An instant data generation security management method and system

Abstract

The present application provides an on-demand data generation security management method and system, which relates to the field of data processing. The method includes: in response to the on-demand data generation system generating on-demand data, uploading the on-demand data to the secure shared data management system; converting the format of the on-demand data uploaded to the secure shared data management system into a format recognizable by the closed-loop production management system; encrypting and storing the on-demand data after format conversion; in response to a request from the requester to send an on-demand data production requirement, performing security verification on the requester. If the security verification passes, establishing a first protocol data transmission channel and a second protocol data transmission channel between the closed-loop production management system and the secure shared data management system, and respectively transmitting the encrypted storage package and decrypted data of the on-demand data corresponding to the on-demand data production requirement to the closed-loop production management system through the first protocol data transmission channel and the second protocol data transmission channel. The present application improves the security of the on-demand data transmission process.

Description

Technical Field

[0001] This application relates to the technical field of data processing, and particularly to a method and system for secure management of instant data generation. Background Art

[0002] Instant lottery tickets are printed first and then sold. The printing of lottery tickets is completed according to the pre-made lottery data. Whether each lottery ticket wins or not is determined after the lottery data generation is completed. The data of instant lottery tickets is the root of instant lottery tickets. Therefore, the generation of instant lottery ticket data has become an important part of the production and sales link of instant lottery tickets, which involves the accuracy, security of lottery data, and the unpredictability of lottery winning. In the data generation link, software technology, encryption technology, and mathematical knowledge are needed to ensure. At the same time, for internal personnel, systems and processes are required to control, to the greatest extent possible, the access to or contact with lottery data to ensure the security of lottery tickets.

[0003] Therefore, the technical problem that needs to be solved urgently at present is: how to securely manage instant lottery ticket data and improve the security of the instant lottery ticket data transmission process. Summary of the Invention

[0004] The purpose of this application is to provide a method and system for secure management of instant data generation, so as to improve the security of the instant lottery ticket data transmission process.

[0005] To achieve the above object, as the first aspect of this application, this application provides a method for secure management of instant data generation, which includes: in response to the generation of instant data by the instant data generation system, uploading the instant data to the secure shared data management system; converting the format of the instant data uploaded to the secure shared data management system into a format recognizable by the closed-loop production management system; encrypting and storing the format-converted instant data to obtain an encrypted storage package of instant data; in response to a request from the request side for an instant data production requirement, performing a security verification on the request side. If the security verification passes, establishing a first protocol data transmission channel and a second protocol data transmission channel between the closed-loop production management system and the secure shared data management system is allowed, otherwise, establishing the first protocol data transmission channel and the second protocol data transmission channel between the closed-loop production management system and the secure shared data management system is prohibited; transmitting the encrypted storage package of instant data corresponding to the instant data production requirement and the decrypted data to the closed-loop production management system through the first protocol data transmission channel and the second protocol data transmission channel respectively.

[0006] The instant data generation security management method as described above, wherein the method further includes: in response to the establishment of the first protocol data transmission channel and the second protocol data transmission channel, collecting communication performance index data and security index data of the first protocol data transmission channel and the second protocol data transmission channel; calculating the data synchronous transmission reliability values of the first protocol data transmission channel and the second protocol data transmission channel according to the collected communication performance index data of the first protocol data transmission channel and the second protocol data transmission channel; comparing the data synchronous transmission reliability values of the first protocol data transmission channel and the second protocol data transmission channel with a preset first threshold value. If the data synchronous transmission reliability values of the first protocol data transmission channel and the second protocol data transmission channel are greater than the preset first threshold value, optimizing the data transmission channel with a smaller communication performance evaluation value, otherwise, there is no need to optimize the data transmission channel with a smaller communication performance evaluation value.

[0007] The instant data generation security management method as described above, wherein the method further includes: calculating the comprehensive security reliability values of the first protocol data transmission channel and the second protocol data transmission channel according to the collected communication performance index data and security index data of the first protocol data transmission channel and the second protocol data transmission channel; comparing the comprehensive security reliability values of the first protocol data transmission channel and the second protocol data transmission channel with a preset security reliability threshold value. If the comprehensive security reliability values of the first protocol data transmission channel and the second protocol data transmission channel are greater than the preset security reliability threshold value, the closed-loop production management system decrypts the instant data encryption storage package according to the received instant data encryption storage package and decrypted data to obtain the instant data, otherwise, the closed-loop production management system prohibits decrypting the instant data encryption storage package.

[0008] The instant data generation security management method as described above, wherein the communication performance index data includes: data reception delay time, number of network interruptions, network signal strength, and / or network packet loss rate.

[0009] The instant data generation security management method as described above, wherein the security index data of the first protocol data transmission channel includes: malicious instructions, malicious links, and / or vulnerabilities carried in the data packets transmitted by the first protocol data transmission channel; malicious instructions, malicious links, and / or vulnerabilities carried in the data packets transmitted by the second protocol data transmission channel.

