Internet-based student psychological health archive encryption management system and method

Abstract

The invention discloses an internet-based student mental health record encryption management system and method. The system comprises a data acquisition module, an encryption storage module, an authority management module, a real-time monitoring module and a data sharing and report generation module. The data acquisition module obtains student psychological health data through a psychological evaluation tool, wearable equipment and manual input, and generates a data set D. And the encryption storage module adopts a dual encryption mechanism, carries out full-life-cycle encryption protection on the data D by utilizing an asymmetric encryption algorithm and a symmetric encryption algorithm, and provides data backup and recovery functions. And the authority management module distributes different authorities to different role users on the basis of a role access control model, so that refined data access management is realized. And the real-time monitoring module dynamically calculates a psychological health risk index Ri and combines a dynamic threshold value to generate a psychological health early warning so as to help schools and psychological counselers to timely discover and intervene potential psychological problems.

Description

Technical Field

[0001] The present invention relates to the technical field of file encryption, and in particular to an Internet-based student mental health file encryption management system and method. Background Art

[0002] As society pays more and more attention to students' mental health issues, more and more schools and educational institutions have begun to establish mental health archive management systems to monitor students' mental states and provide necessary intervention support. These systems are usually based on information platforms, integrating psychological assessment, data storage, analysis and monitoring, and providing mental health-related services for psychological counselors, parents and students themselves.

[0003] At present, the student mental health management system on the market usually includes the following functional modules:

[0004] Psychological health data collection: Collect students’ psychological data through psychological assessment questionnaires or behavioral observations.

[0005] Data storage: Store mental health data in a database for subsequent analysis and query.

[0006] Data analysis and report generation: Analyze students’ mental health data and generate reports.

[0007] Risk monitoring and early warning: Generate risk warnings based on abnormal changes in psychological data to help schools and related personnel intervene.

[0008] Although these technologies have improved the efficiency of student mental health management to a certain extent, existing technologies still have many shortcomings and are difficult to fully meet actual needs.

[0009] Student mental health data is highly sensitive and involves privacy, such as anxiety, depression, and social skills. If this data is not effectively protected during storage, transmission, or use, it is very easy to lead to information leakage, abuse, or even malicious attacks. However, the existing system has obvious defects in the following aspects:

[0010] Lack of effective encryption mechanism: Some systems only use simple single-layer encryption or rely solely on the basic encryption function of the database, making it difficult to ensure data security.

[0011] Lack of hierarchical permission control: Existing systems usually use the same permission access settings for all users and are unable to finely manage data access rights based on user roles (such as psychological counselors, teachers, parents, and students), resulting in a higher risk of data leakage.

[0012] Existing technologies have the following deficiencies in the dynamic monitoring and early warning of mental health risks:

[0013] Mainly static analysis: Many systems only analyze based on regularly collected psychological assessment data and are unable to perceive changes in students' mental health status in real time, especially real-time monitoring of physiological signals (such as heart rate and sleep quality).

[0014] The early warning mechanism is not accurate enough: the early warning of the existing system usually relies only on fixed thresholds and cannot be dynamically adjusted according to individual differences of students, which easily leads to false alarms or missed alarms.

[0015] Existing technologies are usually difficult to achieve multi-party collaborative sharing, and there are the following problems:

[0016] Report generation is not flexible enough: Mental health reports are usually in a fixed format and cannot dynamically generate personalized reports based on the needs of different users (such as parents focusing on academic pressure and psychological counselors focusing on mental state).

[0017] Limited collaborative support: Insufficient communication channels between parents, teachers and psychological counselors, and isolated storage of data makes it difficult to support collaborative intervention by multiple parties.

[0018] Most existing systems lack a complete data backup and disaster recovery mechanism. If the system suffers from hardware failure, malicious attack or natural disaster, it may cause permanent data loss and affect the long-term management of students' mental health.

[0019] Existing technologies also have deficiencies in user experience and system security authentication:

[0020] Unfriendly user experience: Some systems are complex to operate and have unintuitive interface designs, which have a high learning cost, especially for non-professional users such as parents and students.

