Instant data generation safety management method and system

Abstract

The invention provides an instant data generation safety management method and system, and relates to the field of data processing, and the method comprises the steps: responding to an instant data generation system to generate instant data, and uploading the instant data to a safety shared data management system; converting the format of the instant data uploaded to the secure shared data management system into a closed-loop production management system identification format; encrypting and storing the instant data after format conversion; in response to a request for sending an instant data production demand by a request end, performing security verification on the request end, and if the security verification is passed, allowing to establish a first protocol data transmission channel and a second protocol data transmission channel of the closed-loop production management system and the security shared data management system, and respectively transmitting the instant data encryption storage packet and the decryption data corresponding to the instant data production demand to a closed-loop production management system through the first protocol data transmission channel and the second protocol data transmission channel. According to the invention, the security of the instant data transmission process is improved.

Description

Technical Field

[0001] The present application relates to the field of data processing technology, and in particular to a method and system for secure management of instant data generation. Background Art

[0002] Scratch lottery tickets are printed before being sold. The printing of lottery tickets is based on the lottery data prepared in advance. The winning or losing of each lottery ticket is determined after the lottery data is generated. The data of scratch lottery tickets is the root of scratch lottery tickets. Therefore, the data generation of scratch lottery tickets has become an important part of the production and sales of scratch lottery tickets. It involves the accuracy, security and unpredictability of lottery data. Software technology, encryption technology and mathematical knowledge are needed to ensure the data generation process. At the same time, internal personnel need to use systems and processes to control personnel’s contact or access to lottery data to the maximum extent to ensure the safety of lottery tickets.

[0003] Therefore, the technical problem that urgently needs to be solved is: how to manage the instant lottery data securely and improve the security of the instant lottery data transmission process. Summary of the invention

[0004] The purpose of this application is to provide a method and system for secure management of instant lottery data generation, so as to improve the security of the instant lottery data transmission process.

[0005] To achieve the above-mentioned purpose, as a first aspect of the present application, the present application provides a method for secure management of instant data generation, the method comprising: in response to an instant data generation system generating instant data, uploading the instant data to a secure shared data management system; converting the format of the instant data uploaded to the secure shared data management system into a format recognized by a closed-loop production management system; encrypting and storing the instant data after the format conversion to obtain an instant data encrypted storage package; in response to a request from a requesting end to send a request for instant data production requirements, performing security verification on the requesting end, if the security verification passes, allowing the establishment of a first protocol data transmission channel and a second protocol data transmission channel between the closed-loop production management system and the secure shared data management system, otherwise, prohibiting the establishment of the first protocol data transmission channel and the second protocol data transmission channel between the closed-loop production management system and the secure shared data management system; transmitting the instant data encrypted storage package and decrypted data corresponding to the instant data production requirements to the closed-loop production management system through the first protocol data transmission channel and the second protocol data transmission channel, respectively.

[0006] The instant data generation security management method as described above, wherein the method further includes: in response to the establishment of the first protocol data transmission channel and the second protocol data transmission channel, collecting communication performance index data and security index data of the first protocol data transmission channel and the second protocol data transmission channel; calculating the data synchronization transmission reliability value of the first protocol data transmission channel and the second protocol data transmission channel based on the collected communication performance index data of the first protocol data transmission channel and the second protocol data transmission channel; comparing the data synchronization transmission reliability value of the first protocol data transmission channel and the second protocol data transmission channel with a preset first threshold value, if the data synchronization transmission reliability value of the first protocol data transmission channel and the second protocol data transmission channel is greater than the preset first threshold value, optimizing the data transmission channel with a smaller communication performance evaluation value, otherwise, there is no need to optimize the data transmission channel with a smaller communication performance evaluation value.

[0007] The instant data generation security management method as described above, wherein the method further includes: calculating the comprehensive security and reliability value of the first protocol data transmission channel and the second protocol data transmission channel based on the collected communication performance index data and security index data of the first protocol data transmission channel and the second protocol data transmission channel; comparing the comprehensive security and reliability value of the first protocol data transmission channel and the second protocol data transmission channel with the preset security and reliability threshold value, if the comprehensive security and reliability value of the first protocol data transmission channel and the second protocol data transmission channel is greater than the preset security and reliability threshold value, the closed-loop production management system decrypts the instant data encrypted storage package based on the received instant data encrypted storage package and decrypted data to obtain the instant data, otherwise, the closed-loop production management system prohibits decryption of the instant data encrypted storage package.

[0008] In the instant data generation security management method as described above, the communication performance indicator data includes: data reception delay time, number of network interruptions, network signal strength and / or network packet loss rate.

[0009] As described above, the instant data generation security management method, wherein the security indicator data of the first protocol data transmission channel includes: malicious instructions, malicious links and / or vulnerabilities carried in the data packets transmitted by the first protocol data transmission channel; malicious instructions, malicious links and / or vulnerabilities carried in the data packets transmitted by the second protocol data transmission channel.

