Safe and reliable information anti-divulging system and method capable of encrypting in real time

Abstract

The invention belongs to the field of real-time encryption, relates to a data processing technology, and is used for solving the problem that an existing real-time encryption system cannot guarantee the operation safety of fragment plaintext data in an application layer, in particular to a safe and reliable information leakage prevention system and method capable of achieving real-time encryption. The anti-disclosure platform is in communication connection with a data processing module, a safety monitoring module, a processing optimization module and a storage module; the data processing module is used for processing and analyzing the data fragments called in the application layer; the data fragments called in the application layer are marked as fragments Ai, and memory data NCi and character data ZFi of the fragments Ai are obtained; according to the method, the data fragments called from the application layer can be processed and analyzed, the basic parameters of the data fragments are comprehensively analyzed and calculated to obtain the occupancy coefficient, the plaintext data in the application layer are presented in an out-of-order mode, and the operation safety of the plaintext fragment data is improved on the premise that the data transmission efficiency is improved.

Description

Technical Field

[0001] The present invention belongs to the field of real-time encryption, relates to data processing technology, and specifically is a secure and reliable information leakage prevention system and method capable of real-time encryption. Background Art

[0002] Traditional encryption technology always decrypts the entire file at once regardless of how much data in the file the application needs to use. Real-time encryption and decryption technology does not decrypt the entire encrypted file when the application requests encrypted file data, but decrypts on demand and only provides the plaintext data required for immediate operation to the application.

[0003] However, when data is retrieved using real-time encryption technology, the plaintext data in the application layer cannot be effectively protected. Although the loss of fragments will not have a great impact on the overall file, the security of the fragment data in the application layer is very low. Summary of the Invention

[0004] The purpose of the present invention is to provide a secure and reliable information leakage prevention system and method capable of real-time encryption, which is used to solve the problem that the existing real-time encryption system cannot guarantee the running security of the fragment plaintext data in the application layer;

[0005] The technical problem that the present invention needs to solve is: how to provide an information leakage prevention system and method that can guarantee the running security of the fragment plaintext data in the application layer.

[0006] The purpose of the present invention can be achieved through the following technical solutions:

[0007] A secure and reliable information leakage prevention system capable of real-time encryption, including a leakage prevention platform, and the leakage prevention platform is communicatively connected with a data processing module, a security monitoring module, a processing optimization module, and a storage module;

[0008] The data processing module is used to process and analyze the data fragments retrieved from the application layer: mark the data fragments retrieved from the application layer as fragment Ai, i = 1, 2,..., n, n is a positive integer, obtain the memory data NCi and character data ZFi of fragment Ai, the memory data NCi is the memory value of fragment Ai, the grandfather data ZFi is the number of characters of fragment Ai, and obtain the occupancy coefficient ZYi of fragment Ai through numerical calculation of the memory data NCi and the character data ZFi; randomly select a processing mode to shuffle fragment Ai, and the processing modes include forward traversal mode, reverse traversal mode, forward substitution mode, and reverse substitution mode;

[0009] The security monitoring module is used to perform security monitoring and analysis on the data segments retrieved in the application layer: generate a monitoring period, obtain the intrusion value for the monitoring period, where the intrusion value is the sum of the number of times of data loss, data theft, and data leakage within the monitoring period, and determine whether the security of the data retrieved in the application layer within the monitoring period meets the requirements based on the intrusion value;

[0010] The processing optimization module is used to perform optimization analysis on the processing mode of the data retrieved in the application layer.

[0011] As a preferred embodiment of the present invention, the specific process of shuffling the segment Ai in the sequential calendar mode includes: arranging the segment Ai in ascending order of the occupancy coefficient ZYi to obtain a sequential calendar sequence, intercepting the characters with the same serial number in the segment Ai and arranging them according to the sequential calendar sequence to obtain a shuffled character group, and arranging all the shuffled character groups in ascending order of the serial number to obtain a shuffled data group;

[0012] The specific process of shuffling the segment Ai in the reverse calendar mode includes: arranging the segment Ai in descending order of the occupancy coefficient ZYi to obtain a reverse calendar sequence, intercepting the characters with the same serial number in the segment Ai and arranging them according to the reverse calendar sequence to obtain a shuffled character group, and arranging all the shuffled character groups in descending order of the serial number to obtain a shuffled data group.

