Data security management system and method based on report generation

Abstract

The present invention discloses a data security management system and method based on report generation, which relates to the technical field related to data processing, including: obtaining multiple report data sets corresponding to multiple users. Performing security encryption processing on the multiple report data sets through multiple encryption blocks respectively, and outputting multiple encrypted report data sets. Performing correlation analysis between the multiple report data sets, and outputting correlation indicators. Based on the correlation indicators, a temporary security token is generated, wherein the temporary security token is used to authorize the current user to access the report data set whose correlation indicator is greater than the preset correlation indicator. Obtaining a shared report template, when multiple report data sets are entered into the shared report template, the current user performs association decryption access management on the shared report template according to the temporary security token. The technical problem that the security management system in the prior art is difficult to efficiently encrypt and securely manage report data in a multi-user environment is solved.

Description

Technical Field

[0001] The present application relates to the technical field related to data processing, and specifically to a data security management system and method based on report generation. Background Art

[0002] With the advancement of informatization and the frequent data exchange, enterprises are facing increasingly severe security challenges in data management. In particular, data reports that are accessed by multiple users usually contain a large amount of sensitive information such as financial data, personal information, and business secrets. Once leaked, it will cause huge losses to enterprises or individuals. Although traditional encryption methods can effectively protect data, they often make the data analysis process complicated and inefficient in a multi-user environment. How to balance data security and data analysis efficiency in a multi-user environment has become a problem that needs to be solved urgently.

[0003] Therefore, in the prior art, it is difficult for the security management system to efficiently encrypt and securely manage report data in a multi-user environment. Summary of the invention

[0004] This application solves the technical problem that it is difficult for the security management system in the prior art to efficiently encrypt and securely manage report data in a multi-user environment by providing a data security management system and method based on report generation. The security of report data is guaranteed, sensitive information is protected through differentiated encryption strategies, and the efficiency of data encryption is improved.

[0005] The first aspect of the present application provides a data security management system based on report generation, including: a data set acquisition module, used to acquire multiple report data sets corresponding to multiple users. An encryption module, used to perform security encryption processing on the multiple report data sets through multiple encryption blocks respectively, and output multiple encrypted report data sets, wherein the multiple encryption blocks correspond to multiple encryption protocols, and each encryption protocol is different. A correlation index acquisition module, used to perform correlation analysis between the multiple report data sets and output correlation indicators. A security token generation module, used to generate a temporary security token based on the correlation indicator, wherein the temporary security token is used to authorize the current user to access a report data set whose correlation indicator is greater than a preset correlation indicator. An associated decryption access module, used to acquire a shared report template, and when the multiple report data sets are entered into the shared report template, the current user performs associated decryption access management on the shared report template according to the temporary security token.

[0006] In an implementation, the associated decryption access module is further used to: determine whether the activation time of the temporary security token reaches a preset expiration time, and if so, obtain an identity authentication instruction. Perform identity authentication on the current user according to the identity authentication instruction, and if the authentication is successful, send a restart instruction to the temporary security token. According to the restart instruction, restart the temporary security token to perform associated decryption access to the shared report template.

[0007] In an implementation, the associated decryption access module is further used to: if the verification fails, invalidate the temporary security token and obtain a re-encryption instruction at the same time. Record the associated decrypted data that the current user has accessed. The multiple encryption blocks re-encrypt the associated decrypted data that the current user has accessed according to the re-encryption instruction.

[0008] In an implementation, the associated decryption access module is further used to: obtain a set of input data items of a shared report template. Perform data sensitivity analysis on each input data item in the set of input data items and output a sensitivity set. According to the sensitivity set, obtain a first category of input data items and a second category of input data items, wherein the first category of input data items are data items whose sensitivity is greater than or equal to a preset sensitivity, and the second category of input data items are data items whose sensitivity is less than a preset sensitivity. Generate an encryption identifier based on the first category of input data items and the second category of input data items, and the multiple encryption blocks are securely encrypted according to the encryption identifier.

[0009] In an implementation, the associated decryption access module is further used to: when any encryption block receives a corresponding report data set, identify the first type of input data item in the current report data set according to the encryption identifier, and so on, output multiple first type of input data items corresponding to the multiple encryption blocks. The multiple encryption blocks perform secure encryption processing on the multiple first type of input data items according to the multiple encryption protocols, and output multiple encrypted report data sets.

