Bank data dynamic encryption system based on self-attention mechanism

By introducing self-attention mechanism and dynamic adjustment modules into the bank data encryption system, the problem of lack of flexibility and intelligent adaptability of traditional data security measures is solved, and the balance between data security and efficient operation is achieved, which is suitable for finance and other fields facing complex security threats and large-scale data processing.

CN119646852APending Publication Date: 2025-03-18AGRICULTURAL BANK OF CHINA
View PDF 0 Cites 3 Cited by

Patent Information

Application Number
CN202411739873.4
Authority / Receiving Office
CN · China
Patent Type
Applications(China)
Current Assignee / Owner
Filing Date
2024-11-29
Publication Date
2025-03-18

AI Technical Summary

Technical Problem

Traditional data security measures rely on static rules and fixed parameters, lack flexibility and intelligent adaptability, making it difficult to effectively deal with new attacks and complex security threats, especially when facing large-scale data processing.

Method used

A bank data dynamic encryption system based on a self-attention mechanism is adopted, which includes a data analysis module, a dynamic adjustment module, an encryption execution module, a management module, a performance optimization and testing module, and a document compilation module. Calculate the correlation strength weights between data elements through self-attention mechanisms, dynamically adjust encryption parameters such as key length and number of encryption rounds, and monitor the performance metrics of the encryption algorithm in real time to identify potential risks.

Benefits of technology

It realizes the effect of maintaining data operation efficiently while enhancing data security. By dynamically adjusting encryption parameters and real-time monitoring of performance indicators, the system can flexibly respond to different data characteristics and security threats, avoid performance bottlenecks, and improve the security protection level of data and the stability of the system.

✦ Generated by Eureka AI based on patent content.

Smart Images

  • Figure CN119646852A_ABST
    Figure CN119646852A_ABST
Patent Text Reader

Abstract

The invention provides a bank data dynamic encryption system based on a self-attention mechanism, and is applied to the technical field of data information security. A data analysis module in the bank data dynamic encryption system calculates association strength among data elements by using a self-attention mechanism, so that a dynamic adjustment module can flexibly adjust encryption parameters, such as key length and encryption rounds, according to strength weights. The dynamic adjustment ensures that the encryption strength is tightly matched with the data characteristics, and the security is optimized. And the encryption execution module is responsible for efficiently carrying out data encryption on the basis, so that the processing speed and the security are ensured to be both considered. In addition, the management module identifies the potential risk of the system by monitoring the performance index of the encryption algorithm in real time, and further ensures the stability and high efficiency of the system. In combination with performance optimization, evaluation of a test module and detailed system document support, the system not only improves the security protection level of data, but also maintains efficient operation performance.
Need to check novelty before this filing date? Find Prior Art

Description

Technical Field

[0001] The present invention relates to the field of data information security technology, and in particular to a bank data dynamic encryption system based on a self-attention mechanism. Background Art

[0002] With the rapid development of the information age, data security issues have become increasingly prominent and have become a common focus of attention in all walks of life and at all levels. From personal privacy to corporate secrets to national security, data protection has become a topic that cannot be ignored. The popularization of the Internet, the widespread application of cloud computing, and the rapid growth of IoT devices have led to the generation, transmission, and storage of data at an unprecedented scale and speed. This trend has not only increased the value of data, but also exposed it to diverse and more complex security threats.

[0003] However, traditional security measures rely on static rules and fixed parameters, lack flexibility and intelligent adaptability, and are difficult to effectively respond to new attacks and complex security threats. With the diversification of data types and business models, security requirements have become more complex, and existing technologies are insufficient in protecting different data characteristics. At the same time, the rapid growth of data volume has caused systems to face performance bottlenecks when processing large-scale data, especially in fields such as finance that have high security and real-time requirements. These challenges show that relying solely on traditional security technologies is no longer sufficient to meet the multiple needs of the modern information society.

[0004] Therefore, how to maintain efficient operation of data while enhancing data security has become a technical problem that technical personnel in this field urgently need to solve. Summary of the invention

[0005] In view of the above problems, the present invention provides a bank data dynamic encryption system based on a self-attention mechanism to overcome the above problems or at least partially solve the above problems. The technical solution is as follows:

[0006] A bank data dynamic encryption system based on a self-attention mechanism, the system comprising:

[0007] A data analysis module, used to process the data to be encrypted using a self-attention mechanism, and calculate the association strength weights between the data elements in the data to be encrypted;

[0008] A dynamic adjustment module, configured to dynamically adjust encryption parameters based on each of the association strength weights, wherein the encryption parameters include a key length and a number of encryption rounds;

[0009] An encryption execution module, used to perform a data encryption operation on the data to be encrypted using an encryption algorithm and the encryption parameters to obtain encrypted data;

[0010] A management module, used to collect performance indicator data of the encryption algorithm running in the system in real time, and monitor potential risks of the system based on the performance indicator data;

[0011] A performance optimization and testing module, used to perform performance evaluation on the encryption algorithm and obtain performance evaluation index parameters;

[0012] The documentation module is used to write detailed system design and implementation documents, providing implementation details, parameter selection, performance data and system architecture information.

