Intelligent conference room data security and privacy protection system and method

Abstract

The invention relates to the technical field of information security, and discloses an intelligent conference room data security and privacy protection system and method, and the system comprises a plurality of modules which are respectively used for data collection, data encryption, data storage, access control and log management. The data acquisition module can acquire audio and video information in a conference in real time and inspect the state of equipment; the data encryption module adopts an improved AES algorithm to encrypt data block by block, and a secret key is periodically replaced to prevent leakage; the data storage module ensures redundant backup and security of data by using a distributed cloud storage technology; the access control module dynamically allocates user permission based on a role management system; and the log management module records data access activities in real time and monitors abnormal behaviors by utilizing machine learning. The security and traceability of the conference data are enhanced, information leakage and unauthorized access are prevented, and flexible user authority management and detailed audit logs are provided.

Description

Technical Field

[0001] The present invention relates to the field of information security technology, and in particular to a data security and privacy protection system and method for an intelligent conference room. Background Art

[0002] With the rapid development of information technology, the application of smart conference rooms has gradually become popular and has become an important place for corporate information exchange and decision-making. Modern conference rooms are not only equipped with efficient audio and video equipment, but also integrate cloud computing, big data and Internet of Things technologies, making data collection, management and sharing during meetings more convenient. For example, many companies have begun to adopt smart conference room management systems to achieve intelligent scheduling of meeting schedules, real-time collaboration of participants and automatic archiving of meeting files. Although relevant technologies have made significant progress in improving work efficiency and collaboration capabilities, the resulting data security and privacy protection issues have become increasingly prominent, especially in the data collection and storage links. Most of the existing solutions focus on the collection and distribution of audio and video data, lacking comprehensive data security management mechanisms such as data encryption, storage security and access control, resulting in the risk of sensitive information being leaked and tampered with.

[0003] In the current market, common technical defects include: on the one hand, many intelligent conference systems do not use sufficiently powerful encryption algorithms in the process of data encryption and storage, and cannot effectively prevent illegal access to data and malicious attacks; on the other hand, the access control mechanism is often static and cannot dynamically adjust user permissions in real time, resulting in the system's security protection measures not being timely and flexible when user roles change or external threats appear. In addition, many systems lack effective abnormal monitoring functions in log management and cannot fully track user access activities, which poses a huge hidden danger to data security. Therefore, the protection of data privacy by related technologies needs to be strengthened, and a comprehensive and intelligent solution is urgently needed to meet the current security challenges. Summary of the invention

[0004] In view of the above existing problems, the present invention is proposed.

[0005] Therefore, the present invention provides a data security and privacy protection system for a smart conference room, which can effectively solve the problem through encryption and access control mechanisms, reduce the risk of unauthorized access and data leakage; adopt block transmission and integrity verification technology to ensure that audio and video records are not damaged during transmission; implement role-based access control to allow only authorized users to access sensitive data.

[0006] In order to solve the above technical problems, the present invention provides the following technical solutions: a data security and privacy protection system for a smart conference room, comprising: a data acquisition module, a data encryption module, a data storage module, an access control module and a log management module;

[0007] The data acquisition module is used to collect audio and video data during the meeting in real time;

[0008] The data encryption module is used to encrypt the collected data to ensure data security;

[0009] The data storage module is used to store the encrypted data securely in the cloud storage platform;

[0010] The access control module is used to manage user access rights to ensure that only authorized users can access data;

[0011] The log management module is used to record data access activities for auditing and tracking.

[0012] As a preferred solution of the data security and privacy protection system for a smart conference room described in the present invention, wherein: the data acquisition module includes, the system receives a startup instruction from the conference management software, the data acquisition module checks the sensor power, connection status and transmission bandwidth of the audio sensor and the video sensor, and when any abnormality or non-compliance with the standard is detected, the system automatically performs adaptive configuration;

[0013] During the meeting, the audio and video sensors start to record synchronously in real time, and the video stream recorded by the video sensor will be processed using an adaptive compression algorithm; during the recording process, the audio and video data are processed in blocks and transmitted segment by segment through the interface of the encryption module; every time a data block is transmitted, the system will receive a data reception confirmation. If no confirmation signal is received, the system will automatically retry the transmission of the data block;

[0014] When the meeting ends, the user sends a meeting end command through the meeting control interface, the system stops recording and automatically turns off all sensors, and saves the current meeting data status.

