Enterprise information integration platform based on big data and management method
By obfuscating and separating enterprise data in the enterprise information integration platform, the problem of how enterprise data is stored securely in the integration platform is solved, and the correctness, integrity and security of data are achieved.
Patent Information
- Application Number
- CN202510280219.X
- Authority / Receiving Office
- CN · China
- Patent Type
- Applications(China)
- Current Assignee / Owner
- Filing Date
- 2025-03-11
- Publication Date
- 2025-04-08
- Estimated Expiration
- 2045-03-11
AI Technical Summary
The existing technology has failed to effectively solve the problem of how enterprise data is stored securely in an integrated platform.
The user module safely transmits enterprise data to the control module, and obfuscation is performed in the control module, obfuscated data is generated, and initial values and stored values are performed to separate stored data blocks to ensure data security.
It ensures the correctness and integrity of the enterprise data received by the control module, and prevents third parties from obtaining enterprise data when attacked, thus realizing the secure storage of enterprise data.
Smart Images

Figure CN119783164A_ABST
Abstract
Description
Technical Field
[0001] The present application relates to the technical field of data integration platforms, and in particular to an enterprise information integration platform and management method based on big data. Background Art
[0002] In today's information age, enterprises will accumulate massive amounts of enterprise data in their daily work. By storing and managing massive amounts of enterprise data, they can better utilize the massive amounts of enterprise data and help the enterprises develop better.
[0003] The Chinese patent application with publication number CN1811772A describes a system for enterprise information integration. The system is based on different layers: data source; source ontology, which corresponds to the data model of the data source; integration ontology, which integrates different source ontologies; and query input layer, which preferably has the form of web services. Between the layers, mapping rules are used. These mapping rules and the overall system are based on predicate logic. Using reasoning based on predicate logic, queries are answered with the help of rules. In addition, the Chinese patent application with publication number CN102023982A provides a data processing platform, which includes a query processing module and a response collection module. The query processing module is configured to receive a query and translate the query into some appropriate form for querying various sources. The response collection module is configured to collect results from various sources based on the translated query and provide the results. However, neither of the above two patent applications considers how to store enterprise data securely in the integration platform. Summary of the invention
[0004] The present application sets a user module to securely transmit enterprise data to a control module, and the control module performs obfuscation processing on the enterprise data, performs a predetermined operation on the first half of the obfuscated data and the stored value to obtain predetermined operation result data 1, performs a predetermined operation on the initial value and the stored value to obtain predetermined operation result data 2, and stores the initial value, predetermined operation result data 1, predetermined operation result data 2, and the second half of the obfuscated data separately. The present application aims to ensure the security of enterprise data.
[0005] This application provides an enterprise information management method based on big data, including the following steps:
[0006] The user module securely transmits the enterprise data to the control module, and after receiving the enterprise data, the control module performs obfuscation processing on the enterprise data to obtain obfuscated data;
[0007] The control module generates an initial value, and the control module generates a storage value according to the initial value;
[0008] The control module performs a predetermined operation on the first half of the obfuscated data and the stored value to obtain a predetermined operation result data 1, and the control module performs a predetermined operation on the initial value and the stored value to obtain a predetermined operation result data 2;
[0009] The control module stores the initial value in the recording module 1, stores the predetermined operation result data 2 in the recording module 2, stores the predetermined operation result data 1 in the recording module 3, and the control module stores the second half of the obfuscated data in the recording module 4.
[0010] As a preferred technical solution of the present application, the user module securely transmits the enterprise data to the control module, including the following steps:
[0011] The user module and the control module store the mark value in advance, and the user module sends notification data to the control module;
[0012] The control module generates transmission data 1 after receiving the notification data, the transmission data 1 includes result data obtained by secret processing of its own tag value using a password, and increases its own tag value by a predetermined value after sending the transmission data 1 to the user module;
[0013] The user module uses the password to perform recovery processing on the transmission data 1 to obtain the tag value sent by the control module, and when the tag value sent by the control module is the same as its own tag value, the user module increases its own tag value by a preset value, and generates transmission data 2, which includes result data and enterprise data obtained by secretly processing its own tag value using the password, and sends the transmission data 2 to the control module;
[0014] The control module uses the password to perform recovery processing on the transmission data 2 to obtain the tag value sent by the user module, and obtains the enterprise data in the transmission data 2 when the tag value sent by the user module is the same as its own tag value.