[0013] As a preferred embodiment of the present invention, the specific process of shuffling the segment Ai in the sequential substitution mode includes: arranging the segment Ai in ascending order of the occupancy coefficient ZYi to obtain a sequential calendar sequence, forming the first sequential substitution combination by the segment A1 and the segment A2 of the sequential calendar sequence, forming the second sequential substitution combination by the segment A3 and the segment A4 of the sequential calendar sequence, and so on; alternately inserting the characters of the second segment in the sequential substitution combination into the first segment to form a sequential substitution character group, and sorting all the sequential substitution character groups according to the formation order to obtain a sequential substitution data group;

[0014] The specific process of shuffling the segment Ai in the reverse substitution mode includes: arranging the segment Ai in descending order of the occupancy coefficient ZYi to obtain a reverse calendar sequence, forming the first sequential substitution combination by the segment A1 and the segment A2 of the reverse calendar sequence, forming the second sequential substitution combination by the segment A3 and the segment A4 of the sequential calendar sequence, and so on; alternately inserting the characters of the second segment in the sequential substitution combination into the first segment to form a reverse substitution character group, and sorting all the reverse substitution character groups according to the formation order to obtain a reverse substitution data group.

[0015] As a preferred embodiment of the present invention, the specific process for determining whether the security of the retrieved data in the application layer during the monitoring period meets the requirements includes: obtaining the intrusion threshold through the storage module, and comparing the intrusion value with the intrusion threshold. If the intrusion value is less than the intrusion threshold, it is determined that the security of the retrieved data in the application layer during the monitoring period meets the requirements. If the intrusion value is greater than or equal to the intrusion threshold, it is determined that the security of the retrieved data in the application layer during the monitoring period does not meet the requirements, a processing optimization signal is generated and sent to the anti-disclosure platform, and after receiving the processing optimization signal, the anti-disclosure platform sends the processing optimization signal to the processing optimization module.

[0016] As a preferred embodiment of the present invention, the specific process for the processing optimization module to optimize and analyze the processing mode of the retrieved data in the application layer includes: marking the number of times of data loss, data theft or data leakage when processing data in the sequential calendar mode, reverse calendar mode, sequential substitution mode and reverse substitution mode during the monitoring period as the sequential calendar value SL, reverse calendar value NL, sequential substitution value ST and reverse substitution value NT respectively, calculating the variance of the sequential calendar value SL, reverse calendar value NL, sequential substitution value ST and reverse substitution value NT to obtain the concentration coefficient, and analyzing the necessity of system optimization through the concentration coefficient.

[0017] As a preferred embodiment of the present invention, the specific process for analyzing the necessity of system optimization includes: obtaining the concentration threshold through the storage module, and comparing the concentration coefficient with the concentration threshold. If the concentration coefficient is less than the concentration threshold, a system optimization signal is generated and sent to the anti-disclosure platform. If the concentration coefficient is greater than or equal to the concentration threshold, the sum value of the sequential calendar value SL, reverse calendar value NL, sequential substitution value ST and reverse substitution value NT is marked as the concentration value JZ, and the selection weights of the sequential calendar mode, reverse calendar mode, sequential substitution mode and reverse substitution mode in the next monitoring period are marked as 1 - SL / JZ, 1 - NL / JZ, 1 - ST / JZ and 1 - NY / JZ respectively.

[0018] A secure and reliable information anti-disclosure method capable of real-time encryption, comprising the following steps:

[0019] Step 1: Process and analyze the retrieved data segments in the application layer: Mark the retrieved data segments in the application layer as segment Ai, where i = 1, 2,..., n, and n is a positive integer. Obtain the memory data NCi and character data ZFi of segment Ai and perform numerical calculations to obtain the occupancy coefficient ZYi of segment Ai;

[0020] Step 2: Randomly select a processing mode from the sequential calendar mode, reverse calendar mode, sequential substitution mode and reverse substitution mode to scramble segment Ai;