[0015] As a preferred solution of the data security and privacy protection system of a smart conference room described in the present invention, the data encryption module includes receiving audio and video data blocks from the data acquisition module, denoted as D, and each data block has a different size, specifically D i , i is the data block number;

[0016] The encryption key management submodule generates a random encryption key, denoted as K, and the random number generator generates a seed S:

[0017] K = SeeedRandom(S)

[0018] For each received data block D i , using the improved AES algorithm for encryption, dynamically selecting the number of rounds R, and increasing the number of rounds when the data block size is higher than the threshold:

[0019]

[0020] The encryption result is obtained by the following formula:

[0021] E i =AES(D i ,K,R)

[0022] Among them, E i To encrypt data, AES represents the AES encryption function, receiving data block D i , key K and round number R are input;

[0023] After encryption, the encrypted data E is queried through a hash function. i Perform integrity check and generate hash value H i :

[0024] H i =Hash(E i )

[0025] The encrypted data E i and hash value H i Send to the data storage module for storage.

[0026] As a preferred solution of the data security and privacy protection system for a smart conference room described in the present invention, the data encryption module further includes an encryption key management submodule, which generates a random encryption key and periodically changes it to prevent key leakage;

[0027] Set the time interval for periodic key updates, actively trigger the key reset function, and generate a new random key using the same method:

[0028] K'=SeededRandom(S')

[0029] Each time the key is changed, the system adds a version number to the new key, denoted as V. The new key is denoted as K'(V+1). The previous key is marked as expired after sufficiently secure data transmission. The version is managed in the following way:

[0030] K(V)→K(V-1)(expire)

[0031] Among them, K(V) represents the encryption key of the current version, K(V-1) represents the encryption key of the previous version, and expire represents that the key of the current version has expired and can no longer be used for encryption or decryption operations;

[0032] Data encryption can continue after rekeying:

[0033] E i=AES(D i ,K',R)

[0034] Among them, E i ' is the encrypted data after reset.

[0035] As a preferred solution of the data security and privacy protection system for a smart conference room described in the present invention, wherein: the data storage module includes using a distributed cloud storage architecture to continuously store the encrypted data on multiple servers;

[0036] Before the meeting starts, the storage architecture is selected through the system configuration panel, allowing users to customize storage priorities based on data type and importance. When receiving encrypted audio and video data blocks, identity authentication is performed, and the system dynamically allocates data blocks to different cloud servers based on the set priority and storage strategy;

[0037] For each encrypted data block, the system further shards it to different storage nodes. The sharding process uses a dynamic sharding algorithm, which allows the shard size to be automatically adjusted during the storage process. Small shards are set for audio blocks, and large shards are set for video blocks. At the same time, each encrypted data piece will be stored in at least three different physical locations.

[0038] After the data is stored, the system automatically triggers an integrity check by calculating the hash value of each data block and comparing it with the value saved during storage. If any inconsistency is found, the system immediately triggers an alarm and starts the data recovery process;

[0039] After each meeting, the system executes the cleanup strategy to encrypt and delete data blocks that are no longer needed. At the same time, it meets the data retention time strategy and retains data backups for a set time based on compliance requirements.

[0040] As a preferred solution of the data security and privacy protection system of a smart conference room described in the present invention, the access control module includes: using a role-based access control strategy, granting different access rights according to different user roles, and performing real-time verification each time data is accessed, and only users who pass the identity verification can access the corresponding data interface;

[0041] The roles include administrator, conference participant and visitor. An access permission matrix P is created to define the access relationship between roles and data interfaces:

[0042]

[0043] The rows represent roles, the columns represent data interfaces, 1 represents permission, and 0 represents no permission;

[0044] When a user registers or changes roles, the system is responsible for assigning access rights based on the user's identity information and the required role:

[0045] A mn =J n ·P

[0046] Among them, A mn represents the access rights of user role n to data interface m, J n An identifier representing the user role n;

[0047] The system allows dynamic adjustment of user roles based on demand and re-evaluation of access rights. When a user submits an identity authentication request, the user receives a verification result based on the enhanced model:

[0048]

[0049] Among them, Z represents the verification score, SA l represents the credibility score of the lth verification feature provided by the user, C l represents the weight score of the lth verification feature, δ is the sensitivity parameter, θ is the set threshold of the verification feature, and x is the total number of feature types involved in the verification. When the verification score is greater than or equal to the minimum verification score set by the system, it means that the identity authentication is successful;

[0050] Once authentication is passed, the system will perform access authorization checks based on the access rights matrix and user roles:

[0051] U=A mn ·J n

[0052] Where U represents the user's ultimate access permission to a specific data interface.