[0013] Optionally, the data analysis module calculates the association strength weight by a dot product method.

[0014] Optionally, the data analysis module uses the formula:

[0015]

[0016] Calculate the association strength weight, where S i,j is the association strength weight, used to represent the association score between the i-th element and the j-th element in the data to be encrypted; i and x j are respectively the vector representations of the i-th and j-th elements in the encrypted data; W q and W k are the learnable parameter matrices for query and key conversion, respectively; (x i W q ) means to convert the element x i Mapped to the query space; (x j W k ) means to convert the element x j Mapped to the key space; (x i W q )·(x j W k ) represents the dot product between the query and key vectors, which is used to measure the degree of match between the two; The square root of the dimension of the vector space representing the keys.

[0017] Optionally, the adjustment formula of the dynamic adjustment module is:

[0018] L new =L old +β×S i,j

[0019] Among them, L new is the adjusted key length, L old is the key length before adjustment; β is the parameter controlling the adjustment range; S i,j is the association strength weight.

[0020] Optionally, the management module is also used to monitor the system operating status, adjust the system configuration in real time, and record key operations and abnormal events.

[0021] Optionally, the management module is also used to provide a visual monitoring interface.

[0022] Optionally, the performance optimization and testing module is also used to optimize the system based on the performance evaluation index parameters.

[0023] Optionally, the performance optimization and testing module is also used to verify the robustness and reliability of the system under various conditions.

[0024] Optionally, the encryption algorithm is an Advanced Encryption Standard algorithm.

[0025] Optionally, the data encryption operation includes at least one encryption transformation operation of byte substitution, row shift, column obfuscation and round key addition.

[0026] By means of the above technical scheme, the present invention provides a bank data dynamic encryption system based on the self-attention mechanism, including: a data analysis module, which is used to process the encrypted data using the self-attention mechanism and calculate the association strength weights between the data elements in the encrypted data; a dynamic adjustment module, which is used to dynamically adjust the encryption parameters based on the respective association strength weights, wherein the encryption parameters include the key length and the number of encryption rounds; an encryption execution module, which is used to perform data encryption operations on the encrypted data using the encryption algorithm and the encryption parameters to obtain encrypted data; a management module, which is used to collect the performance index data of the encryption algorithm running in the system in real time, and monitor the potential risks of the system based on the performance index data; a performance optimization and testing module, which is used to evaluate the performance of the encryption algorithm and obtain the performance evaluation index parameters; a document compilation module, which is used to write detailed system design and implementation documents, and provide implementation details, parameter selection, performance data and system architecture information. The present invention achieves the effect of maintaining efficient data operation while enhancing data security by introducing the bank data dynamic encryption system with the self-attention mechanism. The data analysis module in the system uses the self-attention mechanism to calculate the strength of association between data elements, so that the dynamic adjustment module can flexibly adjust encryption parameters such as key length and number of encryption rounds according to these strength weights. This dynamic adjustment ensures that the encryption strength closely matches the data characteristics and optimizes security. The encryption execution module is responsible for efficiently encrypting data on this basis to ensure that both processing speed and security are taken into account. In addition, the management module further ensures the stability and efficiency of the system by monitoring the performance indicators of the encryption algorithm in real time and identifying potential risks in the system. Combined with the evaluation of the performance optimization and testing modules, as well as detailed system documentation support, the system not only improves the security protection level of data, but also maintains efficient operation performance.

[0027] The above description is only an overview of the technical solution of the present invention. In order to more clearly understand the technical means of the present invention, it can be implemented according to the contents of the specification. In order to make the above and other purposes, features and advantages of the present invention more obvious and easy to understand, the specific implementation methods of the present invention are listed below. BRIEF DESCRIPTION OF THE DRAWINGS

[0028] Various other advantages and benefits will become apparent to those of ordinary skill in the art by reading the detailed description of the preferred embodiments below. The accompanying drawings are only for the purpose of illustrating the preferred embodiments and are not to be considered as limiting the present invention. Moreover, the same reference symbols are used throughout the accompanying drawings to represent the same components. In the accompanying drawings:

[0029] Figure 1 A system architecture diagram of a bank data dynamic encryption system based on a self-attention mechanism provided in an embodiment of the present invention is shown. DETAILED DESCRIPTION

[0030] The exemplary embodiments of the present invention will be described in more detail below with reference to the accompanying drawings. Although the exemplary embodiments of the present invention are shown in the accompanying drawings, it should be understood that the present invention can be implemented in various forms and should not be limited by the embodiments set forth herein. On the contrary, these embodiments are provided in order to enable a more thorough understanding of the present invention and to enable the scope of the present invention to be fully communicated to those skilled in the art.

[0031] With the rapid development of the information age, data security issues have become increasingly important and have become the focus of attention from all walks of life. Although existing data security technologies are widely used, they still show many shortcomings when facing the ever-changing security challenges and data characteristics.