[0021] Weak security authentication mechanism: Some systems only rely on simple password authentication, which is easy to be cracked. They lack a multi-factor identity authentication mechanism and cannot guarantee the authenticity of the user's identity.

[0022] To this end, we designed an Internet-based student mental health archive encryption management system and method to solve the above problems. Summary of the invention

[0023] The purpose of the present invention is to solve the technical problems raised in the above-mentioned background technology and to provide an Internet-based student mental health archive encryption management system and method.

[0024] The above-mentioned object of the present invention is achieved by the following technical scheme: an Internet-based student mental health archive encryption management system, the system comprises: a data acquisition module for collecting student mental health data D, and generating a mental health data set D = {d1, d2, ..., d n}, where: D represents the student mental health data set; d nrepresents the nth mental health indicator data; n represents the total number of mental health indicators;

[0025] The encryption storage module is used to perform double encryption processing on the collected mental health data D: using an asymmetric encryption algorithm to initially encrypt D to generate intermediate data E1:

[0026] E1=Enc RSA (D,K p )

[0027] Where: Enc RSA Represents an asymmetric encryption algorithm; K p Indicates the public key used for encryption. The symmetric encryption algorithm is used to encrypt E1 twice to generate the final encrypted data E2: E2 = Enc AES (E1,K s ), where: Enc AES Represents the symmetric encryption algorithm; K s Represents a symmetric encryption key;

[0028] The permission management module is used for role-based access control. u and permission rule set P r Control user u's access rights to data D:

[0029]

[0030] Where: P(u,D) represents the access rights of user u to data D; R u Indicates the user role; P r Represents a set of permission rules;

[0031] Real-time monitoring module, used to calculate students' mental health risk index R based on mental health data D i :

[0032]

[0033] Where: R i represents the mental health risk index of student i; W j represents the weight of the jth item of data; n represents the total number of mental health indicators;

[0034] Data sharing and report generation module, used to generate student mental health report R based on encrypted data E2 c :

[0035] R c =α·R i +β·P s

[0036] Where: R crepresents the score of students' mental health report; P s It represents the effect score of students after psychological intervention; α and β are weight parameters, and α+β=1.

[0037] As a preferred technical solution of the present invention, the decryption process of the encryption storage module includes the following steps: symmetrically decrypting the final encrypted data E2 using the symmetric encryption key K s Restore the intermediate encrypted data E1:

[0038] E1=Dec AES (E2,K s )

[0039] Among them: E2 is the final encrypted data; K s is the symmetric encryption key; Dec AES Represents a symmetric decryption algorithm;

[0040] Asymmetric decryption of the intermediate encrypted data E1 is performed using the asymmetric encryption private key K r Restore original data D:

[0041] D=Dec RSA (E1,K r )

[0042] Where: E1 is the intermediate encrypted data in claim 1; K r is the corresponding private key, used to decrypt the asymmetric encryption process in claim 1; D represents the original mental health data in claim 1; Dec RSA Represents an asymmetric decryption algorithm.

[0043] As a preferred technical solution of the present invention, the role allocation R of the authority management module u Based on the user identity u mapping, the following formula is satisfied:

[0044] R u =f(u)

[0045] Where: f(u) is the role mapping function of user u.

[0046] As a preferred technical solution of the present invention, the mental health risk index R of the real-time monitoring module i In the calculation of j Dynamic adjustment, satisfying the following formula:

[0047]

[0048] Where: k is the adjustment factor; d avg It represents the average value of this indicator for all students.

[0049] As a preferred technical solution of the present invention, the risk index R i The classification meets the following conditions:

[0050]

[0051] Among them: T1 and T2 are risk thresholds.

[0052] As a preferred technical solution of the present invention, in the data sharing and report generation module, the weight parameters α and β are dynamically adjusted to satisfy the following formula:

[0053]

[0054] in: and R i and P s The weight base value.

[0055] As a preferred technical solution of the present invention, the system supports a backup function and encrypts the backup data B, specifically satisfying:

[0056] B=Enc AES (D,K b )

[0057] Where: K b Indicates a backup key.