[0010] The instant data generation security management method as described above, wherein the calculation method of the communication performance evaluation value of the first protocol data transmission channel is the same as that of the second protocol data transmission channel; wherein, the calculation formula of the communication performance evaluation value of the first protocol data transmission channel is as follows:

[0011] ;

[0012] Among them, represents the communication performance evaluation value of the first protocol data transmission channel; represents the total number of types of communication performance index data of the first protocol data transmission channel; represents the influence weight of the nth type of communication performance index data on the communication performance evaluation value; represents the value of the nth type of communication performance index data.

[0013] In the instant-on data generation security management method as described above, after the instant-on data encryption storage package and the decrypted data are both transmitted to the closed-loop production management system, both the first protocol data transmission channel and the second protocol data transmission channel are closed.

[0014] As a second aspect of the present application, the present application provides an instant-on data generation security management system that executes the instant-on data generation security management method. The system includes:

[0015] A data upload module, configured to upload instant-on data to the secure shared data management system in response to the instant-on data generation system generating instant-on data;

[0016] A format conversion module, configured to convert the format of the instant-on data uploaded to the secure shared data management system into a format recognizable by the closed-loop production management system;

[0017] An encryption storage module, configured to encrypt and store the instant-on data after format conversion to obtain an instant-on data encryption storage package;

[0018] A security verification module, configured to perform security verification on the request side in response to a request for instant-on data production requirements sent by the request side. If the security verification passes, it allows the establishment of the first protocol data transmission channel and the second protocol data transmission channel between the closed-loop production management system and the secure shared data management system. Otherwise, it prohibits the establishment of the first protocol data transmission channel and the second protocol data transmission channel between the closed-loop production management system and the secure shared data management system;

[0019] A data transmission module, configured to transmit the instant-on data encryption storage package and the decrypted data corresponding to the instant-on data production requirements to the closed-loop production management system through the first protocol data transmission channel and the second protocol data transmission channel respectively.

[0020] In the instant-on data generation security management system as described above, the system further includes:

[0021] A data acquisition module, configured to acquire the communication performance index data and the security index data of the first protocol data transmission channel and the second protocol data transmission channel in response to the establishment of the first protocol data transmission channel and the second protocol data transmission channel.

[0022] A data processor, configured to calculate the data synchronous transmission reliability values of the first protocol data transmission channel and the second protocol data transmission channel according to the collected communication performance index data of the first protocol data transmission channel and the second protocol data transmission channel.

[0023] A data comparator, configured to compare the data synchronous transmission reliability values of the first protocol data transmission channel and the second protocol data transmission channel with a preset first threshold. If the data synchronous transmission reliability values of the first protocol data transmission channel and the second protocol data transmission channel are greater than the preset first threshold, optimize the data transmission channel with a smaller communication performance evaluation value; otherwise, there is no need to optimize the data transmission channel with a smaller communication performance evaluation value.

[0024] The instant-on data generation security management system as described above, wherein the data processor is further configured to calculate the comprehensive security reliability values of the first protocol data transmission channel and the second protocol data transmission channel according to the collected communication performance index data and security index data of the first protocol data transmission channel and the second protocol data transmission channel.

[0025] The data comparator is further configured to compare the comprehensive security reliability values of the first protocol data transmission channel and the second protocol data transmission channel with a preset security reliability threshold. If the comprehensive security reliability values of the first protocol data transmission channel and the second protocol data transmission channel are greater than the preset security reliability threshold, the closed-loop production management system decrypts the instant-on data encryption storage package according to the received instant-on data encryption storage package and decrypted data to obtain the instant-on data; otherwise, the closed-loop production management system prohibits decrypting the instant-on data encryption storage package.

[0026] The beneficial effects achieved by this application are as follows:

[0027] (1) This application encrypts and stores instant-on data and performs security verification on the request side that sends the production requirements of instant-on data, improving the security of the instant-on lottery data transmission process.

[0028] (2) The present application improves the calculation accuracy of the data synchronous transmission reliability values of the first protocol data transmission channel and the second protocol data transmission channel, and thus compares the data synchronous transmission reliability values of the first protocol data transmission channel and the second protocol data transmission channel with a preset first threshold. If the data synchronous transmission reliability values of the first protocol data transmission channel and the second protocol data transmission channel are greater than the preset first threshold, the data transmission channel with a smaller communication performance evaluation value is optimized; otherwise, there is no need to optimize the data transmission channel with a smaller communication performance evaluation value, so that the data transmission synchronization of the first protocol data transmission channel and the second protocol data transmission channel is better and the reliability is higher.