[0010] In an implementation, the associated decryption access module is further used to: when any encrypted block receives a corresponding report data set, identify the second type of input data items in the current report data set according to the encryption identifier, and so on, output multiple second type of input data items corresponding to the multiple encrypted blocks. The multiple second type of input data items are not subjected to security encryption processing.

[0011] In an implementation, the correlation index acquisition module is further used to: perform correlation analysis between the multiple report data sets, including field matching similarity, text word frequency similarity and timestamp similarity, perform weight calculation based on the field matching similarity, text word frequency similarity and timestamp similarity, and output a correlation index.

[0012] In an implementation, the associated decryption access module is further used to: record the access frequency, access duration and access behavior of the current user accessing the associated decryption data, detect whether there is abnormal access behavior based on the access frequency, access duration and access behavior, and if abnormal access behavior is detected, invalidate the temporary security token.

[0013] The second aspect of the present application provides a data security management method based on report generation, the method comprising: obtaining multiple report data sets corresponding to multiple users. Performing security encryption processing on the multiple report data sets through multiple encryption blocks respectively, and outputting multiple encrypted report data sets, wherein the multiple encryption blocks correspond to multiple encryption protocols, and each encryption protocol is different. Performing correlation analysis on the multiple report data sets and outputting correlation indicators. Based on the correlation indicators, generating a temporary security token, wherein the temporary security token is used to authorize the current user to access a report data set whose correlation indicator is greater than a preset correlation indicator. Obtaining a shared report template, when the multiple report data sets are entered into the shared report template, the current user performs association decryption access management on the shared report template according to the temporary security token.

[0014] The data security management system and method based on report generation proposed in this application are proposed to obtain multiple report data sets corresponding to multiple users. The multiple report data sets are securely encrypted through multiple encryption blocks respectively, and multiple encrypted report data sets are output, wherein the multiple encryption blocks correspond to multiple encryption protocols, and each encryption protocol is different. The correlation analysis is performed on the multiple report data sets, and the correlation index is output. Based on the correlation index, a temporary security token is generated, wherein the temporary security token is used to authorize the current user to access the report data set whose correlation index is greater than the preset correlation index. A shared report template is obtained, and when the multiple report data sets are entered into the shared report template, the current user performs associated decryption access management on the shared report template according to the temporary security token. The technical problem that the security management system in the prior art is difficult to efficiently encrypt and securely manage report data in a multi-user environment is solved. The security of the report data is guaranteed, sensitive information is protected through differentiated encryption strategies, and the efficiency of data encryption is improved. BRIEF DESCRIPTION OF THE DRAWINGS

[0015] In order to more clearly illustrate the technical solution of the embodiment of the present disclosure, the accompanying drawings of the embodiment of the present disclosure will be briefly introduced below. A flow chart is used in the present application to illustrate the operations performed by the system according to the embodiment of the present application. It should be understood that the preceding or following operations are not necessarily performed accurately in order. On the contrary, various steps can be processed in reverse order or simultaneously as needed. At the same time, other operations can also be added to these processes, or one or more operations can be removed from these processes.

[0016] Figure 1 A schematic diagram of the structure of a data security management system based on report generation provided in an embodiment of the present application;

[0017] Figure 2 A flow chart of a data security management method based on report generation provided in an embodiment of the present application.

[0018] Explanation of reference numerals: data set acquisition module 11 , encryption module 12 , correlation index acquisition module 13 , security token generation module 14 , correlation decryption access module 15 . DETAILED DESCRIPTION

[0019] The above description is only an overview of the technical solution of the present application. In order to more clearly understand the technical means of the present application, it can be implemented in accordance with the contents of the specification. In order to make the above and other purposes, features and advantages of the present application more obvious and easy to understand, the specific implementation methods of the present application are listed below.

[0020] In order to make the purpose, technical solutions and advantages of the present application clearer, the present application will be further described in detail below in conjunction with the accompanying drawings. The described embodiments should not be regarded as limiting the present application. All other embodiments obtained by ordinary technicians in the field without making creative work are within the scope of protection of this application.

