Commercial password service intelligent matching method and device

Abstract

The invention relates to the technical field of commercial passwords, and discloses an intelligent service matching method and device for commercial passwords, and the method comprises the steps: obtaining basic parameters of each commercial password in a preset password resource pool; determining a password use scene type of the target user; and determining a matched target commercial password for the target user according to the basic parameters of all commercial passwords and the password use scene type of the target user. Visibly, the target commercial password matched with the target user can be determined from all the commercial passwords according to the basic parameters of all the commercial passwords and the password use scene type of the target user, so that the matching efficiency of the commercial password service of the target user is improved, and the user experience is improved. And the service matching degree between the target user and the target commercial password is improved, so that the security of the information system of the target user can be ensured.

Description

Technical Field

[0001] The present invention relates to the field of commercial cryptography technology, and in particular to a method and device for intelligent matching of commercial cryptography services. Background Art

[0002] With the rapid development of information technology, information systems play an increasingly important role in all walks of life. They not only carry a large amount of business data, but also serve as a key support for enterprises to conduct daily operations and decision-making. In this process, commercial encryption, as one of the core technologies of information security, plays a vital role in ensuring the confidentiality, integrity and availability of information systems.

[0003] However, the traditional password service matching method mainly relies on manual work: the sales staff or technical staff of the password service provider need to communicate with the user many times to understand the user's specific needs and business scenarios, and then match the service based on their own experience and knowledge base. However, it has been found in practice that this method is not only inefficient, but also easily leads to unclear user password service needs and inaccurate service matching, which leads to unqualified password evaluation results of the user's information system or requires a lot of rectification work, increasing the user's economic and time costs, and may pose a potential threat to the security of the information system. It can be seen that it is particularly important to provide a method that can improve the accuracy of service matching for commercial passwords. Summary of the invention

[0004] The present invention provides a method and device for intelligent matching of commercial password services, which not only improves the matching efficiency of commercial password services for target users, but also improves the service matching degree between target users and target commercial passwords, thereby ensuring the security of the target user's information system.

[0005] In order to solve the above technical problems, the first aspect of the present invention discloses a service intelligent matching method for commercial passwords, the method comprising:

[0006] Obtaining basic parameters of each commercial password in a preset password resource pool; the basic parameters of each commercial password include at least one of a type parameter, a usage parameter, a security performance parameter, an algorithm implementation parameter, an algorithm efficiency parameter, a compatibility parameter, and a maintenance parameter of the commercial password;

[0007] Determine the password usage scenario type of the target user; the password usage scenario type includes at least one of an electronic platform login scenario, an electronic payment scenario, a device encryption scenario, and an electronic credential anti-counterfeiting scenario that requires the use of a password;

[0008] According to the basic parameters of all the commercial passwords and the password usage scenario type of the target user, a matching target commercial password is determined for the target user.

[0009] As an optional implementation, in the first aspect of the present invention, determining a matching target commercial password for the target user according to the basic parameters of all the commercial passwords and the password usage scenario type of the target user includes:

[0010] According to the password usage scenario type of the target user, a target parameter matching the password usage scenario of the target user is obtained; the target parameter includes at least one of a business background parameter, an information system architecture parameter, an expected decryption process parameter, an access permission parameter, a security authentication device parameter, and electronic certificate display content;

[0011] A matching target commercial password is determined for the target user according to the target parameters matching the password usage scenario of the target user and the basic parameters of all the commercial passwords.

[0012] As an optional implementation manner, in the first aspect of the present invention, determining a matching target commercial password for the target user according to a target parameter matching the password usage scenario of the target user and the basic parameters of all the commercial passwords includes:

[0013] Determining the password service requirement parameters of the target user according to the target parameters matching the password usage scenario of the target user; the password service requirement parameters include at least one of the password service type requirement parameters, the password service validity period requirement parameters, the password service performance requirement parameters, the password compatibility requirement parameters and the password maintenance method requirement parameters;

[0014] According to the basic parameters of all the commercial passwords and the password service requirement parameters of the target user, a matching target commercial password is determined for the target user.