[0015] As a preferred technical solution of the present application, the control module performs obfuscation processing on the enterprise data to obtain obfuscated data, including the following steps:
[0016] The control module processes the second half of the enterprise data using a preset model to obtain an output result, and performs a predetermined operation on the output result and the first half of the enterprise data to obtain a process result;
[0017] The control module generates an obfuscated value based on the process result, performs a predetermined operation on the obfuscated value and the second half of the enterprise data to obtain a stage result, and the control module inputs the stage result into a preset model to obtain an output result, performs a predetermined operation on the output result and the process result to obtain a final result, and uses the final result and the stage result to form the obfuscated data.
[0018] As a preferred technical solution of the present application, the control module performs obfuscation processing on the enterprise data to obtain obfuscated data, including the following steps:
[0019] The control module divides the enterprise data into several data blocks, performs a predetermined operation on each data block and the generated original numerical value, uses all the predetermined operation result data to form a transition result, and generates obfuscated data including the transition result and the original numerical value.
[0020] As a preferred technical solution of the present application, the control module further generates a storage value based on the initial value, comprising the following steps:
[0021] The control module stores initial values, inputs the initial values into a preset model to obtain output data, and stores the output data;
[0022] The control module sequentially obtains a plurality of stored output data, respectively inputs the obtained output data into a preset model to obtain a plurality of output data, respectively stores the obtained output data, and the control module determines whether the execution number reaches an execution number threshold, and repeats this step if it has not reached the execution number threshold, and proceeds to the next step if it has reached the execution number threshold;
[0023] The control module arbitrarily determines a number of output data from all stored output data, arbitrarily selects a number of values from each determined output data, and uses all the values selected from the determined number of output data to form the stored values.
[0024] As a preferred technical solution of the present application, after the user module secretly transmits the enterprise data to the control module, the user module also sends notification information indicating the update of the initial value to the control module.
[0025] As a preferred technical solution of the present application, after receiving the notification information, the control module further includes the following steps:
[0026] The control module generates a new initial value, generates a new stored value based on the new initial value, performs a predetermined operation on the initial value and the predetermined operation result data 2 to obtain temporary data, and performs a predetermined operation on the temporary data and the predetermined operation result data 1 to obtain the first half of the obfuscated data;
[0027] The control module performs a predetermined operation on the first half of the obfuscated data and the new stored value to obtain new predetermined operation result data 1, performs a predetermined operation on the new initial value and the new stored value to obtain new predetermined operation result data 2, stores the new initial value in the recording module 1, stores the new predetermined operation result data 2 in the recording module 2, and stores the new predetermined operation result data 1 in the recording module 3.
[0028] This application also provides an enterprise information integration platform based on big data, including the following modules:
[0029] A user module, used to secretly transmit enterprise data to the control module;
[0030] a control module, for, after receiving the enterprise data, performing obfuscation processing on the enterprise data to obtain obfuscated data, and for generating an initial value, generating a stored value according to the initial value, and for performing a predetermined operation on the first half of the obfuscated data and the stored value to obtain predetermined operation result data 1, performing a predetermined operation on the initial value and the stored value to obtain predetermined operation result data 2, and further for storing the initial value in a recording module 1, storing the predetermined operation result data 2 in a recording module 2, storing the predetermined operation result data 1 in a recording module 3, and storing the second half of the obfuscated data in a recording module 4;
[0031] The network module is used for data transmission between the user module and the control module.