[0053] As a preferred solution of the data security and privacy protection system of a smart conference room described in the present invention, wherein: the log management module includes real-time recording of all data access activities, when a user attempts to access data, the log management module intercepts the access request through the intelligent interface, and in the current interface, records the user identity, access timestamp and access target type;

[0054] All access data is recorded in a hierarchical structure and can be accurately traced in subsequent queries through IDs;

[0055] The log management module also includes a monitoring submodule, which analyzes the user's historical access data through a machine learning algorithm to establish a normal access pattern. Each time a user accesses, the monitoring submodule compares the current access with the baseline data in real time. When the following abnormal behaviors are found, the system will trigger an alarm mechanism: repeated attempts to access the same resource in a short period of time, access from an abnormal geographical location, and access using an unauthorized device;

[0056] Once abnormal behavior is detected, the monitoring submodule will automatically generate alarm information and send it to the administrator via email notification. After any abnormal behavior is confirmed, the detailed information will be recorded in the audit log. The system administrator will review the behavior patterns and alarm records regularly.

[0057] Another object of the present invention is to provide a data security and privacy protection method for a smart conference room, which can comprehensively improve the security and privacy protection level of the smart conference room, ensure the safe management of sensitive data, and provide users with a safer and more reliable conference environment.

[0058] As a preferred solution of the data security and privacy protection method of a smart conference room described in the present invention, wherein: audio and video data in the meeting are collected in real time through audio and video sensors and stored in a data acquisition module;

[0059] The collected data is transmitted to the encryption module and encrypted using the AES algorithm, while the encryption keys are managed and regularly changed to enhance security;

[0060] The encrypted data is securely stored in a distributed cloud storage platform to ensure data security and availability;

[0061] Verify user identity through role-based permission management and record all data access activities in real time for easy auditing and tracking;

[0062] Monitor access activities, automatically detect abnormal behavior and send alerts to administrators, while providing a user-friendly interface for users to access data and query logs.

[0063] A computer device includes a memory and a processor, wherein the memory stores a computer program, and is characterized in that when the processor executes the computer program, it implements the steps of a smart conference room data security and privacy protection system.

[0064] A computer-readable storage medium having a computer program stored thereon, characterized in that when the computer program is executed by a processor, the steps of implementing a smart conference room data security and privacy protection system are implemented.

[0065] The beneficial effects of the present invention are as follows: Through AES encryption and key management mechanisms, the security of conference materials in storage and transmission is ensured, greatly reducing the risk of data leakage and unauthorized access. Block transmission and real-time integrity verification can ensure the stability and consistency of the recorded data, reduce the possibility of data loss or damage, and provide high-quality audio and video recording. The role-based access control mechanism ensures that users can access sensitive data only with authorization, effectively maintaining the privacy of users. The user-friendly operation interface and automatically generated meeting summary report make the post-meeting data management and information retrieval process more efficient and convenient, reducing the time and resources required for manual operation. The system has adaptive configuration and real-time feedback mechanism, which can flexibly adjust data acquisition parameters according to changes in the meeting environment, thereby improving the intelligence level of the system. BRIEF DESCRIPTION OF THE DRAWINGS

[0066] In order to more clearly illustrate the technical solutions of the embodiments of the present invention, the following briefly introduces the drawings required for describing the embodiments. Obviously, the drawings described below are only some embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without creative work. Among them:

[0067] Figure 1 A schematic diagram of working modules of a smart conference room data security and privacy protection system provided for one embodiment of the present invention.

[0068] Figure 2 A flowchart of a method for protecting data security and privacy in a smart conference room is provided as an embodiment of the present invention. DETAILED DESCRIPTION

[0069] In order to make the above-mentioned purposes, features and advantages of the present invention more obvious and easy to understand, the specific implementation methods of the present invention are described in detail below in conjunction with the drawings of the specification. Obviously, the described embodiments are part of the embodiments of the present invention, but not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary persons in the art without creative work should fall within the scope of protection of the present invention.