[0015] As an optional implementation manner, in the first aspect of the present invention, determining the password service requirement parameter of the target user according to the target parameter matching the password usage scenario of the target user includes:

[0016] Acquire the password-protected object corresponding to the target user; the password-protected object corresponding to the target user includes at least one of the target user's own password-protected object, the target user's own password-protected data, the target user's customer's password-protected object, and the customer's password-protected data;

[0017] Predicting a target situation of the password-protected object based on the password-protected object corresponding to the target user and a target parameter matching the password usage scenario of the target user; the target situation of the password-protected object includes at least one of damage to the target user's own password-protected object, damage to the target user's own password-protected data, leakage of the target user's own password-protected data, damage to the customer's password-protected object, damage to the customer's password-protected data, and leakage of the customer's password-protected data;

[0018] According to the target situation of the password protection object, the password service requirement parameters of the target user are determined.

[0019] As an optional implementation manner, in the first aspect of the present invention, determining the password service requirement parameter of the target user according to the target situation of the password protection object includes:

[0020] Determine a sensitivity parameter corresponding to the password-protected object of the target object; the sensitivity parameter corresponding to the password-protected object of the target object includes at least one of a sensitivity parameter corresponding to the password-protected object of the target user, a sensitivity parameter corresponding to the password-protected data of the target user, a sensitivity parameter corresponding to the password-protected object of the customer, and a sensitivity parameter corresponding to the password-protected data of the customer;

[0021] Determine the loss of the target user and / or the client according to the target situation of the password-protected object and the sensitivity parameter corresponding to the password-protected object for the target object;

[0022] According to the loss situation of the target user and / or the customer, the cryptographic service requirement parameters of the target user are determined.

[0023] As an optional implementation manner, in the first aspect of the present invention, determining a matching target commercial password for the target user according to the basic parameters of all the commercial passwords and the password service requirement parameters of the target user includes:

[0024] Acquire the expected cryptographic service expenditure parameters of the target user; the expected cryptographic service expenditure parameters include an expected cryptographic service expenditure time parameter, an expected cryptographic service expenditure amount parameter, and an expected number of cryptographic service expenditures;

[0025] Determine, according to the basic parameters of each commercial password and the password service requirement parameters of the target user, the target password service expenditure parameters corresponding to each commercial password of the target user; the target password service expenditure parameters include a target password service expenditure time parameter, a target password service expenditure amount parameter and a target password service expenditure number;

[0026] A matching target commercial password is determined for the target user based on the expected cryptographic service expenditure parameter of the target user, the cryptographic service demand parameter of the target user, and the target cryptographic service expenditure parameter corresponding to each commercial password of the target user.

[0027] As an optional implementation manner, in the first aspect of the present invention, before determining a matching target commercial password for the target user based on the expected cryptographic service expenditure parameter of the target user, the cryptographic service requirement parameter of the target user, and the target cryptographic service expenditure parameter corresponding to each commercial password of the target user, the method further includes:

[0028] Determining the target insurance purchase situation of the target user; the target insurance purchase situation includes information security insurance purchase situation and / or commercial cryptographic service liability insurance purchase situation;

[0029] Determine the impact of the target insurance purchase situation on the password service matching of the target user according to the target insurance purchase situation of the target user and the target situation of the password protection object;

[0030] According to the password service matching impact situation, determine the password service matching impact degree caused by the target insurance purchase situation on the target user, and judge whether the password service matching impact degree is greater than or equal to a preset password service matching impact degree threshold;

[0031] When the judgment result is yes, a matching target commercial password is determined for the target user according to the target insurance purchase situation of the target user, the expected cryptographic service expenditure parameter of the target user, the cryptographic service demand parameter of the target user, and the target cryptographic service expenditure parameter corresponding to each commercial password of the target user;

[0032] When the judgment result is no, a matching target commercial password is determined for the target user based on the expected cryptographic service expenditure parameters of the target user, the cryptographic service demand parameters of the target user, and the target cryptographic service expenditure parameters corresponding to each commercial password of the target user.

