Adaptive document encryption method based on text content and media page number

Abstract

The present invention discloses an adaptive document encryption method based on text content and the number of pages of a medium, and specifically relates to the field of joint document encryption management, including: dividing multi-department joint documents into content nodes, generating a content interaction association matrix and marking associated nodes, and assigning associated weights. Rearranging the nodes according to the weight priority, setting the decryption trigger condition to adjust the encryption and decryption order. Assigning independent and joint keys to documents and cross-document nodes to form a closed-loop chain set of node pairs. Configuring device document access rights, retrieving keys from a key pool based on key identifiers, decrypting authorized documents, and encrypting unauthorized documents. By parsing the node pair set of the encrypted document, recursively executing node encryption, and adjusting the encryption and decryption execution order based on the collaboration changes, regenerating the joint key and binding the new closed-loop chain, fine-grained encryption processing is performed on the content related to the confidential document to ensure the safe circulation of joint documents between users with different permissions.

Description

Technical Field

[0001] The present invention relates to the technical field of joint document encryption management, and more specifically, to an adaptive document encryption method based on text content and the number of medium pages. Background Art

[0002] In the collaborative environment of multi-departmental joint documents, the document content usually involves multiple departments and multiple institutions, and the information has a strong correlation. These documents not only contain sensitive data, but may also cover important information that interacts with other document contents. Therefore, when encrypting, the security of the document content and the flexibility of collaboration must be ensured. Traditional document encryption methods can often only encrypt the entire document, lacking fine-grained protection based on content paragraphs and media pages, which can easily lead to information leakage or cooperation barriers in cross-departmental and cross-institutional collaboration. In order to ensure the security of information, a dynamic and adaptive encryption method for different permission access is required. For example, for users or devices without viewing permissions, the document content that they do not have access to and all its associated content will be encrypted to ensure that even if a related document in the joint document is illegally accessed, the related unauthorized document content information cannot be leaked.

[0003] Therefore, how to propose an adaptive document encryption method to dynamically perform fine-grained encryption processing on the relevant content of confidential documents according to the content of the document and its relevance in the joint document to ensure the secure circulation of joint documents among users with different permissions is an urgent problem to be solved.

[0004] In order to solve the above problems, a technical solution is now provided. Summary of the invention

[0005] In order to overcome the above-mentioned defects of the prior art, an embodiment of the present invention provides an adaptive document encryption method based on text content and the number of media pages to solve the problems raised in the above-mentioned background technology.

[0006] To achieve the above object, the present invention provides the following technical solutions:

[0007] S1: Divide the multi-department joint documents into content nodes, generate a content interaction correlation matrix based on the correlation evaluation of the document content nodes, annotate the correlation nodes according to the cross-content in the correlation matrix, and assign correlation weights;

[0008] S2: establishing a weight priority order based on the association weights of the associated nodes, re-indexing the associated nodes according to the weight priority order, and setting a decryption trigger condition to adjust the execution order of encryption and decryption of the document content;

[0009] S3: Allocate independent keys and joint keys to documents and cross-document associated nodes through predefined key generation rules, and divide all cross-document associated nodes into node pairs to form a closed-loop chain set of node pairs based on the encryption and decryption execution order;

[0010] S4: Configure the document access rights of the device and generate a key identifier, retrieve an independent key from the key pool based on the key identifier, decrypt the documents within the access authorization scope according to the independent key, and encrypt the documents outside the access authorization scope;

[0011] S5: parsing the node pair closed-loop chain set corresponding to the associated nodes in the encrypted document, and recursively performing content encryption of the document associated nodes based on the joint key bound to the node pair identifier;

[0012] S6: According to the update of the joint document content and the change of collaboration, the execution order of encryption and decryption of the document content is adjusted in real time based on the encryption and decryption rule template to form a new node pair closed-loop chain set;

[0013] S7: invalidate the joint key bound to the original node pair identifier in the node pair closed-loop chain set, regenerate the joint key of the adjacent associated node, and bind the new joint key to the node pair identifier.