[0032] Static encryption parameters: Traditional encryption systems usually rely on fixed encryption parameters, such as fixed key lengths and specific encryption algorithms. Although this static configuration ensures data security to a certain extent, it lacks adaptability to diverse data characteristics. Specifically, it cannot be flexibly adjusted according to the sensitivity and security requirements of different data, which may lead to overprotection in some cases, increase unnecessary computing costs, and may not provide sufficient security in other cases.

[0033] Lack of intelligent adaptability: Existing encryption technology solutions generally lack intelligent adaptability and cannot dynamically adjust encryption strength according to the real-time sensitivity of data and specific usage scenarios. This lack of flexibility may lead to excessive use of resources by the encryption system in some cases, and security risks in other cases, and cannot effectively respond to changing security threats.

[0034] Performance bottleneck: Traditional encryption systems often encounter performance bottlenecks when facing large-scale data processing, especially in data processing environments that require high real-time performance, such as finance. This performance limitation not only affects the efficiency of data processing, but may also cause the system to crash or delay under high load, and cannot meet the real-time and high-efficiency requirements of modern data-intensive applications.

[0035] Lack of dynamism: Many traditional encryption systems are difficult to dynamically adjust, especially in the update and configuration of encryption parameters, which usually requires system shutdown or restart. This operation mode not only reduces the real-time and continuity of the system, but also affects the user experience and cannot meet the high requirements of modern applications for continuous operation and instant response.

[0036] In order to meet the above challenges, the present invention introduces a dynamic encryption system for bank data with a self-attention mechanism and a dynamic adjustment module. Through the self-attention mechanism, the system can intelligently analyze data characteristics and dynamically adjust the encryption level, enhancing adaptability and security. At the same time, performance optimization and improvements in the encryption execution module make the system more efficient when processing large-scale data and avoid performance bottlenecks. These innovations will significantly improve the flexibility and efficiency of the system and meet the growing security needs of complex data.

[0037] like Figure 1 As shown, a schematic diagram of a system architecture of a bank data dynamic encryption system based on a self-attention mechanism provided by an embodiment of the present invention, the system includes:

[0038] The data analysis module is used to process the encrypted data using the self-attention mechanism and calculate the association strength weights between the data elements in the encrypted data.

[0039] Among them, the self-attention mechanism is a technology used in neural networks, especially in natural language processing and computer vision. It captures the dependencies within the sequence by calculating the "attention level" of each element in the input sequence to other elements. In the self-attention mechanism, each element generates a weight that represents the relevance of the element to other elements. In this way, the model can focus on the more important or relevant parts of the sequence.

[0040] The data element is the basic unit of the data to be encrypted, which can be a line of text, a word, a set of values, etc., depending on the characteristics and structure of the data. For example, in a financial transaction record, a data element may be the transaction amount, transaction date, or account ID.

[0041] Among them, the association strength weights are calculated in the self-attention mechanism to quantify the correlation or dependency between data elements. These weights help the system determine which data elements have more important relationships, so as to give them appropriate priority in data processing and encryption strategies. By adjusting the encryption strategy through these weights, stronger encryption parameters can be assigned to more sensitive elements.

[0042] In the dynamic encryption system of banking data, the self-attention mechanism is used to analyze the internal characteristics of the data to be encrypted. By calculating the association strength weight, it identifies which data elements have important relationships, thereby guiding the dynamic adjustment module to optimize the encryption strategy.

[0043] Optionally, the data analysis module calculates the association strength weight by a dot product method.

[0044] Among them, the dot product method is a basic operation in linear algebra, which is mainly used to calculate the similarity or correlation between two vectors.

[0045] In the self-attention mechanism, the dot product is used to calculate the similarity between the query vector and the key vector. Typically, these vectors are extracted from the input data through an embedding matrix. The calculation steps include: generating query, key, and value vectors from the input data. Calculating the dot product of the query vector and the key vector to obtain a similarity score. The dot product result is normalized by the softmax function to obtain the normalized weights. Using these weights, the value vector is weighted summed to generate the attention output. Through the dot product method, the self-attention mechanism can effectively capture the similarity or correlation between data elements, which is used in dynamic encryption strategies to determine the association strength weights of data elements. In this way, the system can identify parts of the data that require stronger encryption protection.

[0046] Optionally, the data analysis module uses the formula:

[0047]

[0048] Calculate the association strength weight, where S i,j is the association strength weight, which is used to represent the association score between the i-th element and the j-th element in the data to be encrypted; i and x j are the vector representations of the i-th and j-th elements in the encrypted data respectively; W q and W k are the learnable parameter matrices for query and key conversion, respectively; (x i W q ) means to convert the element x i Mapped to the query space; (x j W k ) means to convert the element xj Mapped to the key space; (x i W q )·(x j W k ) represents the dot product between the query and key vectors, which is used to measure the degree of match between the two; The square root of the dimension of the vector space representing the keys.

