Data security management method based on cloud platform

Abstract

The invention provides a data security management method based on a cloud platform, which belongs to the technical field of data security, and specifically comprises the following steps: determining access users of different digital resources of the cloud platform according to access use conditions; access use heat of different digital resources and effective heat resources are determined by combining access use data of different access use users, and leakage safety risks of different background servers are determined by utilizing leakage data of different background servers; and the storage security risk is assessed based on the leakage security risks of the background server in different data reliability requirement intervals, and whether the risk optimization strategy needs to be output is determined according to the storage security risk, so that the security of data storage of the cloud platform is ensured.

Description

Technical Field

[0001] The present invention belongs to the field of data security technology, and in particular relates to a data security management method based on a cloud platform. Background Art

[0002] In order to solve the problem of "difficulty in gathering, sharing and obtaining" digital achievements and capabilities, and to improve the actual situation of scattered sources of the company's digital achievements, scattered capacity building, scattered acquisition channels, and scattered service support, we will take the actual data needs of users as the starting point and build a standardized data application management and operation support system as the goal, thereby improving the ability to share digital achievements. However, at the same time, how to achieve secure management of different digital resources and improve the reliability of digital resources has become a technical problem that needs to be solved urgently.

[0003] In response to the above technical problems, the present invention provides a data security management method based on a cloud platform. Summary of the invention

[0004] To achieve the purpose of the present invention, the present invention adopts the following technical solutions: According to one aspect of the present invention, a data security management method based on a cloud platform is provided.

[0005] A data security management method based on a cloud platform, characterized by comprising: S1 determines the users who access different digital resources of the cloud platform through access usage, and determines the access usage heat of different digital resources and effective heat resources based on the access usage data of different access users; S2 uses the description data of the effective heat resource to determine the digital resources associated with the effective heat resource, and determines the resource authority and the authoritative digital resource of the effective heat resource through the access and usage heat and types of different associated digital resources and the access and usage heat of the effective heat resource; S3 obtains the storage data of digital resources in different backend servers of the cloud platform, and divides different backend servers into different data reliability requirement intervals based on the storage data of digital resources and authoritative digital resources; S4 uses the leakage data of different backend servers to determine the leakage security risks of different backend servers, and evaluates the storage security risks based on the leakage security risks of backend servers in different data reliability requirement intervals, and determines whether it is necessary to output a risk optimization strategy based on the storage security risks.

[0006] A further technical solution is that the digital resources include digital scientific research results, knowledge documents, artificial intelligence models and interactive communication posts.

[0007] A further technical solution is that when the access usage heat of the digital resource is greater than a preset heat value, the digital resource is determined to be a valid heat resource.

[0008] A further technical solution is to determine whether it is necessary to output a risk optimization strategy based on the storage security risk, specifically including: When the storage security risk does not meet the requirement, it is determined that the output of the risk optimization strategy needs to be performed.

[0009] On the other hand, the present invention provides a data security management device based on a cloud platform, which adopts the above-mentioned data security management method based on a cloud platform, and is characterized in that it specifically includes: Popularity evaluation module, authority evaluation module, interval division module, optimization strategy output module; The heat evaluation module is responsible for determining the access and use users of different digital resources of the cloud platform through access and use conditions, and determining the access and use heat of different digital resources and effective heat resources in combination with the access and use data of different access and use users; The authority evaluation module is responsible for determining the digital resources associated with the effective heat resources using the description data of the effective heat resources, and determining the resource authority and authoritative digital resources of the effective heat resources through the access and usage heat and types of different associated digital resources and the access and usage heat of the effective heat resources; The interval division module is responsible for obtaining the storage data of the digital resources in different backend servers of the cloud platform, and dividing the different backend servers into different data reliability requirement intervals based on the storage data of the digital resources and the authoritative digital resources; The optimization strategy output module is responsible for determining the leakage security risks of different backend servers using the leakage data of different backend servers, and evaluating the storage security risks based on the leakage security risks of backend servers in different data reliability requirement intervals, and determining whether it is necessary to output the risk optimization strategy based on the storage security risks.