[0070] In the following description, many specific details are set forth to facilitate a full understanding of the present invention, but the present invention may also be implemented in other ways different from those described herein, and those skilled in the art may make similar generalizations without violating the connotation of the present invention. Therefore, the present invention is not limited to the specific embodiments disclosed below.

[0071] Secondly, the term "one embodiment" or "embodiment" as used herein refers to a specific feature, structure, or characteristic that may be included in at least one implementation of the present invention. The term "in one embodiment" that appears in different places in this specification does not necessarily refer to the same embodiment, nor is it a separate or selective embodiment that is mutually exclusive with other embodiments.

[0072] The present invention is described in detail with reference to schematic diagrams. When describing the embodiments of the present invention, for the sake of convenience, the cross-sectional diagrams showing the device structure will not be partially enlarged according to the general scale, and the schematic diagrams are only examples, which should not limit the scope of protection of the present invention. In addition, in actual production, the three-dimensional dimensions of length, width and depth should be included.

[0073] At the same time, in the description of the present invention, it should be noted that the directions or positional relationships indicated by the terms "upper, lower, inner and outer" are based on the directions or positional relationships shown in the drawings, which are only for the convenience of describing the present invention and simplifying the description, and do not indicate or imply that the device or element referred to must have a specific direction, be constructed and operated in a specific direction, and therefore cannot be understood as limiting the present invention. In addition, the terms "first, second or third" are only used for descriptive purposes and cannot be understood as indicating or implying relative importance.

[0074] In the present invention, unless otherwise clearly specified and limited, the terms "install, connect, connect" should be understood in a broad sense, for example: it can be a fixed connection, a detachable connection or an integral connection; it can also be a mechanical connection, an electrical connection or a direct connection, or it can be indirectly connected through an intermediate medium, or it can be the internal communication of two components. For ordinary technicians in this field, the specific meanings of the above terms in the present invention can be understood according to specific circumstances.

[0075] Example 1, reference Figure 1 , which is the first embodiment of the present invention, and which provides a data security and privacy protection system for a smart conference room, including: a data acquisition module, a data encryption module, a data storage module, an access control module and a log management module;

[0076] The data acquisition module is used to collect audio and video data during the meeting in real time;

[0077] The data encryption module is used to encrypt the collected data to ensure data security;

[0078] The data storage module is used to store the encrypted data securely in the cloud storage platform;

[0079] The access control module is used to manage user access rights to ensure that only authorized users can access data;

[0080] The log management module is used to record data access activities for auditing and tracking.

[0081] The data acquisition module, the system receives the start-up instruction from the conference management software, the data acquisition module checks the sensor power, connection status and transmission bandwidth of the audio sensor and the video sensor, and when any abnormality or non-compliance with the standard is detected, the system automatically performs adaptive configuration;

[0082] It should be noted that the power level of the audio sensor and video sensor is monitored. When the power level is lower than 20%, the system marks it as abnormal. The connection status is evaluated by real-time tracking of signal strength and packet loss rate. When the packet loss rate reaches more than 10%, it is considered that the connection is unstable and the system marks it as abnormal. It is evaluated whether the current network bandwidth can support the real-time transmission of high-quality audio and video data. When the transmission bandwidth is lower than 256Kbps, it is marked as abnormal.

[0083] During the meeting, the audio and video sensors start to record synchronously in real time, and the video stream recorded by the video sensor will be processed using an adaptive compression algorithm; during the recording process, the audio and video data are processed in blocks and transmitted piece by piece through the interface of the encryption module, rather than transmitting the entire data stream at once; each time a data block is transmitted, the system will receive a data reception confirmation. If no confirmation signal is received, the system will automatically retry the transmission of the data block;

[0084] When the meeting ends, the user sends a meeting end command through the meeting control interface, the system stops recording and automatically turns off all sensors, and saves the current meeting data status.

