Encrypted storage and access front-end system for large record number fields in database

Abstract

The present invention relates to the field of data encryption storage, and in particular to an encryption storage and access front-end system for large record number segments in a database, comprising: an evaluation module for collecting data to be stored and performing length detection to determine its storage length information; a classification module for classifying and processing the data to be stored according to the storage length information and storing it in a storage directory; a management module for verifying the access rights of a visiting user according to an access key, generating a random key for accessing the data to be stored in combination with the access key, and sending the key to the account of the visiting user; a control module for controlling the opening or locking of the storage directory and the data to be stored according to the verification status of the access key and the random key, and flexibly adjusting the encryption strategy according to the verification result of the access rights to adapt to various security threats, thereby ensuring that the data is kept in a confidential state throughout the storage directory, improving the encryption efficiency of data storage, and preventing unauthorized access and data leakage.

Description

Technical Field

[0001] The present invention relates to the field of data encryption storage, and in particular to an encryption storage and access front-end system for large record number segments in a database. Background Art

[0002] Encrypted data storage is part of a multi-layered data security strategy that significantly enhances the overall security of data storage and access within a database. Encrypted storage prevents unauthorized access to sensitive data by migrating or locking the data in a timely manner. Even if the data is illegally obtained, attackers cannot directly read the data. Encrypted data storage effectively prevents data leaks, ensuring that even if the storage media is lost or stolen, data cannot be easily decrypted and exploited.

[0003] Chinese Patent Authorization Publication No. CN102426637B discloses an embedded database encryption storage method, comprising at least the following steps: specifying an encryption storage mode during database initialization, where the encryption storage mode includes unencrypted, custom, and default encryption modes; and, when the custom encryption mode is specified, user-defined encryption and decryption functions. This invention provides a complete encryption storage solution for embedded databases, offering both a basic default encryption mode and enhanced and extended user-defined encryption and decryption function interfaces when users choose to encrypt data, enabling flexible, multi-layer configuration of encrypted storage.

[0004] Chinese Patent Authorization Announcement No.: CN101639882B discloses a database security and confidentiality system based on storage encryption. The system includes a database encryption server, a database encryption extension component, a secure database access interface and a management tool. The database encryption service system encrypts and decrypts all data in the database security and confidentiality system, and centrally implements security control and management. The database encryption extension component provides a connection with the database encryption service system and the database management system, and also provides a method of calling the password service function on the database encryption service system to implement encryption and decryption of conventional data. The secure database access interface provides secure and transparent database access support for the application system. The management tool is a tool for managers to perform various security configuration management. The present invention provides an interface standard that complies with database access; supports transparent encryption and decryption of conventional data and large data objects; and shields the application system from the complex details of implementing database security and confidentiality functions.

[0005] However, the above method has the following problems: it is impossible to monitor the storage security of the data to be stored in real time, and to take corresponding protection measures for the stored data in a timely manner when there is a risk in the data storage. Summary of the Invention

[0006] To this end, the present invention provides an encrypted storage and access front-end system for large record number segments in a database, so as to overcome the problem in the prior art that the storage security of the data to be stored cannot be monitored in real time, and corresponding protection measures can be taken in a timely manner when there is a risk in the data storage.

[0007] To achieve the above objectives, the present invention provides a front-end system for encrypting and storing large record number fields in a database and for accessing the same, comprising:

[0008] An evaluation module, which is used to collect data to be stored, and perform length detection on the data to be stored to determine its storage length information;

[0009] A classification module, connected to the evaluation module, is used to classify the data to be stored according to the storage length information and store it in a storage directory, wherein:

[0010] The classification module is provided with a storage length threshold for responding to the data to be stored and determining its storage path;

[0011] The storage path of the storage directory includes a main directory and subdirectories;

[0012] a management module connected to the classification module, configured to verify the access rights of a visiting user based on an access key, generate a random key for accessing the data to be stored in combination with the access key, and send the random key to the account of the visiting user;

[0013] A control module is connected to the management module and is used to control the opening or locking of the storage directory and the data to be stored according to the verification status of the access key and the random key.

