Information security reinforcing method for mine monitoring system

Abstract

The invention relates to a mine monitoring system information security reinforcement method, and belongs to the field of mine application system information security. According to the method, firstly, a binary file of a monitoring system application program is symmetrically encrypted, and the encrypted file is stored in a database; and reading the encrypted binary file from the database by using a program loader as an independent starting program, and decrypting the encrypted binary file by using a correct key. And finally, the loader dynamically loads the decrypted code into a memory through a reflection technology and executes service logic. Besides, for data generated by an application program, encrypted ciphertext data is stored in a database by using a symmetric encryption algorithm, a ciphertext index table is established, a ciphertext index is matched through a query condition, and original plaintext data is obtained after the read ciphertext data is decrypted. According to the invention, while the data security is improved, certain data processing efficiency is ensured.

Description

Technical Field

[0001] The invention belongs to the field of information security of mine application systems and relates to an information security reinforcement method for a mine monitoring system. Background Art

[0002] As an important tool for modern mine safety production management, the main functions of the mine monitoring system cover real-time monitoring, equipment status monitoring, environmental parameter monitoring and other aspects of the mine production process. With the development of information technology, more and more mining companies have begun to adopt advanced information technology to improve their management level and production efficiency. However, this highly information-based trend has also brought new challenges, especially in the field of information security. Due to its special working environment and complex data processing requirements, the mine monitoring system faces a variety of security threats, such as malware infection, data theft, and remote control of equipment. Once these problems occur, they may not only lead to production stagnation, but may even endanger the personal safety of mine workers.

[0003] In recent years, there have been many cyber attacks on industrial control systems at home and abroad, which have caused huge economic losses to related companies and attracted widespread attention from the society. In view of this, strengthening the information security management of mine monitoring systems and studying effective information security reinforcement methods have become an important topic in the information construction of the mining industry.

[0004] As an important part of mine safety production and efficient management, the mine monitoring system can help managers to timely discover potential risks and take measures to ensure the safety of production and personnel by real-time monitoring of underground gas concentration, temperature, humidity and other environmental parameters, as well as equipment operation status and personnel location information. However, if the information security of the monitoring system is not guaranteed, the following serious consequences may occur: ① Malicious third parties may tamper with environmental monitoring data to cover up real dangerous situations, resulting in the failure to timely warn of accidents. ② Unauthorized access and control may cause production equipment abnormalities, affect normal production processes, and even cause major safety accidents. ③ The leakage of personnel location information may endanger the lives of miners, especially in emergency evacuation, where incorrect location information may lead to rescue failure. Therefore, the information reinforcement of the mine monitoring system plays an important role in ensuring mine safety production and improving economic benefits. Summary of the invention

[0005] In view of this, the purpose of the present invention is to provide a method for information security reinforcement of a mine monitoring system, which prevents information leakage and tampering by multiple encryption of applications and databases, realizes information reinforcement from the program domain to the data domain, and improves the overall security protection capability of the monitoring system.

[0006] In order to achieve the above object, the present invention provides the following technical solutions:

[0007] A method for strengthening information security of a mine monitoring system, the method comprising the following steps:

[0008] S1. Symmetrically encrypt the binary file of the monitoring system application and store the encrypted file in the database;

[0009] S2, the program loader acts as an independent startup program, reads the encrypted binary file from the database and decrypts it using the correct key; dynamically loads the decrypted code into the memory through reflection technology and runs the corresponding application;

[0010] S3. The data generated by running the application is encrypted using a symmetric encryption algorithm to store the encrypted ciphertext data in the database, and a ciphertext index table is established;

[0011] S4. In the query phase, the query condition plain text is encrypted to obtain the conditional cipher text, the cipher text words are matched according to the conditional cipher text, and then decrypted to obtain the plain text information.

[0012] Further, in step S1, the following steps are specifically included:

[0013] S11, integrating the binary files constituting the application program of the mine monitoring system into a file assembly, performing AES encryption on the binary files in the file assembly to obtain the file ciphertext;

[0014] S12, using the SHA algorithm to perform hash calculation on the binary files in the file assembly to generate unique summary information, which is the digital feature fingerprint of the file;

[0015] S13. After encrypting all files in the file assembly, the file ciphertext and the file digital feature fingerprint are stored in the file database in the form of a file data table.