[0021] Step 3: Conduct security monitoring and analysis on the data segments retrieved in the application layer: Generate a monitoring period, obtain the intrusion value for the monitoring period, and determine whether the security of the data retrieved in the application layer during the monitoring period meets the requirements based on the intrusion value;

[0022] Step 4: Conduct optimization analysis on the processing mode of the data retrieved in the application layer: Obtain the sequential value SL, reverse sequential value NL, sequential substitution value ST, and reverse substitution value NT of the monitoring period, calculate the variance of the sequential value SL, reverse sequential value NL, sequential substitution value ST, and reverse substitution value NT to obtain the concentration coefficient, and conduct decision-making analysis on the processing optimization direction based on the concentration coefficient.

[0023] The present invention has the following beneficial effects:

[0024] 1. Through the data processing mode, the data segments retrieved in the application layer can be processed and analyzed, the basic parameters of the data segments can be comprehensively analyzed and calculated to obtain the occupancy coefficient, and then the data segments can be scrambled using a random data processing mode, presenting the plaintext data in the application layer in a disordered manner, improving the running security of the plaintext segment data on the premise of improving the data transmission efficiency;

[0025] 2. Through the security monitoring module, the data segments retrieved in the application layer can be subjected to security monitoring and analysis, the running security of the data retrieved in the application layer during the monitoring period can be monitored according to the number of data security incidents occurring during the monitoring period, and early warning and feedback can be given in a timely manner when the security is abnormal, further improving the application security of the plaintext data in the application layer;

[0026] 3. Through the processing optimization module, the processing mode of the data retrieved in the application layer can be optimized and analyzed. The concentration coefficient is obtained through centralized analysis of the number of data security incidents corresponding to each processing mode. The concentration coefficient reflects the degree of concentration of the processing mode when a data security incident occurs. Then, decision-making analysis is conducted on the optimization direction based on the concentration coefficient, and a corresponding selection weight is assigned to each processing mode, making the selection weight of the data processing mode positively correlated with its application security. Description of the Drawings

[0027] In order to more clearly illustrate the technical solutions in the embodiments of the present invention or the prior art, the following will briefly introduce the drawings required for use in the description of the embodiments or the prior art. Obviously, the following drawings are only some embodiments of the present invention. For those of ordinary skill in the art, other drawings can be obtained based on these drawings without creative efforts.

[0028] Figure 1 It is the system block diagram of Embodiment 1 of the present invention;

[0029] Figure 2This is the flowchart of the method according to the second embodiment of the present invention. Detailed implementation manner

[0030] The technical solution of the present invention will be clearly and completely described below in conjunction with the embodiments. Obviously, the described embodiments are only a part of the embodiments of the present invention, rather than all the embodiments. All other embodiments obtained by those of ordinary skill in the art based on the embodiments of the present invention without creative work shall fall within the protection scope of the present invention.

[0031] Traditional encryption technologies always decrypt the entire file at once regardless of how much data in the file the application needs to use. Real-time encryption and decryption technologies do not decrypt the entire encrypted file when the application requests encrypted file data, but decrypt on demand and only provide the plaintext data required for immediate operation to the application; the data requests during the operation of the application are often random data segments, which requires that real-time encryption and decryption technologies must support random encryption and decryption of ciphertext data of any length at any position in the encrypted file. Therefore, theoretically, the on-demand encryption and decryption method of real-time encryption and decryption technologies will not increase the amount of data input and output of the memory. Data input and output is the bottleneck of computer performance. If the data input and output is increased during operation, the operation efficiency of the computer will surely be reduced.

[0032] Embodiment 1

[0033] As Figure 1 shown, a secure and reliable information leakage prevention system capable of real-time encryption includes a leakage prevention platform, and the leakage prevention platform is communicatively connected to a data processing module, a security monitoring module, a processing optimization module, and a storage module.