[0010] In the instant data generation security management method as described above, the communication performance evaluation value of the first protocol data transmission channel and the communication performance evaluation value of the second protocol data transmission channel are calculated in the same way; wherein the calculation formula of the communication performance evaluation value of the first protocol data transmission channel is as follows: ; in, Indicates the communication performance evaluation value of the first protocol data transmission channel; Indicates the total number of types of communication performance indicator data of the first protocol data transmission channel; Indicates The influence weight of the communication performance indicator data on the communication performance evaluation value; Indicates The value of the communication performance indicator data.

[0011] In the instant data generation security management method as described above, after the instant data encryption storage package and the decrypted data are transmitted to the closed-loop production management system, the first protocol data transmission channel and the second protocol data transmission channel are both closed.

[0012] As a second aspect of the present application, the present application provides an instant data generation security management system, which executes the instant data generation security management method, and the system includes: A data uploading module, for responding to the instant data generation system generating instant data, uploading the instant data to the secure shared data management system; A format conversion module, used to convert the format of the open data uploaded to the secure shared data management system into a format recognized by the closed-loop production management system; The encryption storage module is used to encrypt and store the instant data after the format conversion to obtain an encrypted storage package of the instant data; A security verification module, for responding to a request from a requesting end to send an immediate data production demand, and performing security verification on the requesting end; if the security verification is passed, the establishment of a first protocol data transmission channel and a second protocol data transmission channel between the closed-loop production management system and the secure shared data management system is allowed; otherwise, the establishment of the first protocol data transmission channel and the second protocol data transmission channel between the closed-loop production management system and the secure shared data management system is prohibited; The data transmission module is used to transmit the instant data encrypted storage package and decrypted data corresponding to the instant data production demand to the closed-loop production management system through the first protocol data transmission channel and the second protocol data transmission channel respectively.

[0013] The instant data generation safety management system as described above, wherein the system further comprises: A data collection module, configured to collect communication performance index data and security index data of the first protocol data transmission channel and the second protocol data transmission channel in response to the establishment of the first protocol data transmission channel and the second protocol data transmission channel; A data processor, configured to calculate a data synchronization transmission reliability value of the first protocol data transmission channel and the second protocol data transmission channel according to the collected communication performance indicator data of the first protocol data transmission channel and the second protocol data transmission channel; A data comparator is used to compare the data synchronization transmission reliability value of the first protocol data transmission channel and the second protocol data transmission channel with a preset first threshold value. If the data synchronization transmission reliability value of the first protocol data transmission channel and the second protocol data transmission channel is greater than the preset first threshold value, the data transmission channel with a smaller communication performance evaluation value is optimized; otherwise, there is no need to optimize the data transmission channel with a smaller communication performance evaluation value.

[0014] The instant data generation safety management system as described above, wherein the data processor is further used to calculate the comprehensive safety and reliability value of the first protocol data transmission channel and the second protocol data transmission channel based on the collected communication performance index data and safety index data of the first protocol data transmission channel and the second protocol data transmission channel; The data comparator is also used to compare the comprehensive safety and reliability value of the first protocol data transmission channel and the second protocol data transmission channel with the preset safety and reliability threshold. If the comprehensive safety and reliability value of the first protocol data transmission channel and the second protocol data transmission channel is greater than the preset safety and reliability threshold, the closed-loop production management system decrypts the instant data encrypted storage package based on the received instant data encrypted storage package and decrypted data to obtain the instant data. Otherwise, the closed-loop production management system prohibits decryption of the instant data encrypted storage package.

[0015] The beneficial effects achieved by this application are as follows: (1) This application encrypts and stores the instant lottery data and performs security verification on the requesting end that sends the instant lottery data production demand, thereby improving the security of the instant lottery data transmission process.

[0016] (2) The present application improves the calculation accuracy of the data synchronization transmission reliability value of the first protocol data transmission channel and the second protocol data transmission channel, thereby comparing the data synchronization transmission reliability value of the first protocol data transmission channel and the second protocol data transmission channel with a preset first threshold value according to the data synchronization transmission reliability value of the first protocol data transmission channel and the second protocol data transmission channel. If the data synchronization transmission reliability value of the first protocol data transmission channel and the second protocol data transmission channel is greater than the preset first threshold value, the data transmission channel with a smaller communication performance evaluation value is optimized. Otherwise, there is no need to optimize the data transmission channel with a smaller communication performance evaluation value, so that the data transmission synchronization of the first protocol data transmission channel and the second protocol data transmission channel is better and the reliability is higher.

[0017] (3) The present application improves the calculation accuracy of the comprehensive security and reliability values ​​of the first protocol data transmission channel and the second protocol data transmission channel, thereby comparing the comprehensive security and reliability values ​​of the first protocol data transmission channel and the second protocol data transmission channel with the preset security and reliability threshold. If the comprehensive security and reliability values ​​of the first protocol data transmission channel and the second protocol data transmission channel are greater than the preset security and reliability threshold, the closed-loop production management system decrypts the instant data encrypted storage package based on the received instant data encrypted storage package and decrypted data, obtains the instant data, and arranges production plans for the instant data. Otherwise, the closed-loop production management system prohibits decryption of the instant data encrypted storage package and prohibits production plans for the instant data, thereby improving the reliability and security of the production plan arrangements of the closed-loop production management system. BRIEF DESCRIPTION OF THE DRAWINGS

[0018] In order to more clearly illustrate the embodiments of the present application or the technical solutions in the prior art, the drawings required for use in the embodiments or the description of the prior art will be briefly introduced below. Obviously, the drawings described below are only some embodiments recorded in the present application. For those skilled in the art, other drawings can also be obtained based on these drawings.