[0032] Compared with the prior art, the beneficial effects of the present application are at least as follows:
[0033] In the technical solution provided by the present application, first, the user module securely transmits the enterprise data to the control module, and after receiving the enterprise data, the control module performs obfuscation processing on the enterprise data to obtain obfuscated data; then, the control module generates an initial value, and the control module generates a stored value based on the initial value; secondly, the control module performs a predetermined operation on the first half of the obfuscated data and the stored value to obtain the predetermined operation result data 1, and the control module performs a predetermined operation on the initial value and the stored value to obtain the predetermined operation result data 2; finally, the control module stores the initial value in the recording module 1, stores the predetermined operation result data 2 in the recording module 2, stores the predetermined operation result data 1 in the recording module 3, and the control module stores the second half of the obfuscated data in the recording module 4. Through the present application, it can not only ensure that the control module receives the correct and untampered enterprise data sent by the user module, but also ensure the security of the enterprise data stored by the control module, even if it is attacked by a third party, the third party cannot obtain the enterprise data. BRIEF DESCRIPTION OF THE DRAWINGS
[0034] In order to more clearly illustrate the technical solutions of the embodiments of the present invention, the accompanying drawings required for use in the description of the embodiments will be briefly introduced below. Obviously, the accompanying drawings described below are some embodiments of the present invention. For ordinary technicians in this field, other accompanying drawings can be obtained based on these accompanying drawings without paying creative work.
[0035] Figure 1 This is a flow chart of the enterprise information management method based on big data in an embodiment of the present application;
[0036] Figure 2 This is a flowchart of securely transmitting enterprise data in an embodiment of the present application;
[0037] Figure 3 This is a flowchart of the obfuscation process in the embodiment of the present application;
[0038] Figure 4 It is a schematic diagram of an enterprise information integration platform based on big data in an embodiment of the present application. DETAILED DESCRIPTION
[0039] The embodiment of the present application provides an enterprise information integration platform and management method based on big data. The terms "first", "second", "third", "fourth", etc. (if any) in the specification and claims of the present application and the above-mentioned drawings are used to distinguish similar objects, and are not necessarily used to describe a specific order or sequence. It should be understood that the data used in this way can be interchangeable where appropriate, so that the embodiments described here can be implemented in an order other than the content illustrated or described here. In addition, the terms "including" or "having" and any variations thereof are intended to cover non-exclusive inclusions, for example, a process, method, system, product or device comprising a series of steps or units is not necessarily limited to those steps or units clearly listed, but may include other steps or units that are not clearly listed or inherent to these processes, methods, products or devices.
[0040] For ease of understanding, the specific process of the embodiment of the present application is described below. Figure 1 The enterprise information management method based on big data in the embodiment of the present application includes the following main steps:
[0041] Step 1: The user module securely transmits the enterprise data to the control module, and after receiving the enterprise data, the control module performs obfuscation processing on the enterprise data to obtain obfuscated data;
[0042] Step 2: The control module generates an initial value, and the control module generates a storage value according to the initial value;
[0043] Step 3, the control module performs a predetermined operation on the first half of the obfuscated data and the stored value to obtain predetermined operation result data 1, and the control module performs a predetermined operation on the initial value and the stored value to obtain predetermined operation result data 2;
[0044] Step 4, the control module stores the initial value to the recording module 1, stores the predetermined operation result data 2 to the recording module 2, stores the predetermined operation result data 1 to the recording module 3, and the control module stores the second half of the obfuscated data to the recording module 4.
[0045] Specifically, enterprises accumulate massive amounts of enterprise data in their daily work. Massive enterprise data has the characteristics of high value and large data volume. In order to better utilize massive enterprise data to promote the development of enterprises, it is necessary to first manage massive enterprise data.