[0085] The data encryption module receives the audio and video data blocks from the data acquisition module, which are denoted as D. The size of each data block is different, specifically D i , i is the data block number;

[0086] The encryption key management submodule generates a random encryption key, denoted as K, with a key length of 128, 192 or 256 bits, and a random number generator generates a seed S:

[0087] K = SeeedRandom(S)

[0088] For each received data block D i , using the improved AES algorithm for encryption, dynamically selecting the number of rounds R, and increasing the number of rounds when the data block size is higher than the threshold:

[0089]

[0090] Since the AES encryption algorithm requires the size of the input data block to be 128 bits, if the length of the data block is insufficient, it will be padded. The length of the data block after padding is L, that is:

[0091]

[0092] Where |L| is the original byte length of the data block D; the encryption result is obtained by the following formula:

[0093] E i =AES(D i ,K,R)

[0094] Among them, E i To encrypt data, AES represents the AES encryption function, receiving data block D i , key K and round number R are input;

[0095] After encryption, the encrypted data E is queried through a hash function. i Perform integrity check and generate hash value H i :

[0096] H i =Hash(E i )

[0097] The encrypted data E i and hash value H i Sent to the data storage module for storage, the system records the corresponding key K and hash value H i Perform subsequent verification.

[0098] The data encryption module also includes an encryption key management submodule, which generates a random encryption key and periodically changes it to prevent key leakage;

[0099] Set the time interval for periodic key update. Every 30 minutes, the system actively triggers the key reset function. The new key K' is generated using the same method to generate a new random key:

[0100] K'=SeededRandom(S')

[0101] Each time the key is changed, the system adds a version number to the new key, denoted as V. The new key is denoted as K'(V+1). The previous key is marked as expired after sufficiently secure data transmission. The version is managed in the following way:

[0102] K(V)→K(V-1)(expire)

[0103] Among them, K(V) represents the encryption key of the current version, K(V-1) represents the encryption key of the previous version, and expire represents that the key of the current version has expired and can no longer be used for encryption or decryption operations;

[0104] Data encryption can continue after rekeying:

[0105] E i =AES(D i ,K',R)

[0106] Among them, E i ' is the encrypted data after reset;

[0107] As the key is changed, previously encrypted data will still be decrypted using the old key, but new data will be encrypted using the latest key, without affecting the data processing flow during the key update.

[0108] The data storage module includes using a distributed cloud storage architecture to continuously store encrypted data on multiple servers;

[0109] Before the meeting starts, the storage architecture is selected through the system configuration panel, allowing users to customize storage priorities based on data type and importance. When receiving encrypted audio and video data blocks, identity authentication is performed, and the system dynamically allocates data blocks to different cloud servers based on the set priority and storage strategy;

[0110] For each encrypted data block, the system further shards it to different storage nodes. The sharding process uses a dynamic sharding algorithm, which allows the shard size to be automatically adjusted during the storage process to adapt to the different characteristics of the data content. Small shards are set for audio blocks, and large shards are set for video blocks. At the same time, each encrypted data piece will be stored in at least three different physical locations, so that even if one of the servers fails, the integrity of the data can be guaranteed.

[0111] After the data is stored, the system automatically triggers an integrity check by calculating the hash value of each data block and comparing it with the value saved during storage. If any inconsistency is found, the system immediately triggers an alarm and starts the data recovery process;

[0112] After each meeting, the system executes the cleanup strategy to encrypt and delete data blocks that are no longer needed. At the same time, it meets the data retention time strategy and retains data backups for a set time based on compliance requirements.

[0113] The access control module includes using a role-based access control strategy to grant different access rights according to different user roles, and performing real-time verification each time data is accessed, so that only users who pass the identity verification can access the corresponding data interface;

[0114] The roles include: Administrator: has full access rights, including the right to view, modify and delete data; Meeting participant: can only view meeting data, without the right to modify or delete; Visitor: can only access meeting summaries and some public data;

[0115] Create an access permission matrix P to define the access relationship between roles and data interfaces:

[0116]

[0117] The rows represent roles, which are administrator, conference participant, and visitor, respectively. The columns represent data interfaces, which are complete data, limited data, and summary data, respectively. 1 represents permission, and 0 represents no permission.