[0033] The second aspect of the present invention discloses a service intelligent matching device for commercial passwords, the device comprising:

[0034] An acquisition module, used to acquire basic parameters of each commercial password in a preset password resource pool; the basic parameters of each commercial password include at least one of the type parameter, usage parameter, security performance parameter, algorithm implementation parameter, algorithm efficiency parameter, compatibility parameter and maintenance parameter of the commercial password;

[0035] A first determination module is used to determine the password usage scenario type of the target user; the password usage scenario type includes at least one of an electronic platform login scenario, an electronic payment scenario, a device encryption scenario, and an electronic certificate anti-counterfeiting scenario that requires the use of a password;

[0036] The second determination module is used to determine a matching target commercial password for the target user according to the basic parameters of all the commercial passwords and the password usage scenario type of the target user.

[0037] As an optional implementation, in the second aspect of the present invention, the second determination module determines a matching target commercial password for the target user according to the basic parameters of all the commercial passwords and the password usage scenario type of the target user, specifically including:

[0038] According to the password usage scenario type of the target user, a target parameter matching the password usage scenario of the target user is obtained; the target parameter includes at least one of a business background parameter, an information system architecture parameter, an expected decryption process parameter, an access permission parameter, a security authentication device parameter, and electronic certificate display content;

[0039] A matching target commercial password is determined for the target user according to the target parameters matching the password usage scenario of the target user and the basic parameters of all the commercial passwords.

[0040] As an optional implementation, in the second aspect of the present invention, the second determination module determines the matching target commercial password for the target user according to the target parameter matching the password usage scenario of the target user and the basic parameters of all the commercial passwords, specifically including:

[0041] Determining the password service requirement parameters of the target user according to the target parameters matching the password usage scenario of the target user; the password service requirement parameters include at least one of the password service type requirement parameters, the password service validity period requirement parameters, the password service performance requirement parameters, the password compatibility requirement parameters and the password maintenance method requirement parameters;

[0042] According to the basic parameters of all the commercial passwords and the password service requirement parameters of the target user, a matching target commercial password is determined for the target user.

[0043] As an optional implementation, in the second aspect of the present invention, the second determination module determines the password service requirement parameter of the target user according to the target parameter matching the password usage scenario of the target user in a manner specifically including:

[0044] Acquire the password-protected object corresponding to the target user; the password-protected object corresponding to the target user includes at least one of the target user's own password-protected object, the target user's own password-protected data, the target user's customer's password-protected object, and the customer's password-protected data;

[0045] Predicting a target situation of the password-protected object based on the password-protected object corresponding to the target user and a target parameter matching the password usage scenario of the target user; the target situation of the password-protected object includes at least one of damage to the target user's own password-protected object, damage to the target user's own password-protected data, leakage of the target user's own password-protected data, damage to the customer's password-protected object, damage to the customer's password-protected data, and leakage of the customer's password-protected data;

[0046] According to the target situation of the password protection object, the password service requirement parameters of the target user are determined.

[0047] As an optional implementation, in the second aspect of the present invention, the second determination module determines the password service requirement parameter of the target user according to the target situation of the password protection object, specifically including:

[0048] Determine a sensitivity parameter corresponding to the password-protected object of the target object; the sensitivity parameter corresponding to the password-protected object of the target object includes at least one of a sensitivity parameter corresponding to the password-protected object of the target user, a sensitivity parameter corresponding to the password-protected data of the target user, a sensitivity parameter corresponding to the password-protected object of the customer, and a sensitivity parameter corresponding to the password-protected data of the customer;

[0049] Determine the loss of the target user and / or the client according to the target situation of the password-protected object and the sensitivity parameter corresponding to the password-protected object for the target object;

[0050] According to the loss situation of the target user and / or the customer, the cryptographic service requirement parameters of the target user are determined.