[0016] Further, in step S11, the assembly binary file is read by the encryption program, the file name is encrypted using the preset assembly resource key AppKey to generate a ciphertext, a fixed number of characters are extracted from the ciphertext as an additional key, and finally the extracted additional key is appended to AppKey as a new key to encrypt the original plaintext in the file stream to generate a file ciphertext;

[0017] In step S13, the file data table records the file name ciphertext FileName, the file digital feature fingerprint DbDigFinger and the file content ciphertext FileContent in the form of number, field name, meaning and data type.

[0018] Further, in step S2, the following steps are included:

[0019] S21. Query the assembly in the file database: open the USB drive to start the program, read the database key and assembly resource key in the USB drive software protection lock, and connect to the file database through the database key; query the assembly record to obtain the file name FileName, digital feature fingerprint DbDigFinger, and file content FileContent of each assembly;

[0020] S22. Unlock the assembly: Use the assembly resource key to reversely decrypt the file to obtain the file name plaintext, extract the additional key from the ciphertext according to the plaintext length, and combine it with the assembly key to form a new key; use the combined key to decrypt the file content ciphertext to obtain the file stream plaintext;

[0021] S23, verify the assembly: use the SHA algorithm to calculate the decrypted file stream plaintext, generate the memory file digital feature fingerprint MemDigFinger, verify whether MemDigFinger is consistent with the digital feature fingerprint DbDigFinger queried in the database, if the content is consistent, the verification passes, otherwise the verification fails; repeat steps S22 and S23 to complete the decryption and verification of all assembly files;

[0022] S24. Run the assembly: Add the assembly file to the memory by starting the program, dynamically bind the assembly using .NET reflection technology, load and run the assembly in the memory, unload the memory assembly after executing the business logic, and close the startup program.

[0023] Further, in step S3, the data generated by the application is encrypted and stored at the field level using a symmetric encryption method. First, the plaintext data to be stored is encrypted and stored in a ciphertext data table, and the plaintext phrases are segmented. Finally, the individual words in the plaintext phrases are encrypted and a ciphertext index table is established, which includes the following contents:

[0024] S31, after symmetrically encrypting the plaintext data, the ciphertext data SecMsg is obtained;

[0025] S32, storing the ciphertext data in the ciphertext data table SecTable;

[0026] S33, extracting key words from the original plaintext data to form a phrase set;

[0027] S34, symmetrically encrypting the single words Word in the phrase set in a loop, generating ciphertext words SecWord, and storing them in the ciphertext index table.

[0028] Further, in step S32, the ciphertext data table SecTable records the displacement identifier SecId of the ciphertext data and the corresponding ciphertext data SecMsg;

[0029] In step S33, the original plaintext is segmented using the Apache Lucene information retrieval open source library to obtain a plaintext phrase set WordSets, which includes a number of segmented words.

[0030] In step S34, the ciphertext index table includes the ciphertext index unique identifier IndexSecId, the corresponding ciphertext unique identifier SecId, and the corresponding ciphertext word SecWord.

[0031] Further, in step S4, the following process is included:

[0032] 1) Use a symmetric encryption algorithm to encrypt the query condition plaintext to obtain the condition ciphertext SecSearchMsg;

[0033] 2) Search the ciphertext index table through the conditional ciphertext, match the ciphertext words in the ciphertext index table, and obtain the ciphertext index data after the match is successful;

[0034] 3) Query the records in the ciphertext data table through SecId in the ciphertext index data to obtain the ciphertext data SecMsg;

[0035] 4) Decrypt the ciphertext data, obtain the original plaintext data, and complete the data query.

[0036] The beneficial effects of the present invention are:

[0037] The present invention uses software engineering technology, encryption technology and database information security related technology to realize the information security reinforcement of the mine monitoring system. The assembly resource file of the monitoring system application software is encrypted and then written into the file database. A startup program is built into the external U disk device as an application loader, and the file database is connected using an authorized key to complete the reading and decryption of the assembly resource file. The assembly file is dynamically loaded into the memory through reflection technology, and the startup program is closed after the business logic is executed, so that the whole process application assembly is not landed, and the program is prevented from being maliciously obtained and cracked. In addition, by encrypting the business data and then storing it, segmenting the data content, and establishing a ciphertext index table, the database information is reinforced, while improving data security, a certain data processing efficiency is guaranteed.