[0029] (3) The present application improves the calculation accuracy of the comprehensive security reliability values of the first protocol data transmission channel and the second protocol data transmission channel, and thus compares the comprehensive security reliability values of the first protocol data transmission channel and the second protocol data transmission channel with a preset security reliability threshold. If the comprehensive security reliability values of the first protocol data transmission channel and the second protocol data transmission channel are greater than the preset security reliability threshold, the closed-loop production management system decrypts the immediately available data encrypted storage packet according to the received immediately available data encrypted storage packet and the decrypted data to obtain the immediately available data, and arranges the production plan for the immediately available data; otherwise, the closed-loop production management system prohibits decrypting the immediately available data encrypted storage packet and prohibits arranging the production plan for the immediately available data, improving the reliability and security of the production plan arrangement of the closed-loop production management system. BRIEF DESCRIPTION OF THE DRAWINGS

[0030] In order to more clearly illustrate the technical solutions in the embodiments of the present application or the prior art, the following will briefly introduce the drawings required for use in the description of the embodiments or the prior art. Obviously, the drawings in the following description are only some embodiments recorded in the present application. For those skilled in the art, other drawings can also be obtained according to these drawings.

[0031] Figure 1 It is a flowchart of a method for generating and managing the security of immediately available data according to an embodiment of the present application.

[0032] Figure 2 It is a schematic structural diagram of a system for generating and managing the security of immediately available data according to an embodiment of the present application. DETAILED DESCRIPTION OF THE EMBODIMENTS

[0033] Combined with the accompanying drawings in the embodiments of the present application, the technical solutions in the embodiments of the present application are clearly and completely described. Obviously, the described embodiments are part of the embodiments of the present application, rather than all the embodiments. Based on the embodiments in the present application, all other embodiments obtained by those skilled in the art without creative efforts belong to the scope of protection of the present application. Embodiment 1

[0034] As Figure 1 shown, the present application provides an on-demand data generation security management method, and the method includes:

[0035] Step S1, in response to the on-demand data generation system generating on-demand data, upload the on-demand data to the secure shared data management system.

[0036] The on-demand data includes: ticket type, estimated circulation, ticket face design data, etc.

[0037] It should be explained that since the speed of generating on-demand data by the on-demand data generation system is much faster than the speed of receiving and processing data by the closed-loop production management system, directly transmitting the on-demand data generated by the on-demand data generation system to the closed-loop production management system may cause data congestion and system crashes. Therefore, uploading the on-demand data generated by the on-demand data generation system to the secure shared data management system not only improves the security of the on-demand data, but also solves the problem of data congestion and system crashes that may occur in the closed-loop production management system.

[0038] Step S2, convert the format of the on-demand data uploaded to the secure shared data management system into the format recognized by the closed-loop production management system.

[0039] Specifically, convert the on-demand data into the format recognized by the closed-loop production management system. The format recognized by the closed-loop production management system, for example, stipulates the data type, data length, and data fields stored in the data. The present application converts the format of the on-demand data uploaded to the secure shared data management system into the format recognized by the closed-loop production management system, so that the closed-loop production management system can recognize the on-demand data, and thus arrange the production plan according to the on-demand data. For example, the on-demand data generated by the on-demand data generation system is in XML format, while the format recognized by the closed-loop production management system is JSON format, then convert the XML format on-demand data generated by the on-demand data generation system into JSON format. For example, the date field in the on-demand data generated by the on-demand data generation system is in the format of "year-month-day", while the format recognized by the closed-loop production management system is in the format of "month / day / year", then convert the date field in the on-demand data generated by the on-demand data generation system into the format of "month / day / year" recognized by the closed-loop production management system.

[0040] Step S3, encrypt and store the instant - opening data after format conversion to obtain an encrypted storage package of instant - opening data.

[0041] As a specific embodiment of the present invention, the encrypted storage includes the following methods: Symmetric encryption, such as using AES (Advanced Encryption Standard), DES (Data Encryption Standard) algorithms. This encryption method uses the same key for both encryption and decryption. Just like using the same key to lock and unlock a door, its advantages are fast speed and high efficiency, and it is often used for encrypting a large amount of data. Asymmetric encryption, with the RSA algorithm as a typical representative. It has two keys, a public key and a private key. The public key is used for encryption, and the private key is used for decryption. For example, the sender encrypts a file with the recipient's public key, and the recipient decrypts it with their own private key. It has high security and is often used for encrypting keys, digital signatures, etc. The method of encrypting and storing the instant - opening data after format conversion is not limited herein.

[0042] Step S4, in response to a request from the requester for instant - opening data production requirements, perform a security verification on the requester. If the security verification passes, allow the establishment of the first protocol data transmission channel and the second protocol data transmission channel between the closed - loop production management system and the secure shared data management system; otherwise, prohibit the establishment of the first protocol data transmission channel and the second protocol data transmission channel between the closed - loop production management system and the secure shared data management system.

[0043] As a specific embodiment of the present invention, the method of performing a security verification on the requester includes: password - based verification or certificate - based verification. Herein, the method of performing a security verification on the requester is not limited, and other verification methods can also be used.

[0044] Among them, password - based verification includes: First, static password: This is the most common way. The requester needs to enter a pre - set username and password. Only when both match successfully can the verification pass, just like using a key to open a door, the key (password) and the lock (username) must match to enter. Second, dynamic password: including SMS verification codes, one - time passwords generated by hardware tokens. For example, when transferring money through online banking, the bank will send an SMS verification code to the reserved mobile phone. This verification code is a dynamic password and is valid for a short period of time, enhancing security.