[0014] Furthermore, the evaluation module includes:

[0015] Command tool, which is used to send call commands;

[0016] A retrieval tool, connected to the command tool, for receiving the retrieval command and retrieving the storage type and occupied space of the data to be stored;

[0017] A calculation tool, connected to the retrieval tool, is used to calculate the storage length information of the data to be stored according to the storage type and the occupied space, wherein:

[0018] The storage length information is positively correlated with the occupied space.

[0019] Furthermore, the classification module includes:

[0020] A preprocessor, configured to perform information fitting on the stored length information, preprocess the generated length fitting data, and generate corresponding length preprocessing data;

[0021] A learner, connected to the preprocessor, is used to select several indicator features and learn the preprocessed data, and generate a corresponding storage length diagram, wherein:

[0022] The learner is provided with a storage length learning model;

[0023] A classifier is connected to the preprocessor and is used to store the data to be stored in the main directory and the subdirectory respectively according to the storage length diagram.

[0024] Furthermore, the management module includes:

[0025] a verifier, configured to verify the access rights of the visiting user based on the access key and the random key;

[0026] A generator connected to the verifier for generating a corresponding random key in combination with the access key, wherein:

[0027] The generator contains an encryption code, which is valid within a preset period. When the preset period is exceeded or when combined with the access key, the encryption code is automatically updated;

[0028] A transmitter is connected to the generator and is used for transmitting the random key to the account of the visiting user.

[0029] Furthermore, when the command tool detects the data to be stored, it sends a call instruction to the call tool, determines the number of bytes of the data to be stored according to the occupied space, and calculates the storage length information corresponding to the storage type according to the number of bytes.

[0030] Furthermore, the preprocessor cuts the stored length information according to the sampling rate to form a number of length fitting data with a standard sampling rate, selects indicator features based on the length fitting data, generates corresponding length preprocessing data, and the length preprocessing data enters the storage length learning model for learning, and generates a corresponding storage length schematic diagram.

[0031] The standard sampling rate is a sampling rate that can be recognized by the storage length learning model, and the standard sampling rate remains unchanged during the learning process of the storage length learning model;

[0032] The indicator characteristics include the byte size, creation time and / or storage format of the data to be stored.

[0033] Furthermore, the classifier obtains the length value in the storage length diagram, and when the length value is greater than the storage length threshold, the corresponding data to be stored is stored in the main directory; when the length value is less than the storage length threshold, the corresponding data to be stored is stored in the subdirectory.

[0034] The classifier preferentially stores the data to be stored in the main directory.

[0035] Furthermore, the visiting user inputs the access key into the verifier, and the verifier verifies the access rights of the visiting user and obtains a corresponding verification result, wherein:

[0036] When the verification result shows passing, the control module marks the access permission of the storage directory as open;

[0037] When the verification result shows failure, the control module locks the storage directory and migrates it.

[0038] Furthermore, when the verification result shows passing, the generator combines the access key and the encryption code, calculates the encryption result using an encryption algorithm, and takes the preset bytes of the encryption result to generate a corresponding random key and sends it to the account of the visiting user.

[0039] Furthermore, the visiting user inputs the random key into the verifier, and the verifier verifies the access rights of the visiting user again and obtains the corresponding verification result as a new verification result, wherein,

[0040] When the verification result indicates passing, the control module marks the access permission of the data to be stored as open and decompresses the data to be stored;

[0041] When the verification result shows that it fails, the control module locks the data to be stored and encrypts the data, and controls the display light to change from green to red.