[0021] In the following description, reference is made to "some embodiments", which describe a subset of all possible embodiments, but it is understood that "some embodiments" may be the same subset or different subsets of all possible embodiments, and may be combined with each other without conflict, and the terms "first\second" involved are merely to distinguish similar objects and do not represent a specific ordering of objects. The terms "including" and "having" and any variations are intended to cover non-exclusive inclusions, for example, a process, method, system, product, or server that includes a series of steps or units is not necessarily limited to those steps or units clearly listed, but may include other steps or modules that are not clearly listed or inherent to these processes, methods, products, or devices. Unless otherwise defined, all technical and scientific terms used herein have the same meaning as those generally understood by technicians in the technical field of this application. The terms used herein are for the purpose of describing the embodiments of the present application only.

[0022] The present application embodiment provides a data security management system and method based on report generation, such as Figure 2 As shown, the method includes:

[0023] Acquire multiple report data sets corresponding to multiple users. Perform security encryption processing on the multiple report data sets through multiple encryption blocks respectively, and output multiple encrypted report data sets, wherein the multiple encryption blocks correspond to multiple encryption protocols, and each encryption protocol is different. Perform correlation analysis on the multiple report data sets, and output correlation indicators.

[0024] Acquire multiple report data sets corresponding to multiple users, where each report data set is a data set consisting of multiple groups of data that need to be managed securely for each user. Subsequently, the multiple report data sets are securely encrypted through multiple encryption blocks, where the encryption block is the basic unit for encryption, and each encryption block performs data processing through an encryption algorithm. For each user's report data set, the system encrypts the report data set through the encryption protocol corresponding to the encryption block, and each encryption protocol is different.

[0025] Further, the correlation analysis is performed between the multiple report data sets to obtain the field matching similarity, text word frequency similarity and timestamp similarity between the report data sets. Subsequently, the field matching similarity, text word frequency similarity and timestamp similarity obtained by the analysis are weighted and summed according to the preset field matching similarity weight parameter, text word frequency similarity weight parameter and timestamp similarity weight parameter, and the correlation index is output, wherein the sum of the weights is 1 and the closer the correlation index calculation result is to 1, the higher the correlation degree of the corresponding data set. Among them, the field matching similarity is the field similarity in the data set, such as income, expenditure, etc., and the text word frequency similarity is the similarity of the frequency of words appearing in the data text. If multiple report data sets all mention the word "cost", the reports have a certain correlation in content. The timestamp similarity is that the report contains time information, and the correlation of these report data is judged by comparing the similarity of the data entry time of different reports. According to the correlation index, the report data of non-associated users is kept confidential (other people cannot see other people's data). For associated data, a temporary token with an expiration period is set to access the associated data, and the unassociated data is displayed in encrypted form.

[0026] Based on the correlation index, a temporary security token is generated, wherein the temporary security token is used to authorize the current user to access a report data set whose correlation index is greater than a preset correlation index. A shared report template is obtained, and when the multiple report data sets are entered into the shared report template, the current user performs association decryption access management on the shared report template according to the temporary security token.

[0027] Based on the correlation index, a temporary security token is generated, wherein the temporary security token is used to authorize the current user to access the report data set whose correlation index is greater than the preset correlation index. Finally, a shared report template is obtained, and the shared report template is a general report template that can display and manage the contents of multiple report data sets in a predetermined format. When the multiple report data sets are entered into the shared report template, the current user performs associated decryption access management on the shared report template according to the temporary security token. That is, only under the authorization of the user's temporary security token can the user view the report data set whose correlation index is greater than the preset value. The system will ensure that only report data within the authorized scope is allowed to be decrypted during decryption. For example, after user A logs into the system, the system will allow him to view the financial statements and sales reports related to his work content according to his temporary security token, but will not provide decryption access rights for the inventory report, so as to avoid user A from accessing data with excessive authority. In addition, when the user accesses, the system records the access frequency, access duration and access line of the current user to the associated decrypted data. Whether there is abnormal access behavior is detected based on the access frequency, access duration and access behavior. If abnormal access behavior is detected, the temporary security token is invalidated. When identifying abnormal access, abnormal access frequency, abnormal access duration, and abnormal access behavior are identified respectively. The abnormal access frequency refers to accessing multiple sets of data sets in a short period of time. For example, if a user accesses 10 different data sets within 1 minute, the corresponding access is an abnormal access. The abnormal access duration refers to the time for the user to access the data set that is inconsistent with his usual operation behavior. For example, a user usually browses reports for 3 minutes, but suddenly stays for 30 minutes when accessing a report, and the corresponding access is an abnormal access. The abnormal access behavior refers to the user's sudden abnormal behavior pattern, such as frequent download operations or access during abnormal time periods, and the corresponding access is an abnormal access. When the above abnormal access behavior occurs, the corresponding user is abnormal, so the temporary security token is immediately invalidated to prevent him from continuing to access the data, thereby ensuring data security. The technical problem that the security management system in the prior art is difficult to efficiently encrypt and securely manage report data in a multi-user environment is solved. The security of report data is guaranteed, sensitive information is protected through differentiated encryption strategies, and the efficiency of data encryption is improved.