[0049] The data analysis module uses the self-attention mechanism to deeply explore the internal correlations in bank big data, aiming to comprehensively analyze the sensitivity and contextual information of the data. First, the data to be encrypted is preprocessed to form an input sequence X. By learning the mapping relationship between the query and the key, the self-attention mechanism is used to calculate the weight of the correlation strength between each data element and other elements. This process is based on dot product calculation, which ensures a keen perception of the intrinsic correlation of the data. Then, the data analysis module uses these correlation weights to perform a weighted summation on the original data to form a representation that emphasizes the importance of the data and reflects the relative importance of different parts of the data. This lays the foundation for the system to dynamically adjust the encryption level according to sensitivity and context. By automatically learning and adjusting the attention weights, the data analysis module makes the encryption system more adaptable and intelligent. It can adjust the encryption strategy in real time according to different data characteristics, thereby effectively improving the protection effect of diversified data. This method that emphasizes the intrinsic correlation of data provides an innovative solution for improving data security.

[0050] By applying the self-attention mechanism, the system can intelligently identify and adjust the internal associations of the data, which enables the system to more accurately determine the sensitivity of the data and provide a more precise basis for dynamically adjusting the encryption level.

[0051] The dynamic adjustment module is used to dynamically adjust encryption parameters based on each association strength weight, wherein the encryption parameters include key length and number of encryption rounds.

[0052] Among them, encryption parameters are key variables used to configure and influence the execution of encryption algorithms, which determine the security and performance of the encryption process. Different encryption algorithms may have different parameters, but common ones include key length and number of encryption rounds.

[0053] Among them, key length refers to the number of bits of the encryption key. It is one of the important factors that determine the strength of encryption. Longer keys generally provide higher security. Because longer keys increase the number of possible keys, it increases the difficulty of brute force cracking. The key length of the common symmetric encryption algorithm AES can be 128 bits, 192 bits, or 256 bits.

[0054] The number of encryption rounds refers to the number of times the encryption algorithm repeatedly applies the basic encryption operation when encrypting data. Increasing the number of rounds usually improves security because each round increases the complexity of data transformation, making the encryption result more difficult to crack. In the AES encryption algorithm, a 128-bit key usually corresponds to 10 rounds, a 192-bit key corresponds to 12 rounds, and a 256-bit key corresponds to 14 rounds.

[0055] Optionally, the adjustment formula of the dynamic adjustment module is:

[0056] L new =L old +β×S i,j

[0057] Among them, L new is the adjusted key length, L old is the key length before adjustment; β is the parameter controlling the adjustment range; S i,j is the association strength weight.

[0058] The core goal of the dynamic adjustment module is to dynamically adjust encryption parameters based on the internal correlation information provided by the data analysis module to more effectively protect data. This module achieves adaptive response to different data parts by flexibly adjusting encryption parameters such as key length and number of encryption rounds.

[0059] First, the basis for dynamic adjustment is the association strength weights obtained from the data analysis module. These weights reflect the degree of association between data elements and become the key basis for the system to adjust the encryption level according to the characteristics of the data. Then, by applying the adjustment formula, the dynamic adjustment module can make corresponding adjustments according to actual needs. This adjustment process dynamically adjusts the amplitude of encryption parameters based on the output of the data analysis module to adapt to the dynamic characteristics of the data. For example, when a part of the data is identified as more sensitive or important, the dynamic adjustment module increases the encryption strength of that part by increasing the encryption parameters to ensure higher security.

[0060] The implementation of the dynamic adjustment module gives the encryption system the ability to adapt to different data characteristics and intelligently adjust the dynamic nature of the data encryption level. This flexibility and intelligence enables the system to better adapt to various application scenarios and data types, improving the comprehensiveness and practicality of the encryption system. In actual applications, it is also necessary to ensure that the adjusted encryption parameters meet security standards to prevent potential security threats.

[0061] The embodiment of the present invention introduces a dynamic adjustment module, which enables the system to dynamically adjust encryption parameters based on real-time data characteristics. This capability improves the adaptability of the system in different data types and usage scenarios, thereby enhancing the flexibility of the encryption system.

[0062] The embodiment of the present invention realizes intelligent data protection by combining the self-attention mechanism and the dynamic adjustment module. The system can automatically adjust the encryption strategy according to the real-time data characteristics and usage scenarios to achieve a balance between data security and system performance.

[0063] The encryption execution module is used to perform data encryption operations on the data to be encrypted using the encryption algorithm and encryption parameters to obtain the encrypted data.

[0064] Among them, data encryption operation is the process of converting plaintext (unencrypted original data) into ciphertext (encrypted data). This process uses a specific encryption algorithm and encryption parameters (such as keys). Encryption is to ensure the confidentiality of data during storage or transmission, and even if it is intercepted, the data cannot be understood or used.