[0019] Figure 1 A flowchart of a method for secure management of instant data generation according to an embodiment of the present application.

[0020] Figure 2 A structural schematic diagram of an instant data generation security management system according to an embodiment of the present application. DETAILED DESCRIPTION

[0021] The following is a clear and complete description of the technical solutions in the embodiments of the present application in conjunction with the drawings in the embodiments of the present application. Obviously, the described embodiments are part of the embodiments of the present application, not all of the embodiments. Based on the embodiments in the present application, all other embodiments obtained by those skilled in the art without creative work are within the scope of protection of the present application. Embodiment 1

[0022] like Figure 1 As shown, the present application provides a method for managing instant data generation security, the method comprising: Step S1, in response to the instant data generation system generating instant data, uploading the instant data to the secure shared data management system.

[0023] Instant data include: ticket type, expected circulation, ticket design data, etc.

[0024] It needs to be explained that since the instant data generated by the instant data generation system is much faster than the speed at which the closed-loop production management system receives and processes data, directly transmitting the instant data generated by the instant data generation system to the closed-loop production management system may cause data squeeze and system crash. Therefore, uploading the instant data generated by the instant data generation system to the secure shared data management system not only improves the security of the instant data, but also solves the problem of data squeeze and system crash that may be caused by the closed-loop production management system.

[0025] Step S2, converting the format of the open data uploaded to the secure shared data management system into a format recognized by the closed-loop production management system.

[0026] Specifically, the instant data is converted into a format that can be recognized by the closed-loop production management system. The closed-loop production management system recognizes the format of, for example, the data type, data length, and data field of the specified data storage. The present application converts the format of the instant data uploaded to the secure shared data management system into a format that can be recognized by the closed-loop production management system, so that the closed-loop production management system can recognize the instant data, and thus make production plans based on the instant data. For example, the instant data generated by the instant data generation system is in XML format, and the format that can be recognized by the closed-loop production management system is JSON format, then the XML format instant data generated by the instant data generation system is converted into JSON format. For example, the date field in the instant data generated by the instant data generation system is in the "year-month-day" format, and the format that can be recognized by the closed-loop production management system is the "month / day / year" format, then the date field in the instant data generated by the instant data generation system is converted into the "month / day / year" format that can be recognized by the closed-loop production management system.

[0027] Step S3, encrypt and store the instant data after format conversion to obtain an encrypted storage package of the instant data.

[0028] As a specific embodiment of the present invention, encrypted storage includes the following methods: symmetric encryption, such as using AES (Advanced Encryption Standard) and DES (Data Encryption Standard) algorithms. This encryption method uses the same key for encryption and decryption. Just like using the same key to lock and open a door, it has the advantages of fast speed and high efficiency, and is often used for encryption of large amounts of data. Asymmetric encryption is typically represented by the RSA algorithm. It has two keys, a public key and a private key. The public key is used for encryption and the private key is used for decryption. For example, the sender encrypts a file with the recipient's public key, and the recipient decrypts it with his own private key. It has high security and is often used for encryption keys, digital signatures, etc. The method of encrypting and storing the instant data after format conversion is not limited here.

[0029] Step S4, in response to the request for instant data production demand sent by the requesting end, security verification is performed on the requesting end. If the security verification passes, the establishment of the first protocol data transmission channel and the second protocol data transmission channel between the closed-loop production management system and the secure shared data management system is allowed. Otherwise, the establishment of the first protocol data transmission channel and the second protocol data transmission channel between the closed-loop production management system and the secure shared data management system is prohibited.

[0030] As a specific embodiment of the present invention, the method for performing security verification on the request end includes: password-based verification or certificate-based verification. Here, the method for performing security verification on the request end is not limited, and other verification methods can also be used.

[0031] Among them, password-based authentication includes: First, static password: This is the most common method. The requester needs to enter a pre-set username and password. Only when the two match successfully can the authentication be passed, just like using a key to open a door. The key (password) and lock (username) must match to enter. Second, dynamic password: including SMS verification code and one-time password generated by hardware token. For example, when transferring money through online banking, the bank will send a SMS verification code to the reserved mobile phone. This verification code is a dynamic password, which is valid for a short time and enhances security.

[0032] Among them, certificate-based verification includes: Digital certificates: issued by an authoritative certificate authority (CA), containing the requester's public key, identity information, etc. The server can confirm the requester's identity by verifying the legitimacy of the certificate (such as checking whether the certificate is expired, revoked, whether the certificate chain is complete, etc.). It is like an identity document with an official seal and certification.