[0045] Among them, certificate - based verification includes: Digital certificate: Issued by an authoritative certificate authority (CA), it contains the public key, identity information, etc. of the requester. The server can confirm the identity of the requester by verifying the legitimacy of the certificate (such as checking whether the certificate has expired, whether it has been revoked, and whether the certificate chain is complete, etc.). It is like an official - stamped identity document.

[0046] Step S5: Transmit the on-demand data encrypted storage package and the decrypted data corresponding to the on-demand data production requirement to the closed-loop production management system through the first protocol data transmission channel and the second protocol data transmission channel respectively.

[0047] As a specific embodiment of the present invention, transmit the on-demand data encrypted storage package corresponding to the on-demand data production requirement to the closed-loop production management system through the first protocol data transmission channel, and transmit the decrypted data corresponding to the on-demand data production requirement to the closed-loop production management system through the second protocol data transmission channel; after both the on-demand data encrypted storage package and the decrypted data are transmitted to the closed-loop production management system, both the first protocol data transmission channel and the second protocol data transmission channel are closed.

[0048] Step S6: In response to the establishment of the first protocol data transmission channel and the second protocol data transmission channel, collect the communication performance index data and security index data of the first protocol data transmission channel and the second protocol data transmission channel.

[0049] Specifically, in response to the establishment of the first protocol data transmission channel, collect the communication performance index data and security index data of the first protocol data transmission channel. In response to the establishment of the second protocol data transmission channel, collect the communication performance index data and security index data of the second protocol data transmission channel.

[0050] Among them, the communication performance index data includes: data reception delay time, number of network interruptions, network signal strength, and / or network packet loss rate, etc.

[0051] Among them, the security index data of the first protocol data transmission channel includes: malicious instructions, malicious links, and / or vulnerabilities carried in the data packets transmitted by the first protocol data transmission channel. The security index data of the second protocol data transmission channel includes: malicious instructions, malicious links, and / or vulnerabilities carried in the data packets transmitted by the second protocol data transmission channel.

[0052] Step S7: Calculate the data synchronous transmission reliability values of the first protocol data transmission channel and the second protocol data transmission channel according to the collected communication performance index data of the first protocol data transmission channel and the second protocol data transmission channel.

[0053] Among them, the data synchronous transmission reliability values of the first protocol data transmission channel and the second protocol data transmission channel The calculation formula is as follows:

[0054] ;

[0055] Among them, represents the data synchronous transmission reliability values of the first protocol data transmission channel and the second protocol data transmission channel; Indicates the influence weight of data transmission time on the data synchronous transmission reliability value of the first protocol data transmission channel and the second protocol data transmission channel; Indicates the data reception delay time of the first protocol data transmission channel; Indicates the duration from the data sending to the data transmission completion of the first protocol data transmission channel; Indicates the data reception delay time of the second protocol data transmission channel; Indicates the duration from the data sending to the data transmission completion of the second protocol data transmission channel; Indicates the influence weight of network interruption on the data synchronous transmission reliability value of the first protocol data transmission channel and the second protocol data transmission channel; Indicates the number of network interruptions of the first protocol data transmission channel after the establishment of the current first protocol data transmission channel and the second protocol data transmission channel; Indicates the Duration of the th network interruption of the first protocol data transmission channel; Indicates the Duration of the th network interruption of the second protocol data transmission channel; Indicates the sampling duration for statistically calculating the network packet loss rate of the first protocol data transmission channel and the second protocol data transmission channel; Indicates the sampling duration The network packet loss rate of the first protocol data transmission channel within; Indicates the sampling duration The network packet loss rate of the second protocol data transmission channel within; Indicates the influence weight of network signal strength on the data synchronous transmission reliability value of the first protocol data transmission channel and the second protocol data transmission channel; Indicates the network signal strength of the first protocol data transmission channel; Indicates the network signal strength of the second protocol data transmission channel.

[0056] This application improves the calculation accuracy of the data synchronous transmission reliability values of the first protocol data transmission channel and the second protocol data transmission channel, and then compares the data synchronous transmission reliability values of the first protocol data transmission channel and the second protocol data transmission channel with a preset first threshold according to the data synchronous transmission reliability values of the first protocol data transmission channel and the second protocol data transmission channel. If the data synchronous transmission reliability values of the first protocol data transmission channel and the second protocol data transmission channel are greater than the preset first threshold, the data transmission channel with a smaller communication performance evaluation value is optimized; otherwise, there is no need to optimize the data transmission channel with a smaller communication performance evaluation value, so that the data transmission synchronization of the first protocol data transmission channel and the second protocol data transmission channel is better and the reliability is higher.

[0057] As other embodiments of the present invention, the present invention also calculates the communication performance evaluation values of the first protocol data transmission channel and the second protocol data transmission channel, and then optimizes the data transmission channel with a smaller communication performance evaluation value.

