Big data security protection identification method and system based on trusted computing

Abstract

The present invention provides a big data security protection identification method and system based on trusted computing, the method comprising: obtaining security protection data to be encrypted; performing deflection correction encryption on the security protection data based on a preset deflection correction encryption algorithm to obtain deflection correction encrypted security protection data; performing trusted encryption management on the authorized use process of the deflection correction encrypted security protection data based on a preset authorized trusted algorithm; and associating application access to the security protection data when the preset authorization identification conditions are met. The present invention can realize trusted encryption management of security protection data, monitor data with high accuracy, and ensure the operational security of the big data application system and the security of application access behavior.

Description

Technical Field

[0001] The present invention relates to the technical field of big data security protection, and provides a big data security protection identification method and system based on trusted computing. Background Art

[0002] With the rapid development of big data technology, data security issues have become increasingly prominent. The security challenges currently faced by big data application systems mainly include data leakage risks, illegal access and data tampering, which not only threaten personal privacy and corporate secrets, but may also have a serious impact on national security. Although existing big data security protection technologies mainly rely on traditional security measures such as firewalls, intrusion detection systems and virtual private networks, these measures are difficult to adapt to the real-time operating status and environmental changes of big data application systems, make effective comprehensive predictions, have low monitoring data accuracy, and are poor in identifying the security status of big data system operations. Summary of the invention

[0003] The present invention provides a big data security protection identification method and system based on trusted computing, which is used to solve the defects of low monitoring data accuracy and poor effect of identifying the security status of big data system operation in the prior art. The present invention can realize trusted encryption management of security protection data, with high monitoring data accuracy, and ensure the operation security of big data application systems and the security of application access behaviors.

[0004] The present invention provides a big data security protection identification method based on trusted computing, comprising: obtaining security protection data to be encrypted; performing de-skew encryption on the security protection data based on a preset de-skew encryption algorithm to obtain the de-skew encrypted security protection data; performing trusted encryption management on the authorized use process of the de-skew encrypted security protection data based on a preset authorized trusted algorithm; and, when a preset authorization identification condition is met, associating an application with access to the security protection data.

[0005] According to a big data security protection identification method based on trusted computing provided by the present invention, the security protection data is encrypting the security protection data based on a preset correction encryption algorithm to obtain the security protection data after correction encryption, including: preparing Bell state particles by an application information party; the Bell state particles include a retained particle sequence and an interactive particle sequence; the interactive particle sequence is used to be sent to an application authenticator; the application authenticator is used to measure and reflect the interactive particle sequence to obtain an authenticator measurement result; the interactive particle sequence reflected by the application authenticator is received by the application information party, and Bell basis measurement is performed in combination with selected particles to obtain an information party measurement result; the selected particle is a particle selected from the retained particle sequence corresponding to the reflected particle in the interactive particle sequence; according to the authenticator measurement result and the information party measurement result, the security status of the communication path between the application information party and the application authenticator is determined; when the security status is communication security, a shared sequence is determined according to a preset correction encryption sequence, and the shared sequence is sent to the application authenticator through the application information party; according to the shared sequence, the security protection data is encrypting the security protection data to obtain the security protection data after correction encryption.

[0006] According to a big data security protection identification method based on trusted computing provided by the present invention, when the security status is communication security, a shared sequence is determined according to a preset correction encryption sequence, including: when the security status is communication security, Z-based measurement is performed on the monitoring particles through the application information party to obtain a monitoring particle sequence; encoding the coding particles to obtain a coding particle sequence; the monitoring particles are a first number of particles in the remaining particle sequence excluding the selected particles; the coding particles are a second number of particles in the remaining particle sequence excluding the selected particles; the monitoring particle sequence and the coding particle sequence are combined according to the preset correction encryption sequence to obtain the shared sequence.

[0007] According to a big data security protection identification method based on trusted computing provided by the present invention, the encoding rule of the encoding particle sequence is: when the security protection data at the current position is a first bit value, the corresponding encoding particle maintains the original state; when the security protection data at the current position is a second bit value, the phase of the corresponding encoding particle is inverted.