[0042] Compared with the prior art, the present invention utilizes an evaluation module to collect data to be stored and perform length detection to determine its storage length information; a classification module to classify and process the data to be stored according to the storage length information and store it in a storage directory; a management module to verify the access rights of visiting users based on an access key, and generate a random key for accessing the data to be stored in combination with the access key, and send it to the account of the visiting user; a control module to control the opening or locking of the storage directory and the data to be stored based on the verification of the access key and the random key, and flexibly adjust the encryption strategy according to the verification result of the access right to adapt to various security threats, thereby ensuring that the data is kept confidential throughout the storage directory, improving the encryption efficiency of data storage, and preventing unauthorized access and data leakage.

[0043] Furthermore, through the collaborative work of command tools, retrieval tools and calculation tools, commands can be accurately received and the storage type and occupied space of the data to be stored can be retrieved, ensuring the accuracy of subsequent calculations and processing. The dynamic computing capabilities of the calculation tools can adapt to data of different types and sizes, reducing manual intervention, and improving the accuracy and scalability of processing data to be stored. By accurately evaluating and calculating storage length information, data can be more effectively managed and protected, reducing security risks caused by improper storage.

[0044] Furthermore, the stored length information is fitted and preprocessed through the preprocessor to generate corresponding length preprocessed data, thereby cleaning and normalizing the data and providing accurate basic data for subsequent learning and classification. The learner selects several indicator features to learn the preprocessed data, thereby improving the feature learning ability, enabling the system to identify and utilize key information in the data and improving the accuracy of classification.

[0045] Furthermore, by utilizing a verifier, the access rights of visiting users are verified based on the access key and the random key. This verification mechanism ensures that only authorized users can access sensitive data, thereby enhancing the security of the system. The dynamic generation mechanism of random keys ensures that the keys obtained by each user are unique, reducing the risk of the keys being cracked. The encryption code in the generator is valid within a preset period and is automatically updated when the period expires or when combined with the access key. This periodic update mechanism ensures that the encryption code is always kept up to date, preventing key leakage or abuse.

[0046] Furthermore, by setting up two verifications for visiting users, first using the access key and then using the random key, this double verification mechanism greatly enhances the security of the system, ensuring that only legitimate users can access the data. When the verification result shows pass or fail, the control module will open or lock the access rights of the storage directory accordingly. This dynamic permission control mechanism ensures the security and availability of the data. The generator combines the access key and the encryption code, uses the encryption algorithm to calculate the encryption result, and generates the corresponding random key. The application of this encryption algorithm ensures the complexity and security of the key. The preset bytes are taken from the encryption result to generate the random key. This mechanism ensures the randomness and unpredictability of the key. Through this modular and automated design, the various components work together to reduce manual intervention and improve the efficiency and accuracy of the system. BRIEF DESCRIPTION OF THE DRAWINGS

[0047] Figure 1 This is a schematic diagram of the structure of the front-end system for encrypting and storing large record number segments in a database and accessing them according to the present invention;

[0048] Figure 2 This is a schematic diagram of the structure of the evaluation module of the present invention;

[0049] Figure 3 This is a schematic diagram of the classification module structure of the present invention;

[0050] Figure 4 This is a schematic diagram of the management module structure of the present invention. DETAILED DESCRIPTION

[0051] In order to make the objects and advantages of the present invention more clearly understood, the present invention is further described below in conjunction with embodiments; it should be understood that the specific embodiments described herein are merely used to explain the present invention and are not intended to limit the present invention.

[0052] The preferred embodiments of the present invention are described below with reference to the accompanying drawings. It should be understood by those skilled in the art that these embodiments are only used to explain the technical principles of the present invention and are not intended to limit the scope of protection of the present invention.

[0053] It should be noted that, in the description of the present invention, terms such as "up", "down", "left", "right", "inside", and "outside" indicating directions or positional relationships are based on the directions or positional relationships shown in the accompanying drawings. This is only for the convenience of description and does not indicate or imply that the device or element must have a specific orientation, be constructed and operated in a specific orientation. Therefore, it cannot be understood as a limitation on the present invention.