[0058] Define represents the communication performance evaluation value of the first protocol data transmission channel represents the communication performance evaluation value of the second protocol data transmission channel. The calculation methods of the communication performance evaluation value of the first protocol data transmission channel and the communication performance evaluation value of the second protocol data transmission channel are the same.

[0059] Among them, the communication performance evaluation value of the first protocol data transmission channel The calculation formula is as follows:

[0060] ;

[0061] Among them, represents the total number of types of communication performance index data of the first protocol data transmission channel; represents the th type of communication performance index data's influence weight on the communication performance evaluation value; represents the th type of communication performance index data value.

[0062] Step S8: Compare the data synchronous transmission reliability values of the first protocol data transmission channel and the second protocol data transmission channel with the preset first threshold. If the data synchronous transmission reliability values of the first protocol data transmission channel and the second protocol data transmission channel are greater than the preset first threshold, optimize the data transmission channel with a smaller communication performance evaluation value; otherwise, there is no need to optimize the data transmission channel with a smaller communication performance evaluation value.

[0063] It should be noted that the present application optimizes the data transmission channels with relatively small communication performance evaluation values, so that the data synchronization transmission reliability values of the first protocol data transmission channel and the second protocol data transmission channel are within a preset range, thereby ensuring that the reliability of the first protocol data transmission channel and the second protocol data transmission channel to transmit the on-demand data encryption storage package and the decryption data to the closed-loop production management system meets the requirements, and ensuring that the time, stability, etc. of the closed-loop production management system receiving the on-demand data encryption storage package and the decryption data meet the requirements.

[0064] Among them, the method for optimizing the data transmission channels with relatively small communication performance evaluation values is, for example: increasing the network signal strength of the data transmission channels, repairing the reasons for network interruption of the data transmission channels, or repairing the network packet loss situation of the data transmission channels.

[0065] Step S9, calculate the comprehensive security reliability values of the first protocol data transmission channel and the second protocol data transmission channel according to the collected communication performance index data and security index data of the first protocol data transmission channel and the second protocol data transmission channel.

[0066] Among them, the calculation formula for the comprehensive security reliability values of the first protocol data transmission channel and the second protocol data transmission channel is as follows:

[0067] ;

[0068] Among them, represents the comprehensive security reliability values of the first protocol data transmission channel and the second protocol data transmission channel; represents the influence weight of the communication performance index data on the comprehensive security reliability values of the first protocol data transmission channel and the second protocol data transmission channel; represents the influence weight of the security index data on the comprehensive security reliability values of the first protocol data transmission channel and the second protocol data transmission channel; ; represents the influence factor of the data reception delay time; represents the influence factor of the number of network interruptions; represents the influence factor of the network packet loss rate; represents the influence factor of the network signal strength; ; represents the total number of types of security index data collected for the first protocol data transmission channel; represents the th type of security index data of the first protocol data transmission channel; represents the th type of security index data of the first protocol data transmission channel; represents the The hazard value of the security index data Indicates the total number of types of security index data collected from the second protocol data transmission channel Indicates the Weight factor of the nth type of security index data for the second protocol data transmission channel Indicates the Number of times the nth type of security index data for the second protocol data transmission channel is collected Indicates the Hazard value of the nth type of security index data for the second protocol data transmission channel

[0069] This application improves the calculation accuracy of the comprehensive security reliability values of the first protocol data transmission channel and the second protocol data transmission channel, and then compares the comprehensive security reliability values of the first protocol data transmission channel and the second protocol data transmission channel with a preset security reliability threshold. If the comprehensive security reliability values of the first protocol data transmission channel and the second protocol data transmission channel are greater than the preset security reliability threshold, the closed-loop production management system decrypts the received on-demand data encrypted storage package according to the received decryption data to obtain the on-demand data, and arranges production plans for the on-demand data. Otherwise, the closed-loop production management system prohibits decrypting the on-demand data encrypted storage package and prohibits arranging production plans for the on-demand data, thereby improving the reliability and security of the production plan arrangement of the closed-loop production management system.

[0070] Step S10: Compare the comprehensive security reliability values of the first protocol data transmission channel and the second protocol data transmission channel with a preset security reliability threshold. If the comprehensive security reliability values of the first protocol data transmission channel and the second protocol data transmission channel are greater than the preset security reliability threshold, the closed-loop production management system decrypts the received on-demand data encrypted storage package according to the received decryption data to obtain the on-demand data. Otherwise, the closed-loop production management system prohibits decrypting the on-demand data encrypted storage package.

[0071] Specifically, compare the comprehensive security reliability values of the first protocol data transmission channel and the second protocol data transmission channel with a preset security reliability threshold. If the comprehensive security reliability values of the first protocol data transmission channel and the second protocol data transmission channel are greater than the preset security reliability threshold, the closed-loop production management system decrypts the received on-demand data encrypted storage package according to the received decryption data to obtain the on-demand data, and arranges production plans for the on-demand data. Otherwise, the closed-loop production management system prohibits decrypting the on-demand data encrypted storage package and prohibits arranging production plans for the on-demand data.