[0033] Step S5, transmitting the instant data encrypted storage package and the decrypted data corresponding to the instant data production demand to the closed-loop production management system through the first protocol data transmission channel and the second protocol data transmission channel respectively.

[0034] As a specific embodiment of the present invention, the instant data encrypted storage package corresponding to the instant data production demand is transmitted to the closed-loop production management system through the first protocol data transmission channel, and the decrypted data corresponding to the instant data production demand is transmitted to the closed-loop production management system through the second protocol data transmission channel; after the instant data encrypted storage package and the decrypted data are transmitted to the closed-loop production management system, the first protocol data transmission channel and the second protocol data transmission channel are both closed.

[0035] Step S6, in response to the first protocol data transmission channel and the second protocol data transmission channel being established, collecting communication performance index data and security index data of the first protocol data transmission channel and the second protocol data transmission channel.

[0036] Specifically, in response to the establishment of the first protocol data transmission channel, the communication performance index data and safety index data of the first protocol data transmission channel are collected. In response to the establishment of the second protocol data transmission channel, the communication performance index data and safety index data of the second protocol data transmission channel are collected.

[0037] Among them, communication performance indicator data include: data reception delay time, number of network interruptions, network signal strength and / or network packet loss rate, etc.

[0038] The security indicator data of the first protocol data transmission channel includes: malicious instructions, malicious links and / or vulnerabilities carried in the data packets transmitted by the first protocol data transmission channel. The security indicator data of the second protocol data transmission channel includes: malicious instructions, malicious links and / or vulnerabilities carried in the data packets transmitted by the second protocol data transmission channel.

[0039] Step S7: Calculate the data synchronization transmission reliability value of the first protocol data transmission channel and the second protocol data transmission channel according to the collected communication performance indicator data of the first protocol data transmission channel and the second protocol data transmission channel.

[0040] Among them, the data synchronization transmission reliability value of the first protocol data transmission channel and the second protocol data transmission channel The calculation formula is as follows: ; in, Indicates the data synchronization transmission reliability value of the first protocol data transmission channel and the second protocol data transmission channel; Indicates the influence weight of data transmission time on the reliability value of data synchronization transmission of the first protocol data transmission channel and the second protocol data transmission channel; Indicates the data receiving delay time of the first protocol data transmission channel; Indicates the time from when data is sent out to when data transmission is completed through the first protocol data transmission channel; Indicates the data receiving delay time of the second protocol data transmission channel; Indicates the time from when data is sent out to when data transmission is completed through the second protocol data transmission channel; Indicates the influence weight of network interruption on the reliability value of data synchronization transmission of the first protocol data transmission channel and the second protocol data transmission channel; Indicates the number of network interruptions of the first protocol data transmission channel after the current first protocol data transmission channel and the second protocol data transmission channel are established; Indicates the first protocol data transmission channel The duration of the network outage; Indicates the number of network interruptions of the second protocol data transmission channel after the current first protocol data transmission channel and the second protocol data transmission channel are established; Indicates the second protocol data transmission channel The duration of the network outage; Indicates the influence weight of the network packet loss rate on the data synchronization transmission reliability value of the first protocol data transmission channel and the second protocol data transmission channel; Indicates the sampling duration for counting the network packet loss rate of the first protocol data transmission channel and the second protocol data transmission channel; Indicates sampling duration The network packet loss rate of the first protocol data transmission channel; Indicates sampling duration The network packet loss rate of the second protocol data transmission channel; Indicates the influence weight of the network signal strength on the data synchronization transmission reliability value of the first protocol data transmission channel and the second protocol data transmission channel; Indicates the network signal strength of the first protocol data transmission channel; Indicates the network signal strength of the second protocol data transmission channel.

[0041] The present application improves the calculation accuracy of the data synchronization transmission reliability value of the first protocol data transmission channel and the second protocol data transmission channel, thereby comparing the data synchronization transmission reliability value of the first protocol data transmission channel and the second protocol data transmission channel with a preset first threshold value according to the data synchronization transmission reliability value of the first protocol data transmission channel and the second protocol data transmission channel. If the data synchronization transmission reliability value of the first protocol data transmission channel and the second protocol data transmission channel is greater than the preset first threshold value, the data transmission channel with a smaller communication performance evaluation value is optimized; otherwise, there is no need to optimize the data transmission channel with a smaller communication performance evaluation value, so that the data transmission synchronization of the first protocol data transmission channel and the second protocol data transmission channel is better and the reliability is higher.

[0042] As another embodiment of the present invention, the present invention further calculates the communication performance evaluation value of the first protocol data transmission channel and the communication performance evaluation value of the second protocol data transmission channel, thereby optimizing the data transmission channel with the smaller communication performance evaluation value.

[0043] definition, represents the communication performance evaluation value of the first protocol data transmission channel, The communication performance evaluation value of the first protocol data transmission channel and the communication performance evaluation value of the second protocol data transmission channel are calculated in the same way.