[0028] The method provided by the embodiment of the present application also includes: the temporary security token includes a preset expiration time. It is determined whether the startup time of the temporary security token reaches the preset expiration time, and if the preset expiration time is reached, an identity authentication instruction is obtained. The current user is authenticated according to the identity authentication instruction, and if the authentication is successful, a restart instruction is sent to the temporary security token. According to the restart instruction, the temporary security token is restarted to perform associated decryption access to the shared report template.

[0029] The temporary security token includes a preset expiration time, which is the effective time length of the preset temporary security token. When within the preset expiration time, the corresponding temporary security token is valid, otherwise the temporary security token is invalid, and the user cannot access other associated report data sets based on the temporary security token. Determine whether the startup time of the temporary security token reaches the preset expiration time. If the preset expiration time is reached, obtain the identity authentication instruction. Authenticate the current user according to the identity authentication instruction. If the authentication is successful, send a restart instruction to the temporary security token, wherein the identity authentication includes but is not limited to: password verification, biometrics and other verification methods. Finally, according to the restart instruction, restart the temporary security token to perform associated decryption access to the shared report template.

[0030] The method provided in the embodiment of the present application further includes: if the verification fails, invalidating the temporary security token and obtaining a re-encryption instruction at the same time. Recording the associated decrypted data that the current user has accessed. The multiple encryption blocks re-encrypt the associated decrypted data that the current user has accessed according to the re-encryption instruction.

[0031] If the identity authentication fails, the temporary security token is invalidated and a re-encryption instruction is obtained. Subsequently, the associated decrypted data that the current user has accessed is recorded, that is, the associated data that the current user has accessed is obtained. The associated decrypted data that the current user has accessed is re-encrypted through the multiple encryption blocks according to the re-encryption instruction.

[0032] The method provided in the embodiment of the present application also includes: obtaining a set of input data items of the shared report template. Performing data sensitivity analysis on each input data item in the set of input data items, and outputting a sensitivity set. According to the sensitivity set, obtaining a first category of input data items and a second category of input data items, wherein the first category of input data items are data items whose sensitivity is greater than or equal to a preset sensitivity, and the second category of input data items are data items whose sensitivity is less than a preset sensitivity. Based on the first category of input data items and the second category of input data items, an encryption identifier is generated, and the multiple encryption blocks are securely encrypted according to the encryption identifier.

[0033] The set of input data items of the shared report template is obtained. The shared report template is a general report template that can be used by multiple users and is designed to display and process multiple report data. The template may include multiple data fields, allowing users to enter, modify and display information. The set of input data items is a set of all data items that can be entered or displayed in the shared report template, including data of different categories, such as financial data, sales data, inventory data, etc. Subsequently, a data sensitivity analysis is performed on each input data item in the set of input data items to evaluate the privacy, confidentiality and impact of the data item on the organization or individual, determine the sensitivity of the data item, and output a sensitivity set according to the sensitivity. The sensitivity set includes multiple input data items with a sensitivity greater than a preset sensitivity level. When performing data sensitivity analysis, first, a sensitivity standard is defined, and the sensitivity standard includes a privacy data item, a compliance requirement data item, a company policy data item, an internal data item, a sensitive data item, a confidential data item, etc., and each data item has a corresponding sensitivity standard. Among them, the privacy data item is personal or other private information, such as name, address, ID number, email address, etc. The compliance requirement data item is the data requirements according to industry regulations. Some data may be strictly protected, such as medical health information, financial transaction records, etc. The company policy data item is based on the company's internal confidentiality policy. Some data (such as business plans, financial data, etc.) require a higher level of protection. Subsequently, a corresponding sensitivity level is set for each sensitivity standard, and the sensitivity level is obtained after evaluation by professional technicians.