[0038] Other advantages, objectives and features of the present invention will be described in the following description to some extent, and to some extent, will be obvious to those skilled in the art based on the following examination and study, or can be taught from the practice of the present invention. The objectives and other advantages of the present invention can be realized and obtained through the following description. BRIEF DESCRIPTION OF THE DRAWINGS

[0039] In order to make the purpose, technical solutions and advantages of the present invention more clear, the present invention will be described in detail below in conjunction with the accompanying drawings, wherein:

[0040] Figure 1 A schematic diagram of the application file encryption process of the present invention;

[0041] Figure 2 It is a flowchart of the file encryption algorithm of the present invention;

[0042] Figure 3 A schematic diagram of key extraction of the file encryption algorithm of the present invention;

[0043] Figure 4 A schematic diagram of the application loading and running process of the present invention;

[0044] Figure 5 A schematic diagram of the application data storage process of the present invention;

[0045] Figure 6 A schematic diagram of a plaintext word segmentation result in an embodiment of the present invention;

[0046] Figure 7 It is a schematic diagram of the application data query process of the present invention. DETAILED DESCRIPTION

[0047] The following describes the embodiments of the present invention by specific examples, and those skilled in the art can easily understand other advantages and effects of the present invention from the contents disclosed in this specification. The present invention can also be implemented or applied through other different specific embodiments, and the details in this specification can also be modified or changed in various ways based on different viewpoints and applications without departing from the spirit of the present invention. It should be noted that the illustrations provided in the following embodiments only illustrate the basic concept of the present invention in a schematic manner, and the following embodiments and features in the embodiments can be combined with each other without conflict.

[0048] Among them, the drawings are only used for illustrative explanations, and they only represent schematic diagrams rather than actual pictures, and should not be understood as limitations on the present invention. In order to better illustrate the embodiments of the present invention, some parts of the drawings may be omitted, enlarged or reduced, and do not represent the size of actual products. For those skilled in the art, it is understandable that some well-known structures and their descriptions in the drawings may be omitted.

[0049] The same or similar numbers in the drawings of the embodiments of the present invention correspond to the same or similar parts; in the description of the present invention, it should be understood that if the terms "upper", "lower", "left", "right", "front", "rear", etc. indicate the orientation or position relationship, they are based on the orientation or position relationship shown in the drawings, which is only for the convenience of describing the present invention and simplifying the description, rather than indicating or implying that the device or element referred to must have a specific orientation, be constructed and operate in a specific orientation. Therefore, the terms describing the position relationship in the drawings are only used for illustrative purposes and cannot be understood as limiting the present invention. For ordinary technicians in this field, the specific meanings of the above terms can be understood according to specific circumstances.

[0050] See also Figure 1 to Figure 7 , which is a method for strengthening information security of mine monitoring system.

[0051] Example

[0052] This embodiment provides a specific implementation process of a mine monitoring system information security reinforcement method, which includes the following steps:

[0053] S1. Symmetrically encrypt the binary file of the monitoring system application and store the encrypted file in the database;

[0054] S2, the program loader acts as an independent startup program, reads the encrypted binary file from the database and decrypts it using the correct key; dynamically loads the decrypted code into the memory through reflection technology and runs the corresponding application;

[0055] S3. The data generated by running the application is encrypted using a symmetric encryption algorithm to store the encrypted ciphertext data in the database, and a ciphertext index table is established;

[0056] S4. In the query phase, the query condition plain text is encrypted to obtain the conditional cipher text, the cipher text words are matched according to the conditional cipher text, and then decrypted to obtain the plain text information.

[0057] In step S1 of this embodiment, Figure 1 As shown, firstly, it is necessary to encrypt the executable files, dynamic link libraries, resource files, configuration files and other files that make up the application of the mine monitoring system, and generate a unique digital feature fingerprint for each file through the encryption algorithm. Finally, the encrypted string and digital fingerprint of each application file are stored in the database to complete the encrypted storage of the application file. The specific process includes the following:

[0058] S11. Encrypt binary files such as executable files, dynamic link libraries, resource files, and configuration files using the Advanced Encryption Standard (AES) encryption algorithm.

[0059] AES is a widely used symmetric encryption algorithm, mainly used in data transmission, file storage, data backup, software and hardware encryption. AES commonly uses two encryption modes: ECB and CBC. ECB mode is simple to implement because it does not use an initial vector when encrypting. Each plaintext block is encrypted independently, and the same plaintext block will produce the same ciphertext block, so its security is relatively low. CBC mode uses a random initial vector when encrypting, and performs an XOR operation on the previous ciphertext block and the current plaintext block before encryption, which is more secure.