[0058] As a preferred technical solution of the present invention, the system dynamically generates questionnaire questions through the following formula:

[0059] Q j =h(D prev ,D target )

[0060] Where: Q j is the jth problem generated; D prev For historical mental health data; D target is the target mental health state; h(·) is the problem generating function.

[0061] As a preferred technical solution of the present invention, the system supports multi-dimensional mental health status assessment and satisfies the following formula:

[0062]

[0063] Where: M i is the comprehensive health score of student i; m j Represents the score of the j-th data.

[0064] As a preferred technical solution of the present invention, the system ensures user security login through multi-factor identity authentication, and the authentication satisfies the following formula:

[0065] A(u)=f(u,t,M)

[0066] Where: A(u) is the authentication result of user u; t is the timestamp; M is the device feature code.

[0067] The present invention also provides an Internet-based student mental health file encryption management method, the method comprising the following steps:

[0068] Mental health data collection: Use psychological assessment tools (such as questionnaires), wearable devices or manual input methods to collect students’ mental health data D = {d1, d2, …, d n}, where d i represents the i-th mental health indicator data, n is the total number of mental health indicators, and data D includes psychological state data such as anxiety score, self-confidence score, social ability score, and physiological parameter data collected by the device;

[0069] Standardize the original data D and convert the data into a unified dimension; process outliers d out , and for missing values ​​d null To complete;

[0070] Data encryption storage:

[0071] Asymmetric encryption: Use the public key K on the standardized data D p Perform asymmetric encryption to generate intermediate encrypted data E1;

[0072] Symmetric encryption: Use the symmetric key K for the intermediate encrypted data E1 s Encrypt and generate final encrypted data E2;

[0073] Storage: Store the encrypted data E2 in the cloud database, and use the backup key K for the original data D b After encryption, backup data B is generated.

[0074] Permission management: Role-based access control model (RBAC) assigns user permissions and u and permission rule set P r Determine whether user u has access rights P(u,D):

[0075]

[0076] Student (Role R s ) can view personal data; parents (role R p) can only view part of the data; psychological counselor (role R c ) to access the full data.

[0077] Real-time monitoring and early warning: Mental health report generation: The system generates a mental health report based on the mental health data D and dynamically collected physiological parameters, combined with the weight W j Calculation of mental health risk index R ι ;

[0078] According to the risk index R i Compare with dynamic thresholds T1 and T2 to generate normal, concern or warning early warning signals.

[0079] According to the risk index R i and psychological intervention effect score P s , Generate a mental health report R c The report includes analysis of students’ psychological status, risk level labeling and intervention suggestions, and supports personalized display and output in multiple formats.

[0080] Data Decryption and Access:

[0081] Decryption steps:

[0082] Using the symmetric key K s Decrypt the encrypted data E2 and restore the intermediate data E1;

[0083] Using private key K r Decrypt the intermediate data E1 and restore the original data D.

[0084] Data decryption is only available to users u who have access rights.

[0085] Data backup and recovery: Using the backup key K b Encrypt the original data D to generate backup data B; when the data is lost or damaged, use K b Decrypt the backup data B and restore the original data D.

[0086] Compared with the prior art, the present invention has the following beneficial effects:

[0087] The present invention fully protects the security and privacy of students' mental health data through a dual encryption mechanism (asymmetric encryption combined with symmetric encryption) and refined permission management based on roles, avoiding possible leakage and abuse of data during collection, storage, transmission and use. At the same time, the system dynamically calculates the mental health risk index R i Combined with personalized dynamic thresholds, it monitors changes in students' psychological states in real time, provides accurate early warning functions, and helps psychological counselors and schools identify and intervene in potential problems in a timely manner.

[0088] In addition, the present invention supports flexible data sharing and personalized report generation, and provides customized mental health analysis reports according to the needs of different user roles (such as students, parents, teachers, and psychological counselors), thereby improving the efficiency of multi-party collaborative work. At the same time, the system has highly reliable data backup and disaster recovery capabilities, and combines a multi-factor identity authentication mechanism to ensure the security of user login and data access. The system is easy to operate and rich in functions, providing educational institutions with an efficient, safe, and intelligent student mental health management tool, which has important application value and promotion significance. BRIEF DESCRIPTION OF THE DRAWINGS

[0089] In order to more clearly illustrate the technical solutions in the present invention or the prior art, the following briefly introduces the drawings required for use in the embodiments or the description of the prior art. Obviously, the drawings described below are some embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying creative work.