[0044] Among them, the communication performance evaluation value of the first protocol data transmission channel The calculation formula is as follows: ; in, Indicates the total number of types of communication performance indicator data of the first protocol data transmission channel; Indicates The influence weight of the communication performance indicator data on the communication performance evaluation value; Indicates The value of the communication performance indicator data.

[0045] Step S8, compare the data synchronization transmission reliability value of the first protocol data transmission channel and the second protocol data transmission channel with the preset first threshold value. If the data synchronization transmission reliability value of the first protocol data transmission channel and the second protocol data transmission channel is greater than the preset first threshold value, the data transmission channel with a smaller communication performance evaluation value is optimized. Otherwise, there is no need to optimize the data transmission channel with a smaller communication performance evaluation value.

[0046] It needs to be explained that the present application optimizes the data transmission channels with smaller communication performance evaluation values, so that the data synchronization transmission reliability values ​​of the first protocol data transmission channel and the second protocol data transmission channel are within a preset range, thereby ensuring that the reliability of the first protocol data transmission channel and the second protocol data transmission channel in transmitting the instant data encrypted storage package and the decrypted data to the closed-loop production management system meets the requirements, and ensuring that the time, stability, etc. of the closed-loop production management system receiving the instant data encrypted storage package and the decrypted data meets the requirements.

[0047] Among them, the method of optimizing the data transmission channel with a smaller communication performance evaluation value is, for example: improving the network signal strength of the data transmission channel, troubleshooting the cause of network interruption of the data transmission channel, or troubleshooting the network packet loss of the data transmission channel.

[0048] Step S9, calculating the comprehensive safety and reliability values ​​of the first protocol data transmission channel and the second protocol data transmission channel according to the collected communication performance index data and security index data of the first protocol data transmission channel and the second protocol data transmission channel.

[0049] The calculation formula for the comprehensive safety and reliability value of the first protocol data transmission channel and the second protocol data transmission channel is as follows: ; in, Indicates the comprehensive safety and reliability value of the first protocol data transmission channel and the second protocol data transmission channel; Indicates the influence weight of the communication performance indicator data on the comprehensive safety and reliability value of the first protocol data transmission channel and the second protocol data transmission channel; Indicates the influence weight of the security index data on the comprehensive security and reliability value of the first protocol data transmission channel and the second protocol data transmission channel; ; Indicates the influencing factor of data receiving delay time; Indicates the impact factor of the number of network interruptions; Indicates the influencing factor of network packet loss rate; Indicates the influencing factor of network signal strength; ; Indicates the total number of types of security indicator data collected through the first protocol data transmission channel; Indicates the first protocol data transmission channel Weight factors of safety indicator data; Indicates the first protocol data transmission channel The number of times the safety indicator data is collected; Indicates the first protocol data transmission channel Hazard value of various safety indicator data; Indicates the total number of types of security indicator data collected through the second protocol data transmission channel; Indicates the second protocol data transmission channel Weight factors of safety indicator data; Indicates the second protocol data transmission channel The number of times the safety indicator data is collected; Indicates the second protocol data transmission channel The hazard value of various safety indicator data.

[0050] The present application improves the calculation accuracy of the comprehensive security and reliability values ​​of the first protocol data transmission channel and the second protocol data transmission channel, thereby comparing the comprehensive security and reliability values ​​of the first protocol data transmission channel and the second protocol data transmission channel with a preset security and reliability threshold value. If the comprehensive security and reliability values ​​of the first protocol data transmission channel and the second protocol data transmission channel are greater than the preset security and reliability threshold value, the closed-loop production management system decrypts the instant data encrypted storage package based on the received instant data encrypted storage package and decrypted data, obtains the instant data, and arranges production plans for the instant data. Otherwise, the closed-loop production management system prohibits decryption of the instant data encrypted storage package and prohibits production plans for the instant data, thereby improving the reliability and security of the production plan arrangements of the closed-loop production management system.

[0051] Step S10, compare the comprehensive security and reliability value of the first protocol data transmission channel and the second protocol data transmission channel with the preset security and reliability threshold. If the comprehensive security and reliability value of the first protocol data transmission channel and the second protocol data transmission channel is greater than the preset security and reliability threshold, the closed-loop production management system decrypts the instant data encrypted storage package according to the received instant data encrypted storage package and decrypted data to obtain the instant data. Otherwise, the closed-loop production management system prohibits decryption of the instant data encrypted storage package.

[0052] Specifically, the comprehensive security and reliability value of the first protocol data transmission channel and the second protocol data transmission channel is compared with the preset security and reliability threshold. If the comprehensive security and reliability value of the first protocol data transmission channel and the second protocol data transmission channel is greater than the preset security and reliability threshold, the closed-loop production management system decrypts the encrypted storage package of the instant data according to the received encrypted storage package of the instant data and the decrypted data, obtains the instant data, and arranges production plans for the instant data. Otherwise, the closed-loop production management system prohibits decryption of the encrypted storage package of the instant data and prohibits production plans for the instant data.

[0053] It needs to be explained that the closed-loop production management system rationally arranges printing equipment, paper and other resources according to the instant invoice data, effectively plans the production schedule, and ensures that the instant invoice meets the supply demand.