[0060] This solution uses the AES symmetric encryption algorithm CBC encryption mode to encrypt the assembly binary file. Figure 2 As shown, the assembly binary file is read through the encryption program, the file name is encrypted using the preset assembly resource key AppKey to generate a ciphertext, a fixed 4-bit character is extracted from the ciphertext as an additional key, and finally the extracted additional key is appended to AppKey and used as a new key to encrypt the original plaintext in the file stream to generate the file ciphertext.

[0061] There is a binary file main.exe, and its file stream content is:

[0062] 36-34-30-31-38-31-30-33-37-39-37-33-3B-E7-85-A4-E7-9F-BF-3B-

[0063] 32-30-32-34-2D-30-38-2D-32-38-20-30-38-3A-30-30-3A-32-37-7E

[0064] First, encrypt the file name main.exe to get the file name ciphertext, take the file name length as the starting position, and extract the 4-digit key from the file name ciphertext, such as Figure 3 As shown, the extracted keys are combined into a new key to encrypt the file stream string, and the following ciphertext is obtained:

[0065] uH2TJf1l8nopLjjhv6YaNVpS4keL3ed / UPVoPU0qU3OnNpRcHhFb7U802qIzzYSLyHA / c89QEEniQoZzU8Lstu f9NQQ2zlUasVbnZL97KK+4Y8wiGse3ddtA0uH8g51ucgULafrWA7A4z7xfr8Mj8aiFOFXAmiGd0rKviYFuuvI=

[0066] S12. Perform hash calculation on the binary file of the file assembly through the SHA algorithm to generate unique summary information, i.e., the digital feature fingerprint of the file. SHA (Secure Hash Algorithm) is mainly used to generate a unique summary of a fixed length and is widely used in the fields of data verification and data signature.

[0067] In this embodiment, the SHA-256 algorithm is used to perform hash calculation on the file main.exe, and the digest information obtained is as follows:

[0068] 2ec3b2587c657aa9c6d7c5785f67d4254f58ba9590020c4132b9c4ddf611abd6

[0069] S13. After encrypting all files in the file program set, the encrypted information is stored in the file database. The file database is designed with a file data table for storing file information. The data columns of the table are composed of file name, file digital feature fingerprint, and file content field. The specific structure is shown in Table 1 below:

[0070] Table 1

[0071]

[0072] In this embodiment, the content of the aforementioned file main.exe in the file data table is shown in Table 2 below:

[0073] Table 2

[0074]

[0075] In step S2 of this embodiment, Figure 4 As shown, to ensure the security of the application, a USB boot program is used as the program loader. The USB boot program has built-in file database key DbKey and assembly resource key AppKey, which are used to connect to the file database and read assembly resource files, and decrypt and verify the assembly through AppKey to complete assembly loading. The specific steps include:

[0076] S21. Query the assembly in the file database:

[0077] Open the USB drive to start the program, read the database key and assembly resource key in the USB drive software protection lock, and connect to the file database through the database key;

[0078] Query the assembly record to obtain the key information of each assembly: file name (FileName), digital feature fingerprint (DbDigFinger), and file content (FileContent).

[0079] S22. Unlock the assembly:

[0080] Refer to the assembly file encryption process and use the assembly resource key to reverse decrypt the file:

[0081] The file name ciphertext is decrypted by the assembly key to obtain the file name plaintext. The additional key is extracted from the ciphertext according to the plaintext length and combined with the assembly key to form a new key.

[0082] Use the combined key to decrypt the ciphertext of the file content to obtain the plaintext of the file stream.

[0083] S23. Verify the assembly: Calculate the decrypted assembly file in the memory and verify the digital feature fingerprint of the file:

[0084] The SHA-256 algorithm is used to calculate the plaintext of the file stream decrypted in the previous step to generate a memory file digital feature fingerprint (MemDigFinger).

[0085] Verify MemDigFinger and the digital feature fingerprint DbDigFinger queried in the database. If the contents are consistent, the verification passes.

[0086] S24, run the assembly: repeat steps S22 and S23 to complete the decryption and verification of all assembly files. Add the assembly files to the memory by starting the program, dynamically bind the assembly using .NET reflection technology, load and run the assembly in the memory, unload the memory assembly after executing the business logic and close the startup program.

[0087] In step S3 of this embodiment, when the application executes business logic, it needs to exchange data with the database. To ensure data security and prevent data from being maliciously modified or illegally acquired, this solution uses symmetric encryption to encrypt and store data at the field level.