[0034] Further, according to the sensitivity set, a first type of input data item and a second type of input data item are obtained, wherein the first type of input data item is a data item whose sensitivity is greater than or equal to a preset sensitivity, and the second type of input data item is a data item whose sensitivity is less than the preset sensitivity. The preset sensitivity is a preset sensitivity level, and when it is greater than or equal to the preset sensitivity, the corresponding input data item has a higher sensitivity and a higher confidentiality level, and vice versa, the corresponding confidentiality level is lower. Finally, according to the first type of input data item and the second type of input data item, an encryption identifier is generated, and the multiple encryption blocks are securely encrypted according to the encryption identifier.

[0035] The method provided by the embodiment of the present application further includes: when any encryption block receives a corresponding report data set, the first type of input data item in the current report data set is identified according to the encryption identifier, and so on, multiple first type of input data items corresponding to the multiple encryption blocks are output. The multiple encryption blocks perform secure encryption processing on the multiple first type of input data items according to the multiple encryption protocols, and output multiple encrypted report data sets.

[0036] The multiple encryption blocks are securely encrypted according to the encryption identifier, and the method includes: when any encryption block receives a corresponding report data set, the first type of input data item in the current report data set is identified according to the encryption identifier, and so on, until all data items in the report data set are identified, and the multiple first type of input data items corresponding to the multiple encryption blocks are output. Finally, the multiple encryption blocks securely encrypt the multiple first type of input data items according to the multiple encryption protocols, and output multiple encrypted report data sets.

[0037] The method provided by the embodiment of the present application further includes: when any encrypted block receives a corresponding report data set, identifying the second type of input data item in the current report data set according to the encryption identifier, and so on, outputting multiple second type of input data items corresponding to the multiple encrypted blocks. The multiple second type of input data items are not subjected to security encryption processing.

[0038] The multiple encrypted blocks are securely encrypted according to the encryption identifier, and the method further includes: when any encrypted block receives a corresponding report data set, the second type of input data item in the current report data set is identified according to the encryption identifier, and so on, until the data items in all report data sets are completed, and the multiple second type of input data items corresponding to the multiple encrypted blocks are output. Since the sensitivity level corresponding to the second type of input data items is relatively low, the corresponding data does not need to be kept confidential. Finally, the multiple second type of input data items are not securely encrypted, thereby improving the efficiency of overall data processing.

[0039] In the above, refer to Figure 2 The data security management method based on report generation according to an embodiment of the present invention is described in detail. Figure 1 A data security management system based on report generation according to an embodiment of the present invention is described.

[0040] The data security management system based on report generation according to the embodiment of the present invention solves the technical problem that the security management system in the prior art is difficult to efficiently encrypt and securely manage report data in a multi-user environment. The security of report data is guaranteed, sensitive information is protected through differentiated encryption strategies, and the efficiency of data encryption is improved. The data security management system based on report generation includes: a data set acquisition module 11, an encryption module 12, a correlation index acquisition module 13, a security token generation module 14, and an associated decryption access module 15.

[0041] The data set acquisition module 11 is used to acquire multiple report data sets corresponding to multiple users.

[0042] The encryption module 12 is used to perform security encryption processing on the multiple report data sets through multiple encryption blocks respectively, and output multiple encrypted report data sets, wherein the multiple encryption blocks correspond to multiple encryption protocols, and each encryption protocol is different.

[0043] The correlation index acquisition module 13 is used to perform correlation analysis on the multiple report data sets and output correlation indexes.

[0044] The security token generation module 14 is used to generate a temporary security token based on the correlation index, wherein the temporary security token is used to authorize the current user to access a report data set whose correlation index is greater than a preset correlation index.

[0045] The associated decryption access module 15 is used to obtain a shared report template. When the multiple report data sets are entered into the shared report template, the current user performs associated decryption access management on the shared report template according to the temporary security token.

[0046] The specific configuration of the associated decryption access module 15 will be described in detail below. The associated decryption access module 15 further includes: The associated decryption access module is also used to: if the verification fails, invalidate the temporary security token and obtain a re-encryption instruction. Record the associated decrypted data that the current user has accessed. The multiple encryption blocks re-encrypt the associated decrypted data that the current user has accessed according to the re-encryption instruction.