[0010] The beneficial effects of the present invention are: 1. By determining the access and usage popularity and effective popularity resources of different digital resources according to the number of access users and the access and usage data of different access users, the access and usage popularity can be evaluated based on the number of access users and the access and usage data, which also lays the foundation for differentiated evaluation of authoritative data resources and the division of background servers into different data reliability requirement intervals.

[0011] 2. The storage security risk is evaluated based on the leakage security risk of the background servers in different data reliability requirement ranges. This not only takes into account the data reliability requirements of the background servers, but also combines the leakage security risks of different background servers to achieve an accurate evaluation of the data storage security risk from the two perspectives of leakage security risk and data reliability requirements, thereby laying the foundation for ensuring the data security of the cloud platform.

[0012] Other features and advantages will be described in the following description, and partly become apparent from the description, or understood by practicing the invention. The purpose and other advantages of the invention are realized and obtained by the structures particularly pointed out in the description and the drawings.

[0013] In order to make the above-mentioned objects, features and advantages of the present invention more obvious and easy to understand, preferred embodiments are given below and described in detail with reference to the accompanying drawings. BRIEF DESCRIPTION OF THE DRAWINGS

[0014] The above and other features and advantages of the present invention will become more apparent by describing in detail exemplary embodiments thereof with reference to the attached drawings.

[0015] Figure 1 It is a flow chart of a data security management method based on a cloud platform; Figure 2 is a flow chart of a method for determining access usage popularity of a digital resource; Figure 3 It is a flow chart of a method for determining resource authority of effective heat resources. DETAILED DESCRIPTION

[0016] Example embodiments will now be described more fully with reference to the accompanying drawings. However, example embodiments can be implemented in a variety of forms and should not be construed as limited to the embodiments set forth herein; rather, these embodiments are provided so that the present invention will be comprehensive and complete and fully convey the concepts of the example embodiments to those skilled in the art. The same reference numerals in the figures represent the same or similar structures, and thus their detailed description will be omitted.

[0017] The terms "a", "an", "the", and "said" are used to indicate the presence of one or more elements / components / etc.; the terms "comprising" and "having" are used to express an open-ended inclusive meaning and mean that additional elements / components / etc. may be present in addition to the listed elements / components / etc.

[0018] Example 1 To solve the above problems, according to one aspect of the present invention, Figure 1According to one aspect of the present invention, a data security management method based on a cloud platform is provided, which is characterized by specifically comprising: S1 determines the users who access different digital resources of the cloud platform through access usage, and determines the access usage heat of different digital resources and effective heat resources based on the access usage data of different access users; Furthermore, the digital resources include digital scientific research results, knowledge documents, artificial intelligence models and interactive communication posts.

[0019] In one possible embodiment, Figure 2 As shown, the method for determining the access usage heat of the digital resource is: Determine the access times of different access users and the access durations of different access users by using the access data of different access users, and determine the user access heat of different access users based on the access times and the access durations of different access times; The access and use heat of the digital resource is determined by the user access heat of different access and use users and the number of access and use users.

[0020] Furthermore, when the access usage heat of the digital resource is greater than a preset heat value, the digital resource is determined to be a valid heat resource.

[0021] In another possible embodiment, the method for determining the access usage heat of the digital resource is: S11 determines whether the number of users accessing the digital resource is less than a preset number of users. If so, it is determined that the digital resource does not belong to a valid hot resource. If not, proceed to the next step. S12 uses the access usage data of different access users to determine the access usage times of different access users and the access usage durations of different access usage times, and determines the user access heat of different access users based on the access usage times and the access usage durations of different access usage times; S13 determines the resource usage heat of the digital resource by the user access heat of different access users and the number of access users, and judges whether the resource usage heat of the digital resource meets the requirement, if yes, proceeds to step S14, if no, proceeds to the next step; S14 determines valid access users among the access users according to the user access heat, and judges whether the number of valid access users of the digital resource meets the requirement. If not, it is determined that the digital resource does not belong to the valid heat resource. If so, proceed to the next step. S15 determines the compensation amount of resource usage heat according to the number of valid access users and the user access heat of the valid access users, and determines the access usage heat of the digital resource in combination with the resource usage heat.