[0014] In a preferred embodiment, in S1, the multi-department joint document is divided into content nodes, a content interaction correlation matrix is ​​generated based on the correlation evaluation of the document content nodes, and the correlation nodes are marked according to the cross-content in the correlation matrix, and the correlation weights are assigned, which specifically include:

[0015] Obtain joint documents from multiple departments and label them, analyze all the labeled documents page by page, define the document content segmentation scale to segment the documents, and mark the document content paragraphs after segmentation as content nodes;

[0016] Analyze the grammatical structure and semantic features of the content nodes in each document, annotate the keywords and content length in the text, and form a feature vector of structured content;

[0017] Based on the feature vector, the semantic similarity values ​​between the paragraphs, sentences and keywords of the content nodes in the joint document are calculated to evaluate the relevance of the document content nodes. Based on the similarity value calculation results, the content interaction correlation matrix of the joint document is generated, and the content nodes corresponding to the items whose correlation evaluation values ​​in the matrix exceed the set correlation evaluation threshold are marked as cross-content;

[0018] Based on the content interaction matrix, the cross-content in the joint document is grouped, and a progressive content index mapping table is established in the form of a dependency chain. At the same time, the cross-content nodes of each document are marked as associated nodes. The associated nodes contain the content node information of the document and the precise page number of the document.

[0019] Based on the semantic similarity values ​​of the cross-contents corresponding to adjacent associated nodes in the index mapping table, the word frequency weights, and the number of interactions between documents, the associated nodes are indexed and integrated, and the corresponding associated weights are assigned.

[0020] In a preferred embodiment, in S2, a weight priority order is established based on the association weights of the associated nodes, the associated nodes are indexed and rearranged according to the weight priority order, and the decryption trigger condition is set to adjust the execution order of encryption and decryption of the document content, specifically including:

[0021] Generate a weighted sorting list based on the association weights of the association nodes, establish the priority order of the document association nodes, and express the priority order through numerical quantization order rules;

[0022] Setting the decryption trigger conditions for each associated node content, including the priority order setting of the document associated nodes and the encryption and decryption completion status of the preceding associated nodes;

[0023] Based on the priority order of the association weights of the association nodes, the indexes of the association nodes in the content index mapping table are re-ordered, and the execution order of encryption and decryption of the document content is adjusted in combination with the set decryption trigger conditions;

[0024] The association weight priority, decryption trigger condition and decryption order of the associated nodes are integrated into a unified encryption and decryption rule template.

[0025] In a preferred embodiment, in S3, independent keys and joint keys are allocated to documents and cross-document associated nodes through predefined key generation rules, and all cross-document associated nodes are divided into node pairs to form a closed-loop chain set of node pairs based on the encryption and decryption execution order, which specifically includes:

[0026] pre-define a key generation rule, assign an independent key to each document of the federated document, and embed the independent key into the encryption execution program of the document;

[0027] Based on the number of media pages corresponding to the index subscript of each associated node in the index mapping table, the hash value of the cross-document associated node is calculated according to the encryption and decryption execution order of the document content through a predefined hash algorithm, and the joint key of the adjacent associated nodes is generated based on the hash value calculation result;

[0028] According to the encryption and decryption execution order of the nodes associated between documents, all cross-document associated nodes are divided into several groups of adjacent node pairs, all adjacent node pairs are connected end to end, and a unique identifier is assigned to each node pair to form a closed-loop chain set of node pairs based on the encryption and decryption execution order;

[0029] Bind the joint key in the key pool structure to the unique identifier of the node pair to form a distribution map of the joint key;

[0030] The independent key and the joint key are marked with key identifiers and stored in the key pool for unified management.

[0031] In a preferred embodiment, in S4, configuring the document access rights of the device and generating a key identifier, retrieving an independent key from a key pool based on the key identifier, decrypting the document within the access authorization scope according to the independent key, and encrypting the document outside the access authorization scope specifically include:

[0032] Configure the document access rights of the device. According to the device document access authorization scope, generate the key identifier corresponding to the document within the access authorization scope for the access device. When the device accesses the document, it retrieves the corresponding independent key from the key pool through the key identifier to decrypt the document.

[0033] Obtain and activate the independent key that has not been retrieved and matched in the key pool, and encrypt the document outside the document access authorization scope through the encryption execution program embedded in the corresponding document of the activated independent key.

[0034] In a preferred embodiment, in S5, parsing the node pair closed-loop chain set corresponding to the associated node in the encrypted document, and recursively performing content encryption of the document associated node based on the joint key bound to the node pair identifier specifically includes:

[0035] Obtain all encrypted documents outside the scope of device document access authorization, parse all associated nodes in the encrypted documents, and the closed-loop chain set of node pairs corresponding to the associated nodes;

[0036] Taking the associated node in each encrypted document as the starting point of the closed-loop chain of node pairs, the content encryption of the associated node is recursively performed based on the joint key bound to the node pair identifier, and the encryption status of the associated node is updated to encrypted at the same time, until the closed-loop chain recursively traverses and encrypts.