[0051] As an optional implementation, in the second aspect of the present invention, the second determination module determines a matching target commercial password for the target user according to the basic parameters of all the commercial passwords and the password service requirement parameters of the target user, specifically including:

[0052] Acquire the expected cryptographic service expenditure parameters of the target user; the expected cryptographic service expenditure parameters include an expected cryptographic service expenditure time parameter, an expected cryptographic service expenditure amount parameter, and an expected number of cryptographic service expenditures;

[0053] Determine, according to the basic parameters of each commercial password and the password service requirement parameters of the target user, the target password service expenditure parameters corresponding to each commercial password of the target user; the target password service expenditure parameters include a target password service expenditure time parameter, a target password service expenditure amount parameter and a target password service expenditure number;

[0054] A matching target commercial password is determined for the target user based on the expected cryptographic service expenditure parameter of the target user, the cryptographic service demand parameter of the target user, and the target cryptographic service expenditure parameter corresponding to each commercial password of the target user.

[0055] As an optional implementation, in the second aspect of the present invention, the second determination module determines a matching target commercial password for the target user according to the basic parameters of all the commercial passwords and the password service requirement parameters of the target user, and the method specifically includes:

[0056] Before determining a matching target commercial password for the target user based on the target user's expected cryptographic service expenditure parameter, the target user's cryptographic service demand parameter, and the target cryptographic service expenditure parameter corresponding to each commercial password of the target user, determining the target insurance purchase status of the target user; the target insurance purchase status includes information security insurance purchase status and / or commercial cryptographic service liability insurance purchase status;

[0057] Determine the impact of the target insurance purchase situation on the password service matching of the target user according to the target insurance purchase situation of the target user and the target situation of the password protection object;

[0058] According to the password service matching impact situation, determine the password service matching impact degree caused by the target insurance purchase situation on the target user, and judge whether the password service matching impact degree is greater than or equal to a preset password service matching impact degree threshold;

[0059] When the judgment result is yes, a matching target commercial password is determined for the target user according to the target insurance purchase situation of the target user, the expected cryptographic service expenditure parameter of the target user, the cryptographic service demand parameter of the target user, and the target cryptographic service expenditure parameter corresponding to each commercial password of the target user;

[0060] When the judgment result is no, a matching target commercial password is determined for the target user based on the expected cryptographic service expenditure parameters of the target user, the cryptographic service demand parameters of the target user, and the target cryptographic service expenditure parameters corresponding to each commercial password of the target user.

[0061] The third aspect of the present invention discloses another service intelligent matching device for commercial passwords, the device comprising:

[0062] A memory storing executable program code;

[0063] a processor coupled to the memory;

[0064] The processor calls the executable program code stored in the memory to execute the service intelligent matching method for commercial passwords disclosed in the first aspect of the present invention.

[0065] The fourth aspect of the present invention discloses a computer storage medium, which stores computer instructions. When the computer instructions are called, they are used to execute the service intelligent matching method of commercial passwords disclosed in the first aspect of the present invention.

[0066] Compared with the prior art, the embodiments of the present invention have the following beneficial effects:

[0067] In the embodiment of the present invention, the basic parameters of each commercial password in the preset password resource pool are obtained; the password usage scenario type of the target user is determined; and a matching target commercial password is determined for the target user according to the basic parameters of all commercial passwords and the password usage scenario type of the target user. It can be seen that the implementation of the present invention can determine a target commercial password that matches the target user from all commercial passwords according to the basic parameters of all commercial passwords and the password usage scenario type of the target user, thus not only improving the matching efficiency of the commercial password service for the target user, but also improving the service matching degree between the target user and the target commercial password, thereby ensuring the security of the target user's information system. BRIEF DESCRIPTION OF THE DRAWINGS

[0068] In order to more clearly illustrate the technical solutions in the embodiments of the present invention, the following briefly introduces the drawings required for use in the description of the embodiments. Obviously, the drawings described below are only some embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without creative work.