[0022] In another possible embodiment, the method for determining the access usage heat of the digital resource is: S21 determines the resource usage heat of the digital resource by the user access heat of different access users and the number of access users, and determines whether the resource usage heat of the digital resource is less than a preset heat threshold, and if so, proceeds to the next step, if not, proceeds to step S25; S22 uses the access usage data of different access users to determine the access usage times of different access users and the access usage durations of different access usage times, and determines the user access heat of different access users based on the access usage times and the access usage durations of different access usage times; S23 determines valid access users among the access users according to the user access heat, and judges whether the number of valid access users of the digital resource is less than the preset number of users. If so, it is determined that the digital resource does not belong to the valid heat resource. If not, proceed to the next step. S24 determines the compensation amount of resource usage heat according to the number of valid access users and the user access heat of the valid access users, and judges whether the compensation amount of resource usage heat of the valid access users meets the requirements. If so, proceed to the next step; if not, determine that the digital resource does not belong to the valid heat resource; S25 determines the access usage heat of the digital resource according to the compensation amount of the resource usage heat and the resource usage heat.

[0023] S2 uses the description data of the effective heat resource to determine the digital resources associated with the effective heat resource, and determines the resource authority and the authoritative digital resource of the effective heat resource through the access and usage heat and types of different associated digital resources and the access and usage heat of the effective heat resource; It should be noted that the determination of the digital resources associated with the effective heat resource using the description data of the effective heat resource specifically includes: The matching degree between the effective heat resource and other effective heat resources is determined through the description data, and the digital resources associated with the effective heat resource are determined based on the matching degree.

[0024] Furthermore, the matching degree is determined according to the number of matching keywords in the description data of the effective heat resource and other effective heat resources.

[0025] In one possible embodiment, Figure 3 As shown, the method for determining the resource authority of the effective heat resource is: Determine the basic authority of the effective heat resource according to the access usage heat of the effective heat resource; Determining the comprehensive matching authority of different types of digital resources according to the number of different types of associated digital resources, the access and usage popularity of different associated digital resources, and the matching degree with the effective popularity resources; The resource authority of the effective heat resource is determined by using the comprehensive matching authority of different types of digital resources and the basic authority of the effective heat resource.

[0026] Furthermore, the value range of the resource authority of the effective heat resource is between 0 and 1, wherein the greater the resource authority of the effective heat resource is, the higher the authority of the effective heat resource is.

[0027] It should be noted that when the resource authority of the effective heat resource is greater than a preset authority threshold, the effective heat resource is determined to be an authoritative digital resource.

[0028] In another possible embodiment, the method for determining the resource authority of the effective heat resource is: Determine the basic authority of the effective heat resource according to the access usage heat of the effective heat resource, obtain the number of digital resources associated with the effective heat resource, and determine the resource heat type of the effective heat resource based on the basic authority of the effective heat resource; The authoritative matching degree of the effective heat resource is determined by the number of digital resources associated with the effective heat resource, the access and usage heat of different associated digital resources, and the matching degree with the effective heat resource, and whether the authoritative matching degree of the effective heat resource meets the requirements is determined based on the resource heat type of the effective heat resource. If so, proceed to the next step; if not, determine that the effective heat resource does not belong to the authoritative digital resource; Determine the comprehensive matching authority of different types of digital resources according to the number of different types of associated digital resources, the access and usage heat of different associated digital resources, and the matching degree with the effective heat resource, and determine whether there is a valid type based on the resource heat type of the effective heat resource and the comprehensive matching authority of different types of digital resources, if yes, proceed to the next step, if not, determine that the effective heat resource does not belong to the authoritative digital resource; The comprehensive matching authority of the effective type of digital resources and the number of effective types are obtained, and the basic authority of the effective heat resource is corrected based on the average value of the comprehensive matching authority of different types of digital resources to obtain the resource authority of the effective heat resource.