[0037] In a preferred embodiment, in S6, according to the update of the joint document content and the change of the collaboration, the execution order of the encryption and decryption of the document content is adjusted in real time based on the encryption and decryption rule template to form a new node pair closed-loop chain set, which specifically includes:

[0038] Monitor the update information of the joint document content in real time, mark the content node to which the updated content location in the joint document belongs, and synchronously adjust the content interaction association matrix and the index subscript in the index mapping table;

[0039] Based on the encryption and decryption rule template, the execution order of encryption and decryption of the document content is adjusted in real time to form a new node pair closed-loop chain set.

[0040] In a preferred embodiment, in S7, the joint key bound to the original node pair identifier in the node pair closed-loop chain set is invalidated and a joint key of an adjacent associated node is regenerated, and the new joint key is bound to the node pair identifier.

[0041] The technical effects and advantages of the adaptive document encryption method based on text content and medium page number of the present invention are as follows:

[0042] By dividing the document into multiple content nodes and establishing an interactive correlation matrix based on the correlation between the nodes, the refined encryption of the document content is achieved. Different nodes are given different encryption priorities according to their correlation and importance, avoiding the unified encryption of the entire document and improving the flexibility and security of the encryption strategy. Combined with the document's access permission management system and dynamic key generation rules, it ensures that different users can only access content within the authorized scope. For unauthorized users, the document content and its associated content that they cannot access will be automatically encrypted to ensure that information is not leaked. This method supports cross-departmental collaboration, allowing multiple departments or institutions to collaborate on joint documents while ensuring data security. The system dynamically adjusts the encryption and decryption execution order and permission control to ensure that the document is always in a secure state during the collaboration process without affecting work efficiency.

[0043] In addition, as the document content is updated or the collaborative relationship changes, the system can adjust the encryption and decryption process in real time, dynamically generate new keys and update the key pool to adapt to changes in document content and structure, and maintain efficient and continuous security protection. Through content-related encryption and joint key mechanisms, even if part of the document is decrypted, other content cannot be obtained, which greatly increases the difficulty of cracking and prevents the leakage of sensitive information. This method provides a more efficient and secure document data management solution for multi-department collaboration. BRIEF DESCRIPTION OF THE DRAWINGS

[0044] Figure 1 The figure is a flow chart of the adaptive document encryption method based on text content and the number of medium pages of the present invention. DETAILED DESCRIPTION

[0045] The following will be combined with the drawings in the embodiments of the present invention to clearly and completely describe the technical solutions in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0046] Example 1

[0047] Figure 1 The present invention provides an adaptive document encryption method based on text content and medium page number, which includes the following steps:

[0048] S1: Divide the multi-department joint documents into content nodes, generate a content interaction correlation matrix based on the correlation evaluation of the document content nodes, annotate the correlation nodes according to the cross-content in the correlation matrix, and assign correlation weights;

[0049] S2: establishing a weight priority order based on the association weights of the associated nodes, re-indexing the associated nodes according to the weight priority order, and setting a decryption trigger condition to adjust the execution order of encryption and decryption of the document content;

[0050] S3: Allocate independent keys and joint keys to documents and cross-document associated nodes through predefined key generation rules, and divide all cross-document associated nodes into node pairs to form a closed-loop chain set of node pairs based on the encryption and decryption execution order;

[0051] S4: Configure the document access rights of the device and generate a key identifier, retrieve an independent key from the key pool based on the key identifier, decrypt the documents within the access authorization scope according to the independent key, and encrypt the documents outside the access authorization scope;

[0052] S5: parsing the node pair closed-loop chain set corresponding to the associated nodes in the encrypted document, and recursively performing content encryption of the document associated nodes based on the joint key bound to the node pair identifier;

[0053] S6: According to the update of the joint document content and the change of collaboration, the execution order of encryption and decryption of the document content is adjusted in real time based on the encryption and decryption rule template to form a new node pair closed-loop chain set;

[0054] S7: invalidate the joint key bound to the original node pair identifier in the node pair closed-loop chain set, regenerate the joint key of the adjacent associated node, and bind the new joint key to the node pair identifier.

[0055] In S1, multi-department joint documents are divided into content nodes, a content interaction correlation matrix is ​​generated based on the correlation evaluation of document content nodes, and the correlation nodes are annotated according to the cross-content in the correlation matrix, and the correlation weights are assigned.