[0046] Steps 1 to 4 provide a management method for secure transmission and secure storage of enterprise data, which can ensure the security of enterprise data. In step 1, the user module securely transmits the enterprise data to the control module. The user module can be a computer in the enterprise. The process of secure transmission will be described below. After receiving the enterprise data, the control module performs obfuscation processing on the enterprise data to obtain obfuscated data. The process of obfuscation processing will be described below. In step 2, the control module splits the obfuscated data into the first half of the obfuscated data and the second half of the obfuscated data. It should be noted that the data scale of the second half of the obfuscated data is larger than the data scale of the first half of the obfuscated data. This can reduce the computational cost of storing enterprise data. The control module generates an initial value and generates a storage value based on the initial value. The control module can generate the initial value by executing the Mersenne rotation algorithm several times. How to generate the storage value based on the initial value will be described below. In step 3, the control module performs a predetermined operation on the first half of the obfuscated data and the stored value, and the data scale of the first half of the obfuscated data is the same as the data scale of the stored value, and obtains the predetermined operation result data 1. It should be noted that the predetermined operation that appears multiple times in this embodiment has the same meaning. In order to facilitate the understanding of the predetermined operation, for example, performing a predetermined operation on "01010" and "11001" can obtain "10011". The control module performs a predetermined operation on the initial value and the stored value, and the data scale of the initial value is the same as the data scale of the stored value, and obtains the predetermined operation result data 2. In step 4, the control module stores the initial value in the recording module 1, stores the predetermined operation result data 2 in the recording module 2, stores the predetermined operation result data 1 in the recording module 3, and stores the second half of the obfuscated data in the recording module 4. Recording modules 1 to 3 are located in the same geographical location, and they are geographically far away from recording module 4. Under normal circumstances, recording modules 1 to 4 cannot be accessed by third parties other than the user module. Even if they may face the risk of being attacked, the probability of simultaneously acquiring the data stored in them is relatively low. Even if they can be acquired at the same time, without knowing the rules described in step 3, the enterprise data cannot be obtained. Therefore, the security of enterprise data can be better protected.
[0047] Furthermore, the user module securely transmits the enterprise data to the control module, including the following steps:
[0048] Step 1: The user module and the control module store the tag value in advance, and the user module sends notification data to the control module;
[0049] Step 2, after receiving the notification data, the control module generates transmission data 1, the transmission data 1 includes result data obtained by secret processing of its own tag value using the password, and after sending the transmission data 1 to the user module, the tag value of the control module increases by a predetermined value;
[0050] Step 3, the user module uses the password to restore the transmission data 1 to obtain the tag value sent by the control module, and when the tag value sent by the control module is the same as its own tag value, the user module increases its own tag value by a preset value, and generates transmission data 2, which includes the result data and enterprise data obtained by secretly processing its own tag value using the password, and sends the transmission data 2 to the control module;
[0051] Step 4: The control module uses the password to recover the transmission data 2 to obtain the tag value sent by the user module. When the tag value sent by the user module is the same as its own tag value, the enterprise data in the transmission data 2 is obtained.
[0052] For further information, see Figure 2 In order to ensure that the control module acquires and stores correct and untampered enterprise data, the user module secretly transmits the enterprise data to the control module. In step 1, both the user module and the control module store the tag value in advance, and the initial values of their tag values are the same. The user module sends notification data to the control module, and the notification data indicates that the enterprise data is about to be sent to the control module. In step 2, after receiving the notification data, the control module generates transmission data 1. The transmission data 1 includes the result data obtained by secretly processing its own tag value using a password. The password is only known to the user module and the control module. The secret processing is, for example, encryption processing using a password. After sending the transmission data 1 to the user module, the tag value of the user module is incremented by a preset value. In step 3, the user module uses the password to perform recovery processing on the transmission data 1 to obtain the tag value sent by the control module. The recovery processing is, for example, a decryption processing using the password. If the tag value sent by the control module is the same as its own tag value, its own tag value is incremented by a preset value, and transmission data 2 is also generated. Transmission data 2 includes the result data obtained by using the password to perform secret processing on its own tag value, as well as the enterprise data. Then, transmission data 2 is sent to the control module. Otherwise, the notification data can be sent again, or nothing can be done. In step 4, the control module uses the password to perform recovery processing on transmission data 2 to obtain the tag value sent by the user module. If the tag value sent by the user module is the same as its own tag value, the enterprise data in transmission data 2 is obtained. Otherwise, transmission data 2 is discarded.