[0090] Figure 1 This is the system block diagram of the Internet-based student mental health archive encryption management system. DETAILED DESCRIPTION

[0091] In order to make the purpose, technical solution and advantages of the present invention clearer, the technical solution of the present invention will be clearly and completely described below in conjunction with the drawings of the present invention. Obviously, the described embodiments are part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0092] The following is combined with Figure 1 , the specific implementation methods of the present invention are described in detail.

[0093] 1. System overall architecture:

[0094] The present invention relates to an Internet-based student mental health archive encryption management system, which mainly includes the following modules:

[0095] Data collection module: responsible for collecting students' mental health data.

[0096] Encrypted storage module: uses a combination of asymmetric encryption and symmetric encryption to protect the privacy and security of students' mental health data.

[0097] Permission management module: role-based access control to achieve refined permission allocation.

[0098] Real-time monitoring module: dynamically monitor students' mental health risk index and generate early warning signals.

[0099] Data sharing and report generation module: supports the generation of visual mental health reports and provides cross-departmental data sharing.

[0100] The system runs on a cloud platform, data is encrypted and stored in a cloud database, and users interact through a front-end interface (such as a PC or mobile terminal).

[0101] 2. Module functions and specific implementation:

[0102] 1. Data acquisition module

[0103] Collection method:

[0104] Psychological assessment tools: Collect students’ mental health data through standardized questionnaires (such as anxiety scales and self-confidence tests). The mental health data set of each student is D = {d1, d2, …, d n}, where d i represents the data of the i-th mental health indicator, and n is the total number of mental indicators.

[0105] Physiological signal monitoring: Students’ physiological parameters (such as heart rate, skin conductance, sleep duration, etc.) are collected through wearable devices (such as smart bracelets) and mapped as mental health data.

[0106] Behavioral observation data: Teachers or counselors input student behavioral performance data, such as class participation, social interaction scores, etc.

[0107] Data processing: The system standardizes the collected raw data D to eliminate the influence of different measurement units. The data is in the form of vector D = {d1, d2, ..., d n} is passed to the encryption module.

[0108] 2. Encrypted storage module: Encrypted storage of data is the core of system security, which is divided into the following steps:

[0109] Asymmetric encryption: Use the RSA algorithm to encrypt the original data D and generate intermediate data E1:

[0111] E1=Enc RSA (D,K p )

[0112] Where: Enc RSA is the RSA encryption algorithm; K p is the public key.

[0113] Symmetric encryption: Use the AES algorithm to encrypt the intermediate data E1 and generate the final encrypted data E2:

[0114] E2=EncAES (E1,K s )

[0115] Where: Enc AES is the AES encryption algorithm; K s A symmetric encryption key.

[0116] Backup encryption: The system backs up the original data D and uses a dedicated key K b encryption:

[0117] B=Enc AES (D,K b )

[0118] The encrypted backup data B is stored in the backup server and updated regularly.

[0119] Data storage: The encrypted data E2 is stored in the cloud database and strict access control is set.

[0120] 3. Rights management module: role division:

[0121] Permission control:

[0122] Student (Role R s ):You can view your mental health report.

[0123] Parent (Role R p ): Can view some non-sensitive data in student reports. Teacher (Role R t ):Can only view the risk status of students.

[0124] Psychological counselor (role R c ): has the highest authority and can access complete data. Access rights are defined through the RBAC (role-based access control) model, and the judgment formula is:

[0125]

[0126] Where u is the user, R u is the user role, P r A collection of permission rules.

[0127] Access verification: The system records each data access and uses multi-factor identity authentication:

[0128] A(u)=f(u,t,M)

[0129] Where: A(u) is the user authentication result; t is the timestamp; M is the device feature code.