[0054] Furthermore, it should be noted that, in the description of the present invention, unless otherwise expressly specified or limited, the terms "mounted," "connected," and "connected" should be understood in a broad sense. For example, they may refer to fixed connections, detachable connections, or integral connections; mechanical connections or electrical connections; direct connections or indirect connections through an intermediate medium; and internal communication between two components. Those skilled in the art will understand the specific meanings of the above terms in the present invention based on specific circumstances.

[0055] See also Figure 1 As shown in FIG, it is a schematic diagram of the structure of the encryption storage and access front-end system of the present invention for large record number fields in the database, including:

[0056] An evaluation module is used to collect data to be stored, perform length detection on the data to be stored, and determine its storage length information;

[0057] The classification module is connected to the evaluation module and is used to classify the data to be stored according to the storage length information and store it in the storage directory, wherein:

[0058] A storage length threshold is set in the classification module to respond to the data to be stored and determine its storage path;

[0059] The storage path of the storage directory includes the main directory and subdirectories;

[0060] A management module, which is connected to the classification module and is used to verify the access rights of the visiting user based on the access key, and generate a random key for accessing the data to be stored based on the access key, and send it to the visiting user's account;

[0061] The control module is connected to the management module and is used to control the opening or locking of the storage directory and the data to be stored according to the verification of the access key and the random key.

[0062] An evaluation module is set up to collect the data to be stored and perform length detection to determine its storage length information; a classification module is set up to classify the data to be stored according to the storage length information and store it in the storage directory; a management module is set up to verify the access rights of the visiting user according to the access key, and generate a random key for accessing the data to be stored in combination with the access key, and send it to the visiting user's account; a control module is set up to control the opening or locking of the storage directory and the data to be stored according to the verification of the access key and the random key, and the encryption strategy is flexibly adjusted according to the verification results of the access rights to adapt to changing security threats, ensuring that the data is kept confidential throughout the storage directory, improving the encryption efficiency of data storage, and preventing unauthorized access and data leakage.

[0063] See also Figure 2As shown, it is a schematic diagram of the structure of the evaluation module of the present invention, including:

[0064] Command tool, which is used to send call commands;

[0065] A retrieval tool, connected to the command tool, for receiving a retrieval command and retrieving the storage type and occupied space of the data to be stored;

[0066] A calculation tool, which is connected to the retrieval tool, is used to calculate the storage length information of the data to be stored according to the storage type and the occupied space, wherein:

[0067] The storage length information is positively correlated with the occupied space.

[0068] In practice, the command tool sends a retrieval command to initiate the entire data evaluation process, triggering subsequent data retrieval and calculation operations. The retrieval tool receives the retrieval command and retrieves the storage type and space occupied by the data to be stored. Serving as a bridge between the command tool and the calculation tool, the retrieval tool is responsible for obtaining the data's storage characteristics and space usage information for further calculations. The calculation tool, connected to the retrieval tool, calculates the storage length information for the data to be stored based on the data storage type and space occupied by the retrieval tool. "Storage length information" here refers to the actual space required for data storage. This information is positively correlated with the space occupied by the data, meaning that as the space occupied by the data increases, the required storage length also increases. This design is intended to optimize data storage and ensure the efficient use of storage resources. It may involve advanced features such as data compression, storage allocation strategies, or data migration. By calculating storage length information, the system can more accurately predict and allocate storage resources, thereby improving storage efficiency and performance.

[0069] Through the collaborative work of command tools, retrieval tools and calculation tools, commands can be accurately received and the storage type and occupied space of the data to be stored can be retrieved, ensuring the accuracy of subsequent calculations and processing. The dynamic computing capabilities of the calculation tools can adapt to data of different types and sizes, reducing manual intervention and improving the accuracy and scalability of processing data to be stored. By accurately evaluating and calculating storage length information, data can be more effectively managed and protected, reducing security risks caused by improper storage.