[0029] In another possible embodiment, the method for determining the resource authority of the effective heat resource is: Determine the basic authority of the effective heat resource according to the access usage heat of the effective heat resource, obtain the number of digital resources associated with the effective heat resource, and determine whether the number of digital resources associated with the effective heat resource meets the requirement based on the basic authority of the effective heat resource, if yes, proceed to the next step, if not, determine that the effective heat resource does not belong to the authoritative digital resource; The authoritative matching degree of the effective heat resource is determined by the number of digital resources associated with the effective heat resource, the access and usage heat of different associated digital resources, and the matching degree with the effective heat resource, and based on the basic authority of the effective heat resource, it is determined whether the authoritative matching degree of the effective heat resource meets the requirements, if so, proceed to the next step, if not, it is determined that the effective heat resource does not belong to the authoritative digital resource; Determining the comprehensive matching authority of different types of digital resources according to the number of different types of associated digital resources, the access and usage popularity of different associated digital resources, and the matching degree with the effective popularity resources; The resource authority of the effective heat resource is determined by using the comprehensive matching authority of different types of digital resources and the basic authority of the effective heat resource.

[0030] S3 obtains the storage data of digital resources in different backend servers of the cloud platform, and divides different backend servers into different data reliability requirement intervals based on the storage data of digital resources and authoritative digital resources; It should be noted that different backend servers are divided into different data reliability requirement intervals, including: Determine the storage quantity and storage space of different types of digital resources of the backend server based on the storage data of the digital resources of the backend server, and determine the basic reliability requirements of the digital resources of the backend server in combination with the basic weight values ​​of different types of digital resources; Determine the storage quantity and storage space of different types of authoritative digital resources of the backend server based on the storage data of the authoritative digital resources of the backend server, and determine the reliability requirements of the authoritative digital resources of the backend server in combination with the basic weight values ​​of different types of digital resources; The comprehensive reliability requirements of the backend server are determined by utilizing the reliability requirements of the authoritative digital resources of the backend server and the basic reliability requirements of the digital resources, and different backend servers are divided into different data reliability requirement intervals based on the comprehensive reliability requirements.

[0031] S4 uses the leakage data of different backend servers to determine the leakage security risks of different backend servers, and evaluates the storage security risks based on the leakage security risks of backend servers in different data reliability requirement intervals, and determines whether it is necessary to output a risk optimization strategy based on the storage security risks.

[0032] Furthermore, the leakage security risk of the backend server is determined according to the number of different types of network attacks on the backend server. Specifically, different types of leakage risks are determined according to the number of different types of network attacks, and the leakage security risk of the backend server is determined in combination with the basic risk weight values ​​of different types of network attacks.

[0033] Specifically, the basic risk weight value of the network attack is determined according to the matching result of the type of network attack.

[0034] In one possible embodiment, the method for evaluating the storage security risk is: Determine the interval leakage security risk of different data reliability requirement intervals based on the number of backend servers in different data reliability requirement intervals and the leakage security risk of different backend servers; The weight values ​​of different data reliability requirement intervals are determined according to the data reliability requirement ranges of different data reliability requirement intervals, and the storage security risk is determined in combination with the interval leakage security risks of different data reliability requirement intervals.

[0035] In another possible embodiment, the method for evaluating the storage security risk is: S31 determines the interval leakage security risk of different data reliability requirement intervals based on the number of backend servers in different data reliability requirement intervals and the leakage security risk of different backend servers, and determines whether there is a data reliability interval whose interval leakage security risk does not meet the requirements. If yes, proceed to the next step, if not, proceed to step S34; S32 takes the data reliability interval whose interval leakage security risk does not meet the requirement as the risk interval, and determines whether the number of the risk intervals meets the requirement. If not, it is determined that the output of the risk optimization strategy needs to be performed. If yes, proceed to the next step; S33 determines weight values ​​of different data reliability requirement intervals according to the data reliability requirement ranges of different data reliability requirement intervals, screens the data reliability requirement intervals based on the weight values ​​to obtain screened reliability requirement intervals, and determines whether there is a risk interval in the screened reliability requirement intervals. If so, it is determined that the output of the risk optimization strategy needs to be performed, and if not, proceeds to the next step; S34 determines the storage security risk according to the weight values ​​of different data reliability requirement intervals and the interval leakage security risk.