[0034] The data processing module is used to process and analyze the data segments retrieved from the application layer: The data segments retrieved from the application layer are marked as segment Ai, where i = 1, 2, …, n, and n is a positive integer. The memory data NCi and character data ZFi of segment Ai are obtained. The memory data NCi is the memory value of segment Ai, and the grandfather data ZFi is the number of characters in segment Ai. The occupancy coefficient ZYi of segment Ai is obtained through the formula ZYi = α1*NC + α2*ZFi, where both α1 and α2 are proportionality coefficients, and α1 > α2 > 1. Randomly select a processing mode to scramble segment Ai. The processing modes include forward traversal mode, reverse traversal mode, forward substitution mode, and reverse substitution mode. The specific process of scrambling segment Ai using the forward traversal mode includes: arranging segment Ai in ascending order of the occupancy coefficient ZYi to obtain a forward traversal sequence, intercepting the characters with the same serial number in segment Ai and arranging them according to the forward traversal sequence to obtain a scrambled character group, and arranging all the scrambled character groups in ascending order of the serial number to obtain a scrambled data group. The specific process of scrambling segment Ai using the reverse traversal mode includes: arranging segment Ai in descending order of the occupancy coefficient ZYi to obtain a reverse traversal sequence, intercepting the characters with the same serial number in segment Ai and arranging them according to the reverse traversal sequence to obtain a scrambled character group, and arranging all the scrambled character groups in descending order of the serial number to obtain a scrambled data group. The specific process of scrambling segment Ai using the forward substitution mode includes: arranging segment Ai in ascending order of the occupancy coefficient ZYi to obtain a forward traversal sequence. The first forward substitution combination is formed by segment A1 and segment A2 of the forward traversal sequence, the second forward substitution combination is formed by segment A3 and segment A4 of the forward traversal sequence, and so on. The characters of the second segment in the forward substitution combination are alternately inserted into the first segment to form a forward substitution character group, and all the forward substitution character groups are sorted according to the formation order to obtain a forward substitution data group. The specific process of scrambling segment Ai using the reverse substitution mode includes: arranging segment Ai in descending order of the occupancy coefficient ZYi to obtain a reverse traversal sequence. The first forward substitution combination is formed by segment A1 and segment A2 of the reverse traversal sequence, the second forward substitution combination is formed by segment A3 and segment A4 of the forward traversal sequence, and so on. The characters of the second segment in the forward substitution combination are alternately inserted into the first segment to form a reverse substitution character group, and all the reverse substitution character groups are sorted according to the formation order to obtain a reverse substitution data group. Process and analyze the data segments retrieved from the application layer, comprehensively analyze and calculate the basic parameters of the data segments to obtain the occupancy coefficient, and then use a random data processing mode to scramble the data segments, so that the plaintext data in the application layer is presented in a disordered manner, improving the running security of the plaintext segment data on the premise of improving the data transmission efficiency.

[0035] The security monitoring module is used to perform security monitoring and analysis on the data segments retrieved in the application layer: generate a monitoring period, obtain the intrusion value for the monitoring period, where the intrusion value is the sum of the number of times of data loss, data theft, and data leakage within the monitoring period; obtain the intrusion threshold through the storage module, and compare the intrusion value with the intrusion threshold: if the intrusion value is less than the intrusion threshold, it is determined that the security of the data retrieved in the application layer during the monitoring period meets the requirements; if the intrusion value is greater than or equal to the intrusion threshold, it is determined that the security of the data retrieved in the application layer during the monitoring period does not meet the requirements, generate a processing optimization signal and send the processing optimization signal to the anti-disclosure platform, and after receiving the processing optimization signal, the anti-disclosure platform sends the processing optimization signal to the processing optimization module; perform security monitoring and analysis on the data segments retrieved in the application layer, monitor the running security of the data retrieved in the application layer according to the number of data security incidents occurring within the monitoring period, and give early warnings and feedback in a timely manner when the security is abnormal, further improving the application security of the plaintext data in the application layer.