[0070] See also Figure 3 As shown, it is a schematic diagram of the classification module structure of the present invention, including:

[0071] A preprocessor, which is used to perform information fitting on the stored length information, preprocess the generated length fitting data, and generate corresponding length preprocessing data;

[0072] The learner is connected to the preprocessor to select several indicator features and learn the preprocessed data, and generate a corresponding storage length diagram, where:

[0073] The learner is provided with a storage length learning model;

[0074] The classifier is connected to the preprocessor and is used to store the data to be stored into the main directory and the subdirectory according to the storage length diagram.

[0075] In a specific implementation, the preprocessor is responsible for fitting the storage length information. This involves using a mathematical model or algorithm to predict or adjust the storage length data to better meet actual storage requirements. The preprocessor preprocesses the generated length-fitting data and generates corresponding preprocessed length data, which is used in the subsequent learning process. A learner is connected to the preprocessor and selects several indicator features. The learner includes a storage length learning model, a key component based on machine learning or deep learning techniques, for learning and predicting storage lengths from preprocessed data. The learner generates a corresponding storage length diagram, a graphical representation that visually displays the storage length prediction results for different data types. A classifier is connected to the preprocessor and stores the data to be stored in the main directory and subdirectories based on the storage length diagram. The classifier uses the storage length diagram as a decision-making basis, deciding whether to store the data in the main directory or subdirectories based on the data's storage length and other characteristics. This classified storage is designed to optimize data access speed, improve storage efficiency, or meet specific data organization requirements.

[0076] The stored length information is fitted and preprocessed through the preprocessor to generate corresponding length preprocessed data, which realizes the cleaning and normalization of data and provides accurate basic data for subsequent learning and classification. The learner selects several indicator features to learn the preprocessed data, which improves the feature learning ability, enables the system to identify and utilize key information in the data, and improves the accuracy of classification.

[0077] See also Figure 4 As shown, it is a schematic diagram of the management module structure of the present invention, including:

[0078] A verifier, which is used to verify the access rights of the visiting user based on the access key and the random key;

[0079] A generator, connected to the verifier, is used to generate a corresponding random key in combination with the access key, wherein,

[0080] The generator contains an encryption code that is valid for a preset period. When the preset period is exceeded or when combined with the access key, the encryption code is automatically updated;

[0081] The sender is connected to the generator and is used to send the random key to the account of the visiting user.

[0082] In specific implementations, the verifier is responsible for verifying the access rights of visiting users based on the access key and random key, establishing a security mechanism to ensure that only users with the correct key can access the system. By verifying the user's access key and random key, the verifier can verify the user's identity and permissions and prevent unauthorized access. The generator is connected to the verifier and contains an encryption code used to generate random keys, ensuring that each generated key is unique. The encryption code is valid for a preset period. After this period or each time it is combined with the access key, the encryption code is automatically updated to maintain system security and prevent the key from being cracked. The transmitter is connected to the generator and its function is to send the generated random key to the visiting user's account. By sending the random key, the user can verify their identity and obtain access rights, which is a key step in implementing secure access control.

[0083] By utilizing a verifier, the access rights of visiting users are verified based on the access key and the random key. This verification mechanism ensures that only authorized users can access sensitive data, thereby enhancing the security of the system. The dynamic generation mechanism of random keys ensures that the key obtained by each user is unique, reducing the risk of the key being cracked. The encryption code in the generator is valid within a preset period and is automatically updated when the period expires or when combined with the access key. This periodic update mechanism ensures that the encryption code is always kept up to date, preventing key leakage or abuse.

[0084] Specifically, when the command tool detects data to be stored, it sends a call instruction to the call tool, determines the number of bytes of the data to be stored based on the occupied space, and calculates the storage length information corresponding to the storage type based on the number of bytes.

[0085] In practice, based on the determined number of bytes, the retrieval tool calculates the storage length information corresponding to the storage type. "Storage type" here refers to different types of data, such as text, images, and videos, or different storage media. The calculation of storage length information involves factors such as the data compression algorithm and the characteristics of the storage media to determine the actual storage space required.