[0069] Figure 1 It is a flow chart of a service intelligent matching method for a commercial password disclosed in an embodiment of the present invention;

[0070] Figure 2 It is a flow chart of another service intelligent matching method for commercial passwords disclosed in an embodiment of the present invention;

[0071] Figure 3 It is a structural diagram of a service intelligent matching device for commercial passwords disclosed in an embodiment of the present invention;

[0072] Figure 4 It is a structural diagram of another service intelligent matching device for commercial passwords disclosed in an embodiment of the present invention. DETAILED DESCRIPTION

[0073] In order to enable those skilled in the art to better understand the scheme of the present invention, the technical scheme in the embodiments of the present invention will be clearly and completely described below in conjunction with the drawings in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0074] The terms "first", "second", etc. in the specification and claims of the present invention and the above-mentioned drawings are used to distinguish different objects rather than to describe a specific order. In addition, the terms "including" and "having" and any variations thereof are intended to cover non-exclusive inclusions. For example, a process, method, device, product or end including a series of steps or units is not limited to the listed steps or units, but may optionally include steps or units that are not listed, or may optionally include other steps or units inherent to these processes, methods, products or ends.

[0075] Reference to "embodiments" herein means that a particular feature, structure, or characteristic described in conjunction with the embodiments may be included in at least one embodiment of the present invention. The appearance of the phrase in various places in the specification does not necessarily refer to the same embodiment, nor is it an independent or alternative embodiment that is mutually exclusive with other embodiments. It is explicitly and implicitly understood by those skilled in the art that the embodiments described herein may be combined with other embodiments.

[0076] The present invention discloses a method and device for intelligent matching of commercial password services, which not only improves the matching efficiency of commercial password services for target users, but also improves the service matching degree between the target user and the target commercial password, thereby ensuring the security of the target user's information system.

[0077] Embodiment 1

[0078] See also Figure 1 , Figure 1 The figure is a flowchart of a method for intelligent matching of commercial password services disclosed in an embodiment of the present invention. Optionally, the method can be implemented by a commercial password service matching device, which can be integrated in a commercial password service matching device (such as a smart computer or smart phone), or a local server or cloud server for processing the service matching process of commercial passwords, etc., which is not limited by the embodiment of the present invention. Figure 1 As shown, the service intelligent matching method of the commercial password may include the following operations:

[0079] 101. Obtain basic parameters of each commercial password in a preset password resource pool.

[0080] In an embodiment of the present invention, optionally, the basic parameters of each commercial encryption include at least one of the type parameters of the commercial encryption (such as public key encryption, symmetric encryption, hash encryption, etc.), usage parameters (such as encryption and decryption method parameters, protocol support parameters, etc.), security performance parameters (such as key length, collision resistance, algorithm strength, etc.), algorithm implementation parameters (such as SM2, SM9, RSA, SM1, SM4, SM3, SHA-1, SHA-256, SHA-512, MD5 and other algorithms), algorithm efficiency parameters (such as encryption and decryption speed, resource consumption, etc.), compatibility parameters and maintenance method parameters (such as update time, update cycle, online / offline maintenance method and other parameters).

[0081] 102. Determine the target user's password usage scenario type.

[0082] In an embodiment of the present invention, optionally, the password usage scenario types include at least one of an electronic platform login scenario that requires a password, an electronic payment scenario, a device encryption scenario (such as home smart door locks, mobile phones, tablets, computers, etc. that require encryption), and an electronic credential anti-counterfeiting scenario (such as electronic signatures, electronic certificates, etc.).

[0083] 103. Determine a matching target commercial password for the target user based on the basic parameters of all commercial passwords and the password usage scenario type of the target user.