[0036] The processing optimization module is used to perform optimization analysis on the processing mode of the data retrieved in the application layer: count the number of times of data loss, data theft, or data leakage when the data is processed in the sequential mode, reverse sequential mode, sequential substitution mode, and reverse substitution mode within the monitoring period and mark them as the sequential value SL, reverse sequential value NL, sequential substitution value ST, and reverse substitution value NT respectively, calculate the variance of the sequential value SL, reverse sequential value NL, sequential substitution value ST, and reverse substitution value NT to obtain the concentration coefficient, obtain the concentration threshold through the storage module, and compare the concentration coefficient with the concentration threshold: if the concentration coefficient is less than the concentration threshold, generate a system optimization signal and send the system optimization signal to the anti-disclosure platform; if the concentration coefficient is greater than or equal to the concentration threshold, mark the sum of the sequential value SL, reverse sequential value NL, sequential substitution value ST, and reverse substitution value NT as the concentration value JZ, and mark the selection weights of the sequential mode, reverse sequential mode, sequential substitution mode, and reverse substitution mode in the next monitoring period as 1 - SL / JZ, 1 - NL / JZ, 1 - ST / JZ, and 1 - NY / JZ respectively; perform optimization analysis on the processing mode of the data retrieved in the application layer, conduct a concentration analysis on the number of data security incidents corresponding to each processing mode to obtain the concentration coefficient, where the concentration coefficient reflects the degree of concentration of the processing mode when data security incidents occur, and then make a decision analysis on the optimization direction according to the concentration coefficient, and assign corresponding selection weights to each processing mode, so that the selection weight of the data processing mode is positively correlated with its application security.

[0037] Embodiment 2

[0038] As Figure 2 shown, a secure and reliable information anti-disclosure method capable of real-time encryption includes the following steps:

[0039] Step 1: Process and analyze the data segments retrieved from the application layer: Mark the data segments retrieved from the application layer as segment Ai, where i = 1, 2, …, n, and n is a positive integer. Obtain the memory data NCi and character data ZFi of segment Ai and perform numerical calculations to obtain the occupancy coefficient ZYi of segment Ai;

[0040] Step 2: Randomly select a processing mode from the forward calendar mode, reverse calendar mode, forward substitution mode, and reverse substitution mode to shuffle segment Ai;

[0041] Step 3: Perform security monitoring and analysis on the data segments retrieved from the application layer: Generate a monitoring period, obtain the intrusion value of the monitoring period, and determine whether the security of the data retrieved from the application layer within the monitoring period meets the requirements through the intrusion value;

[0042] Step 4: Perform optimization analysis on the processing mode of the data retrieved from the application layer: Obtain the forward calendar value SL, reverse calendar value NL, forward substitution value ST, and reverse substitution value NT of the monitoring period, perform variance calculation on the forward calendar value SL, reverse calendar value NL, forward substitution value ST, and reverse substitution value NT to obtain the concentration coefficient, and make a decision analysis on the processing optimization direction through the concentration coefficient.

[0043] A secure and reliable information anti-disclosure system and method capable of real-time encryption. During operation, mark the data segments retrieved from the application layer as segment Ai, where i = 1, 2, …, n, and n is a positive integer. Obtain the memory data NCi and character data ZFi of segment Ai and perform numerical calculations to obtain the occupancy coefficient ZYi of segment Ai; Randomly select a processing mode from the forward calendar mode, reverse calendar mode, forward substitution mode, and reverse substitution mode to shuffle segment Ai; Generate a monitoring period, obtain the intrusion value of the monitoring period, and determine whether the security of the data retrieved from the application layer within the monitoring period meets the requirements through the intrusion value; Obtain the forward calendar value SL, reverse calendar value NL, forward substitution value ST, and reverse substitution value NT of the monitoring period, perform variance calculation on the forward calendar value SL, reverse calendar value NL, forward substitution value ST, and reverse substitution value NT to obtain the concentration coefficient, and make a decision analysis on the processing optimization direction through the concentration coefficient.

[0044] The above content is only an example and explanation of the structure of the present invention. Those skilled in the art of this technology can make various modifications or supplements to the described specific embodiments or use similar methods for substitution, as long as they do not deviate from the structure of the invention or exceed the scope defined by this claim book, they should all fall within the protection scope of the present invention.

[0045] The above formulas are all obtained by collecting a large amount of data for software simulation and selecting a formula close to the true value. The coefficients in the formula are set by those skilled in the art according to the actual situation. For example, the formula ZYi = α1*NC + α2*ZFi; those skilled in the art collect multiple groups of sample data and set corresponding occupancy coefficients for each group of sample data; substitute the set occupancy coefficients and the collected sample data into the formula, and any two formulas form a system of binary linear equations. Screen the calculated coefficients and take the average value to obtain the values of α1 and α2 as 3.65 and 2.14 respectively.