[0008] According to a big data security protection identification method based on trusted computing provided by the present invention, the monitoring particle sequence and the coding particle sequence are combined according to the preset correction encryption sequence to obtain the shared sequence, including: when the correction encryption sequence is a first value, the monitoring particle sequence is before the coding particle sequence; when the correction encryption sequence is a second value, the monitoring particle sequence is after the coding particle sequence; the first value is different from the second value.

[0009] According to a big data security protection identification method based on trusted computing provided by the present invention, the authorized use process of the security protection data after the correction encryption is managed with trusted encryption based on a preset authorized trusted algorithm, including: performing Z-basis measurement on the shared sequence by the application authenticator, and determining the combination of the monitoring particle sequence and the coding particle sequence according to the correction encryption sequence; performing security detection by the application authenticator according to the monitoring particle sequence, the measurement result of the authenticator and the initial Bell state particle state; the initial Bell state particle state is the particle state of the monitoring particle sequence and the coding particle sequence published by the application information party; obtaining the decrypted security protection data according to the measurement value of the coding particle sequence by the application authenticator, the measurement result of the authenticator, the initial Bell state particle state and the correction encryption sequence; performing public key encryption on the decrypted security protection data by the application trusted judgment party to manage the authorized use process of the security protection data with trusted encryption.

[0010] The present invention also provides a big data security protection identification system based on trusted computing, including: an acquisition module, used to acquire security protection data to be encrypted; a correction encryption module, used to perform correction encryption on the security protection data based on a preset correction encryption algorithm to obtain the security protection data after correction encryption; a trusted management module, used to perform trusted encryption management on the authorized use process of the security protection data after correction encryption based on a preset authorized trusted algorithm; and an access module, used to associate an application with access to the security protection data when a preset authorization identification condition is met.

[0011] The present invention also provides an electronic device, comprising a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein when the processor executes the computer program, the big data security protection and identification method based on trusted computing as described in any one of the above is implemented.

[0012] The present invention also provides a non-transitory computer-readable storage medium on which a computer program is stored. When the computer program is executed by a processor, it implements any of the big data security protection and identification methods based on trusted computing as described above.

[0013] The present invention also provides a computer program product, including a computer program, which, when executed by a processor, implements any of the big data security protection and identification methods based on trusted computing as described above.

[0014] The present invention provides a big data security protection identification method and system based on trusted computing, the method comprising: obtaining security protection data to be encrypted; performing deflection correction encryption on the security protection data based on a preset deflection correction encryption algorithm to obtain deflection correction encrypted security protection data; performing trusted encryption management on the authorized use process of the deflection correction encrypted security protection data based on a preset authorized trusted algorithm; and associating application access to the security protection data when the preset authorization identification conditions are met. The present invention can realize trusted encryption management of security protection data, monitor data with high accuracy, and ensure the operational security of the big data application system and the security of application access behavior. BRIEF DESCRIPTION OF THE DRAWINGS

[0015] In order to more clearly illustrate the technical solutions in the present invention or the prior art, the following briefly introduces the drawings required for use in the embodiments or the description of the prior art. Obviously, the drawings described below are some embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying creative work.

[0016] Figure 1 It is a flow chart of the big data security protection identification method based on trusted computing provided by the present invention.

[0017] Figure 2 It is a structural diagram of the big data security protection and identification system based on trusted computing provided by the present invention.

[0018] Figure 3 It is a structural schematic diagram of the electronic device provided by the present invention. DETAILED DESCRIPTION

[0019] The following embodiments of the present invention are described in further detail in conjunction with the accompanying drawings and examples. The following examples are used to illustrate the present invention, but are not intended to limit the scope of the present invention.