[0084] In an embodiment of the present invention, further, after determining the target commercial password, a password usage and audit mechanism for the target commercial password can be established to regularly review password usage records, abnormal access behaviors, etc., so as to promptly discover and handle potential security issues.

[0085] It can be seen that the implementation of the embodiment of the present invention can determine the target commercial password that matches the target user from all commercial passwords according to the basic parameters of all commercial passwords and the password usage scenario type of the target user. In this way, not only the matching efficiency of the commercial password service for the target user is improved, but also the service matching degree between the target user and the target commercial password is improved, thereby ensuring the security of the target user's information system.

[0086] Embodiment 2

[0087] See also Figure 2 , Figure 2 It is a flowchart of another commercial password service intelligent matching method disclosed in an embodiment of the present invention. Optionally, the method can be implemented by a commercial password service matching device, which can be integrated in a commercial password service matching device (such as a smart computer, a smart phone), or a local server or cloud server for processing the commercial password service matching process, etc., which is not limited by the embodiment of the present invention. Figure 2 As shown, the service intelligent matching method of the commercial password may include the following operations:

[0088] 201. Obtain basic parameters of each commercial cipher in a preset cipher resource pool.

[0089] 202. Determine a password usage scenario type of the target user.

[0090] 203. According to the password usage scenario type of the target user, obtain a target parameter that matches the password usage scenario of the target user.

[0091] In an embodiment of the present invention, optionally, the target parameters include business background parameters, information system architecture parameters (such as the adopted Web application, mobile application, Internet of Things device, etc.), expected decryption process parameters, access permission parameters, security authentication device parameters (such as type parameters, performance parameters of biometric devices, chip type parameters of smart cards, etc.) and at least one of the electronic certificate display content.

[0092] 204. Determine a matching target commercial password for the target user based on target parameters that match the password usage scenario of the target user and basic parameters of all commercial passwords.

[0093] In an embodiment of the present invention, that is, when determining the target commercial password based on the target parameters and the basic parameters of each commercial password, a comprehensive evaluation is required, which includes evaluating the security, performance, cost-effectiveness, compatibility and future scalability of the commercial password.

[0094] In the embodiment of the present invention, for other descriptions of step 201 and step 202, please refer to the detailed description of step 101 and step 102 in the first embodiment, and the embodiment of the present invention will not be repeated.

[0095] It can be seen that the implementation of the embodiment of the present invention can determine a matching target commercial password for the target user through the target parameters that match the password usage scenario of the target user and the basic parameters of all commercial passwords. In this way, the problem of commercial password service matching deviation caused by a single factor is effectively reduced, and the scientificity and rationality of commercial password service matching are improved, which is conducive to making the target commercial password more in line with the actual needs of the target user.

[0096] In an optional embodiment, the step 204 above determines a target commercial password that matches the target user's password usage scenario and basic parameters of all commercial passwords for the target user, including:

[0097] Determine the target user's password service requirement parameters based on the target parameters that match the target user's password usage scenario;

[0098] Based on the basic parameters of all commercial passwords and the password service requirement parameters of the target user, a matching target commercial password is determined for the target user.

[0099] In this optional embodiment, optionally, the cryptographic service requirement parameters include at least one of a cryptographic service type requirement parameter, a cryptographic service validity period requirement parameter, a cryptographic service performance requirement parameter, a cryptographic compatibility requirement parameter, and a cryptographic maintenance method requirement parameter.

[0100] For example, if it is determined that the electronic payment system of a certain financial institution is the main type of password usage scenario, where its password usage scenarios involve user login verification, transaction data encryption, electronic signature verification and other links, then the corresponding transaction amount, transaction frequency, user identity authentication method, authority classification, type and performance of biometric devices used by the financial institution are obtained, so as to conduct a comprehensive assessment of the financial institution. In addition to considering conventional factors such as the security, performance, and cost-effectiveness of commercial passwords, special attention is also paid to password service demand parameters, such as whether the encryption service type matches the business needs, whether the password validity period meets regulatory requirements, whether the performance requirements meet the transaction processing speed, etc., so as to match the target commercial password for the target user.