[0086] This process ensures that the system can dynamically allocate storage resources based on actual data size and storage requirements, thereby improving the efficiency and performance of the storage system. It also helps to achieve reasonable classification and effective management of data.

[0087] Specifically, the preprocessor cuts the storage length information according to the sampling rate to form a number of length fitting data with a standard sampling rate, and selects indicator features based on the length fitting data to generate corresponding length preprocessing data. The length preprocessing data enters the storage length learning model for learning and generates a corresponding storage length schematic diagram.

[0088] The standard sampling rate is a sampling rate that can be recognized by the storage length learning model, and the standard sampling rate remains unchanged during the learning process of the storage length learning model;

[0089] Indicator characteristics include the size in bytes of the data to be stored, the creation time, and / or the storage format.

[0090] In some possible implementations, when the standard sampling rate is selected between 160 and 180 data points per second, the storage length learning model has the best learning effect on the length preprocessed data. Preferably, the standard sampling rate is selected at 170 data points per second.

[0091] In the specific implementation, the preprocessor selects indicator features based on the length fitting data. These features are key factors affecting the storage length, including:

[0092] Byte size: The size of the data to be stored, in bytes.

[0093] Creation time: The time when data is created affects the storage priority or storage policy of the data.

[0094] Storage format: The storage format of data. Different formats will affect the storage efficiency and compression rate of data.

[0095] The length preprocessed data enters the storage length learning model for learning. During this process, the model uses this data to train and optimize its ability to predict storage length. During the learning process of the storage length learning model, the standard sampling rate remains unchanged to ensure the stability of the model and the accuracy of the prediction.

[0096] Specifically, the classifier obtains the length value in the storage length diagram. When the length value is greater than the storage length threshold, the corresponding data to be stored is stored in the main directory. When the length value is less than the storage length threshold, the corresponding data to be stored is stored in the subdirectory.

[0097] Among them, the classifier stores the data to be stored in the main directory first.

[0098] In some possible implementations, the storage length threshold is set to 15, the classifier obtains the length value of A to be stored data in the storage length diagram as 20, the length value is greater than the storage length threshold, and A to be stored data is stored in the main directory.

[0099] The storage length threshold is set to 15. The classifier obtains the length value of B's ​​to-be-stored data in the storage length diagram as 10. The length value is less than the storage length threshold, and B's to-be-stored data is stored in the subdirectory.

[0100] In practice, the classifier prioritizes data in the primary directory when processing data to be stored. This is because data in the primary directory is more frequently accessed or has greater business value, requiring faster access and higher priority storage resources. This optimizes storage resource usage by storing large files in the primary directory and smaller files in subdirectories, improving storage efficiency and performance. The storage length threshold is dynamically adjusted based on the system's actual operating conditions and storage requirements to accommodate different storage strategies and business needs.

[0101] Specifically, the visiting user inputs the access key into the verifier, and the verifier verifies the access rights of the visiting user and obtains the corresponding verification result, wherein:

[0102] If the verification result shows passing, the control module marks the access permission of the storage directory as open;

[0103] If the verification result shows failure, the control module locks the storage directory and migrates it.

[0104] In a specific implementation, when the verification fails, in addition to locking the storage directory, the control module will also perform a migration operation to transfer the data in the storage directory to a safer location, or transfer the data to an isolated environment to prevent potential security threats.

[0105] Throughout the process, the system will record security logs, including access attempts, verification results, and actions taken by the control module. These logs can be used for post-audit and security analysis.

[0106] This process ensures system security and data confidentiality, protecting storage directories from unauthorized access through strict access control and timely security response. At the same time, it also provides users with clear access rights instructions, enhancing system usability and transparency.

[0107] Specifically, when the verification result shows passing, the access key and encryption code are combined, the encryption result is calculated using the encryption algorithm, and the preset bytes of the encryption result are taken to generate the corresponding random key and send it to the visiting user's account.

[0108] In practice, the combined access key and encryption code are processed through an encryption algorithm, which can be symmetric or asymmetric, depending on the system's design and security requirements. The resulting encrypted result is extracted from a predefined byte length to generate a random key.