[0053] Furthermore, the control module performs obfuscation processing on the enterprise data to obtain obfuscated data, including the following steps:
[0054] Step 1: The control module uses a preset model to process the second half of the enterprise data to obtain an output result, and performs a predetermined operation on the output result and the first half of the enterprise data to obtain a process result;
[0055] Step 2: The control module generates an obfuscated value based on the process result, performs predetermined operations on the obfuscated value and the second half of the enterprise data to obtain the stage result, and the control module inputs the stage result into a preset model to obtain the output result, performs predetermined operations on the output result and the process result to obtain the final result, and uses the final result and the stage result to form the obfuscated data.
[0056] Specifically, see Figure 3 , introduces a situation in which the control module performs obfuscation processing on enterprise data. In step 1, the control module splits the enterprise data into the first half of the data and the second half of the data, without restricting the splitting method here. The second half of the data is input into the preset model to obtain the output result. The data scale of the output result is the same as the data scale of the first half of the data. The preset model can be a hash function. The output result and the first half of the data are subjected to a predetermined operation to obtain the process result. The predetermined operation has been introduced above. In step 2, the control module generates an obfuscated value based on the process result. The specific method is the same as the method for the control module to generate a storage value based on the initial value. How the control module generates the storage value based on the initial value will be described below. The data scale of the obfuscated value is the same as the data scale of the second half of the data. Predetermined operations are performed on the obfuscated value and the second half of the data to obtain the stage result. The control module also inputs the stage result into a preset model to obtain an output result. The data scale of the output result is the same as the data scale of the process result. Predetermined operations are performed on the output result and the process result to obtain the final result. The final result and the stage result are used to form the obfuscated data, wherein the data scale of the final result is the same as the data scale of the first half of the data, and the data scale of the stage result is the same as the data scale of the second half of the data.
[0057] Because when the user module applies to the control module to query enterprise data, it involves restoring the obfuscated data to enterprise data, so this process is also introduced:
[0058] Step 1: The control module splits the obfuscated data into a final result and a stage result, and the control module inputs the stage result into a preset model to obtain an output result, and performs a predetermined operation on the output result and the final result to obtain a process result;
[0059] Step 2: The control module generates an obfuscated value based on the process result, performs predetermined operations on the obfuscated value and the stage result to obtain the second half of the data, and the control module inputs the second half of the data into a preset model to obtain the output result, performs predetermined operations on the output result and the process result to obtain the first half of the data, and uses the first half of the data and the second half of the data to form the enterprise data.
[0060] Furthermore, the control module performs obfuscation processing on the enterprise data to obtain obfuscated data, including the following steps:
[0061] The control module divides the enterprise data into several data blocks, performs a predetermined operation on each data block and the generated original numerical value, uses all the predetermined operation result data to form a transition result, and generates obfuscated data including the transition result and the original numerical value.
[0062] Specifically, another situation in which the control module performs obfuscation processing on enterprise data is introduced. The control module generates an original value, for example, the original value can be generated by executing a linear congruential algorithm several times. The control module splits the enterprise data into several data blocks, and the data size of each data block is the same as the data size of the original value. For each data block, a predetermined operation is performed on the data block and the original value, and the predetermined operation has been described above. Then, all the predetermined operation result data are connected to form a transition result. The position of each predetermined operation result data in the transition result is the same as the position of its corresponding data block in the enterprise data. Then, the control module uses the transition result and the original value to form obfuscated data, wherein the data size of the transition result is the same as the data size of the enterprise data.
[0063] Because when the user module applies to the control module to query enterprise data, it involves restoring the obfuscated data to enterprise data, so this process is also introduced:
[0064] The control module splits the obfuscated data into transition results and original values, and the control module splits the transition results into several data blocks, where the data blocks are different from the data blocks when the obfuscated data is generated. For each data block, a predetermined operation is performed on the data block and the original value to obtain predetermined operation result data, where the predetermined operation result data is different from the predetermined operation result data when the obfuscated data is generated. Then, all the predetermined operation result data are used to form the enterprise data, and the position of the predetermined operation result data in the enterprise data is the same as the position of the corresponding data block in the transition result.