[0047] Below, the specific configuration of the associated decryption access module 15 will be described in detail. The associated decryption access module 15 may further include: through the surface grinding process in the fine processing stage, combined with the plane deviation degree, a first-level detection and verification is performed to obtain a first-level verification result, the method includes: based on the grinding equipment, obtaining the equipment grinding operation parameters, the equipment grinding operation parameters include grinding speed, grinding pressure, and grinding time. Through the surface grinding process in the fine processing stage, a plane processing distribution point set is set. Based on the surface grinding process in the fine processing stage, the surface grinding process is simulated through the plane processing distribution point set and the equipment grinding operation parameters, and the first-level detection and verification is performed in combination with the plane deviation degree to obtain a first-level verification result.

[0048] Below, the specific configuration of the associated decryption access module 15 will be described in detail. The associated decryption access module 15 further includes: The associated decryption access module is also used to: obtain a set of input data items of a shared report template. Perform data sensitivity analysis on each input data item in the set of input data items, and output a sensitivity set. According to the sensitivity set, a first category of input data items and a second category of input data items are obtained, wherein the first category of input data items are data items whose sensitivity is greater than or equal to a preset sensitivity, and the second category of input data items are data items whose sensitivity is less than a preset sensitivity. Based on the first category of input data items and the second category of input data items, an encryption identifier is generated, and the multiple encryption blocks are securely encrypted according to the encryption identifier.

[0049] The specific configuration of the associated decryption access module 15 will be described in detail below. The associated decryption access module 15 further includes: The associated decryption access module is also used to: when any encryption block receives the corresponding report data set, identify the first type of input data items in the current report data set according to the encryption identifier, and so on, output multiple first type input data items corresponding to the multiple encryption blocks. The multiple encryption blocks perform secure encryption processing on the multiple first type input data items according to the multiple encryption protocols, and output multiple encrypted report data sets.

[0050] The specific configuration of the associated decryption access module 15 will be described in detail below. The associated decryption access module 15 further includes: the associated decryption access module is also used to: when any encrypted block receives the corresponding report data set, identify the second type of input data items in the current report data set according to the encryption identifier, and so on, output multiple second type of input data items corresponding to the multiple encrypted blocks. Wherein, the multiple second type of input data items are not subjected to security encryption processing.

[0051] The specific configuration of the correlation index acquisition module 13 will be described in detail below. The correlation index acquisition module 13 may further include: performing correlation analysis between the multiple report data sets, including field matching similarity, text word frequency similarity and timestamp similarity. Performing weight calculation based on the field matching similarity, text word frequency similarity and timestamp similarity, and outputting the correlation index.

[0052] The specific configuration of the associated decryption access module 15 will be described in detail below. The associated decryption access module 15 may further include recording the access frequency, access duration, and access behavior of the current user accessing the associated decryption data. Whether there is abnormal access behavior is detected based on the access frequency, access duration, and access behavior. If abnormal access behavior is detected, the temporary security token is invalidated.

[0053] The data security management system based on report generation provided in the embodiment of the present invention can execute the data security management method based on report generation provided in any embodiment of the present invention, and has the corresponding functional modules and beneficial effects of the execution method.

[0054] Although the present application makes various references to certain modules in the system according to the embodiments of the present application, any number of different modules can be used and run on the user terminal and / or the server, and the various units and modules included are only divided according to functional logic, but are not limited to the above divisions, as long as the corresponding functions can be achieved. In addition, the specific names of the functional units are only for the convenience of distinguishing from each other, and are not used to limit the scope of protection of the present invention.

[0055] The above specific implementations do not constitute a limitation on the protection scope of this application. It should be understood by those skilled in the art that various modifications, combinations and substitutions can be made according to design requirements and other factors. Any modifications, equivalent substitutions and improvements made within the spirit and principles of this application should be included in the protection scope of this application.