[0101] It can be seen that this optional embodiment can further determine the password service requirement parameters of the target user based on the target parameters, and then determine a matching target commercial password for the target user. This not only ensures that the matched target commercial password meets the current actual needs of the target user, reserves sufficient flexibility and expansion space to cope with future changes in the target user, but also provides the target user with a convenient and efficient password management strategy, thereby enhancing the stability and sustainability of the target user's information system.

[0102] In another optional embodiment, the above step of determining the target user's password service requirement parameter according to the target parameter matching the target user's password usage scenario includes:

[0103] Get the password protection object corresponding to the target user;

[0104] Predict the target situation of the password-protected object based on the password-protected object corresponding to the target user and the target parameters matching the password usage scenario of the target user;

[0105] According to the target situation of the password-protected object, the password service requirement parameters of the target user are determined.

[0106] In this optional embodiment, optionally, the password-protected object corresponding to the target user includes at least one of the target user's own password-protected object, the target user's own password-protected data, the target user's customer's password-protected object, and the customer's password-protected data.

[0107] Further optionally, the target conditions of the password-protected object include at least one of damage to the target user's own password-protected object, damage to the target user's own password-protected data, leakage of the target user's own password-protected data, damage to the customer's password-protected object, damage to the customer's password-protected data and leakage of the customer's password-protected data.

[0108] In this optional embodiment, further, according to the target situation of the password protection object, the password service requirement parameters of the target user are determined, including:

[0109] Determine the sensitivity parameter corresponding to the target object password protection object;

[0110] Determine the loss of the target user and / or customer based on the target situation of the password-protected object and the sensitivity parameter corresponding to the password-protected object;

[0111] Determine the target user's cryptographic service requirement parameters based on the target user's and / or customer's loss situation.

[0112] In this optional embodiment, optionally, the sensitivity parameters corresponding to the target object password-protected object include at least one of the sensitivity parameters corresponding to the target user's own password-protected object, the sensitivity parameters corresponding to the target user's own password-protected data, the sensitivity parameters corresponding to the customer's password-protected object, and the sensitivity parameters corresponding to the customer's password-protected data.

[0113] For example, a company that provides online storage services needs to protect a large number of customer personal files stored on its servers, and these files need to be frequently accessed and stored for a long time, and prevent data leakage to unauthorized third parties. Since these files involve customer personal privacy, once leaked, it may lead to legal disputes and damage brand reputation. Therefore, the following target users' password service demand parameters are determined, such as: 1. High-strength encryption algorithms need to be used to ensure the security of data during storage and transmission; 2. Strict access control policies are implemented to ensure that only authorized users can access data; 3. Establish a regular data audit and monitoring system to promptly detect and respond to any suspicious activities; 4. Develop a disaster recovery plan to ensure that services can be quickly restored in the event of a data leak or other security incident.

[0114] It can be seen that this optional embodiment can predict the target situation of the password protection object based on the password protection object corresponding to the target user and the target parameters matching the password usage scenario of the target user, and then determine the loss situation of the target user and / or customer in combination with the sensitivity parameters corresponding to the password protection object of the target object, thereby determining the password service demand parameters of the target user. This not only improves the reliability and accuracy of determining the password service demand parameters of the target user, but also is conducive to effectively maintaining the information security of the target user and the customer, thereby reducing the economic losses of the target user and the customer and enhancing the competitive advantage of the target user.