[0054] It should be explained that the closed-loop production management system stores newly generated instant invoice data and ticket type data into the inventory management system to facilitate inventory counting and replenishment reminders.

[0055] Embodiment 2 like Figure 2 As shown, the present application provides an instant data generation security management system 100, which executes the instant data generation security management method described in Example 1, and the system includes: The data uploading module 10 is used for uploading the instant data to the secure shared data management system in response to the instant data being generated by the instant data generating system.

[0056] The format conversion module 20 is used to convert the format of the open data uploaded to the secure shared data management system into a format recognized by the closed-loop production management system.

[0057] The encryption storage module 30 is used to encrypt and store the instant data after format conversion to obtain an encrypted storage package of the instant data.

[0058] The security verification module 40 is used to respond to the request for immediate data production demand sent by the requesting end and perform security verification on the requesting end. If the security verification passes, the establishment of the first protocol data transmission channel and the second protocol data transmission channel between the closed-loop production management system and the secure shared data management system is allowed. Otherwise, the establishment of the first protocol data transmission channel and the second protocol data transmission channel between the closed-loop production management system and the secure shared data management system is prohibited.

[0059] The data transmission module 50 is used to transmit the instant data encrypted storage package and the decrypted data corresponding to the instant data production demand to the closed-loop production management system through the first protocol data transmission channel and the second protocol data transmission channel respectively.

[0060] The data collection module 60 is used to collect communication performance index data and security index data of the first protocol data transmission channel and the second protocol data transmission channel in response to the establishment of the first protocol data transmission channel and the second protocol data transmission channel.

[0061] The data processor 70 is used to calculate the data synchronization transmission reliability value of the first protocol data transmission channel and the second protocol data transmission channel according to the collected communication performance indicator data of the first protocol data transmission channel and the second protocol data transmission channel.

[0062] The data comparator 80 is used to compare the data synchronization transmission reliability value of the first protocol data transmission channel and the second protocol data transmission channel with a preset first threshold value. If the data synchronization transmission reliability value of the first protocol data transmission channel and the second protocol data transmission channel is greater than the preset first threshold value, the data transmission channel with a smaller communication performance evaluation value is optimized; otherwise, there is no need to optimize the data transmission channel with a smaller communication performance evaluation value.

[0063] The data processor 70 is further used to calculate the comprehensive safety and reliability value of the first protocol data transmission channel and the second protocol data transmission channel according to the collected communication performance index data and security index data of the first protocol data transmission channel and the second protocol data transmission channel.

[0064] The data comparator 80 is also used to compare the comprehensive safety and reliability value of the first protocol data transmission channel and the second protocol data transmission channel with the preset safety and reliability threshold. If the comprehensive safety and reliability value of the first protocol data transmission channel and the second protocol data transmission channel is greater than the preset safety and reliability threshold, the closed-loop production management system decrypts the instant data encrypted storage package based on the received instant data encrypted storage package and decrypted data to obtain the instant data. Otherwise, the closed-loop production management system prohibits decryption of the instant data encrypted storage package.

[0065] The present application also provides a computer storage medium, wherein the computer storage medium stores computer instructions, and when the computer instructions are called, they are used to execute the address mapping method of the large-capacity solid-state hard disk. The computer storage medium contains one or more program instructions, and the one or more program instructions are used by the processor to execute a method for secure management of instant data generation.

[0066] The embodiments disclosed in the present invention provide a computer-readable storage medium, in which computer program instructions are stored. When the computer program instructions are executed on a computer, the computer executes the above-mentioned instant data generation security management method.

[0067] An embodiment of the present invention provides a processor for processing the above-mentioned instant data generation security management method.

[0068] In the embodiment of the present invention, the processor may be an integrated circuit chip having the ability to process signals. The processor may be a general-purpose processor, a digital signal processor (DSP), an application-specific integrated circuit (ASIC), a field programmable gate array (FPGA), or other programmable logic devices, discrete gate or transistor logic devices, or discrete hardware components.

[0069] The methods, steps and logic block diagrams disclosed in the embodiments of the present invention can be implemented or executed. The general processor can be a microprocessor or the processor can also be any conventional processor, etc. The steps of the method disclosed in the embodiments of the present invention can be directly embodied as a hardware decoding processor for execution, or can be executed by a combination of hardware and software modules in the decoding processor. The software module can be located in a mature storage medium in the field such as a random access memory, a flash memory, a read-only memory, a programmable read-only memory or an electrically erasable programmable memory, a register, etc. The processor reads the information in the storage medium and completes the steps of the above method in combination with its hardware.

[0070] The storage medium may be a memory, which may be, for example, a volatile memory or a nonvolatile memory, or may include both volatile and nonvolatile memory.