[0065] The execution steps of the data encryption operation may include: selecting a suitable encryption algorithm according to the requirements, such as a symmetric encryption algorithm (AES, DES) or an asymmetric encryption algorithm (RSA), setting parameters such as key length and number of encryption rounds, and processing the plaintext using the encryption algorithm and parameters to generate ciphertext.

[0066] Among them, encrypted data refers to the output result after encryption operation, that is, ciphertext. Encrypted data should not be readable or decrypted without the key to ensure the confidentiality of the data. The content of the encrypted data should maintain its original integrity and not be tampered with.

[0067] The embodiment of the present invention converts the data to be encrypted into encrypted data through data encryption operation, which can effectively prevent information leakage and unauthorized access. At the same time, using correct encryption parameters can ensure that the encryption process meets security requirements and maintains efficiency.

[0068] Among them, the encryption algorithm may include an advanced encryption standard algorithm and an asymmetric encryption algorithm.

[0069] Optionally, the encryption algorithm is the Advanced Encryption Standard algorithm.

[0070] Optionally, the data encryption operation includes at least one encryption transformation operation of byte substitution, row shift, column obfuscation and round key addition.

[0071] In the encryption execution module provided in the embodiment of the present invention, the core goal is to use the output of the encryption algorithm and the dynamic adjustment module to perform flexible and intelligent data encryption. The implementation of this module includes the following key steps: First, select an algorithm suitable for data encryption, such as AES (Advanced Encryption Standard). AES is a block encryption algorithm that divides the data to be encrypted into fixed-size blocks, and each block undergoes a series of encryption transformations: byte substitution, row shift, column obfuscation, and round key addition.

[0072] SubBytes (byte substitution) transformation: Apply a fixed substitution table to each byte and replace it with another byte to achieve data obfuscation.

[0073] ShiftRows transformation: Circularly shift each row of the data block to increase the obfuscation of the data block.

[0074] MixColumns transformation: Performs column confusion operation on each column of the data block, and increases the diffusion and security of the data by multiplying it by a fixed matrix.

[0075] AddRoundKey transformation: Perform a bitwise XOR operation on each byte with the corresponding round key to introduce additional key information and enhance the complexity and security of the algorithm.

[0076] On this basis, the output of the dynamic adjustment module is used to adjust the parameters in the encryption process. For example, by adjusting the key length, the system can flexibly adjust the encryption level according to the dynamic characteristics and sensitivity of the data.

[0077] In general, the encryption execution module combines the output of the powerful encryption algorithm and the analysis module to give the encryption system the ability to adjust intelligently and dynamically. The system is able to adjust encryption parameters based on real-time data characteristics, thereby improving its adaptability and security. This implementation provides a higher level of intelligence and flexibility for data protection.

[0078] In order to cope with large-scale data processing, the embodiment of the present invention optimizes the performance of the encryption execution module and adopts advanced encryption algorithms and conversion technologies to ensure that the system always runs efficiently and avoids performance bottlenecks.

[0079] The management module is used to collect performance indicator data of the encryption algorithm running in the system in real time, and monitor potential risks of the system based on the performance indicator data.

[0080] Among them, performance indicator data is various types of measurement data used to evaluate the operating status of the system. These indicators can help identify the efficiency, stability and resource utilization of the system. Performance indicator data may include processing speed, resource utilization, response time, throughput and error rate. By monitoring performance indicator data, the embodiments of the present invention can understand the operating status of the system, identify bottlenecks, and optimize performance.

[0081] Among them, potential system risks refer to hidden dangers or problems that may affect the normal operation of the system, which may cause performance degradation or security incidents. Potential system risks may include performance risks, security risks, stability risks, and compliance risks. The embodiments of the present invention can predict potential risks by analyzing performance indicator data to identify abnormal patterns (for example, a sudden surge in resource usage or a significant decrease in encryption processing speed).

[0082] By collecting and analyzing performance indicator data in real time, the management module of the embodiment of the present invention can effectively monitor and respond to potential risks of the system, thereby ensuring the continuity and security of the system.

[0083] Optionally, the management module is also used to monitor the system operating status, adjust the system configuration in real time, and record key operations and abnormal events.

[0084] The system operating status refers to the operating conditions and performance of the system at a specific point in time, including the overall health of the system and the functional operation of each component. The monitoring factors involved in the system operating status include whether the system is running normally, whether the performance indicators are normal, and the current load level of the system.

[0085] Among them, system configuration refers to various settings and parameters related to system operation. System configuration determines the behavior and performance of the system. System configuration can include hardware configuration, software configuration, network configuration and security configuration.

[0086] Among them, critical operations refer to operations or activities that have a significant impact on system operation and security, such as system updates, configuration changes, user management, and data backup and recovery.

[0087] Among them, abnormal events refer to events that deviate from the normal operating state of the system and may indicate system problems or security threats. For example: performance anomalies, security anomalies, and failure events.

[0088] The management module can proactively maintain system stability and security, respond to problems in a timely manner, and retain auditable operation records by monitoring system operating status, adjusting system configuration in real time, and recording key operations and abnormal events. This can help managers quickly identify and resolve potential problems and ensure that the system is in optimal condition at all times.