[0056] Get joint documents from multiple departments and number them one by one. Document numbering is based on the source of the document and the department to which it belongs, so as to facilitate the subsequent management and reference of the document. Analyze the content of each document page by page, and define the document segmentation scale based on the actual structure and characteristics of the document content. For example, the document is divided into chapters, sections or paragraphs to ensure that the divided content paragraphs are convenient for subsequent processing.

[0057] Mark each paragraph or section of the document as a content node. These nodes represent a complete unit of information in the document. Each content node is given a unique identifier through the document page number and chapter index. The identifier includes information such as the document number, page number, and paragraph number, ensuring that the exact location of each content node can be traced.

[0058] Perform grammatical analysis on each content node, annotate the keywords and content length (such as names, place names, dates, etc.) in the text, and use natural language processing (NLP) technology to extract grammatical structure and semantic features. For example, use methods such as part-of-speech tagging and syntactic analysis to identify information such as subject-verb-object structure, modifiers, and reference relationships in the text. Based on these analysis results, construct a feature vector of the content node, where each vector dimension corresponds to the grammatical features, semantic features, and keywords in the document content. By encoding the feature vectors of the content nodes, a structured content representation is formed.

[0059] Based on the feature vector of each content node, the semantic similarity value of the content nodes in the joint document is calculated. The calculation method uses the cosine similarity method to evaluate the semantic relevance between paragraphs, sentences and keywords between documents. Generate the content interaction correlation matrix M between documents. Assuming there are n content nodes, each node i and j will have a correlation value , the correlation matrix is ​​an n*n matrix, which is specifically expressed as:

[0060]

[0061] in, The items on the diagonal represent the relevance between the content node and itself (set to 1), that is, each content node is completely related to itself.

[0062] Each item in the matrix represents the similarity between two content nodes. If the similarity exceeds the preset association evaluation threshold (the default setting is 0.5), the pair of content nodes is marked as cross-content, indicating that they have a strong semantic connection.

[0063] The cross-content in the association matrix is ​​grouped to form a dependency chain, and a progressive content index mapping table is constructed. The mapping table describes the association and dependency relationship between each content node in the document. By analyzing the adjacent nodes in the matrix, a progressive relationship and semantic chain between content nodes can be formed. For each document, the index subscript of its cross-content in the mapping table is marked. The index subscript is the addressing method of the association node in the document. Based on the page number positioning, paragraph identifier and other information of each association node, specific retrieval is performed.

[0064] Here is a concrete example:

[0065] Assume we have four document content nodes (A1, A2, B1, B2), the calculated association matrix Expressed as:

[0066] Node A1: associated with A2 (0.8), associated with B1 (0.6); Node A2: associated with A1 (0.8), associated with B1 (0.7), associated with B2 (0.4); Node B1: associated with A1 (0.6), associated with A2 (0.7), associated with B2 (0.5); Node B2: associated with A1 (0.3), associated with A2 (0.4), associated with B1 (0.5). Nodes with association values ​​less than the set threshold (0.5) are eliminated, and the final dependency chain relationships are A1 → A2 → B1 and B1 → B2. The index subscripts are integrated based on the dependency chain relationships.

[0067] Based on the semantic similarity values ​​of the cross-content corresponding to adjacent associated nodes in the index mapping table, the word frequency weight (i.e., the keyword overlap rate), and the number of interactions between documents (i.e., the number of dependency chains between documents belonging to adjacent associated nodes), the comprehensive weight value is calculated through weighted summation, and the associated weights of the corresponding associated nodes are allocated according to the weight ratio.

[0068] In S2, a weight priority order is established based on the association weights of the association nodes, the association nodes are indexed and rearranged according to the weight priority order, and a decryption trigger condition is set to adjust the execution order of encryption and decryption of the document content.

[0069] Generate a weight sorting list based on the association weights of the association nodes, and establish the priority order of the document association nodes. The priority order is expressed by numerical quantification order rules. Assuming that the weight distribution in the dependency chain relationship A1 → A2 → B1 is A1 (0.6), A2 (0.8), B1 (0.2), the corresponding priority order is A2, A1, B1. Set the decryption trigger conditions for the content of each association node, including the priority order setting of the document association nodes and the encryption and decryption completion status of the preceding association nodes. Specifically, the encryption and decryption of A1 needs to be based on the encryption / decryption completion status of A2, and the encryption and decryption of B1 needs to be based on the encryption / decryption completion status of A1.