[0071] Among them, the non-volatile memory can be a read-only memory (ROM), a programmable read-only memory (PROM), an erasable programmable read-only memory (EPROM), an electrically erasable programmable read-only memory (EEPROM), or a flash memory. The volatile memory can be a random access memory (RAM), which is used as an external cache. By way of example and not limitation, many forms of RAM are available, such as static random access memory (SRAM), dynamic random access memory (DRAM), synchronous dynamic random access memory (SDRAM), double data rate synchronous dynamic random access memory (DDRSDRAM), enhanced synchronous dynamic random access memory (ESDRAM), synchronous link dynamic random access memory (SLDRAM) and direct RAM bus random access memory (DRRAM).

[0072] The beneficial effects achieved by this application are as follows: (1) This application encrypts and stores the instant lottery data and performs security verification on the requesting end that sends the instant lottery data production demand, thereby improving the security of the instant lottery data transmission process.

[0073] (2) The present application improves the calculation accuracy of the data synchronization transmission reliability value of the first protocol data transmission channel and the second protocol data transmission channel, thereby comparing the data synchronization transmission reliability value of the first protocol data transmission channel and the second protocol data transmission channel with a preset first threshold value according to the data synchronization transmission reliability value of the first protocol data transmission channel and the second protocol data transmission channel. If the data synchronization transmission reliability value of the first protocol data transmission channel and the second protocol data transmission channel is greater than the preset first threshold value, the data transmission channel with a smaller communication performance evaluation value is optimized. Otherwise, there is no need to optimize the data transmission channel with a smaller communication performance evaluation value, so that the data transmission synchronization of the first protocol data transmission channel and the second protocol data transmission channel is better and the reliability is higher.

[0074] (3) The present application improves the calculation accuracy of the comprehensive security and reliability values ​​of the first protocol data transmission channel and the second protocol data transmission channel, thereby comparing the comprehensive security and reliability values ​​of the first protocol data transmission channel and the second protocol data transmission channel with the preset security and reliability threshold. If the comprehensive security and reliability values ​​of the first protocol data transmission channel and the second protocol data transmission channel are greater than the preset security and reliability threshold, the closed-loop production management system decrypts the instant data encrypted storage package based on the received instant data encrypted storage package and decrypted data, obtains the instant data, and arranges production plans for the instant data. Otherwise, the closed-loop production management system prohibits decryption of the instant data encrypted storage package and prohibits production plans for the instant data, thereby improving the reliability and security of the production plan arrangements of the closed-loop production management system.

[0075] In the description of this application, the terms "first" and "second" are used for descriptive purposes only and should not be understood as indicating or implying relative importance or implicitly indicating the number of technical features indicated. Thus, a feature defined as "first" or "second" may explicitly or implicitly include one or more of the features. In the description of this application, "plurality" means two or more, unless otherwise clearly and specifically defined.

[0076] In the description of the present application, the word "for example" is used to mean "used as an example, illustration or explanation". Any embodiment described as "for example" in the present application is not necessarily to be construed as being more preferred or advantageous than other embodiments. The following description is given to enable any technician in the field to implement and use the present invention. In the following description, details are listed for the purpose of explanation. It should be understood that a person of ordinary skill in the art can recognize that the present invention can be implemented without using these specific details. In other examples, well-known structures and processes will not be elaborated in detail to avoid obscuring the description of the present invention with unnecessary details. Therefore, the present invention is not intended to be limited to the embodiments shown, but is consistent with the widest scope consistent with the principles and features disclosed in the present application.

[0077] The above description is only an embodiment of the present invention and is not intended to limit the present invention. For those skilled in the art, the present invention may have various modifications and variations. Any modification, equivalent substitution, improvement, etc. made within the spirit and principle of the present invention should be included in the scope of the claims of the present invention.

Claims

1. A method for managing instant data generation security, characterized in that: The method includes: In response to the instant data generation system generating the instant data, uploading the instant data to the secure shared data management system; Convert the format of the open data uploaded to the secure shared data management system into a format that can be recognized by the closed-loop production management system; Encrypting and storing the instant data after the format conversion to obtain an encrypted storage package of the instant data; In response to a request for instant data production demand sent by a requesting end, security verification is performed on the requesting end. If the security verification passes, the establishment of a first protocol data transmission channel and a second protocol data transmission channel between the closed-loop production management system and the secure shared data management system is allowed; otherwise, the establishment of the first protocol data transmission channel and the second protocol data transmission channel between the closed-loop production management system and the secure shared data management system is prohibited; The instant data encrypted storage package and the decrypted data corresponding to the instant data production demand are transmitted to the closed-loop production management system respectively through the first protocol data transmission channel and the second protocol data transmission channel.

2. The instant data generation safety management method according to claim 1, characterized in that: The method further includes: In response to the establishment of the first protocol data transmission channel and the second protocol data transmission channel, collecting communication performance index data and security index data of the first protocol data transmission channel and the second protocol data transmission channel; Calculate the data synchronization transmission reliability value of the first protocol data transmission channel and the second protocol data transmission channel according to the collected communication performance indicator data of the first protocol data transmission channel and the second protocol data transmission channel; Compare the data synchronization transmission reliability values ​​of the first protocol data transmission channel and the second protocol data transmission channel with the preset first threshold. If the data synchronization transmission reliability values ​​of the first protocol data transmission channel and the second protocol data transmission channel are greater than the preset first threshold, optimize the data transmission channel with a smaller communication performance evaluation value. Otherwise, there is no need to optimize the data transmission channel with a smaller communication performance evaluation value.