[0046] The magnitude of the coefficient is a specific value obtained by quantifying each parameter for subsequent comparison. Regarding the magnitude of the coefficient, it depends on the amount of sample data and the corresponding occupancy coefficients initially set by those skilled in the art for each group of sample data; as long as it does not affect the proportional relationship between the parameter and the quantified value, for example, the occupancy coefficient is proportional to the value of the memory data.

[0047] In the description of this specification, the description with reference to terms such as "one embodiment", "example", "specific example", etc. means that the specific features, structures, materials or characteristics described in connection with the embodiment or example are included in at least one embodiment or example of the present invention. In this specification, the schematic representation of the above terms does not necessarily refer to the same embodiment or example. Moreover, the specific features, structures, materials or characteristics described can be combined in a suitable manner in any one or more embodiments or examples.

[0048] The preferred embodiments of the present invention disclosed above are only used to help explain the present invention. The preferred embodiments do not elaborate all the details, nor do they limit the present invention to only the specific implementation manners. Obviously, many modifications and variations can be made according to the content of this specification. This specification selects and specifically describes these embodiments to better explain the principles and practical applications of the present invention, so that those skilled in the art can well understand and utilize the present invention. The present invention is only limited by the claims and their full scope and equivalents.

Claims

1. A secure and reliable information leakage prevention system capable of real-time encryption, characterized by: It includes an anti-leakage platform, which is communicatively connected with a data processing module, a security monitoring module, a processing optimization module and a storage module; The data processing module is used to process and analyze the data fragments retrieved from the application layer: mark the data fragments retrieved from the application layer as fragments Ai, i=1, 2, ..., n, n is a positive integer, obtain the memory data NCi and character data ZFi of the fragment Ai, the memory data NCi is the memory value of the fragment Ai, the grandfather data ZFi is the number of characters of the fragment Ai, and obtain the occupancy coefficient ZYi of the fragment Ai by numerically calculating the memory data NCi and the character data ZFi; randomly select a processing mode to shuffle the fragment Ai, and the processing modes include the forward mode, the reverse mode, the forward mode and the reverse mode; The security monitoring module is used to perform security monitoring and analysis on the data fragments retrieved from the application layer: generate a monitoring period, obtain an intrusion value for the monitoring period, the intrusion value is the sum of the number of data loss, data theft, and data leakage that occur during the monitoring period, and determine whether the security of the data retrieved from the application layer during the monitoring period meets the requirements through the intrusion value; The processing optimization module is used to optimize and analyze the processing mode of retrieving data in the application layer.

2. The secure and reliable information leakage prevention system capable of real-time encryption according to claim 1 is characterized in that: The specific process of scrambling the fragment Ai using the chronological mode includes: arranging the fragment Ai in order of occupancy coefficient ZYi from small to large to obtain a chronological sequence, intercepting characters with the same sequence number in the fragment Ai and arranging them in the chronological sequence to obtain a scrambled character group, and arranging all the scrambled character groups in order of sequence number from small to large to obtain a scrambled data group.

3. The secure and reliable information leakage prevention system capable of real-time encryption according to claim 2 is characterized in that: The specific process of scrambling the fragment Ai using the reverse calendar mode includes: arranging the fragment Ai in descending order according to the occupancy coefficient ZYi to obtain a reverse calendar sequence, intercepting the characters with the same serial number in the fragment Ai and arranging them in the reverse calendar sequence to obtain a scrambled character group, and arranging all the scrambled character groups in descending order according to the serial number to obtain a scrambled data group.

4. The secure and reliable information leakage prevention system capable of real-time encryption according to claim 3 is characterized in that: The specific process of shuffling the fragment Ai using the sequential mode includes: arranging the fragment Ai in order of occupancy coefficient ZYi from small to large to obtain a sequential sequence, the fragments A1 and A2 of the sequential sequence constitute the first sequential combination, the fragments A3 and A4 of the sequential sequence constitute the second sequential combination, and so on; alternately inserting the characters of the second fragment in the sequential combination into the first fragment to form a sequential character group, and sorting all the sequential character groups in the order of composition to obtain a sequential data group.