[0109] Preset bytes extracted from the encryption result are used as a random key. This unique random key is associated with the user's access key and encryption code. The generated random key is sent to the user's account via the transmitter. This random key is sent over a secure communication channel to ensure it cannot be intercepted or tampered with during transmission.

[0110] The random key has a validity period, which can be preset or dynamically determined based on the system's security policy. After the validity period expires, the random key will become invalid and need to be regenerated.

[0111] This process ensures that even if the access key is leaked, system resources cannot be accessed without the corresponding random key, thereby enhancing system security. At the same time, by regularly updating the encryption code and random keys, the system can further prevent the key from being cracked and protect the security of data.

[0112] Specifically, the visiting user inputs the random key into the verifier, and the verifier verifies the access rights of the visiting user again and obtains the corresponding verification result as a new verification result, wherein,

[0113] When the verification result shows that it passes, the control module marks the access permission of the data to be stored as open and decompresses the data to be stored;

[0114] If the verification result shows that it fails, the control module will lock the data to be stored and encrypt the data, and the control display light will change from green to red.

[0115] In practice, after receiving the random key, the verifier will verify the access rights of the visiting user again. This verification involves the validity and timeliness of the random key and its matching with the access key.

[0116] Depending on the new verification results, the control module will take different actions:

[0117] Verification passed: The verification result shows passed, and the control module marks the access permission of the data to be stored as open, and the visiting user is allowed to access the data to be stored.

[0118] Decompression operation: At the same time, the control module decompresses the data to be stored so that users can access the original data.

[0119] Verification Failed: If verification fails, the control module will take security measures and lock the data to be stored to prevent unauthorized access. In addition to locking the data, the control module will also encrypt the data to be stored for an additional layer of security.

[0120] The system has a control display light to indicate the current security status. When the verification fails, the control display light changes from green to red to alert users and system administrators that there is a security problem.

[0121] By setting up two checks for visiting users, first using the access key and then using the random key, this double verification mechanism greatly enhances the security of the system, ensuring that only legitimate users can access the data. When the verification result shows pass or fail, the control module will open or lock the access rights of the storage directory accordingly. This dynamic permission control mechanism ensures the security and availability of the data. The generator combines the access key and the encryption code, uses the encryption algorithm to calculate the encryption result, and generates the corresponding random key. The application of this encryption algorithm ensures the complexity and security of the key. The preset bytes are taken from the encryption result to generate the random key. This mechanism ensures the randomness and unpredictability of the key. Through this modular and automated design, the various components work together to reduce manual intervention and improve the efficiency and accuracy of the system.

[0122] Thus far, the technical solutions of the present invention have been described in conjunction with the preferred embodiments shown in the accompanying drawings. However, it will be readily understood by those skilled in the art that the scope of protection of the present invention is obviously not limited to these specific embodiments. Without departing from the principles of the present invention, those skilled in the art may make equivalent changes or substitutions to the relevant technical features, and the technical solutions after such changes or substitutions will fall within the scope of protection of the present invention.

[0123] The foregoing description is merely a preferred embodiment of the present invention and is not intended to limit the present invention. Those skilled in the art will readily appreciate that the present invention is susceptible to various modifications and variations. Any modifications, equivalent substitutions, or improvements made within the spirit and principles of the present invention are intended to be within the scope of protection of the present invention.