[0065] Furthermore, the control module also generates a storage value based on the initial value, including the following steps:
[0066] Step 1: The control module stores initial values, inputs the initial values into a preset model to obtain output data, and stores the output data;
[0067] Step 2: The control module sequentially obtains the stored output data, respectively inputs the obtained output data into the preset model to obtain the output data, respectively stores the obtained output data, and the control module determines whether the execution number reaches the execution number threshold. If it does not reach the execution number threshold, repeat this step, and if it reaches the execution number threshold, proceed to the next step.
[0068] Step 3: The control module randomly determines a number of output data from all stored output data, randomly selects a number of values from each determined output data, and uses all the values selected from the determined number of output data to form the stored values.
[0069] Specifically, it is introduced how the control module generates a stored value based on an initial value. In step 1, the control module stores the initial value, and inputs the initial value into a preset model to obtain output data and store the output data. The preset model has been introduced above, and the preset model can be a hash function. In step 2, the control module sequentially obtains a number of stored output data, which can be obtained in the order in which the output data are stored, or not in the order in which the output data are stored. The obtained output data are respectively input into the preset model to obtain a number of output data, and the obtained output data are sequentially stored in the order in which they are obtained. The control module determines whether the execution number, that is, the execution number of step 2, reaches the execution number threshold. The execution number threshold is set according to the actual application scenario. If it has not reached, repeat this step. If it has reached, proceed to the next step. In step 3, the control module arbitrarily determines a number of output data from all the stored output data, arbitrarily selects a number of values from each determined output data, and uses all the values selected from the determined output data to form the stored value. It should be noted that if the initial values are the same and steps 1 to 3 are performed exactly the same, the same stored values can be obtained.
[0070] Furthermore, after the user module secretly transmits the enterprise data to the control module, the user module also sends a notification message indicating that the initial value is updated to the control module;
[0071] Furthermore, after receiving the notification information, the control module further includes the following steps:
[0072] Step 1: The control module generates a new initial value, generates a new storage value based on the new initial value, performs a predetermined operation on the initial value and the predetermined operation result data 2 to obtain temporary data, and performs a predetermined operation on the temporary data and the predetermined operation result data 1 to obtain the first half of the obfuscated data;
[0073] Step 2: The control module performs a predetermined operation on the first half of the obfuscated data and the new stored value to obtain new predetermined operation result data 1, performs a predetermined operation on the new initial value and the new stored value to obtain new predetermined operation result data 2, stores the new initial value in the recording module 1, stores the new predetermined operation result data 2 in the recording module 2, and stores the new predetermined operation result data 1 in the recording module 3.
[0074] Specifically, in order to further improve security, even if the real data corresponding to the stored data remains unchanged, the stored data should not always be the same. The user module can send a notification message indicating an update of the initial value to the control module to enable the control module to update the stored data.
[0075] In step 1, the control module generates a new initial value, and also generates a new storage value based on the new initial value, and performs a predetermined operation on the initial value and the predetermined operation result data 2 to obtain temporary data, and performs a predetermined operation on the temporary data and the predetermined operation result data 1 to obtain the first half of the obfuscated data. The predetermined operation has been introduced above. In step 2, the control module performs a predetermined operation on the first half of the obfuscated data and the new storage value to obtain new predetermined operation result data 1, performs a predetermined operation on the new initial value and the new storage value to obtain new predetermined operation result data 2, and stores the new initial value in the recording module 1, deletes the old initial value, stores the new predetermined operation result data 2 in the recording module 2, deletes the old predetermined operation result data 2, stores the new predetermined operation result data 1 in the recording module 3, and deletes the old predetermined operation result data 1.
[0076] In addition, when the user module applies to the control module to query the enterprise data, the control module first performs a predetermined operation on the initial value and the predetermined operation result data 2 to obtain temporary data, performs a predetermined operation on the temporary data and the predetermined operation result data 1 to obtain the first half of the obfuscated data, and then obtains the second half of the obfuscated data from the recording module 4, and uses the first half of the obfuscated data and the second half of the obfuscated data to form the obfuscated data, and obtains the enterprise data through the method of restoring the obfuscated data to enterprise data introduced above.
[0077] According to another aspect of the embodiment of the present application, refer to Figure 4As shown, the present application also provides an enterprise information integration platform based on big data, including a user module, a network module, and a control module, to implement the enterprise information management method based on big data described above.