5. The secure and reliable information leakage prevention system capable of real-time encryption according to claim 4 is characterized in that: The specific process of shuffling the fragment Ai using the reverse alternation mode includes: arranging the fragment Ai in descending order according to the occupancy coefficient ZYi to obtain a reverse sequence, the fragments A1 and A2 of the reverse sequence constitute the first alternation combination, the fragments A3 and A4 of the forward sequence constitute the second alternation combination, and so on; alternately inserting the characters of the second fragment in the alternation combination into the first fragment to form a reverse character group, and sorting all the reverse character groups in the order of composition to obtain a reverse data group.

6. The secure and reliable information leakage prevention system capable of real-time encryption according to claim 5 is characterized in that: The specific process of determining whether the security of data retrieved in the application layer during the monitoring period meets the requirements includes: obtaining the intrusion threshold through the storage module, and comparing the intrusion value with the intrusion threshold: if the intrusion value is less than the intrusion threshold, it is determined that the security of data retrieved in the application layer during the monitoring period meets the requirements; if the intrusion value is greater than or equal to the intrusion threshold, it is determined that the security of data retrieved in the application layer during the monitoring period does not meet the requirements, generating a processing optimization signal and sending the processing optimization signal to the anti-leakage platform, and after receiving the processing optimization signal, the anti-leakage platform sends the processing optimization signal to the processing optimization module.

7. The secure and reliable information leakage prevention system capable of real-time encryption according to claim 6, characterized in that: The specific process of the processing optimization module optimizing and analyzing the processing mode of retrieving data in the application layer includes: marking the number of data loss, data theft or data leakage when the forward calendar mode, reverse calendar mode, forward alternation mode and reverse alternation mode are used for data processing during the monitoring period as forward calendar value SL, reverse calendar value NL, forward alternation value ST and reverse alternation value NT respectively, calculating the variance of the forward calendar value SL, reverse calendar value NL, forward alternation value ST and reverse alternation value NT to obtain the concentration coefficient, and analyzing the necessity of system optimization through the concentration coefficient.

8. The secure and reliable information leakage prevention system capable of real-time encryption according to claim 7, characterized in that: The specific process of analyzing the necessity of system optimization includes: obtaining the concentration threshold through the storage module, and comparing the concentration coefficient with the concentration threshold: if the concentration coefficient is less than the concentration threshold, a system optimization signal is generated and sent to the anti-leakage platform; if the concentration coefficient is greater than or equal to the concentration threshold, the sum of the forward calendar value SL, the reverse calendar value NL, the forward alternation value ST and the reverse alternation value NT is marked as the concentration value JZ, and the selection weights of the forward calendar mode, reverse calendar mode, forward alternation mode and reverse alternation mode in the next monitoring period are marked as 1-SL / JZ, 1-NL / JZ, 1-ST / JZ and 1-NY / JZ respectively.

9. A safe and reliable information leakage prevention method capable of real-time encryption, characterized in that: The following steps are involved: Step 1: Process and analyze the data segment retrieved from the application layer: mark the data segment retrieved from the application layer as segment Ai, i=1, 2, ..., n, where n is a positive integer, obtain the memory data NCi and character data ZFi of segment Ai, and perform numerical calculation to obtain the occupancy coefficient ZYi of segment Ai; Step 2: Randomly select a processing mode from the forward mode, reverse mode, forward mode and reverse mode to shuffle the segment Ai; Step 3: Perform security monitoring and analysis on the data fragments retrieved from the application layer: generate a monitoring cycle, obtain the intrusion value of the monitoring cycle, and use the intrusion value to determine whether the security of the data retrieved from the application layer within the monitoring cycle meets the requirements.

10. The secure and reliable information leakage prevention method capable of real-time encryption according to claim 9, characterized in that: The following steps are also included: Optimize and analyze the processing mode of data retrieved in the application layer: obtain the forward value SL, reverse value NL, forward value ST and reverse value NT of the monitoring period, calculate the variance of the forward value SL, reverse value NL, forward value ST and reverse value NT to get the concentration coefficient, and make decision analysis on the processing optimization direction through the concentration coefficient.

Images