Claims

1. A front-end system for encrypted storage and access of large record number fields in a database, characterized in that: include: An evaluation module, which is used to collect data to be stored, and perform length detection on the data to be stored to determine its storage length information; a classification module connected to the evaluation module, for classifying and processing the data to be stored according to the storage length information and storing the data in a storage directory; a storage length threshold value is provided in the classification module, for responding to the data to be stored and determining its storage path, the storage path of the storage directory including a main directory and a subdirectory; the classification module includes: a preprocessor, for performing information fitting on the storage length information, preprocessing the generated length fitting data, and generating corresponding length preprocessed data; a classifier connected to the preprocessor, for storing the data to be stored in the main directory and the subdirectory respectively according to the storage length schematic diagram; the classifier obtains a length value in the storage length schematic diagram; when the length value is greater than the storage length threshold value, the corresponding data to be stored is stored in the main directory; when the length value is less than the storage length threshold value, the corresponding data to be stored is stored in the subdirectory; the classifier gives priority to storing the data to be stored in the main directory; a management module connected to the classification module, configured to verify the access rights of a visiting user based on an access key, and to generate a random key for accessing the data to be stored in combination with the access key, and to send the random key to the account of the visiting user; the management module includes: a verifier, configured to verify the access rights of the visiting user based on the access key and the random key; a generator, connected to the verifier, configured to generate a corresponding random key in combination with the access key, the generator containing an encryption code, the encryption code being valid within a preset period, and automatically updated when the preset period is exceeded or when combined with the access key; and a transmitter, connected to the generator, configured to send the random key to the account of the visiting user; A control module is connected to the management module and is used to control the opening or locking of the storage directory and the data to be stored according to the verification status of the access key and the random key.

2. The encryption storage and access front-end system for large record number fields in a database according to claim 1, characterized in that: The evaluation module includes: Command tool, which is used to send call commands; A retrieval tool, connected to the command tool, for receiving the retrieval command and retrieving the storage type and occupied space of the data to be stored; A calculation tool, connected to the retrieval tool, is used to calculate the storage length information of the data to be stored according to the storage type and the occupied space, wherein: The storage length information is positively correlated with the occupied space.

3. The encryption storage and access front-end system for large record number fields in a database according to claim 2, characterized in that: The classification module includes: A learner, connected to the preprocessor, is used to select several indicator features and learn the preprocessed data, and generate a corresponding storage length diagram, wherein: The learner is provided with a storage length learning model.

4. The encryption storage and access front-end system for large record number fields in a database according to claim 3, characterized in that: When the command tool detects the data to be stored, it sends a call instruction to the call tool, determines the number of bytes of the data to be stored according to the occupied space, and calculates the storage length information corresponding to the storage type according to the number of bytes.

5. The encryption storage and access front-end system for large record number fields in a database according to claim 4, characterized in that: The preprocessor cuts the stored length information according to the sampling rate to form a number of length fitting data with a sampling rate of a standard sampling rate, selects indicator features based on the length fitting data, generates corresponding length preprocessing data, and the length preprocessing data enters the storage length learning model for learning, and generates a corresponding storage length schematic diagram. The standard sampling rate is a sampling rate that can be recognized by the storage length learning model, and the standard sampling rate remains unchanged during the learning process of the storage length learning model; The indicator characteristics include the byte size, creation time and / or storage format of the data to be stored.

6. The encryption storage and access front-end system for large record number fields in a database according to claim 5, characterized in that: The visiting user inputs the access key into the verifier, and the verifier verifies the access rights of the visiting user and obtains a corresponding verification result, wherein: When the verification result shows passing, the control module marks the access permission of the storage directory as open; When the verification result shows failure, the control module locks the storage directory and migrates it.

7. The encryption storage and access front-end system for large record number fields in a database according to claim 6, characterized in that: When the verification result shows passing, the generator combines the access key and the encryption code, calculates the encryption result using an encryption algorithm, and takes the preset bytes of the encryption result to generate a corresponding random key and sends it to the account of the visiting user.

8. The encryption storage and access front-end system for large record number fields in a database according to claim 7, characterized in that: The visiting user inputs the random key into the verifier, and the verifier verifies the access rights of the visiting user again and obtains the corresponding verification result as a new verification result, wherein: When the verification result indicates passing, the control module marks the access permission of the data to be stored as open and decompresses the data to be stored; When the verification result shows that it fails, the control module locks the data to be stored and encrypts the data, and controls the display light to change from green to red.

Images