[0072] It should be noted that the closed-loop production management system reasonably arranges resources such as printing equipment and paper according to the instant data, effectively plans the production schedule, and ensures that the instant tickets meet the supply demand.

[0073] It should be noted that the closed-loop production management system stores the newly generated instant ticket data and data such as ticket types in the inventory management system, which is convenient for inventory checking and replenishment reminder, etc.

[0074] Embodiment 2

[0075] As Figure 2 shown, the present application provides an instant data generation security management system 100, which executes the instant data generation security management method described in Embodiment 1. The system includes:

[0076] A data upload module 10, configured to upload instant data to the secure shared data management system in response to the instant data generation system generating instant data.

[0077] A format conversion module 20, configured to convert the format of the instant data uploaded to the secure shared data management system into a format recognizable by the closed-loop production management system.

[0078] An encryption storage module 30, configured to encrypt and store the instant data after format conversion to obtain an instant data encrypted storage package.

[0079] A security verification module 40, configured to perform security verification on the request side in response to a request for instant data production demand sent by the request side. If the security verification passes, it is allowed to establish a first protocol data transmission channel and a second protocol data transmission channel between the closed-loop production management system and the secure shared data management system; otherwise, it is prohibited to establish a first protocol data transmission channel and a second protocol data transmission channel between the closed-loop production management system and the secure shared data management system.

[0080] A data transmission module 50, configured to transmit the instant data encrypted storage package and the decrypted data corresponding to the instant data production demand to the closed-loop production management system through the first protocol data transmission channel and the second protocol data transmission channel respectively.

[0081] A data acquisition module 60, configured to acquire communication performance index data and security index data of the first protocol data transmission channel and the second protocol data transmission channel in response to the establishment of the first protocol data transmission channel and the second protocol data transmission channel.

[0082] A data processor 70, configured to calculate the data synchronous transmission reliability values of the first protocol data transmission channel and the second protocol data transmission channel according to the acquired communication performance index data of the first protocol data transmission channel and the second protocol data transmission channel.

[0083] A data comparator 80 is configured to compare the data synchronous transmission reliability values of the first protocol data transmission channel and the second protocol data transmission channel with a preset first threshold. If the data synchronous transmission reliability values of the first protocol data transmission channel and the second protocol data transmission channel are greater than the preset first threshold, the data transmission channel with a smaller communication performance evaluation value is optimized; otherwise, there is no need to optimize the data transmission channel with a smaller communication performance evaluation value.

[0084] A data processor 70 is further configured to calculate the comprehensive security reliability values of the first protocol data transmission channel and the second protocol data transmission channel according to the collected communication performance index data and security index data of the first protocol data transmission channel and the second protocol data transmission channel.

[0085] The data comparator 80 is further configured to compare the comprehensive security reliability values of the first protocol data transmission channel and the second protocol data transmission channel with a preset security reliability threshold. If the comprehensive security reliability values of the first protocol data transmission channel and the second protocol data transmission channel are greater than the preset security reliability threshold, the closed-loop production management system decrypts the on-demand data encrypted storage packet according to the received on-demand data encrypted storage packet and decrypted data to obtain the on-demand data; otherwise, the closed-loop production management system prohibits decrypting the on-demand data encrypted storage packet.

[0086] This application also provides a computer storage medium. The computer storage medium stores computer instructions, which are used to execute the address mapping method of the large-capacity solid-state drive when called. The computer storage medium contains one or more program instructions, and one or more program instructions are used to be executed by a processor to implement an on-demand data generation security management method.

[0087] The disclosed embodiment of the present invention provides a computer-readable storage medium, in which computer program instructions are stored. When the computer program instructions run on a computer, the computer is caused to execute the above-mentioned on-demand data generation security management method.

[0088] The embodiment of the present invention provides a processor, which is used to process the above-mentioned on-demand data generation security management method.

[0089] In an embodiment of the present invention, the processor may be an integrated circuit chip with signal processing capabilities. The processor may be a general-purpose processor, a digital signal processor (DSP), an application specific integrated circuit (ASIC), a field programmable gate array (FPGA), or other programmable logic devices, discrete gate or transistor logic devices, or discrete hardware components.

[0090] It can implement or execute the various methods, steps, and logic block diagrams disclosed in the embodiments of the present invention. The general-purpose processor may be a microprocessor, or the processor may also be any conventional processor, etc. The steps of the method disclosed in combination with the embodiments of the present invention can be directly embodied as being executed and completed by a hardware decoding processor, or can be executed and completed by a combination of hardware and software modules in the decoding processor. The software module may be located in a mature storage medium in the art such as a random access memory, a flash memory, a read-only memory, a programmable read-only memory, or an electrically erasable programmable memory, a register, etc. The processor reads the information in the storage medium and combines its hardware to complete the steps of the above method.

[0091] The storage medium may be a memory, for example, it may be a volatile memory or a non-volatile memory, or may include both volatile and non-volatile memories.