[0020] In order to solve the problem of low monitoring accuracy and poor effect of identifying the security status of system operation in the monitoring of steady-state credibility of the system by the relevant monitoring data in the prior art, the present invention provides a big data security protection identification method based on trusted computing, which clarifies the application information party by encrypting or signing the private key of the application declaration information pre-visited by the security protection data, clarifies the application authentication party by encrypting the public key of the historical application behavior authentication of the security protection data, and realizes the correction encryption of the security protection data by the correction encryption algorithm; after decrypting the private key of the application authentication party, the public key of the application trusted judgment party is used to encrypt the security protection data to authorize the use of the associated application to access the security protection data, and realizes the security of the memory data and prevents it from being invaded and tampered by various means. The present invention can realize the trusted encryption management of security protection data, the monitoring data has high accuracy, and ensures the operation security of the big data application system and the security of application access behavior.

[0021] Please refer to Figure 1 , Figure 1 A schematic diagram of the process flow of the big data security protection identification method based on trusted computing provided by the present invention.

[0022] The present invention provides a big data security protection identification method based on trusted computing, comprising: 101: Obtain security protection data to be encrypted.

[0023] In this embodiment, with security protection data as the core, through identity authentication and public key infrastructure, the application information party, application authentication party and application trust judgment party are clearly defined, the identity authentication center manages the private key, and the data registration center manages the public key. By establishing an index and search engine, the management of security protection data and the provision of services to applications are achieved.

[0024] 102: Based on a preset de-skew encryption algorithm, the security protection data is de-skewed and encrypted to obtain de-skewed and encrypted security protection data.

[0025] As a preferred embodiment, security protection data is encrypting based on a preset de-skew correction encryption algorithm to obtain security protection data after de-skew correction encryption, including: preparing Bell state particles by an application information party; Bell state particles include a retained particle sequence and an interactive particle sequence; the interactive particle sequence is used to be sent to an application authenticator; the application authenticator is used to measure and reflect the interactive particle sequence to obtain an authenticator measurement result; the application information party receives the interactive particle sequence reflected by the application authenticator, and performs Bell basis measurement in combination with selected particles to obtain the information party measurement result; the selected particle is a particle selected from the retained particle sequence corresponding to the reflected particle in the interactive particle sequence; according to the authenticator measurement result and the information party measurement result, the security status of the communication path between the application information party and the application authenticator is determined; when the security status is communication security, a shared sequence is determined according to a preset de-skew correction encryption sequence, and the shared sequence is sent to the application authenticator through the application information party; the security protection data is encrypting based on the shared sequence to obtain security protection data after de-skew correction encryption.

[0026] In this embodiment, the application information is obtained from four groups of Bell states. Random selection; preparation Bell state particles, where n is the length of the secure message, The application information party combines all the "1" particles in the Bell state particles into a Home sequence (retained particle sequence), and all the "2" particles into a Travel sequence (interactive particle sequence), and sends the Travel sequence to the application authentication party.

[0027] After receiving the Travel sequence sent by the application information party, the application authenticator randomly selects a measurement or reflection operation for each particle. The application authenticator randomly selects a Z basis to measure the interacting particles and saves the authenticator's measurement results as ,and When performing a reflection operation, the application authentication party does not perform any operation on the particles and directly sends them all back to the application information party; N The number is large enough, and the total number of particles selected for measurement and reflection by the authentication party is 2 n .

[0028] The application information party temporarily stores the interactive particle sequence reflected back by the application authentication party through a quantum memory device, and informs the application authentication party through a classical channel that the reflected interactive particles have been received. The application authentication party publishes the specific location information of all reflected particles in the Travel sequence. Based on the information published by the application authentication party, the application information party selects particles (selected particles) at the same position in the Home sequence, performs Bell basis measurement with the received reflected particles, performs monitoring detection operations, and obtains the measurement results of the information party. Based on the measurement results of the authentication party and the information party, the security status of the communication path between the application information party and the application authentication party is determined. N When the number is large enough, the total number of reflected particles is 2 n The information application party performs the initial state of 2n groups of Bell state particles. After the information application party completes the Bell basis measurement, it compares it with the initial state and calculates the error rate. If the error rate is lower than the value agreed by both parties, the information application party discards all reflected particles and the protocol proceeds to the next step; otherwise, both parties cancel the communication.