[0070] Based on the association weight priority order of the associated nodes, the indexes of the associated nodes in the content index mapping table are re-arranged, and the execution order of encryption and decryption of the document content is adjusted in combination with the set decryption trigger conditions. The index subscripts corresponding to A2, A1, and B1 are converted into the sequential addressing processing order of page positioning and paragraph identifiers as the execution order of encryption and decryption of the document content.

[0071] The associated weight priority, decryption trigger conditions and decryption order of the associated nodes are integrated into a unified encryption and decryption rule template. The encryption and decryption rule template can be used as a fixed encryption and decryption reference for different users or devices when accessing documents to ensure that in a multi-user environment, each user can only decrypt a specific part of the content according to his or her permissions, and the decryption process complies with the prescribed order, thereby improving the security of the document.

[0072] In S3, independent keys and joint keys are assigned to documents and cross-document associated nodes through predefined key generation rules. At the same time, all cross-document associated nodes are divided into node pairs to form a closed-loop chain set of node pairs based on the order of encryption and decryption execution.

[0073] A key generation rule is predefined (the default is a key generation rule based on a symmetric encryption algorithm), an independent key is assigned to each document of the federated documents, and the independent key is embedded in the encryption execution program of the document.

[0074] Based on the number of media pages corresponding to the index subscript of each associated node in the index mapping table, the hash value of the cross-document associated node is calculated according to the encryption and decryption execution order of the document content through the predefined hash algorithm, and the joint key of the adjacent associated nodes is generated based on the hash value calculation result. The following is a specific example:

[0075] Assuming that the encryption and decryption execution order is A2, A1, B1, first calculate the hash value of each associated node,

[0076] H(A2) = SHA256(index A2 + sequence A2 + page number A2),

[0077] H(A1) = SHA256(index A1 + sequence A1 + page number A1),

[0078] H(B1) = SHA256(index B1 + sequence B1 + page number B1),

[0079] Further cross-document hash value calculation:

[0080] H(A2,A1)=SHA256(H(A2)+H(A1)),

[0081] H(A1,B1)=SHA256(H(A1)+H(B1)),

[0082] Finally, the joint key is generated:

[0083] K_joint = SHA256(H(A, B) + H(B, C) + ...), which combines all cross-document hash values ​​to generate a joint key.

[0084] According to the encryption and decryption execution order of the nodes associated between documents, all cross-document associated nodes are divided into several groups of adjacent node pairs, all adjacent node pairs are connected end to end, and a unique identifier is assigned to each node pair to form a closed-loop chain set of node pairs based on the encryption and decryption execution order. For example, the closed-loop chain set for the encryption and decryption execution order A2, A1, B1 is expressed as: .

[0085] Bind the joint key in the key pool structure to the unique identifier of each node pair. In this way, the encryption and decryption process of each node pair will be carried out according to the corresponding joint key. This mapping relationship ensures that each associated node in the document can be encrypted and decrypted in the set order.

[0086] Finally, all generated independent keys and joint keys will be marked with key identifiers and stored in the key pool for unified management. The key pool is a secure storage environment. Through the management of the key pool, it can ensure that the encryption and decryption keys of each document and node are always kept safe during the execution process, and can be dynamically accessed and adjusted when needed. The key pool also provides a convenient key query mechanism to ensure that the required key can be found in time when decrypting a document.

[0087] In S4, the document access rights of the device are configured and a key identifier is generated. An independent key is retrieved from a key pool based on the key identifier. Documents within the scope of the access authorization are decrypted according to the independent key, and documents outside the scope of the access authorization are encrypted.

[0088] The system configures the document access rights of the device, and sets detailed permissions based on the access authorization scope of the device documents (such as device type, permission level, etc.). For example, device A can only access documents 1 and 3, while device B can only access document 2. The document access authorization scope of each device will be bound to the corresponding key identifier to form an access control policy.

[0089] According to the configured access authorization scope, the system will generate a corresponding key identifier for each document. The key identifier is a unique identifier used to distinguish different document ownership. The system will assign different key identifiers to the document in the document management system according to the ownership of the document (such as Document 1, Document 2, etc.). Each device can only retrieve and obtain the corresponding independent key in the key pool through the key identifier when accessing documents within its authorization scope, so as to perform document decryption operations.

[0090] The device uses the independent key retrieved from the key pool to decrypt the target document. If the device's access request meets its access authorization scope (for example, device A requests to access document 1), the system allows the device to decrypt and access the document content using the matched key. If the device accesses a document outside the authorization scope (for example, device A requests to access document 2), the system denies access and performs a security audit.