[0092] Among them, the non-volatile memory can be a Read-Only Memory (ROM), a Programmable ROM (PROM), an Erasable PROM (EPROM), an Electrically Erasable PROM (EEPROM), or a flash memory. The volatile memory can be a Random Access Memory (RAM), which is used as an external cache. By way of example but not limitation, many forms of RAM are available, such as Static RAM (SRAM), Dynamic RAM (DRAM), Synchronous DRAM (SDRAM), Double Data Rate SDRAM (DDR SDRAM), Enhanced SDRAM (ESDRAM), Synchlink DRAM (SLDRAM), and Direct Rambus RAM (DRRAM).

[0093] The beneficial effects achieved by this application are as follows:

[0094] (1) This application encrypts and stores the instant-on data and verifies the security of the requesting end that requests the production requirements of the instant-on data, improving the security of the instant-on lottery data transmission process.

[0095] (2) This application improves the calculation accuracy of the data synchronization transmission reliability values of the first protocol data transmission channel and the second protocol data transmission channel. Thus, according to the data synchronization transmission reliability values of the first protocol data transmission channel and the second protocol data transmission channel, compare the data synchronization transmission reliability values of the first protocol data transmission channel and the second protocol data transmission channel with a preset first threshold. If the data synchronization transmission reliability values of the first protocol data transmission channel and the second protocol data transmission channel are greater than the preset first threshold, optimize the data transmission channel with a smaller communication performance evaluation value; otherwise, there is no need to optimize the data transmission channel with a smaller communication performance evaluation value, making the data transmission synchronization of the first protocol data transmission channel and the second protocol data transmission channel better and the reliability higher.

[0096] (3) This application improves the calculation accuracy of the comprehensive safety and reliability value of the first protocol data transmission channel and the second protocol data transmission channel, and then compares the comprehensive safety and reliability values of the first protocol data transmission channel and the second protocol data transmission channel with a preset safety and reliability threshold. If the comprehensive safety and reliability values of the first protocol data transmission channel and the second protocol data transmission channel are greater than the preset safety and reliability threshold, the closed-loop production management system decrypts the received on-demand data encryption storage packet and the decrypted data, obtains the on-demand data, and arranges the production plan for the on-demand data. Otherwise, the closed-loop production management system prohibits decrypting the on-demand data encryption storage packet and prohibits arranging the production plan for the on-demand data, thereby improving the reliability and security of the production plan arrangement of the closed-loop production management system.

[0097] In the description of this application, the terms "first" and "second" are only used for descriptive purposes and cannot be construed as indicating or implying relative importance or implicitly specifying the quantity of the indicated technical features. Thus, features defined with "first" and "second" may explicitly or implicitly include one or more of the described features. In the description of this application, "a plurality" means two or more, unless otherwise specifically defined.

[0098] In the description of this application, the term "for example" is used to mean "serving as an example, illustration, or explanation". Any embodiment described as "for example" in this application is not necessarily to be construed as more preferred or more advantageous than other embodiments. The following description is provided to enable any person skilled in the art to make and use the invention. In the following description, details are set forth for the purpose of explanation. It should be understood that those of ordinary skill in the art can recognize that the invention can be practiced without these specific details. In other instances, well-known structures and processes are not described in detail to avoid unnecessary details from obscuring the description of the invention. Therefore, the invention is not intended to be limited to the embodiments shown, but is to be accorded the widest scope consistent with the principles and features disclosed in this application.

[0099] The above description is only for the embodiments of the present invention and is not intended to limit the present invention. For those skilled in the art, the present invention may have various modifications and variations. Any modification, equivalent replacement, improvement, etc. made within the spirit and principle of the present invention shall be included within the scope of the claims of the present invention.

Claims

1. A method for managing instant data generation security, characterized in that: The method includes: In response to the instant data generation system generating the instant data, uploading the instant data to the secure shared data management system; Convert the format of the open data uploaded to the secure shared data management system into a format that can be recognized by the closed-loop production management system; Encrypting and storing the instant data after the format conversion to obtain an encrypted storage package of the instant data; In response to a request for instant data production demand sent by a requesting end, security verification is performed on the requesting end. If the security verification passes, the establishment of a first protocol data transmission channel and a second protocol data transmission channel between the closed-loop production management system and the secure shared data management system is allowed; otherwise, the establishment of the first protocol data transmission channel and the second protocol data transmission channel between the closed-loop production management system and the secure shared data management system is prohibited; Transmitting the instant data encrypted storage package and the decrypted data corresponding to the instant data production demand to the closed-loop production management system through the first protocol data transmission channel and the second protocol data transmission channel respectively; Also includes: In response to the establishment of the first protocol data transmission channel and the second protocol data transmission channel, collecting communication performance index data and security index data of the first protocol data transmission channel and the second protocol data transmission channel; Calculate the data synchronization transmission reliability value of the first protocol data transmission channel and the second protocol data transmission channel according to the collected communication performance indicator data of the first protocol data transmission channel and the second protocol data transmission channel; Compare the data synchronization transmission reliability values ​​of the first protocol data transmission channel and the second protocol data transmission channel with the preset first threshold. If the data synchronization transmission reliability values ​​of the first protocol data transmission channel and the second protocol data transmission channel are greater than the preset first threshold, optimize the data transmission channel with a smaller communication performance evaluation value. Otherwise, there is no need to optimize the data transmission channel with a smaller communication performance evaluation value.