[0036] It should be noted that whether the risk optimization strategy needs to be output is determined based on the storage security risk, including: When the storage security risk does not meet the requirement, it is determined that the output of the risk optimization strategy needs to be performed.

[0037] Example 2 On the other hand, the present invention provides a data security management device based on a cloud platform, which adopts the above-mentioned data security management method based on a cloud platform, and is characterized in that it specifically includes: Popularity evaluation module, authority evaluation module, interval division module, optimization strategy output module; The heat evaluation module is responsible for determining the access and use users of different digital resources of the cloud platform through access and use conditions, and determining the access and use heat of different digital resources and effective heat resources in combination with the access and use data of different access and use users; The authority evaluation module is responsible for determining the digital resources associated with the effective heat resources using the description data of the effective heat resources, and determining the resource authority and authoritative digital resources of the effective heat resources through the access and usage heat and types of different associated digital resources and the access and usage heat of the effective heat resources; The interval division module is responsible for obtaining the storage data of the digital resources in different backend servers of the cloud platform, and dividing the different backend servers into different data reliability requirement intervals based on the storage data of the digital resources and the authoritative digital resources; The optimization strategy output module is responsible for determining the leakage security risks of different backend servers using the leakage data of different backend servers, and evaluating the storage security risks based on the leakage security risks of backend servers in different data reliability requirement intervals, and determining whether it is necessary to output the risk optimization strategy based on the storage security risks.

[0038] Based on the above embodiments, the present application achieves the following beneficial effects: 1. By determining the access and usage popularity and effective popularity resources of different digital resources according to the number of access users and the access and usage data of different access users, the access and usage popularity can be evaluated based on the number of access users and the access and usage data, which also lays the foundation for differentiated evaluation of authoritative data resources and the division of background servers into different data reliability requirement intervals.

[0039] 2. The storage security risk is evaluated based on the leakage security risk of the background servers in different data reliability requirement ranges. This not only takes into account the data reliability requirements of the background servers, but also combines the leakage security risks of different background servers to achieve an accurate evaluation of the data storage security risk from the two perspectives of leakage security risk and data reliability requirements, thereby laying the foundation for ensuring the data security of the cloud platform.

[0040] Each embodiment in this specification is described in a progressive manner, and the same or similar parts between the embodiments can be referred to each other, and each embodiment focuses on the differences from other embodiments. In particular, for the device, equipment, and non-volatile computer storage medium embodiments, since they are basically similar to the method embodiments, the description is relatively simple, and the relevant parts can be referred to the partial description of the method embodiment.

[0041] The above is a description of a specific embodiment of the specification. Other embodiments are within the scope of the appended claims. In some cases, the actions or steps recorded in the claims can be performed in an order different from that in the embodiments and still achieve the desired results. In addition, the processes depicted in the drawings do not necessarily require the specific order or continuous order shown to achieve the desired results. In some embodiments, multitasking and parallel processing are also possible or may be advantageous.

[0042] The above description is only one or more embodiments of this specification and is not intended to limit this specification. For those skilled in the art, one or more embodiments of this specification may have various changes and variations. Any modification, equivalent replacement, improvement, etc. made within the spirit and principle of one or more embodiments of this specification shall be included in the scope of the claims of this specification.