[0029] As a preferred embodiment, when the security status is communication security, a shared sequence is determined according to a preset correction encryption sequence, including: when the security status is communication security, the monitoring particles are measured by the application information party to obtain a monitoring particle sequence; the coding particles are encoded to obtain a coding particle sequence; the monitoring particles are a first number of particles in the retained particle sequence excluding selected particles; the coding particles are a second number of particles in the retained particle sequence excluding selected particles; the monitoring particle sequence and the coding particle sequence are combined according to the preset correction encryption sequence to obtain a shared sequence.

[0030] In this embodiment, when the security status is communication security, the shared sequence is determined and sent to the application authentication party through the application information party. Specifically, the application information party selects the Z basis for the remaining Home sequence particles to measure and obtains the measurement result ,and The application information party randomly selects n particles (the coded particles are the second number of particles in the retained particle sequence excluding the selected particles) to form a coded particle sequence ; Random selection n particles (the monitoring particles are the first number of particles in the retained particle sequence excluding the selected particles) to form a monitoring particle sequence The application information party uses the correction encryption sequence shared with the application authentication party. , reassemble the shared sequence The application information forms a sequence by combining Sent to the application authenticator.

[0031] As a preferred embodiment, the encoding rule of the encoding particle sequence is: when the security protection data at the current position is the first bit value, the corresponding encoding particle maintains the original state; when the security protection data at the current position is the second bit value, the phase of the corresponding encoding particle is inverted.

[0032] In this embodiment, the agreed coding rule for particles to form a coded particle sequence is: when the security protection data at the current position is the first bit value (for example, 0), the application information party does not perform any operation on the particle, and the corresponding coded particle remains in its original state. When the security protection data at the current position is the second bit value (for example, 1), the application information party inverts the phase of the particle at this position, that is, , get the coded particle sequence ; Random selection n Particles form a monitoring particle sequence .

[0033] As a preferred embodiment, the monitoring particle sequence and the coding particle sequence are combined according to a preset correction encryption sequence to obtain a shared sequence, including: when the correction encryption sequence is a first value, the monitoring particle sequence is before the coding particle sequence; when the correction encryption sequence is a second value, the monitoring particle sequence is after the coding particle sequence; the first value is different from the second value.

[0034] In this embodiment, the application information party uses the correction encryption sequence shared with the application authentication party. , reassemble the shared sequence , the specific rules are: when When , the coded particle sequence at the current position Put it in the monitoring particle sequence in front of; when When , the coded particle sequence at the current position Put it in the monitoring particle sequence After the application information, the sequence is combined to form Sent to the application authenticator.

[0035] 103: Based on the preset authorized trusted algorithm, the authorized use process of the security protection data after de-encryption is managed with trusted encryption.

[0036] As a preferred embodiment, the authorized use process of the security protection data after the correction encryption is managed with trusted encryption based on a preset authorized trusted algorithm, including: performing Z-basis measurement on the shared sequence by an application authenticator, and determining the combination of the monitoring particle sequence and the coding particle sequence according to the correction encryption sequence; performing security detection by the application authenticator according to the monitoring particle sequence, the authenticator's measurement result and the initial Bell state particle state; the initial Bell state particle state is the particle state of the monitoring particle sequence and the coding particle sequence announced by the application information party; obtaining the decrypted security protection data according to the measurement value of the coding particle sequence by the application authenticator, the authenticator's measurement result, the initial Bell state particle state and the correction encryption sequence; performing public key encryption on the decrypted security protection data by the application trusted judgment party, so as to perform trusted encryption management on the authorized use process of the security protection data.

[0037] In this embodiment, the security protection data after correction encryption is decrypted by the private key of the application authenticator, and then the public key of the application trusted judgment party is used to encrypt the authorized use of the security protection data. The authorization process is recorded and managed through coding and data registration center; the data registration center records data changes and application status, adaptively manages data resources, ensures data uniqueness and consistency, and supervises and handles abnormal data behavior; the data application authenticator and the authorized use process are recorded in an encoded manner and encrypted and managed together with the original data.