[0089] Optionally, the management module is also used to provide a visual monitoring interface.

[0090] The visual monitoring interface is a graphical user interface (GUI) that displays system operating status, performance indicators, and key events through charts, graphs, and other visual elements. The visual monitoring interface is designed to enhance the readability and ease of use of data, allowing users to make decisions quickly.

[0091] The visual monitoring interface can update and display the system's operating status and performance indicators in real time, such as CPU usage, memory consumption, network traffic, etc. Users can interact with the interface by clicking, dragging, and other operations to view detailed information or adjust the display method. Users can customize the interface layout and display content as needed to focus on specific indicators or parts of the system. The visual monitoring interface can display alarm information, such as system anomalies, performance bottlenecks, or security threats, and provide quick response options.

[0092] The main task of the management module is to collect real-time performance indicator data of the encryption algorithm running in the system, and monitor the potential risks of the system based on this information.

[0093] First, the management module is responsible for real-time collection and tracking of key performance indicators in the system. This includes the execution efficiency of encryption algorithms, resource utilization, and system response time. By collecting and analyzing this data, the management module can quickly identify problems or potential threats in the system, thereby providing an information basis for timely intervention and risk management.

[0094] Secondly, the management module will adjust the system configuration in real time based on the performance indicator data to adapt to different environments and needs. This may involve dynamically modifying system parameters, updating the encryption algorithm version, and adjusting configuration files. Through such dynamic adjustments, the system can maintain optimal performance and security for different workloads and scenarios.

[0095] In addition, the management module provides a visual monitoring interface, which makes it easy for system administrators and operators to view performance data, make configuration adjustments, and respond quickly. This interface design helps to fully understand the system status and perform flexible control.

[0096] In general, the role of the management module is to improve the intelligence, adaptability and security of the encryption system through real-time monitoring, adjustment and data recording functions. With real-time monitoring and automated decision-making, the management module not only enhances the system's ability to resist external threats, but also provides strong support for system maintenance and performance optimization.

[0097] The embodiment of the present invention introduces a management module for comprehensively monitoring and managing the system. The module can track the system operation status, adjust the configuration, and record key operations and abnormal events in real time, thereby improving the management level of the system and the real-time response capability to potential risks.

[0098] The performance optimization and testing module is used to evaluate the performance of the encryption algorithm and obtain performance evaluation indicator parameters.

[0099] Among them, performance evaluation index parameters are specific values ​​or measurements used to quantify and evaluate the performance characteristics of encryption algorithms. Performance evaluation index parameters can include encryption / decryption speed, throughput, resource utilization, time delay, energy efficiency ratio, stability index and security evaluation. Performance evaluation index parameters are the core tools for evaluating and optimizing the performance of encryption algorithms, providing a basis for in-depth understanding of algorithm behavior and characteristics. Based on these indicators, more informed design and implementation decisions can be made to meet the performance and security requirements of the system.

[0100] Optionally, the performance optimization and testing module is also used to optimize the system based on performance evaluation indicator parameters.

[0101] Specifically, the performance optimization and testing module can use performance monitoring tools to collect relevant indicator parameters, such as CPU usage, memory consumption, throughput, and latency. Benchmarks are performed to obtain the current performance baseline to provide a reference point for optimization. Data is analyzed to identify performance bottlenecks and find the areas that need the most improvement. The performance optimization and testing module is based on optimization goals, such as reducing response time, increasing throughput, or reducing resource usage. Prioritize different issues based on the impact on system performance. The performance optimization and testing module can replace or modify existing algorithms to improve efficiency, or optimize memory allocation and garbage collection, reduce memory leaks, or use compiler optimization options to improve code execution efficiency, or distribute tasks to multiple nodes to improve overall throughput. After implementing the optimization, the performance optimization and testing module conducts continuous performance testing to verify the improvement effect and ensure that the new optimization does not introduce other problems or affect the stability of the system. The performance optimization and testing module dynamically adjusts the system configuration based on real-time data and changing needs.

[0102] The performance optimization and testing module can significantly improve the performance and efficiency of the system through a systematic optimization process, ensuring its stable and reliable operation. This not only helps with current system needs, but also prepares for future expansion and upgrades.

[0103] Optionally, performance optimization and testing modules are also used to verify the robustness and reliability of the system under various conditions.

[0104] The goal of the performance optimization and testing module is to evaluate the performance of encryption algorithms and obtain relevant evaluation indicators to improve the efficiency and reliability of encryption systems.

[0105] First, the performance optimization and testing module performs performance evaluation on the encryption algorithm, measuring key indicators including encryption speed and resource consumption. Through these tests, the system can fully understand the efficiency of the encryption process and identify possible bottlenecks or areas that can be optimized.

