computer-readable storage medium is provided, on which a computer program is stored. When the computer program is executed by a processor, the processor performs the following steps: Acquire enterprise information, the enterprise information includes general information and core information, and acquire unidirectional gateway information, the unidirectional gateway adopts a port isolation mode; Obtaining the differentiation dimensions between common information and core information, wherein the differentiation dimensions include data sensitivity and business impact, obtaining the standard for differentiation dimensions, comparing the weighted total score with the threshold, and if it is determined that the weighted total score of the common information exceeds the threshold, the common information is classified as core information; Obtain the priority assessment criteria for one-way transmission of core data, prioritize the core data according to the priority assessment criteria, obtain the transmission rates of different priorities, and transmit the core data according to the prioritized priorities; Obtain access rights according to priority, send access rights to user terminals, and obtain user terminal access records.

[0076] It should be understood that, although each step in the flow chart of each embodiment of the present invention is shown in sequence according to the indication of the arrow, these steps are not necessarily performed in sequence according to the order indicated by the arrow. Unless there is a clear explanation in this article, the execution of these steps does not have a strict order restriction, and these steps can be performed in other orders. Moreover, at least a portion of the steps in each embodiment may include a plurality of sub-steps or a plurality of stages, and these sub-steps or stages are not necessarily performed at the same time, but can be performed at different times, and the execution order of these sub-steps or stages is not necessarily performed in sequence, but can be performed in turn or alternately with at least a portion of other steps or sub-steps or stages of other steps. Those skilled in the art can understand that all or part of the processes in the above-mentioned embodiment methods can be completed by instructing the relevant hardware through a computer program, and the program can be stored in a non-volatile computer-readable storage medium. When the program is executed, it can include the processes of the embodiments of the above-mentioned methods. Among them, any reference to memory, storage, database or other media used in the embodiments provided in this application may include non-volatile and / or volatile memory. Non-volatile memory may include read-only memory (ROM), programmable ROM (PROM), electrically programmable ROM (EPROM), electrically erasable programmable ROM (EEPROM) or flash memory. Volatile memory may include random access memory (RAM) or external cache memory. As an illustration and not limitation, RAM is available in many forms, such as static RAM (SRAM), dynamic RAM (DRAM), synchronous DRAM (SDRAM), double data rate SDRAM (DDRSDRAM), enhanced SDRAM (ESDRAM), synchronous link (Synchlink) DRAM (SLDRAM), memory bus (Rambus) direct RAM (RDRAM), direct memory bus dynamic RAM (DRDRAM), and memory bus dynamic RAM (RDRAM).

[0077] The technical features of the above-described embodiments may be arbitrarily combined. To make the description concise, not all possible combinations of the technical features in the above-described embodiments are described. However, as long as there is no contradiction in the combination of these technical features, they should be considered to be within the scope of this specification.

[0078] The above-mentioned embodiments only express several implementation methods of the present invention, and the description thereof is relatively specific and detailed, but it cannot be understood as limiting the scope of the patent of the present invention. It should be pointed out that, for ordinary technicians in this field, several variations and improvements can be made without departing from the concept of the present invention, which all belong to the protection scope of the present invention. Therefore, the protection scope of the patent of the present invention shall be subject to the attached claims.

[0079] The above description is only a preferred embodiment of the present invention and is not intended to limit the present invention. Any modifications, equivalent substitutions and improvements made within the spirit and principles of the present invention should be included in the protection scope of the present invention.

Claims

1. A method for one-way transmission of electronic information, characterized in that: The method comprises: Acquire enterprise information, the enterprise information includes general information and core information, and acquire unidirectional gateway information, the unidirectional gateway adopts a port isolation mode; Obtaining the differentiation dimensions between common information and core information, wherein the differentiation dimensions include data sensitivity and business impact, obtaining the standard for differentiation dimensions, comparing the weighted total score with the threshold, and if it is determined that the weighted total score of the common information exceeds the threshold, the common information is classified as core information; Obtain the priority assessment criteria for one-way transmission of core data, prioritize the core data according to the priority assessment criteria, obtain the transmission rates of different priorities, and transmit the core data according to the prioritized priorities; Obtain access rights according to priority, send access rights to user terminals, and obtain user terminal access records.