[0078] A user module, used to secretly transmit enterprise data to the control module;
[0079] a control module, for, after receiving the enterprise data, performing obfuscation processing on the enterprise data to obtain obfuscated data, and for generating an initial value, generating a stored value according to the initial value, and for performing a predetermined operation on the first half of the obfuscated data and the stored value to obtain predetermined operation result data 1, performing a predetermined operation on the initial value and the stored value to obtain predetermined operation result data 2, and further for storing the initial value in a recording module 1, storing the predetermined operation result data 2 in a recording module 2, storing the predetermined operation result data 1 in a recording module 3, and storing the second half of the obfuscated data in a recording module 4;
[0080] The network module is used for data transmission between the user module and the control module.
[0081] In summary, in the technical solution provided by the present application, first, the user module securely transmits the enterprise data to the control module, and after receiving the enterprise data, the control module performs obfuscation processing on the enterprise data to obtain obfuscated data; then, the control module generates an initial value, and the control module generates a stored value based on the initial value; secondly, the control module performs a predetermined operation on the first half of the obfuscated data and the stored value to obtain the predetermined operation result data 1, and the control module performs a predetermined operation on the initial value and the stored value to obtain the predetermined operation result data 2; finally, the control module stores the initial value in the recording module 1, stores the predetermined operation result data 2 in the recording module 2, stores the predetermined operation result data 1 in the recording module 3, and the control module stores the second half of the obfuscated data in the recording module 4. Through the present application, it can not only ensure that the control module receives the correct and untampered enterprise data sent by the user module, but also ensure the security of the enterprise data stored by the control module, even if it is attacked by a third party, the third party cannot obtain the enterprise data.
[0082] Those skilled in the art can clearly understand that, for the convenience and brevity of description, the specific working processes of the above-described systems, systems and units can refer to the corresponding processes in the aforementioned method embodiments and will not be repeated here.
[0083] If the integrated unit is implemented in the form of a software functional unit and sold or used as an independent product, it can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of the present application is essentially or the part that contributes to the prior art or all or part of the technical solution can be embodied in the form of a software product. The computer software product is stored in a storage medium, including several instructions to enable a computer device (which can be a personal computer, server, or network device, etc.) to execute all or part of the steps of the method described in each embodiment of the present application. The aforementioned storage medium includes: U disk, mobile hard disk, read-only memory (ROM), random access memory (RAM), disk or optical disk and other media that can store program codes.
[0084] As described above, the above embodiments are only used to illustrate the technical solutions of the present application, rather than to limit them. Although the present application has been described in detail with reference to the aforementioned embodiments, those skilled in the art should understand that they can still modify the technical solutions described in the aforementioned embodiments, or make equivalent replacements for some of the technical features therein. However, these modifications or replacements do not deviate the essence of the corresponding technical solutions from the spirit and scope of the technical solutions of the embodiments of the present application.
Claims
1. An enterprise information management method based on big data, characterized in that: The method comprises the following steps: The user module securely transmits the enterprise data to the control module, and after receiving the enterprise data, the control module performs obfuscation processing on the enterprise data to obtain obfuscated data; The control module generates an initial value, and the control module generates a storage value according to the initial value; The control module performs a predetermined operation on the first half of the obfuscated data and the stored value to obtain a predetermined operation result data 1, and the control module performs a predetermined operation on the initial value and the stored value to obtain a predetermined operation result data 2; The control module stores the initial value in the recording module 1, stores the predetermined operation result data 2 in the recording module 2, stores the predetermined operation result data 1 in the recording module 3, and the control module stores the second half of the obfuscated data in the recording module 4.