[0106] On this basis, we conduct performance optimization, including: speeding up encryption by parallelizing encryption operations, optimizing algorithm implementation to reduce resource usage, and improving data structures to improve memory utilization efficiency. These optimization measures are designed to ensure that the encryption system can run efficiently and sustainably in actual use, meeting the needs of various workloads and usage scenarios.

[0107] In addition, the performance optimization and testing modules verify the robustness and reliability of the system. Through various test cases, such as boundary conditions, abnormal inputs, and long-term stability tests, it ensures that the system can operate correctly in various situations and resist attacks and abnormal situations. Such comprehensive testing helps to find and fix potential problems in a timely manner, and improve the stability and credibility of the system.

[0108] During the performance optimization and testing process, multiple iterations may be required to continuously adjust and optimize the system implementation based on the test results, in order to ensure that the encryption system operates both securely and efficiently. Through careful performance testing and optimization, we ensure that the system can provide excellent performance and reliability in different scenarios, providing users with high-quality data protection services.

[0109] The documentation module is used to write detailed system design and implementation documents, providing implementation details, parameter selection, performance data and system architecture information.

[0110] Among them, the system design and implementation documentation is a detailed written record that describes the overall design, technology selection, implementation methods, and operational performance of the system. These documents provide comprehensive information and guidance for developers, maintainers, and other relevant personnel.

[0111] Implementation details cover the entire process from system design to delivery, including all technical aspects. Implementation details may involve how to write and organize code, the programming language and framework used, the configuration details of each module or component, the deployment steps that detail how to deploy the system in the target environment (for example, installation and initialization operations), including how to conduct system testing and test cases to verify the correctness of each function.

[0112] Parameter selection involves various configurations and optional settings required for system operation. These parameters affect the behavior and performance of the system. For example: configuration parameters including network settings, database connection strings, cache sizes, tuning parameters that affect system performance, and security parameters involving authentication, encryption keys, and access control settings.

[0113] Among them, performance data refers to various performance indicators collected during the operation of the system, which provide a basis for evaluating system efficiency and bottlenecks.

[0114] The system architecture information describes the overall structure of the system and the relationship between its components. The system architecture information may include an architecture diagram that visually represents the layout and interaction relationship of the system components, a module description, a technology stack, and a data flow diagram that shows the path and processing process of data flowing through the system.

[0115] The task of the documentation module is to write detailed system design and implementation documents, providing information about implementation details, parameter selection, performance data, and system architecture. These documents ensure that the system design and implementation process is fully recorded and protected by compliance. By describing the implementation details and parameter selection in detail, the documents provide a clear understanding of the overall design of the system and provide a valuable reference for future maintenance and optimization. Detailed documentation not only promotes knowledge sharing and inheritance within the team, but also provides necessary technical information for potential partners or reviewers, supporting effective communication and collaboration.

[0116] The embodiment of the present invention provides a bank data dynamic encryption system based on the self-attention mechanism, which has the characteristics of dynamic adjustment, self-attention mechanism and intelligent protection. It can be applied to multiple fields, especially in industries such as finance and medical care that have extremely high requirements for data security, and has broad application prospects.

[0117] The present invention provides a bank data dynamic encryption system based on a self-attention mechanism, comprising: a data analysis module, which is used to process the data to be encrypted using the self-attention mechanism and calculate the association strength weights between the data elements in the data to be encrypted; a dynamic adjustment module, which is used to dynamically adjust the encryption parameters based on the association strength weights, wherein the encryption parameters include the key length and the number of encryption rounds; an encryption execution module, which is used to perform data encryption operations on the data to be encrypted using the encryption algorithm and the encryption parameters to obtain encrypted data; a management module, which is used to collect the performance index data of the encryption algorithm running in the system in real time, and monitor the potential risks of the system based on the performance index data; a performance optimization and testing module, which is used to evaluate the performance of the encryption algorithm and obtain performance evaluation index parameters; a document compilation module, which is used to write detailed system design and implementation documents, providing implementation details, parameter selection, performance data and system architecture information. The present invention achieves the effect of maintaining efficient data operation while enhancing data security by introducing a bank data dynamic encryption system with a self-attention mechanism. The data analysis module in the system calculates the association strength between data elements using the self-attention mechanism, so that the dynamic adjustment module can flexibly adjust encryption parameters such as key length and number of encryption rounds according to these strength weights. This dynamic adjustment ensures that the encryption strength closely matches the data characteristics and optimizes security. The encryption execution module is responsible for efficiently encrypting data on this basis to ensure both processing speed and security. In addition, the management module monitors the performance indicators of the encryption algorithm in real time and identifies potential system risks to further ensure the stability and efficiency of the system. Combined with the evaluation of the performance optimization and test modules, as well as detailed system documentation support, the system not only improves the security protection level of data, but also maintains efficient operation performance.

[0118] Although operations are depicted in a particular order, this should not be understood as requiring that the operations be performed in the particular order shown or in a sequential order.Multitasking and parallel processing may be advantageous under certain circumstances.