[0088] like Figure 5 As shown, the data to be stored is first encrypted in plain text and then stored in a ciphertext data table, and the plaintext phrases are segmented at the same time. Finally, the individual words in the plaintext phrases are encrypted and a ciphertext index table is established.

[0089] Taking the plain text data (Msg) "Mine Monitoring System Information Security Technology" as an example, the detailed steps are as follows:

[0090] 1) After symmetric encryption of plaintext data, the ciphertext data (SecMsg) is obtained:

[0091] "6t+ / 3Cd3182kUDeXApochNvibm32bRFw5sJfP / a4rMlxqTu1CYtuc+ZqIGSXHuMz"

[0092] 2) Store the ciphertext data in the ciphertext data table (SecTable), as shown in Table 3:

[0093] Table 3

[0094]

[0095] 3) In order to improve the efficiency of data query, extract the key words in the original plaintext data, build the ciphertext index table (IndexSecMsg), and establish the association between the words and the ciphertext data table, as shown in Table 4:

[0096] Table 4

[0097]

[0098] 4) For the extraction of keyword phrases, this embodiment uses the Apache Lucene information retrieval open source library to segment the original plaintext to obtain a plaintext phrase set (WordSets), such as Figure 6 As shown, in this embodiment, taking the original plain text "Mine Monitoring System Information Security Technology" as an example, it is segmented into word1-word4, where word1 is "mine", word2 is "monitoring system", word3 is "information security", and word4 is "technology".

[0099] 5) Cycle through the symmetric encryption of the single words (Word) in the phrase set to generate the ciphertext words (SecWord) and store them in the ciphertext index table. The ciphertext index table includes the ciphertext index unique identifier IndexSecId, the corresponding ciphertext unique identifier SecId and the corresponding ciphertext word SecWord. The ciphertext index table is shown in Table 5:

[0100] Table 5

[0101]

[0102] Table 5 shows the ciphertext words of the aforementioned word1-word4.

[0103] In step S4 of this embodiment, when the application executes the data query service, because the data in the database has been encrypted, the query condition plain text also needs to be encrypted before it can match the ciphertext content in the database. Figure 7 shown.

[0104] Taking the query condition plain text (SearchMsg) "Information Security" as an example, the specific steps are as follows:

[0105] 1) Use the symmetric encryption algorithm to encrypt the query condition plaintext and obtain the condition ciphertext (SecSearchMsg):

[0106] kPXOSuDk8t1pnAKXRlDyOw==

[0107] 2) Search the ciphertext index table through the conditional ciphertext, match the ciphertext words in the ciphertext index table, and obtain the ciphertext index data after the match is successful. The ciphertext index data includes the ciphertext index unique identifier IndexSecId, the corresponding ciphertext unique identifier SecId, and the corresponding ciphertext word SecWord: [

[0109] IndexSecId:3,

[0110] SecId:1,

[0111] SecWord:kPXOSuDk8t1pnAKXRlDyOw== ]

[0113] 3) Query the records in the ciphertext data table through the SecId in the ciphertext index data to obtain the ciphertext data SecMsg: [

[0115] SecId:1,

[0116] SecMsg:

[0117] 6t+ / 3Cd3182kUDeXApochNvibm32bRFw5sJfP / a4rMlxqTu1CYtuc+ZqIGSXHuMz ]

[0119] 4) Decrypt the ciphertext data to obtain the original plaintext data “Mining Monitoring System Information Security Technology” and complete the data query.

[0120] Finally, it should be noted that the above embodiments are only used to illustrate the technical solution of the present invention rather than to limit it. Although the present invention has been described in detail with reference to the preferred embodiments, those skilled in the art should understand that the technical solution of the present invention can be modified or replaced by equivalents without departing from the purpose and scope of the technical solution, which should be included in the scope of the claims of the present invention.

Claims

1. A method for strengthening information security of a mine monitoring system, characterized in that: The method comprises the following steps: S1. Symmetrically encrypt the binary file of the monitoring system application and store the encrypted file in the database; S2, the program loader acts as an independent startup program, reads the encrypted binary file from the database and decrypts it using the correct key; dynamically loads the decrypted code into the memory through reflection technology and runs the corresponding application; S3. The data generated by running the application is encrypted using a symmetric encryption algorithm to store the encrypted ciphertext data in the database, and a ciphertext index table is established; S4. In the query phase, the query condition plain text is encrypted to obtain the conditional cipher text, the cipher text words are matched according to the conditional cipher text, and then decrypted to obtain the plain text information.