[0118] When a user registers or changes roles, the system is responsible for assigning access rights based on the user's identity information and the required role:

[0119] A mn =J n ·P

[0120] Among them, A mn represents the access rights of user role n to data interface m, J n An identifier representing the user role n;

[0121] The system allows dynamic adjustment of user roles based on demand and re-evaluation of access rights. When a user submits an identity authentication request, the user receives a verification result based on the enhanced model:

[0122]

[0123] Among them, Z represents the verification score, SA l represents the credibility score of the lth verification feature provided by the user, C l represents the weight score of the lth verification feature, δ is the sensitivity parameter, θ is the set threshold of the verification feature, and x is the total number of feature types involved in the verification. When the verification score is greater than or equal to the minimum verification score set by the system, it means that the identity authentication is successful;

[0124] Once authentication is passed, the system will perform access authorization checks based on the access rights matrix and user roles:

[0125] U=A mn ·J n

[0126] Among them, U represents the user's final access permission to a specific data interface, 1 means accessible, and 0 means inaccessible.

[0127] The log management module records all data access activities in real time. When a user attempts to access data, the log management module intercepts the access request through the intelligent interface and records the user identity, access timestamp and access target type in the current interface;

[0128] All access data is recorded in a hierarchical structure, that is, each access generates a unique access event ID, which can be accurately traced in subsequent queries;

[0129] The access record structure includes:

[0130] User information: user name, user role, IP address;

[0131] Access time: timestamp accurate to milliseconds;

[0132] Access content: the specific type of data requested and its location;

[0133] Access result: success or failure information;

[0134] The log management module also includes a monitoring submodule, which analyzes the user's historical access data through a machine learning algorithm to establish a normal access pattern. Each time a user accesses, the monitoring submodule compares the current access with the baseline data in real time. When the following abnormal behaviors are found, the system will trigger an alarm mechanism: repeated attempts to access the same resource in a short period of time, access from an abnormal geographical location, and access using an unauthorized device;

[0135] Once abnormal behavior is detected, the monitoring submodule will automatically generate alarm information, including abnormal users, time, behavior description and risk level, and send it to the administrator via email notification. After any abnormal behavior is confirmed, the detailed information will be recorded in the audit log, and the system administrator will regularly review the behavior patterns and alarm records.

[0136] Embodiment 2, the second embodiment of the present invention, is different from the previous embodiment in that:

[0137] If the functions are implemented in the form of software functional units and sold or used as independent products, they can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of the present invention, or the part that contributes to the prior art or the part of the technical solution, can be embodied in the form of a software product. The computer software product is stored in a storage medium, including several instructions for a computer device (which can be a personal computer, a server, or a network device, etc.) to perform all or part of the steps of the methods described in each embodiment of the present invention. The aforementioned storage medium includes: U disk, mobile hard disk, read-only memory (ROM, Read-Only Memory), random access memory (RAM, Random Access Memory), disk or optical disk, etc., which can store program codes.

[0138] The logic and / or steps represented in the flowchart or otherwise described herein, for example, can be considered as an ordered list of executable instructions for implementing logical functions, and can be embodied in any computer-readable medium for use by an instruction execution system, device or apparatus (such as a computer-based system, a system including a processor, or other system that can fetch instructions from an instruction execution system, device or apparatus and execute instructions), or in conjunction with such instruction execution systems, devices or apparatuses. For the purposes of this specification, "computer-readable medium" can be any device that can contain, store, communicate, propagate or transmit a program for use by an instruction execution system, device or apparatus, or in conjunction with such instruction execution systems, devices or apparatuses.

[0139] More specific examples of computer-readable media (a non-exhaustive list) include the following: an electrical connection with one or more wires (electronic device), a portable computer disk case (magnetic device), a random access memory (RAM), a read-only memory (ROM), an erasable and programmable read-only memory (EPROM or flash memory), an optical fiber device, and a portable compact disk read-only memory (CDROM). In addition, the computer-readable medium may even be a paper or other suitable medium on which the program is printed, since the program may be obtained electronically, for example, by optically scanning the paper or other medium, followed by editing, deciphering or, if necessary, processing in another suitable manner, and then stored in a computer memory.

[0140] It should be understood that the various parts of the present invention can be implemented by hardware, software, firmware or a combination thereof. In the above-mentioned embodiments, a plurality of steps or methods can be implemented by software or firmware stored in a memory and executed by a suitable instruction execution system. For example, if implemented by hardware, as in another embodiment, it can be implemented by any one of the following technologies known in the art or their combination: a discrete logic circuit having a logic gate circuit for implementing a logic function for a data signal, a dedicated integrated circuit having a suitable combination of logic gate circuits, a programmable gate array (PGA), a field programmable gate array (FPGA), etc.