2. A one-way electronic information transmission method according to claim 1, characterized in that: The step of obtaining the distinguishing dimensions of common information and core information, wherein the distinguishing dimensions include data sensitivity and business impact, obtaining the standard of the distinguishing dimensions, comparing the weighted total score with the threshold, and if it is determined that the weighted total score of the common information exceeds the threshold, classifying the common information as core information specifically includes: Obtain the dimensions for distinguishing common information from core information, obtain the standards for distinguishing the dimensions, and divide the common information and core information in the enterprise information according to the standards; Obtaining a weighted score of information determined to be common, wherein the weighted score is the sum of the product of the weight corresponding to the distinction criteria of the common information and the score corresponding to the common information; A first threshold is obtained. The weighted score is used to measure the importance of common information. A weighted total score is obtained by summing up the weighted scores. The weighted total score is compared with the first threshold. If the weighted total score exceeds the first threshold, the common information is classified as core information.

3. A one-way electronic information transmission method according to claim 1, characterized in that: The steps of obtaining a priority assessment standard for one-way transmission of core data, prioritizing the core data according to the priority assessment standard, obtaining transmission rates of different priorities, and transmitting the core data according to the prioritized priorities specifically include: Obtaining the priority assessment criteria for one-way transmission of core data, the assessment criteria being a comprehensive score of data sensitivity and business impact; Prioritizing the core data according to a priority assessment standard, wherein the priority assessment standard includes low priority, medium priority and high priority; Obtain the transmission rates of different priorities and transmit the core data according to the divided priorities.

4. A one-way electronic information transmission method according to claim 1, characterized in that: The steps of obtaining access rights according to priority, sending access rights to the user terminal, and obtaining user terminal access records specifically include: Obtain access rights based on priority, and determine the amount of core data access based on the access rights; Send access rights to the user terminal and obtain the user terminal access record; Back up access records and core data.

5. A one-way electronic information transmission method according to claim 2, characterized in that: The weighted scores sum to 100%.

6. A one-way electronic information transmission system, characterized in that: The system comprises: An enterprise information module is used to obtain enterprise information, including general information and core information, and to obtain unidirectional gateway information, wherein the unidirectional gateway adopts a port isolation mode; A dimension module obtains the dimensions for distinguishing common information from core information, wherein the distinguishing dimensions include data sensitivity and business impact, obtains the standards for distinguishing the dimensions, compares the weighted total score with the threshold, and if it is determined that the weighted total score of the common information exceeds the threshold, the common information is classified as core information; The priority module obtains the priority assessment standard for one-way transmission of core data, prioritizes the core data according to the priority assessment standard, obtains the transmission rates of different priorities, and transmits the core data according to the prioritized priorities; The permission module obtains access rights according to priority, sends access rights to user terminals, and obtains user terminal access records.

7. The electronic information one-way transmission system according to claim 6, characterized in that: The dimension module includes: Dimension unit, obtains the distinguishing dimensions of general information and core information, obtains the distinguishing criteria of dimensions, and divides the general information and core information in the enterprise information according to the distinguishing criteria; A weighting unit, which obtains a weighted score of information determined as ordinary information, wherein the weighted score is the sum of the product of the weight corresponding to the distinction standard of ordinary information and the score corresponding to the ordinary information; The core unit obtains the first threshold value. The weighted score is used to measure the importance of the common information. The weighted total score is obtained by summing the weighted scores. The weighted total score is compared with the first threshold value. If the weighted total score exceeds the first threshold value, the common information is classified as the core information.

8. The electronic information one-way transmission system according to claim 7, characterized in that: The priority module includes: A scoring unit, which obtains a priority assessment standard for one-way transmission of core data, wherein the assessment standard is a comprehensive score of data sensitivity and business impact; A priority unit, which prioritizes the core data according to a priority assessment standard, wherein the priority assessment standard includes a low priority, a medium priority, and a high priority; The transmission unit obtains the transmission rates of different priorities and transmits the core data according to the divided priorities.

9. The electronic information one-way transmission system according to claim 8, characterized in that: The authority module includes: The permission unit obtains access rights according to priority and determines the amount of access data to the core data based on the access rights; An access unit sends access rights to a user terminal and obtains access records of the user terminal; The backup unit backs up access records and core data.

10. The electronic information one-way transmission system according to claim 9, characterized in that: The weighted scores sum to 100%.

Images