[0038] Specifically, when the application authenticator completes receiving After the sequence, the application trusted judgment party notifies the application information party through the classical channel, and the application authentication party uses the Z basis pair To measure; according to , the application authentication party knows Encoded particle sequence and monitor particle sequence The correct position order; the sequence of the coded particles is published by the application information party and monitor particle sequence The initial Bell state of the particle. After the application authenticator completes the measurement operation, it monitors the particle sequence The value of and the authenticator's measurement result , complete the security test according to the corresponding initial Bell state particle state published by the application information party. The application authentication party completes the security test according to the encoded particle sequence The measurement value and the authenticator's measurement result By comparing the initial Bell state information of the corresponding position published by the application information party, and combining the encoding rules and correction encryption sequence agreed by both parties, the value of n Bitsafe confidential information m(Decrypted security protection data). The decrypted security protection data is encrypted with a public key by using a trusted judgment party to perform trusted encryption management on the authorized use of the security protection data.

[0039] If the state of the Bell state particle prepared by the application information party is , the application authentication party and If the measurement result is not 00 or 11, monitoring or error occurs; the authenticator calculates the error rate. When the error rate is lower than the value agreed by both parties, the protocol continues; otherwise, the protocol is canceled and returns to the initial step.

[0040] 104: When the preset authorization identification conditions are met, the associated application accesses the security protection data.

[0041] In this embodiment, the access of the associated application to the security protection data provides support for the application, determines the environment of the data security application, and realizes the security of the memory data and prevents it from being invaded and tampered. Ordinary users only need to have extremely low-cost signal transmission capabilities and impose complex operation requirements on large institutions such as information centers to complete quantum secure direct communication with commercial value.

[0042] The party A with strong quantum capability in the present invention can use the present invention to directly transmit secure and confidential information to ordinary user B with only weak quantum capability under better transmission efficiency, thus completing quantum secure direct communication. The theory based on half-quantum shows that the present invention can be applied in a quantum communication network that is closer to reality. One of the application scenarios is: A is the application information party, which is played by the network information service provider, and party B and others are ordinary users who account for the vast majority of the network. Both parties can complete more complex operations such as direct communication. Through a rigorous security analysis process, it is proved that the present invention is safe and reliable under different attack strategies.

[0043] The particle transmission efficiency value of the present invention is 9.69%, the information transmission efficiency value is 89.4%, and the restart error rate is 0.13% (the number of particles is 100).

[0044] The big data security protection identification system based on trusted computing provided by the present invention is described below. The big data security protection identification system based on trusted computing described below and the big data security protection identification method based on trusted computing described above can be referenced to each other.

[0045] Please refer to Figure 2 , Figure 2 A schematic diagram of the structure of the big data security protection and identification system based on trusted computing provided by the present invention.

[0046] The present invention also provides a big data security protection identification system based on trusted computing, including: an acquisition module 201, used to obtain security protection data to be encrypted; a correction encryption module 202, used to perform correction encryption on the security protection data based on a preset correction encryption algorithm to obtain the security protection data after correction encryption; a trusted management module 203, used to perform trusted encryption management on the authorized use process of the security protection data after correction encryption based on a preset authorized trusted algorithm; an access module 204, used to associate the application with access to the security protection data when the preset authorization identification conditions are met.

[0047] Figure 3 An example of a structural diagram of an electronic device is shown in FIG. Figure 3 As shown, the electronic device may include: a processor 301, a communication interface 302, a memory 303 and a communication bus 304, wherein the processor 301, the communication interface 302 and the memory 303 communicate with each other through the communication bus 304. The processor 301 may call the logic instructions in the memory 303 to execute a big data security protection identification method based on trusted computing, the method comprising: obtaining security protection data to be encrypted; performing deflection correction encryption on the security protection data based on a preset deflection correction encryption algorithm to obtain deflection correction encrypted security protection data; performing trusted encryption management on the authorized use process of the deflection correction encrypted security protection data based on a preset authorized trusted algorithm; and, when the preset authorized identification conditions are met, associating the application with the access to the security protection data.