[0141] Example 3, reference Figure 2 , as an embodiment of the present invention, provides a method for data security and privacy protection in a smart conference room, characterized in that: it includes collecting audio and video data in a meeting in real time through audio and video sensors, and storing them in a data acquisition module;

[0142] The collected data is transmitted to the encryption module and encrypted using the AES algorithm, while the encryption keys are managed and regularly changed to enhance security;

[0143] The encrypted data is securely stored in a distributed cloud storage platform to ensure data security and availability;

[0144] Verify user identity through role-based permission management and record all data access activities in real time for easy auditing and tracking;

[0145] Monitor access activities, automatically detect abnormal behavior and send alerts to administrators, while providing a user-friendly interface for users to access data and query logs.

[0146] It should be noted that the above embodiments are only used to illustrate the technical solutions of the present invention and are not intended to limit the present invention. Although the present invention has been described in detail with reference to the preferred embodiments, those skilled in the art should understand that the technical solutions of the present invention may be modified or replaced by equivalents without departing from the spirit and scope of the technical solutions of the present invention, which should all be included in the scope of the claims of the present invention.

Claims

1. A data security and privacy protection system for a smart conference room, characterized by: Including data acquisition module, data encryption module, data storage module, access control module and log management module; The data acquisition module is used to collect audio and video data during the meeting in real time; The data encryption module is used to encrypt the collected data to ensure data security; The data storage module is used to store the encrypted data securely in the cloud storage platform; The access control module is used to manage user access rights to ensure that only authorized users can access data; The log management module is used to record data access activities for auditing and tracking.

2. The data security and privacy protection system for a smart conference room as claimed in claim 1, characterized in that: The data acquisition module includes: the system receives a startup instruction from the conference management software, the data acquisition module checks the sensor power, connection status and transmission bandwidth of the audio sensor and the video sensor, and when any abnormality or non-compliance with the standard is detected, the system automatically performs adaptive configuration; During the meeting, the audio and video sensors start to record synchronously in real time, and the video stream recorded by the video sensor is processed using an adaptive compression algorithm; During the recording process, the audio and video data are processed in blocks and transmitted segment by segment through the interface of the encryption module; each time a data block is transmitted, the system will receive a data reception confirmation. If no confirmation signal is received, the system will automatically retry the transmission of the data block; When the meeting ends, the user sends a meeting end command through the meeting control interface, the system stops recording and automatically turns off all sensors, and saves the current meeting data status.

3. The data security and privacy protection system for a smart conference room as claimed in claim 2, characterized in that: The data encryption module includes receiving audio and video data blocks from the data acquisition module, denoted as D, and each data block has a different size, specifically D i , i is the data block number; The encryption key management submodule generates a random encryption key, denoted as K, and the random number generator generates a seed S: K = SeeedRandom(S) For each received data block D i , using the improved AES algorithm for encryption, dynamically selecting the number of rounds R, and increasing the number of traversal rounds when the data block size is higher than the threshold: The encryption result is obtained by the following formula: E i =AES(D i ,K,R) Among them, E i To encrypt data, AES represents the AES encryption function, receiving data block D i , key K and round number R are input; After encryption, the encrypted data E is queried through a hash function. i Perform integrity check and generate hash value H i : H i =Hash(E i ) The encrypted data E i and hash value H i Send to the data storage module for storage.

4. The data security and privacy protection system for a smart conference room as claimed in claim 3, characterized in that: The data encryption module also includes an encryption key management submodule, which generates a random encryption key and periodically changes it to prevent key leakage; Set the time interval for periodic key updates, actively trigger the key reset function, and generate a new random key using the same method: K'=SeededRandom(S') Each time the key is changed, the system adds a version number to the new key, denoted as V. The new key is denoted as K'(V+1). The previous key is marked as expired after sufficiently secure data transmission. The version is managed in the following way: K(V)→K(V-1)(expire) Among them, K(V) represents the encryption key of the current version, K(V-1) represents the encryption key of the previous version, and expire represents that the key of the current version has expired and can no longer be used for encryption or decryption operations; Data encryption can continue after rekeying: E i ’=AES(D i ,K’,R) Among them, E i ' is the encrypted data after reset.