Claims

1. A data security management method based on a cloud platform, characterized in that: Specifically include: Determine the users who access different digital resources of the cloud platform through access usage, and determine the access usage heat of different digital resources and effective heat resources based on the access usage data of different users; Determine the digital resources associated with the effective heat resource by using the description data of the effective heat resource, and determine the resource authority and the authoritative digital resource of the effective heat resource by using the access and usage heat and types of different associated digital resources and the access and usage heat of the effective heat resource; Acquire the storage data of digital resources in different backend servers of the cloud platform, and divide the different backend servers into different data reliability requirement intervals based on the storage data of digital resources and authoritative digital resources; The leakage data of different backend servers are used to determine the leakage security risks of different backend servers, and the storage security risks are evaluated based on the leakage security risks of backend servers in different data reliability requirement intervals. According to the storage security risks, it is determined whether it is necessary to output a risk optimization strategy.

2. The data security management method based on the cloud platform according to claim 1, characterized in that: The digital resources include digital scientific research results, knowledge documents, artificial intelligence models and interactive communication posts.

3. The data security management method based on the cloud platform according to claim 1, characterized in that: The method for determining the access usage heat of the digital resource is: Determine the access times of different access users and the access durations of different access users by using the access data of different access users, and determine the user access heat of different access users based on the access times and the access durations of different access times; The access and use heat of the digital resource is determined by the user access heat of different access and use users and the number of access and use users.

4. The data security management method based on the cloud platform according to claim 3, characterized in that: When the access usage heat of the digital resource is greater than a preset heat value, the digital resource is determined to be a valid heat resource.

5. The data security management method based on the cloud platform according to claim 1, characterized in that: Determining the digital resources associated with the effective heat resource by using the description data of the effective heat resource specifically includes: The matching degree between the effective heat resource and other effective heat resources is determined through the description data, and the digital resources associated with the effective heat resource are determined based on the matching degree.

6. The data security management method based on the cloud platform according to claim 5, characterized in that: The matching degree is determined according to the number of matching keywords between the description data of the effective heat resource and other effective heat resources.

7. The data security management method based on the cloud platform according to claim 1, characterized in that: The method for determining the resource authority of the effective heat resource is: Determine the basic authority of the effective heat resource according to the access usage heat of the effective heat resource; Determining the comprehensive matching authority of different types of digital resources according to the number of different types of associated digital resources, the access and usage popularity of different associated digital resources, and the matching degree with the effective popularity resources; The resource authority of the effective heat resource is determined by using the comprehensive matching authority of different types of digital resources and the basic authority of the effective heat resource.

8. The cloud platform-based data security management method according to claim 1, characterized in that: When the resource authority of the effective heat resource is greater than a preset authority threshold, the effective heat resource is determined to be an authoritative digital resource.

9. The cloud platform-based data security management method according to claim 1, characterized in that: Determine whether to output a risk optimization strategy based on storage security risks, including: When the storage security risk does not meet the requirement, it is determined that the output of the risk optimization strategy needs to be performed.

10. A data security management device based on a cloud platform, using a data security management method based on a cloud platform according to any one of claims 1 to 9, characterized in that: Specifically include: Popularity evaluation module, authority evaluation module, interval division module, optimization strategy output module; The heat evaluation module is responsible for determining the access and use users of different digital resources of the cloud platform through access and use conditions, and determining the access and use heat of different digital resources and effective heat resources in combination with the access and use data of different access and use users; The authority evaluation module is responsible for determining the digital resources associated with the effective heat resources using the description data of the effective heat resources, and determining the resource authority and authoritative digital resources of the effective heat resources through the access and usage heat and types of different associated digital resources and the access and usage heat of the effective heat resources; The interval division module is responsible for obtaining the storage data of the digital resources in different backend servers of the cloud platform, and dividing the different backend servers into different data reliability requirement intervals based on the storage data of the digital resources and the authoritative digital resources; The optimization strategy output module is responsible for determining the leakage security risks of different backend servers using the leakage data of different backend servers, and evaluating the storage security risks based on the leakage security risks of backend servers in different data reliability requirement intervals, and determining whether it is necessary to output the risk optimization strategy based on the storage security risks.

Images