[0091] If a device requests access to a document that is beyond its authorized access scope, the system triggers a security mechanism to protect the document. The system encrypts the document by activating an independent key in the key pool that has not been retrieved and matched. At this time, the unmatched key in the key pool is activated and temporarily assigned to the encryption execution program. The activated key performs encryption operations on the document, ensuring that even if an unauthorized device attempts to access the document, its content cannot be decrypted or obtained.

[0092] In S5, the node pair closed-loop chain set corresponding to the associated nodes in the encrypted document is parsed, and based on the joint key bound to the node pair identifier, the content encryption of the document associated nodes is recursively performed.

[0093] Obtain all encrypted documents outside the scope of device document access authorization, parse all associated nodes in the encrypted documents, and the closed-loop chain set of node pairs corresponding to the associated nodes.

[0094] Taking the associated node in each encrypted document as the starting point of the closed-loop chain of node pairs, the content encryption of the associated node is recursively performed based on the joint key bound to the node pair identifier, and the encryption status of the associated node is updated to encrypted at the same time, until the recursive traversal encryption of the closed-loop chain is completed (that is, returning to the starting point of the circular queue of the associated node and the starting state is encrypted).

[0095] In S6, according to the update of the joint document content and the change of the collaboration, the execution order of encryption and decryption of the document content is adjusted in real time based on the encryption and decryption rule template to form a new node pair closed-loop chain set.

[0096] Monitor the updated information of the joint document content in real time, mark the content node to which the updated content location in the joint document belongs, synchronously adjust the content interaction matrix and the index subscript in the index mapping table, and adjust the execution order of encryption and decryption of the document content in real time based on the encryption and decryption rule template to form a new node pair closed-loop chain set.

[0097] In S7, the joint key bound to the original node pair identifier in the node pair closed-loop chain set is invalidated and the joint key of the adjacent associated node is regenerated, the new joint key is bound to the node pair identifier, and a new joint encryption mechanism is established.

[0098] The above formulas are all dimensionless and numerical calculations. The formula is a formula for the most recent real situation obtained by collecting a large amount of data and performing software simulation. The preset parameters and thresholds in the formula are set by technicians in this field according to actual conditions.

[0099] The above embodiments may be implemented in whole or in part by software, hardware, firmware or any other combination thereof. When implemented by software, the above embodiments may be implemented in whole or in part in the form of a computer program product. The computer program product includes one or more computer instructions or computer programs. When the computer instructions or computer programs are loaded or executed on a computer, the process or function described in the embodiment of the present application is generated in whole or in part. The computer may be a general-purpose computer, a special-purpose computer, a computer network, or other programmable device. The computer instructions may be stored in a computer-readable storage medium, or may be transmitted from one computer-readable storage medium to another computer-readable storage medium. For example, the computer instructions may be transmitted from one website, computer, server or data center to another website, computer, server or data center by wired (e.g., infrared, wireless, microwave, etc.) means. The computer-readable storage medium may be any available medium that a computer can access or a data storage device such as a server or data center that contains one or more available media sets. The available medium may be a magnetic medium (e.g., a floppy disk, a hard disk, a tape), an optical medium (e.g., a DVD), or a semiconductor medium. The semiconductor medium may be a solid-state hard disk.

[0100] Those of ordinary skill in the art will appreciate that the modules and algorithm steps of each example described in conjunction with the embodiments disclosed herein can be implemented in electronic hardware, or a combination of computer software and electronic hardware. Whether these functions are performed in hardware or software depends on the specific application and design constraints of the technical solution. Professional and technical personnel can use different methods to implement the described functions for each specific application, but such implementation should not be considered to be beyond the scope of this application.

[0101] Those skilled in the art can clearly understand that, for the convenience and brevity of description, the specific working processes of the systems, devices and modules described above can refer to the corresponding processes in the aforementioned method embodiments and will not be repeated here.

[0102] In the several embodiments provided in the present application, it should be understood that the disclosed systems, devices and methods can be implemented in other ways. For example, the device embodiments described above are only schematic. For example, the division of the modules is only a logical function division. There may be other division methods in actual implementation, such as multiple modules or components can be combined or integrated into another system, or some features can be ignored or not executed. Another point is that the mutual coupling or direct coupling or communication connection shown or discussed can be through some interfaces, indirect coupling or communication connection of devices or modules, which can be electrical, mechanical or other forms.