Claims

1. A data security management system based on report generation, characterized in that: The system comprises: A data set acquisition module is used to acquire multiple report data sets corresponding to multiple users; An encryption module, used to perform security encryption processing on the multiple report data sets through multiple encryption blocks respectively, and output multiple encrypted report data sets, wherein the multiple encryption blocks correspond to multiple encryption protocols, and each encryption protocol is different; A correlation index acquisition module is used to perform correlation analysis on the multiple report data sets and output correlation indexes, specifically to obtain field matching similarity, text word frequency similarity and timestamp similarity between each report data set, perform weighted sum calculation on the field matching similarity, text word frequency similarity and timestamp similarity obtained through analysis according to preset field matching similarity weight parameters, text word frequency similarity weight parameters and timestamp similarity weight parameters, and output correlation indexes; A security token generation module, used to generate a temporary security token based on the correlation index, wherein the temporary security token is used to authorize the current user to access a report data set whose correlation index is greater than a preset correlation index; The associated decryption access module is used to obtain a shared report template. When the multiple report data sets are entered into the shared report template, the current user performs associated decryption access management on the shared report template according to the temporary security token.

2. The system according to claim 1, characterized in that The associated decryption access module is also used for: Determine whether the activation time of the temporary security token reaches a preset expiration time, and if so, obtain an identity authentication instruction; Authentication of the current user is performed according to the identity authentication instruction, and if the authentication is successful, a restart instruction is sent to the temporary security token; The temporary security token is restarted according to the restart instruction to perform associated decryption access to the shared report template.

3. The system according to claim 2, characterized in that The associated decryption access module is also used for: If the verification fails, the temporary security token is invalidated and a re-encryption instruction is obtained; Record the associated decrypted data that the current user has accessed; The plurality of encryption blocks re-encrypt the associated decrypted data that has been accessed by the current user according to the re-encryption instruction.

4. The system according to claim 1, characterized in that The associated decryption access module is also used for: Get the input data item collection of the shared report template; Performing data sensitivity analysis on each input data item in the input data item set, and outputting a sensitivity set; According to the sensitivity set, a first type of input data item and a second type of input data item are obtained, wherein the first type of input data item is a data item whose sensitivity is greater than or equal to a preset sensitivity, and the second type of input data item is a data item whose sensitivity is less than the preset sensitivity; An encryption identifier is generated according to the first type of input data items and the second type of input data items, and the plurality of encryption blocks are securely encrypted according to the encryption identifier.

5. The system according to claim 4, characterized in that The associated decryption access module is also used for: When any encryption block receives a corresponding report data set, the first type of input data item in the current report data set is identified according to the encryption identifier, and so on, a plurality of first type of input data items corresponding to the plurality of encryption blocks are output; The plurality of encryption blocks perform security encryption processing on the plurality of first-category input data items according to the plurality of encryption protocols, and output a plurality of encrypted report data sets.

6. The system according to claim 5, characterized in that The associated decryption access module is also used for: When any encrypted block receives a corresponding report data set, the second type of input data item in the current report data set is identified according to the encryption identifier, and so on, a plurality of second type of input data items corresponding to the plurality of encrypted blocks are output; Wherein, the plurality of second-category input data items are not subjected to security encryption processing.

7. The system according to claim 1, characterized in that The relevance index acquisition module is also used for: Performing correlation analysis between the multiple report data sets, including field matching similarity, text word frequency similarity, and timestamp similarity; A weight calculation is performed based on the field matching similarity, text word frequency similarity and timestamp similarity, and a correlation index is output.

8. The system according to claim 3, characterized in that The associated decryption access module is also used for: Record the access frequency, access duration and access behavior of the current user to the associated decrypted data; Whether there is abnormal access behavior is detected based on the access frequency, access duration and access behavior. If abnormal access behavior is detected, the temporary security token is invalidated.

9. A data security management method based on report generation, characterized in that: The method comprises: Obtain multiple report data sets corresponding to multiple users; The plurality of report data sets are respectively securely encrypted through a plurality of encryption blocks to output a plurality of encrypted report data sets, wherein the plurality of encryption blocks correspond to a plurality of encryption protocols, and each encryption protocol is different; Performing correlation analysis on the multiple report data sets and outputting correlation indicators, specifically obtaining field matching similarity, text word frequency similarity and timestamp similarity between the report data sets, performing weighted sum calculation on the field matching similarity, text word frequency similarity and timestamp similarity obtained through analysis according to preset field matching similarity weight parameters, text word frequency similarity weight parameters and timestamp similarity weight parameters, and outputting correlation indicators; Based on the relevance index, a temporary security token is generated, wherein the temporary security token is used to authorize the current user to access a report data set whose relevance index is greater than a preset relevance index; A shared report template is obtained. When the multiple report data sets are entered into the shared report template, the current user performs associated decryption access management on the shared report template according to the temporary security token.

Images