[0130] 4. Real-time monitoring module: The real-time monitoring module calculates the mental health risk index R iAnd generate an early warning. The specific implementation steps are:

[0131] Risk index calculation:

[0132]

[0133] R i is the mental health risk index of student i; W j For weights, dynamically adjusted:

[0134]

[0135] Warning categories:

[0136]

[0137] Wherein T1 and T2 are preset thresholds.

[0138] 5. Data Sharing and Report Generation Module: The report generation module generates a mental health report based on the following formula:

[0139] R c =α·R i +β·P s

[0140] P s Score the psychological intervention effect; α and β are weights, which are adjusted dynamically:

[0141]

[0142] The reports are available in three modes: full mode (for use by counselors), simplified mode (for use by parents and students), and chart mode (for school management).

[0143] 3. The following is a detailed description with reference to several embodiments;

[0144] Example 1: Encryption and decryption of mental health data

[0145] Data collection: A student’s mental health data D = {5, 6, 4, 7, 8, 5, 6, 7, 3, 5}.

[0146] encryption:

[0147] E1=Enc RSA (D,K p ),E2=Enc AES (E1,K s )

[0148] Decryption:

[0149] E1=Dec AES (E2,K s),D=Dec RSA (E1,K r )

[0150] Example 2: Risk monitoring and early warning;

[0151] Student Mental Health Risk Index R i =6.1, exceeding the threshold value T1=5.5, generating a "concern" warning, the psychological counselor is notified and arranges intervention.

[0152] Embodiment 3: Rights management;

[0153] Parents can only view general information in their student’s mental health report;

[0154] Psychological counselors can access the complete data after being authenticated.

[0155] Finally, it should be noted that the above embodiments are only used to illustrate the technical solutions of the present invention, rather than to limit it. Although the present invention has been described in detail with reference to the aforementioned embodiments, those skilled in the art should understand that they can still modify the technical solutions described in the aforementioned embodiments, or make equivalent replacements for some of the technical features therein. However, these modifications or replacements do not deviate the essence of the corresponding technical solutions from the spirit and scope of the technical solutions of the embodiments of the present invention.

Claims

1. Internet-based student mental health archive encryption management system, characterized by: The system includes: a data collection module for collecting students' mental health data D and generating a mental health data set D = {d1, d2, ..., d n }, where: D represents the student mental health data set; d n represents the nth mental health indicator data; n represents the total number of mental health indicators; The encryption storage module is used to perform double encryption processing on the collected mental health data D: using an asymmetric encryption algorithm to initially encrypt D to generate intermediate data E1: E1=Enc RSA (D,K p ) Where: Enc RSA Represents an asymmetric encryption algorithm; K p Indicates the public key used for encryption. The symmetric encryption algorithm is used to encrypt E1 twice to generate the final encrypted data E2: E2 = Enc AES (E1,K s ), where: Enc AES Represents the symmetric encryption algorithm; K s Represents a symmetric encryption key; The permission management module is used for role-based access control. u and permission rule set P r Control user u's access rights to data D: Where: P(u,D) represents the access rights of user u to data D; R u Indicates the user role; P r Represents a set of permission rules; Real-time monitoring module, used to calculate students' mental health risk index R based on mental health data D i : Where: R i represents the mental health risk index of student i; W j represents the weight of the jth item of data; n represents the total number of mental health indicators; Data sharing and report generation module, used to generate student mental health report R based on encrypted data E2 c : R c =α·R i +β·P s Where: R c represents the score of students' mental health report; P s It represents the effect score of students after psychological intervention; α and β are weight parameters, and α+β=1.

2. The Internet-based student mental health file encryption management system according to claim 1 is characterized in that: The decryption process of the encryption storage module includes the following steps: symmetrically decrypting the final encrypted data E2 using the symmetric encryption key K s Restore the intermediate encrypted data E1: E1=Dec AES (E2,K s ) Among them: E2 is the final encrypted data; K s is the symmetric encryption key; Dec AES Represents a symmetric decryption algorithm; Asymmetric decryption of the intermediate encrypted data E1 is performed using the asymmetric encryption private key K r Restore original data D: D=Dec RSA (E1,K r ) Where: E1 is the intermediate encrypted data in claim 1; K r is the corresponding private key, used to decrypt the asymmetric encryption process in claim 1; D represents the original mental health data in claim 1; Dec RSA Represents an asymmetric decryption algorithm.