[0048] In addition, the logic instructions in the above-mentioned memory 303 can be implemented in the form of a software functional unit and can be stored in a computer-readable storage medium when it is sold or used as an independent product. Based on such an understanding, the technical solution of the present invention, in essence, or the part that contributes to the relevant technology or the part of the technical solution, can be embodied in the form of a software product, and the computer software product is stored in a storage medium, including a number of instructions to enable a computer device (which can be a personal computer, a server, or a network device, etc.) to perform all or part of the steps of the methods of various embodiments of the present invention. The aforementioned storage medium includes: U disk, mobile hard disk, read-only memory (ROM, Read-Only Memory), random access memory (RAM, Random Access Memory), disk or optical disk, etc. Various media that can store program codes.

[0049] An embodiment of the present invention discloses a computer program product, which includes a computer program stored on a non-transitory computer-readable storage medium, and the computer program includes program instructions. When the program instructions are executed by a computer, the computer can execute the big data security protection identification method based on trusted computing provided by the above-mentioned method embodiments, and the method includes: obtaining security protection data to be encrypted; performing de-skew correction encryption on the security protection data based on a preset de-skew correction encryption algorithm to obtain the de-skew correction encrypted security protection data; performing trusted encryption management on the authorized use process of the de-skew correction encrypted security protection data based on a preset authorized trusted algorithm; and, when the preset authorization identification conditions are met, associating applications with access to the security protection data.

[0050] On the other hand, an embodiment of the present invention also provides a non-transitory computer-readable storage medium having a computer program stored thereon. When the computer program is executed by a processor, it is implemented to execute the big data security protection identification method based on trusted computing provided in the above-mentioned embodiments, the method comprising: obtaining security protection data to be encrypted; performing de-skew correction encryption on the security protection data based on a preset de-skew correction encryption algorithm to obtain de-skew correction encrypted security protection data; performing trusted encryption management on the authorized use process of the de-skew correction encrypted security protection data based on a preset authorized trusted algorithm; and, when the preset authorization identification conditions are met, associating applications with access to the security protection data.

[0051] The device embodiments described above are merely illustrative, wherein the units described as separate components may or may not be physically separated, and the components displayed as units may or may not be physical units, that is, they may be located in one place, or they may be distributed on multiple network units. Some or all of the modules may be selected according to actual needs to achieve the purpose of the scheme of this embodiment. Ordinary technicians in this field can understand and implement it without paying creative labor.

[0052] Through the description of the above implementation methods, those skilled in the art can clearly understand that each implementation method can be implemented by means of software plus a necessary general hardware platform, and of course, can also be implemented by hardware. Based on this understanding, the above technical solution is essentially or the part that contributes to the relevant technology can be embodied in the form of a software product, and the computer software product can be stored in a computer-readable storage medium, such as ROM / RAM, a disk, an optical disk, etc., including a number of instructions for a computer device (which can be a personal computer, a server, or a network device, etc.) to execute the methods described in each embodiment or some parts of the embodiment.

[0053] Finally, it should be noted that the above embodiments are only used to illustrate the technical solutions of the present invention, rather than to limit it. Although the present invention has been described in detail with reference to the aforementioned embodiments, those skilled in the art should understand that they can still modify the technical solutions described in the aforementioned embodiments, or make equivalent replacements for some of the technical features therein. However, these modifications or replacements do not deviate the essence of the corresponding technical solutions from the spirit and scope of the technical solutions of the embodiments of the present invention.

Claims

1. A big data security protection identification method based on trusted computing, characterized in that: include: Obtain security protection data to be encrypted; Performing de-skew encryption on the security protection data based on a preset de-skew encryption algorithm to obtain de-skew encrypted security protection data; Based on a preset authorized trusted algorithm, the authorized use process of the security protection data after the correction encryption is managed with trusted encryption; When the preset authorization identification conditions are met, the associated application accesses the security protection data.