[0119] The present invention is described with reference to the flowchart and / or block diagram of the bank data dynamic encryption system based on the self-attention mechanism according to the embodiment of the present invention. It should be understood that each process and / or box in the flowchart and / or block diagram, as well as the combination of the processes and / or boxes in the flowchart and / or block diagram, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, a special-purpose computer, an embedded processor or other programmable device to generate a machine, so that the instructions executed by the processor of the computer or other programmable device generate instructions for implementing the process in the process. Figure 1 A process or multiple processes and / or boxes Figure 1 A device that provides the functions specified in a block or multiple blocks.

[0120] In the description of the present invention, it should be understood that the terms "up", "down", "front", "back", "left" and "right" etc. indicating directions or positional relationships are based on the directions or positional relationships shown in the accompanying drawings. They are only for the convenience of describing the present invention and simplifying the description. They do not indicate or imply that the positions or elements referred to must have specific directions, be constructed and operate in specific directions. Therefore, they should not be understood as limitations of the present invention.

[0121] It should be noted that, in this article, relational terms such as first and second, etc. are only used to distinguish one entity or operation from another entity or operation, and do not necessarily require or imply any such actual relationship or order between these entities or operations. It should also be noted that the terms "include", "comprise" or any other variants thereof are intended to cover non-exclusive inclusion, so that a process, method, commodity or device including a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, method, commodity or device. In the absence of further restrictions, the elements defined by the sentence "comprise a ..." do not exclude the existence of other identical elements in the process, method, commodity or device including the elements.

[0122] It will be appreciated by those skilled in the art that embodiments of the present invention may be provided as methods, systems or computer program products. Therefore, the present invention may take the form of a complete hardware embodiment, a complete software embodiment or an embodiment combining software and hardware. Moreover, the present invention may take the form of a computer program product implemented on one or more computer-usable storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) containing computer-usable program codes.

[0123] The above are only embodiments of the present invention and are not intended to limit the present invention. For those skilled in the art, the present invention may have various modifications and variations. Any modification, equivalent substitution, improvement, etc. made within the spirit and principle of the present invention should be included in the scope of the claims of the present invention.

Claims

1. A bank data dynamic encryption system based on self-attention mechanism, characterized in that: The system comprises: A data analysis module, used to process the data to be encrypted using a self-attention mechanism, and calculate the association strength weights between the data elements in the data to be encrypted; A dynamic adjustment module, configured to dynamically adjust encryption parameters based on each of the association strength weights, wherein the encryption parameters include a key length and a number of encryption rounds; An encryption execution module, used to perform a data encryption operation on the data to be encrypted using an encryption algorithm and the encryption parameters to obtain encrypted data; A management module, used to collect performance indicator data of the encryption algorithm running in the system in real time, and monitor potential risks of the system based on the performance indicator data; A performance optimization and testing module, used to perform performance evaluation on the encryption algorithm and obtain performance evaluation index parameters; The documentation module is used to write detailed system design and implementation documents, providing implementation details, parameter selection, performance data and system architecture information.

2. The system according to claim 1, characterized in that The data analysis module calculates the association strength weight by a dot product method.

3. The system according to claim 2, characterized in that The data analysis module uses the formula: Calculate the association strength weight, where S i,j is the association strength weight, used to represent the association score between the i-th element and the j-th element in the data to be encrypted; i and x j are respectively the vector representations of the i-th and j-th elements in the encrypted data; W q and W k are the learnable parameter matrices for query and key conversion, respectively; (x i W q ) means to convert the element x i Mapped to the query space; (x j W k ) means to convert the element x j Mapped to the key space; (x i W q )·(x j W k ) represents the dot product between the query and key vectors, which is used to measure the degree of match between the two; The square root of the dimension of the vector space representing the keys.

4. The system according to claim 1, characterized in that The adjustment formula of the dynamic adjustment module is: L new =L old +β×S i,j Among them, L new is the adjusted key length, L old is the key length before adjustment; β is the parameter controlling the adjustment range; S i,j is the association strength weight.

5. The system according to claim 1, characterized in that The management module is also used to monitor the system operating status, adjust the system configuration in real time, and record key operations and abnormal events.

6. The system according to claim 1, characterized in that The management module is also used to provide a visual monitoring interface.

7. The system according to claim 1, characterized in that The performance optimization and testing module is also used to optimize the system based on the performance evaluation index parameters.

8. The system according to claim 1, characterized in that The performance optimization and testing module is also used to verify the robustness and reliability of the system under various conditions.

9. The system according to any one of claims 1 to 8, characterized in that The encryption algorithm is the Advanced Encryption Standard algorithm.

10. The system according to claim 9, characterized in that The data encryption operation includes at least one encryption transformation operation of byte substitution, row shift, column confusion and round key addition.

Citation Information

Cited By

  • Regional radiation monitor data security protection method for preventing information leakage

    CN121030815A

  • Financial data processing method and system for improving security and confidentiality, and storage medium

    CN121598405A

  • Financial data processing method, system and storage medium for improving security and confidentiality

    CN121598405B