[0103] The modules described as separate components may or may not be physically separated, and the components shown as modules may or may not be physical modules, and may be located in one place or distributed on multiple network modules. Some or all of the modules may be selected according to actual needs to achieve the purpose of the solution of this embodiment.

[0104] In addition, each functional module in each embodiment of the present application may be integrated into one processing module, or each module may exist physically separately, or two or more modules may be integrated into one module.

[0105] If the functions are implemented in the form of software function modules and sold or used as independent products, they can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of the present application can be essentially or partly embodied in the form of a software product that contributes to the prior art. The computer software product is stored in a storage medium, including several instructions for a computer device (which can be a personal computer, a server, or a network device, etc.) to perform all or part of the steps of the methods described in the various embodiments of the present application. The aforementioned storage media include: U disk, mobile hard disk, read-only memory (ROM), random access memory (RAM), disk or optical disk, and other media that can store program codes.

[0106] The above is only a specific implementation of the present application, but the protection scope of the present application is not limited thereto. Any person skilled in the art who is familiar with the present technical field can easily think of changes or substitutions within the technical scope disclosed in the present application, which should be included in the protection scope of the present application. Therefore, the protection scope of the present application should be based on the protection scope of the claims.

[0107] Finally: The above description is only a preferred embodiment of the present invention and is not intended to limit the present invention. Any modifications, equivalent substitutions, improvements, etc. made within the spirit and principles of the present invention should be included in the protection scope of the present invention.

Claims

1. An adaptive document encryption method based on text content and number of media pages, characterized in that: The steps include: S1: Divide the multi-department joint documents into several content nodes, generate a content interaction correlation matrix based on the correlation evaluation of the document content nodes, annotate the correlation nodes according to the cross-content in the correlation matrix, and assign correlation weights; S2: establishing a weight priority order based on the association weights of the associated nodes, re-indexing the associated nodes according to the weight priority order, and setting a decryption trigger condition to adjust the execution order of encryption and decryption of the document content; S3: Allocate independent keys and joint keys to documents and cross-document associated nodes through predefined key generation rules, and divide all cross-document associated nodes into node pairs to form a closed-loop chain set of node pairs based on the encryption and decryption execution order; S4: Configure the document access rights of the device and generate a key identifier, retrieve an independent key from the key pool based on the key identifier, decrypt the documents within the access authorization scope according to the independent key, and encrypt the documents outside the access authorization scope; S5: parsing the node pair closed-loop chain set corresponding to the associated nodes in the encrypted document, and recursively performing content encryption of the document associated nodes based on the joint key bound to the node pair identifier; S6: According to the update of the joint document content and the change of collaboration, the execution order of encryption and decryption of the document content is adjusted in real time based on the encryption and decryption rule template to form a new node pair closed-loop chain set; S7: invalidate the joint key bound to the original node pair identifier in the node pair closed-loop chain set, regenerate the joint key of the adjacent associated node, and bind the new joint key to the node pair identifier.

2. The method for adaptive document encryption based on text content and number of media pages according to claim 1, characterized in that: In S1, the multi-department joint documents are divided into content nodes, and the content interaction correlation matrix is ​​generated based on the correlation evaluation of the document content nodes. The correlation nodes are marked according to the cross-content in the correlation matrix, and the correlation weights are assigned, including: Obtain joint documents from multiple departments and label them, analyze all the labeled documents page by page, define the document content segmentation scale to segment the documents, and mark the document content paragraphs after segmentation as content nodes; Analyze the grammatical structure and semantic features of the content nodes in each document, annotate the keywords and content length in the text, and form a feature vector of structured content; Based on the feature vector, the semantic similarity values ​​between the paragraphs, sentences and keywords of the content nodes in the joint document are calculated to evaluate the relevance of the document content nodes. Based on the similarity value calculation results, the content interaction correlation matrix of the joint document is generated, and the content nodes corresponding to the items whose correlation evaluation values ​​in the matrix exceed the set correlation evaluation threshold are marked as cross-content; Based on the content interaction matrix, the cross-content in the joint document is grouped, and a progressive content index mapping table is established in the form of a dependency chain. At the same time, the cross-content nodes of each document are marked as associated nodes. The associated nodes contain the content node information of the document and the precise page number of the document. Based on the semantic similarity values ​​of the cross-contents corresponding to adjacent associated nodes in the index mapping table, the word frequency weights, and the number of interactions between documents, the associated nodes are indexed and integrated, and the corresponding associated weights are assigned.