2. The big data security protection identification method based on trusted computing according to claim 1 is characterized in that: The step of performing de-skew encryption on the security protection data based on a preset de-skew encryption algorithm to obtain de-skew encrypted security protection data includes: Bell state particles are prepared by the application information party; the Bell state particles include a retained particle sequence and an interactive particle sequence; the interactive particle sequence is used to be sent to the application authentication party; the application authentication party is used to measure and reflect the interactive particle sequence to obtain the authentication party measurement result; The interactive particle sequence reflected by the application authentication party is received by the application information party, and Bell basis measurement is performed in combination with the selected particle to obtain the information party measurement result; the selected particle is a particle selected from the retained particle sequence and corresponding to the reflected particle in the interactive particle sequence; Determining the security status of the communication path between the application information party and the application authentication party according to the measurement result of the authentication party and the measurement result of the information party; When the security condition is communication security, determining a shared sequence according to a preset correction encryption sequence, and sending the shared sequence to the application authentication party through the application information party; The security protection data is encrypted with a correction function according to the shared sequence to obtain the security protection data after the correction function is encrypted.

3. The big data security protection identification method based on trusted computing according to claim 2 is characterized in that: When the security condition is communication security, determining the shared sequence according to the preset correction encryption sequence includes: When the security status is communication security, Z-based measurement is performed on the monitoring particles through the application information party to obtain a monitoring particle sequence; the coded particles are encoded to obtain a coded particle sequence; the monitoring particles are a first number of particles in the remaining particle sequence excluding the selected particles; the coded particles are a second number of particles in the remaining particle sequence excluding the selected particles; The monitoring particle sequence and the encoding particle sequence are combined according to the preset deflection correction encryption sequence to obtain the shared sequence.

4. The big data security protection identification method based on trusted computing according to claim 3 is characterized in that: The encoding rule of the encoded particle sequence is: When the security protection data at the current position is the first bit value, the corresponding coded particle remains in the original state; When the security protection data at the current position is the second bit value, the phase of the corresponding coded particle is inverted.

5. The big data security protection identification method based on trusted computing according to claim 3 is characterized in that: The combining the monitoring particle sequence and the coding particle sequence according to the preset deflection correction encryption sequence to obtain the shared sequence includes: When the de-skew encryption sequence is a first value, the monitoring particle sequence precedes the encoding particle sequence; When the de-skew encryption sequence is a second value, the monitoring particle sequence is after the encoding particle sequence; and the first value is different from the second value.

6. The big data security protection identification method based on trusted computing according to any one of claims 3 to 5, characterized in that: The trusted encryption management of the authorized use process of the security protection data after the correction encryption based on the preset authorized trusted algorithm includes: Performing Z-basis measurement on the shared sequence through the application authentication party, and determining a combination mode of the monitoring particle sequence and the encoding particle sequence according to the correction encryption sequence; According to the monitoring particle sequence, the authenticator measurement result and the initial Bell state particle state, the application authenticator performs security detection; the initial Bell state particle state is the particle state of the monitoring particle sequence and the encoding particle sequence published by the application information party; Obtaining decrypted security protection data according to the measurement value of the encoded particle sequence by the application authenticator, the measurement result of the authenticator, the initial Bell state particle state and the correction encryption sequence; The decrypted security protection data is encrypted with a public key by applying a trusted judgment party, so as to perform trusted encryption management on the authorized use process of the security protection data.

7. A big data security protection identification system based on trusted computing, characterized in that: include: An acquisition module, used to acquire security protection data to be encrypted; A de-skew correction encryption module, used to perform de-skew correction encryption on the security protection data based on a preset de-skew correction encryption algorithm to obtain de-skew correction encrypted security protection data; A trusted management module, used for performing trusted encryption management on the authorized use process of the security protection data after the correction encryption based on a preset authorized trusted algorithm; The access module is used to associate the application with the access to the security protection data when the preset authorization identification conditions are met.

8. An electronic device comprising a memory, a processor, and a computer program stored in the memory and running on the processor, characterized in that: When the processor executes the program, the big data security protection identification method based on trusted computing as described in any one of claims 1 to 6 is implemented.

9. A non-transitory computer-readable storage medium having a computer program stored thereon, characterized in that: When the computer program is executed by a processor, the big data security protection and identification method based on trusted computing as described in any one of claims 1 to 6 is implemented.

10. A computer program product, comprising a computer program, characterized in that When the computer program is executed by a processor, the big data security protection and identification method based on trusted computing as described in any one of claims 1 to 6 is implemented.

Images