3. The instant data generation safety management method according to claim 2, characterized in that: The method further includes: Calculate the comprehensive safety and reliability value of the first protocol data transmission channel and the second protocol data transmission channel according to the collected communication performance index data and security index data of the first protocol data transmission channel and the second protocol data transmission channel; Compare the comprehensive security and reliability value of the first protocol data transmission channel and the second protocol data transmission channel with the preset security and reliability threshold. If the comprehensive security and reliability value of the first protocol data transmission channel and the second protocol data transmission channel is greater than the preset security and reliability threshold, the closed-loop production management system decrypts the instant data encrypted storage package according to the received instant data encrypted storage package and decrypted data to obtain the instant data. Otherwise, the closed-loop production management system prohibits decryption of the instant data encrypted storage package.

4. The instant data generation safety management method according to claim 2, characterized in that: Communication performance indicator data include: data reception delay time, number of network interruptions, network signal strength and / or network packet loss rate.

5. The instant data generation safety management method according to claim 2, characterized in that: The security indicator data of the first protocol data transmission channel includes: malicious instructions, malicious links and / or vulnerabilities carried in the data packets transmitted by the first protocol data transmission channel; malicious instructions, malicious links and / or vulnerabilities carried in the data packets transmitted by the second protocol data transmission channel.

6. The instant data generation safety management method according to claim 2, characterized in that: The communication performance evaluation value of the first protocol data transmission channel and the communication performance evaluation value of the second protocol data transmission channel are calculated in the same manner; The calculation formula of the communication performance evaluation value of the first protocol data transmission channel is as follows: ； in, Indicates the communication performance evaluation value of the first protocol data transmission channel; Indicates the total number of types of communication performance indicator data of the first protocol data transmission channel; Indicates The influence weight of the communication performance indicator data on the communication performance evaluation value; Indicates The value of the communication performance indicator data.

7. The instant data generation safety management method according to claim 1, characterized in that: That is, after the data encryption storage package and the decrypted data are transmitted to the closed-loop production management system, the first protocol data transmission channel and the second protocol data transmission channel are both closed.

8. An instant data generation safety management system, characterized in that: The method according to any one of claims 1 to 7 is implemented, the system comprising: A data uploading module, for responding to the instant data generation system generating instant data, uploading the instant data to the secure shared data management system; A format conversion module, used to convert the format of the open data uploaded to the secure shared data management system into a format recognized by the closed-loop production management system; The encryption storage module is used to encrypt and store the instant data after the format conversion to obtain an encrypted storage package of the instant data; A security verification module, for responding to a request from a requesting end to send an immediate data production demand, and performing security verification on the requesting end; if the security verification is passed, the establishment of a first protocol data transmission channel and a second protocol data transmission channel between the closed-loop production management system and the secure shared data management system is allowed; otherwise, the establishment of the first protocol data transmission channel and the second protocol data transmission channel between the closed-loop production management system and the secure shared data management system is prohibited; The data transmission module is used to transmit the instant data encrypted storage package and decrypted data corresponding to the instant data production demand to the closed-loop production management system through the first protocol data transmission channel and the second protocol data transmission channel respectively.

9. The instant data generation safety management system according to claim 8, characterized in that: The system also includes: A data collection module, configured to collect communication performance index data and security index data of the first protocol data transmission channel and the second protocol data transmission channel in response to the establishment of the first protocol data transmission channel and the second protocol data transmission channel; A data processor, configured to calculate a data synchronization transmission reliability value of the first protocol data transmission channel and the second protocol data transmission channel according to the collected communication performance indicator data of the first protocol data transmission channel and the second protocol data transmission channel; A data comparator is used to compare the data synchronization transmission reliability value of the first protocol data transmission channel and the second protocol data transmission channel with a preset first threshold value. If the data synchronization transmission reliability value of the first protocol data transmission channel and the second protocol data transmission channel is greater than the preset first threshold value, the data transmission channel with a smaller communication performance evaluation value is optimized; otherwise, there is no need to optimize the data transmission channel with a smaller communication performance evaluation value.

10. The instant data generation safety management system according to claim 9, characterized in that: The data processor is further used to calculate the comprehensive safety and reliability value of the first protocol data transmission channel and the second protocol data transmission channel according to the collected communication performance index data and security index data of the first protocol data transmission channel and the second protocol data transmission channel; The data comparator is also used to compare the comprehensive safety and reliability value of the first protocol data transmission channel and the second protocol data transmission channel with the preset safety and reliability threshold. If the comprehensive safety and reliability value of the first protocol data transmission channel and the second protocol data transmission channel is greater than the preset safety and reliability threshold, the closed-loop production management system decrypts the instant data encrypted storage package based on the received instant data encrypted storage package and decrypted data to obtain the instant data. Otherwise, the closed-loop production management system prohibits decryption of the instant data encrypted storage package.

Images