2. A mine monitoring system information security reinforcement method according to claim 1, characterized in that: In step S1, the following steps are specifically included: S11, integrating the binary files constituting the application program of the mine monitoring system into a file assembly, performing AES encryption on the binary files in the file assembly to obtain the file ciphertext; S12, using the SHA algorithm to perform hash calculation on the binary files in the file assembly to generate unique summary information, which is the digital feature fingerprint of the file; S13. After encrypting all files in the file assembly, the file ciphertext and the file digital feature fingerprint are stored in the file database in the form of a file data table.

3. A mine monitoring system information security reinforcement method according to claim 2, characterized in that: In step S11, the assembly binary file is read by the encryption program, the file name is encrypted using the preset assembly resource key AppKey to generate a ciphertext, a fixed number of characters are extracted from the ciphertext as an additional key, and finally the extracted additional key is appended to AppKey as a new key to encrypt the original plaintext in the file stream to generate a file ciphertext; In step S13, the file data table records the file name ciphertext FileName, the file digital feature fingerprint DbDigFinger and the file content ciphertext FileContent in the form of number, field name, meaning and data type.

4. A mine monitoring system information security reinforcement method according to claim 2, characterized in that: In step S2, the following steps are included: S21. Query the assembly in the file database: open the USB drive to start the program, read the database key and assembly resource key in the USB drive software protection lock, and connect to the file database through the database key; query the assembly record to obtain the file name FileName, digital feature fingerprint DbDigFinger, and file content FileContent of each assembly; S22. Unlock the assembly: Use the assembly resource key to reversely decrypt the file to obtain the file name plaintext, extract the additional key from the ciphertext according to the plaintext length, and combine it with the assembly key to form a new key; use the combined key to decrypt the file content ciphertext to obtain the file stream plaintext; S23, verify the assembly: use the SHA algorithm to calculate the decrypted file stream plaintext, generate the memory file digital feature fingerprint MemDigFinger, verify whether MemDigFinger is consistent with the digital feature fingerprint DbDigFinger queried in the database, if the content is consistent, the verification passes, otherwise the verification fails; repeat steps S22 and S23 to complete the decryption and verification of all assembly files; S24. Run the assembly: Add the assembly file to the memory by starting the program, dynamically bind the assembly using .NET reflection technology, load and run the assembly in the memory, unload the memory assembly after executing the business logic, and close the startup program.

5. A mine monitoring system information security reinforcement method according to claim 4, characterized in that: In step S3, the data generated by the application is encrypted and stored at the field level using a symmetric encryption method. First, the plaintext data to be stored is encrypted and stored in the ciphertext data table. At the same time, the plaintext phrases are segmented. Finally, the individual words in the plaintext phrases are encrypted and a ciphertext index table is established. Includes the following: S31, after symmetrically encrypting the plaintext data, the ciphertext data SecMsg is obtained; S32, storing the ciphertext data in the ciphertext data table SecTable; S33, extracting key words from the original plaintext data to form a phrase set; S34, symmetrically encrypting the single words Word in the phrase set in a loop, generating ciphertext words SecWord, and storing them in the ciphertext index table.

6. A mine monitoring system information security reinforcement method according to claim 5, characterized in that: In step S32, the ciphertext data table SecTable records the displacement identifier SecId of the ciphertext data and the corresponding ciphertext data SecMsg; In step S33, the original plaintext is segmented using the Apache Lucene information retrieval open source library to obtain a plaintext phrase set WordSets, which includes a number of segmented words. In step S34, the ciphertext index table includes the ciphertext index unique identifier IndexSecId, the corresponding ciphertext unique identifier SecId, and the corresponding ciphertext word SecWord.

7. A mine monitoring system information security reinforcement method according to claim 6, characterized in that: In step S4, The process includes: 1) Use a symmetric encryption algorithm to encrypt the query condition plaintext to obtain the condition ciphertext SecSearchMsg; 2) Search the ciphertext index table through the conditional ciphertext, match the ciphertext words in the ciphertext index table, and obtain the ciphertext index data after the match is successful; 3) Query the records in the ciphertext data table through the SecId in the ciphertext index data to obtain the ciphertext data SecMsg; 4) Decrypt the ciphertext data, obtain the original plaintext data, and complete the data query.

Images