3. The Internet-based student mental health file encryption management system according to claim 1 is characterized in that: The role allocation R of the rights management module u Based on the user identity u mapping, the following formula is satisfied: R u =f(u) Where: f(u) is the role mapping function of user u.

4. The Internet-based student mental health file encryption management system according to claim 1 is characterized in that: The mental health risk index R of the real-time monitoring module i In the calculation of j Dynamic adjustment, satisfying the following formula: Where: k is the adjustment factor; d avg It represents the average value of this indicator for all students.

5. The Internet-based student mental health file encryption management system according to claim 4 is characterized in that: The risk index R i The classification meets the following conditions: Among them: T1 and T2 are risk thresholds.

6. The Internet-based student mental health file encryption management system according to claim 1 is characterized in that: In the data sharing and report generation module, the weight parameters α and β are dynamically adjusted to satisfy the following formula: in: and R i and P s The weight base value.

7. The Internet-based student mental health file encryption management system according to claim 1 is characterized in that: The system supports a backup function and encrypts the backup data B, specifically satisfying: B=Enc AES (D,K b ) Where: K b Indicates a backup key.

8. The Internet-based student mental health file encryption management system according to claim 1 is characterized in that: The system dynamically generates questionnaire questions through the following formula: Q j =h(D prev ,D target ) Where: Q j is the jth problem generated; D prev For historical mental health data; D target is the target mental health state; h(·) is the problem generating function.

9. The Internet-based student mental health file encryption management system according to claim 1 is characterized in that: The system supports multi-dimensional mental health status assessment, satisfying the following formula: Where: M i is the comprehensive health score of student i; m j represents the score of the j-th data; The system ensures user security login through multi-factor identity authentication, and the authentication satisfies the following formula: A(u)=f(u,t,M) Where: A(u) is the authentication result of user u; t is the timestamp; M is the device feature code.

10. A student mental health file encryption management method based on the Internet, characterized in that: The method comprises the following steps: Mental health data collection: Use psychological assessment tools, wearable devices or manual input methods to collect students’ mental health data D = {d1, d2, …, d n }, where d i represents the i-th mental health indicator data, n is the total number of mental health indicators, and data D includes psychological state data such as anxiety score, self-confidence score, social ability score, and physiological parameter data collected by the device; Standardize the original data D and convert the data into a unified dimension; process outliers d out , and for missing values ​​d null To complete; Data encryption storage: Asymmetric encryption: Use the public key K on the standardized data D p Perform asymmetric encryption to generate intermediate encrypted data E1; Symmetric encryption: Use the symmetric key K for the intermediate encrypted data E1 s Encrypt and generate final encrypted data E2; Storage: Store the encrypted data E2 in the cloud database, and use the backup key K for the original data D b Generate backup data B after encryption; Permission management: Assign user permissions based on the role-based access control model. u and permission rule set P r Determine whether user u has access rights P(u,D): Student (Role R s ) can view personal data; parents can only view part of the data; psychological counselors can access the complete data; Real-time monitoring and early warning: Mental health report generation: The system generates a mental health report based on the mental health data D and dynamically collected physiological parameters, combined with the weight W j Calculation of mental health risk index R ι ; According to the risk index R i Compare with dynamic thresholds T1 and T2 to generate normal, concern or warning early warning signals; According to the risk index R i and psychological intervention effect score P s , Generate a mental health report R c ; The report includes student psychological status analysis, risk level annotation and intervention suggestions, and supports personalized display and multiple formats of output; Data decryption and access: Decryption steps: Using the symmetric key K s Decrypt the encrypted data E2 and restore the intermediate data E1; Using private key K r Decrypt the intermediate data E1 and restore the original data D; Data decryption is only for users u with access rights; Data backup and recovery: Using the backup key K b Encrypt the original data D to generate backup data B; when the data is lost or damaged, use K b Decrypt the backup data B and restore the original data D.

Images