5. The data security and privacy protection system for a smart conference room as claimed in claim 4, characterized in that: The data storage module includes using a distributed cloud storage architecture to continuously store encrypted data on multiple servers; Before the meeting starts, the storage architecture is selected through the system configuration panel, allowing users to customize storage priorities based on data type and importance. When receiving encrypted audio and video data blocks, identity authentication is performed, and the system dynamically allocates data blocks to different cloud servers based on the set priority and storage strategy; For each encrypted data block, the system further shards it to different storage nodes. The sharding process uses a dynamic sharding algorithm, which allows the shard size to be automatically adjusted during the storage process. Small shards are set for audio blocks, and large shards are set for video blocks. At the same time, each encrypted data piece will be stored in at least three different physical locations. After the data is stored, the system automatically triggers an integrity check by calculating the hash value of each data block and comparing it with the value saved during storage. If any inconsistency is found, the system immediately triggers an alarm and starts the data recovery process; After each meeting, the system executes the cleanup strategy to encrypt and delete data blocks that are no longer needed. At the same time, it meets the data retention time strategy and retains data backups for a set time based on compliance requirements.

6. A smart conference room data security and privacy protection system as claimed in claim 5, characterized in that: The access control module includes using a role-based access control strategy to grant different access rights according to different user roles, and performing real-time verification each time data is accessed, so that only users who pass the identity verification can access the corresponding data interface; The roles include administrator, conference participant and visitor. An access permission matrix P is created to define the access relationship between roles and data interfaces: The rows represent roles, the columns represent data interfaces, 1 represents permission, and 0 represents no permission; When a user registers or changes roles, the system is responsible for assigning access rights based on the user's identity information and the required role: A mn =J n ·P Among them, A mn represents the access rights of user role n to data interface m, J n An identifier representing the user role n; The system allows dynamic adjustment of user roles based on demand and re-evaluation of access rights. When a user submits an identity authentication request, the user receives a verification result based on the enhanced model: Among them, Z represents the verification score, SA l represents the credibility score of the lth verification feature provided by the user, C l represents the weight score of the lth verification feature, δ is the sensitivity parameter, θ is the set threshold of the verification feature, and x is the total number of feature types involved in the verification. When the verification score is greater than or equal to the minimum verification score set by the system, it means that the identity authentication is successful; Once authentication is passed, the system will perform access authorization checks based on the access rights matrix and user roles: U=A mn ·J n Where U represents the user's ultimate access permission to a specific data interface.

7. A smart conference room data security and privacy protection system as claimed in claim 6, characterized in that: The log management module includes,real-time recording of all data access activities.,When a user attempts to access data, the log management module intercepts the,access request through an intelligent interface and records the user identity,,access timestamp and access target type in the current interface; All access data is recorded in a hierarchical structure and can be accurately traced in subsequent queries through IDs; The log management module also includes a monitoring submodule, which analyzes the user's historical access data through a machine learning algorithm to establish a normal access pattern. Each time a user accesses, the monitoring submodule compares the current access with the baseline data in real time. When the following abnormal behaviors are found, the system will trigger an alarm mechanism: repeated attempts to access the same resource in a short period of time, access from an abnormal geographical location, and access using an unauthorized device; Once abnormal behavior is detected, the monitoring submodule will automatically generate alarm information and send it to the administrator via email notification. After any abnormal behavior is confirmed, the detailed information will be recorded in the audit log. The system administrator will review the behavior patterns and alarm records regularly.

8. A method using a smart conference room data security and privacy protection system as claimed in any one of claims 1 to 7, characterized in that: include The audio and video data in the meeting are collected in real time through audio and video sensors and stored in the data acquisition module; The collected data is transmitted to the encryption module and encrypted using the AES algorithm, while the encryption keys are managed and regularly changed to enhance security; The encrypted data is securely stored in a distributed cloud storage platform to ensure data security and availability; Verify user identity through role-based permission management and record all data access activities in real time for easy auditing and tracking; Monitor access activities, automatically detect abnormal behavior and send alerts to administrators, while providing a user-friendly interface for users to access data and query logs.

9. A computer device comprising a memory and a processor, wherein the memory stores a computer program, wherein: When the processor executes the computer program, the steps of the method according to any one of claims 1 to 7 are implemented.

10. A computer-readable storage medium having a computer program stored thereon, characterized in that: When the computer program is executed by a processor, the steps of the method according to any one of claims 1 to 7 are implemented.

Images