2. The method according to claim 1, characterized in that The user module securely transmits the enterprise data to the control module, including the following steps: The user module and the control module store the mark value in advance, and the user module sends notification data to the control module; The control module generates transmission data 1 after receiving the notification data, the transmission data 1 includes result data obtained by secret processing of its own tag value using a password, and increases its own tag value by a predetermined value after sending the transmission data 1 to the user module; The user module uses the password to perform recovery processing on the transmission data 1 to obtain the tag value sent by the control module, and when the tag value sent by the control module is the same as its own tag value, the user module increases its own tag value by a preset value, and generates transmission data 2, which includes result data and enterprise data obtained by secretly processing its own tag value using the password, and sends the transmission data 2 to the control module; The control module uses the password to perform recovery processing on the transmission data 2 to obtain the tag value sent by the user module, and obtains the enterprise data in the transmission data 2 when the tag value sent by the user module is the same as its own tag value.
3. The method according to claim 1, characterized in that The control module performs obfuscation processing on the enterprise data to obtain obfuscated data, including the following steps: The control module processes the second half of the enterprise data using a preset model to obtain an output result, and performs a predetermined operation on the output result and the first half of the enterprise data to obtain a process result; The control module generates an obfuscated value based on the process result, performs a predetermined operation on the obfuscated value and the second half of the enterprise data to obtain a stage result, and the control module inputs the stage result into a preset model to obtain an output result, performs a predetermined operation on the output result and the process result to obtain a final result, and uses the final result and the stage result to form the obfuscated data.
4. The method according to claim 1, characterized in that: The control module performs obfuscation processing on the enterprise data to obtain obfuscated data, including the following steps: The control module divides the enterprise data into several data blocks, performs a predetermined operation on each data block and the generated original numerical value, uses all the predetermined operation result data to form a transition result, and generates obfuscated data including the transition result and the original numerical value.
5. The method according to claim 1, characterized in that The control module also generates a storage value based on the initial value, including the following steps: The control module stores initial values, inputs the initial values into a preset model to obtain output data, and stores the output data; The control module sequentially obtains a plurality of stored output data, respectively inputs the obtained output data into a preset model to obtain a plurality of output data, respectively stores the obtained output data, and the control module determines whether the execution number reaches an execution number threshold, and repeats this step if it has not reached the execution number threshold, and proceeds to the next step if it has reached the execution number threshold; The control module arbitrarily determines a number of output data from all stored output data, arbitrarily selects a number of values from each determined output data, and uses all the values selected from the determined number of output data to form the stored values.
6. The method according to claim 1, characterized in that After secretly transmitting the enterprise data to the control module, the user module also sends notification information indicating that the initial value is updated to the control module.
7. The method according to claim 6, characterized in that After receiving the notification information, the control module further includes the following steps: The control module generates a new initial value, generates a new stored value based on the new initial value, performs a predetermined operation on the initial value and the predetermined operation result data 2 to obtain temporary data, and performs a predetermined operation on the temporary data and the predetermined operation result data 1 to obtain the first half of the obfuscated data; The control module performs a predetermined operation on the first half of the obfuscated data and the new stored value to obtain new predetermined operation result data 1, performs a predetermined operation on the new initial value and the new stored value to obtain new predetermined operation result data 2, stores the new initial value in the recording module 1, stores the new predetermined operation result data 2 in the recording module 2, and stores the new predetermined operation result data 1 in the recording module 3.
8. An enterprise information integration platform based on big data, used to implement the method according to any one of claims 1 to 7, characterized in that: Includes the following modules: A user module, used to secretly transmit enterprise data to the control module; a control module, for, after receiving the enterprise data, performing obfuscation processing on the enterprise data to obtain obfuscated data, and for generating an initial value, generating a stored value according to the initial value, and for performing a predetermined operation on the first half of the obfuscated data and the stored value to obtain predetermined operation result data 1, performing a predetermined operation on the initial value and the stored value to obtain predetermined operation result data 2, and further for storing the initial value in a recording module 1, storing the predetermined operation result data 2 in a recording module 2, storing the predetermined operation result data 1 in a recording module 3, and storing the second half of the obfuscated data in a recording module 4; The network module is used for data transmission between the user module and the control module.
Citation Information
Patent Citations
Data integration platform
CN102023982A
Integration platform for heterogeneous information sources
CN1811772A
Enterprise management software data security protection method
CN117972753A
Storage medium security encryption system for computer software development
CN119203175A
Building engineering construction data management method and system and storage medium
CN119538286A