3. The method for adaptive document encryption based on text content and number of media pages according to claim 2, characterized in that: In S2, a weight priority order is established based on the association weights of the association nodes, the association nodes are indexed and rearranged according to the weight priority order, and the decryption trigger condition is set to adjust the execution order of encryption and decryption of the document content, specifically including: Generate a weighted sorting list based on the association weights of the association nodes, establish the priority order of the document association nodes, and express the priority order through numerical quantization order rules; Setting the decryption trigger conditions for each associated node content, including the priority order setting of the document associated nodes and the encryption and decryption completion status of the preceding associated nodes; Based on the priority order of the association weights of the association nodes, the indexes of the association nodes in the content index mapping table are re-ordered, and the execution order of encryption and decryption of the document content is adjusted in combination with the set decryption trigger conditions; The association weight priority, decryption trigger condition and decryption order of the associated nodes are integrated into a unified encryption and decryption rule template.

4. The method for adaptive document encryption based on text content and number of media pages according to claim 3, characterized in that: In S3, independent keys and joint keys are assigned to documents and cross-document associated nodes through predefined key generation rules. At the same time, all cross-document associated nodes are divided into node pairs to form a closed-loop chain set of node pairs based on the encryption and decryption execution order. Specifically, it includes: pre-define a key generation rule, assign an independent key to each document of the federated document, and embed the independent key into the encryption execution program of the document; Based on the number of media pages corresponding to the index subscript of each associated node in the index mapping table, the hash value of the cross-document associated node is calculated according to the encryption and decryption execution order of the document content through a predefined hash algorithm, and the joint key of the adjacent associated nodes is generated based on the hash value calculation result; According to the encryption and decryption execution order of the nodes associated between documents, all cross-document associated nodes are divided into several groups of adjacent node pairs, all adjacent node pairs are connected end to end, and a unique identifier is assigned to each node pair to form a closed-loop chain set of node pairs based on the encryption and decryption execution order; Bind the joint key in the key pool structure to the unique identifier of the node pair to form a distribution map of the joint key; The independent key and the joint key are marked with key identifiers and stored in the key pool for unified management.

5. The method for adaptive document encryption based on text content and number of media pages according to claim 4, characterized in that: In S4, the document access rights of the device are configured and a key identifier is generated. Based on the key identifier, an independent key is retrieved from the key pool. The document within the access authorization scope is decrypted according to the independent key. The document outside the access authorization scope is encrypted. Specifically, the following steps are performed: Configure the document access rights of the device. According to the device document access authorization scope, generate the key identifier corresponding to the document within the access authorization scope for the access device. When the device accesses the document, it retrieves the corresponding independent key from the key pool through the key identifier to decrypt the document. Obtain and activate the independent key that has not been retrieved and matched in the key pool, and encrypt the document outside the document access authorization scope through the encryption execution program embedded in the corresponding document of the activated independent key.

6. The method for adaptive document encryption based on text content and number of media pages according to claim 5, characterized in that: In S5, the node pair closed-loop chain set corresponding to the associated node in the encrypted document is parsed, and based on the joint key bound to the node pair identifier, the content encryption of the document associated node is recursively performed, specifically including: Obtain all encrypted documents outside the scope of device document access authorization, parse all associated nodes in the encrypted documents, and the closed-loop chain set of node pairs corresponding to the associated nodes; Taking the associated node in each encrypted document as the starting point of the closed-loop chain of node pairs, the content encryption of the associated node is recursively performed based on the joint key bound to the node pair identifier, and the encryption status of the associated node is updated to encrypted at the same time, until the closed-loop chain recursively traverses and encrypts.

7. The method for adaptive document encryption based on text content and number of media pages according to claim 6, characterized in that: In S6, according to the update of the joint document content and the change of the collaboration, the execution order of encryption and decryption of the document content is adjusted in real time based on the encryption and decryption rule template to form a new node pair closed-loop chain set, which specifically includes: Monitor the update information of the joint document content in real time, mark the content node to which the updated content location in the joint document belongs, and synchronously adjust the content interaction association matrix and the index subscript in the index mapping table; Based on the encryption and decryption rule template, the execution order of encryption and decryption of the document content is adjusted in real time to form a new node pair closed-loop chain set.

8. The method for adaptive document encryption based on text content and number of media pages according to claim 7, characterized in that: In S7, the joint key bound to the original node pair identifier in the node pair closed-loop chain set is invalidated, and the joint key of the adjacent associated node is regenerated, and the new joint key is bound to the node pair identifier.

Images