2. The instant data generation safety management method according to claim 1, characterized in that: The method further includes: Calculate the comprehensive safety and reliability value of the first protocol data transmission channel and the second protocol data transmission channel according to the collected communication performance index data and security index data of the first protocol data transmission channel and the second protocol data transmission channel; Compare the comprehensive security and reliability value of the first protocol data transmission channel and the second protocol data transmission channel with the preset security and reliability threshold. If the comprehensive security and reliability value of the first protocol data transmission channel and the second protocol data transmission channel is greater than the preset security and reliability threshold, the closed-loop production management system decrypts the instant data encrypted storage package according to the received instant data encrypted storage package and decrypted data to obtain the instant data. Otherwise, the closed-loop production management system prohibits decryption of the instant data encrypted storage package.

3. The instant data generation safety management method according to claim 1, characterized in that: Communication performance indicator data include: data reception delay time, number of network interruptions, network signal strength and / or network packet loss rate.

4. The instant data generation safety management method according to claim 1, characterized in that: The security indicator data of the first protocol data transmission channel includes: malicious instructions, malicious links and / or vulnerabilities carried in the data packets transmitted by the first protocol data transmission channel; malicious instructions, malicious links and / or vulnerabilities carried in the data packets transmitted by the second protocol data transmission channel.

5. The instant data generation safety management method according to claim 1, characterized in that: The communication performance evaluation value of the first protocol data transmission channel and the communication performance evaluation value of the second protocol data transmission channel are calculated in the same manner; The calculation formula of the communication performance evaluation value of the first protocol data transmission channel is as follows: ； in, Indicates the communication performance evaluation value of the first protocol data transmission channel; Indicates the total number of types of communication performance indicator data of the first protocol data transmission channel; Indicates The influence weight of the communication performance indicator data on the communication performance evaluation value; Indicates The value of the communication performance indicator data.

6. The instant data generation safety management method according to claim 1, characterized in that: That is, after the data encryption storage package and the decrypted data are transmitted to the closed-loop production management system, the first protocol data transmission channel and the second protocol data transmission channel are both closed.

7. An instant data generation safety management system, characterized in that: The method according to any one of claims 1 to 6 is implemented, the system comprising: A data uploading module, for responding to the instant data generation system generating instant data, uploading the instant data to the secure shared data management system; A format conversion module, used to convert the format of the open data uploaded to the secure shared data management system into a format recognized by the closed-loop production management system; The encryption storage module is used to encrypt and store the instant data after the format conversion to obtain an encrypted storage package of the instant data; A security verification module, for responding to a request from a requesting end to send an immediate data production demand, and performing security verification on the requesting end; if the security verification is passed, the establishment of a first protocol data transmission channel and a second protocol data transmission channel between the closed-loop production management system and the secure shared data management system is allowed; otherwise, the establishment of the first protocol data transmission channel and the second protocol data transmission channel between the closed-loop production management system and the secure shared data management system is prohibited; A data transmission module, used to transmit the instant data encrypted storage package and the decrypted data corresponding to the instant data production demand to the closed-loop production management system through the first protocol data transmission channel and the second protocol data transmission channel respectively; Also includes: A data collection module, configured to collect communication performance index data and security index data of the first protocol data transmission channel and the second protocol data transmission channel in response to the establishment of the first protocol data transmission channel and the second protocol data transmission channel; A data processor, configured to calculate a data synchronization transmission reliability value of the first protocol data transmission channel and the second protocol data transmission channel according to the collected communication performance indicator data of the first protocol data transmission channel and the second protocol data transmission channel; A data comparator is used to compare the data synchronization transmission reliability value of the first protocol data transmission channel and the second protocol data transmission channel with a preset first threshold value. If the data synchronization transmission reliability value of the first protocol data transmission channel and the second protocol data transmission channel is greater than the preset first threshold value, the data transmission channel with a smaller communication performance evaluation value is optimized; otherwise, there is no need to optimize the data transmission channel with a smaller communication performance evaluation value.

8. The instant data generation safety management system according to claim 7, characterized in that: The data processor is further used to calculate the comprehensive safety and reliability value of the first protocol data transmission channel and the second protocol data transmission channel according to the collected communication performance index data and security index data of the first protocol data transmission channel and the second protocol data transmission channel; The data comparator is also used to compare the comprehensive safety and reliability value of the first protocol data transmission channel and the second protocol data transmission channel with the preset safety and reliability threshold. If the comprehensive safety and reliability value of the first protocol data transmission channel and the second protocol data transmission channel is greater than the preset safety and reliability threshold, the closed-loop production management system decrypts the instant data encrypted storage package based on the received instant data encrypted storage package and decrypted data to obtain the instant data. Otherwise, the closed-loop production management system prohibits decryption of the instant data encrypted storage package.

Images