[0115] In yet another optional embodiment, according to the basic parameters of all commercial passwords and the password service requirement parameters of the target user, a matching target commercial password is determined for the target user, including:

[0116] Obtain the target user's expected cryptographic service expenditure parameters;

[0117] Determine the target cryptographic service expenditure parameters corresponding to each commercial cryptographic code of the target user according to the basic parameters of each commercial cryptographic code and the cryptographic service demand parameters of the target user;

[0118] A matching target commercial password is determined for the target user based on the target user's expected cryptographic service expenditure parameters, the target user's cryptographic service demand parameters, and the target cryptographic service expenditure parameters corresponding to each commercial password of the target user.

[0119] In this optional embodiment, the expected cryptographic service expenditure parameters include an expected cryptographic service expenditure time parameter, an expected cryptographic service expenditure amount parameter and an expected number of cryptographic service expenditures, and the target cryptographic service expenditure parameters include a target cryptographic service expenditure time parameter, a target cryptographic service expenditure amount parameter and a target number of cryptographic service expenditures. That is, the target cryptographic service expenditure parameters of different commercial passwords are further compared with the expected cryptographic service expenditure parameters of the target user, and a target commercial password with higher efficiency is matched for the target user while ensuring that the risk of data leakage is effectively reduced and the cryptographic service needs of the target user are met.

[0120] It can be seen that this optional embodiment can further combine the comparison between the target user's expected cryptographic service expenditure parameters and the target cryptographic service expenditure parameters corresponding to each commercial password of the target user, and match the target commercial password for the target user. In this way, not only a commercial cryptographic scheme that meets security requirements is matched for the target user, but it also helps to optimize the cryptographic service expenditure for the target user and reduce the overall operating cost, which is conducive to improving the target user's satisfaction and trust in the password matching service.

[0121] In yet another optional embodiment, before determining a matching target commercial password for the target user according to the target user's expected cryptographic service expenditure parameter, the target user's cryptographic service demand parameter, and the target cryptographic service expenditure parameter corresponding to each commercial password of the target user in the above step, the method further includes:

[0122] Determine the target insurance purchase situation of target users;

[0123] According to the target insurance purchase situation of the target user and the target situation of the password protection object, determine the impact of the target insurance purchase situation on the password service matching of the target user;

[0124] According to the password service matching impact situation, determine the password service matching impact degree caused by the target insurance purchase situation on the target user, and judge whether the password service matching impact degree is greater than or equal to the preset password service matching impact degree threshold;

[0125] When the judgment result is yes, a matching target commercial password is determined for the target user according to the target insurance purchase situation of the target user, the expected cryptographic service expenditure parameter of the target user, the cryptographic service demand parameter of the target user, and the target cryptographic service expenditure parameter corresponding to each commercial password of the target user;

[0126] When the judgment result is no, a matching target commercial password is determined for the target user based on the target user's expected cryptographic service expenditure parameters, the target user's cryptographic service demand parameters, and the target cryptographic service expenditure parameters corresponding to each commercial password of the target user.

[0127] In this optional embodiment, the target insurance purchase situation optionally includes the information security insurance purchase situation and / or the commercial cryptographic service liability insurance purchase situation. For example, based on the risk level of data leakage of a certain technology company itself, as well as the coverage of information security insurance and commercial cryptographic service liability insurance, after analysis, it is considered that the purchase of these insurances can significantly reduce the financial risks it faces due to data leakage, so it can be determined that the cryptographic service matching impact is greater than the preset cryptographic service matching impact threshold.

[0128] It can be seen that this optional embodiment can further determine the impact of the target insurance purchase situation on the cryptographic service matching of the target user based on the target insurance purchase situation of the target user and the target situation of the cryptographic protection object. Then, when the impact is significant, a matching target commercial password is determined for the target user in combination with the target insurance purchase situation of the target user. This helps to optimize the cost-effectiveness of the target user. When the target user has already purchased insurance and may be provided with partial risk coverage, the expenditure parameters of the commercial cryptographic service can be adjusted more flexibly to achieve maximum cost savings while ensuring security.

[0129] Embodiment 3

[0130] See also Figure 3 , Figure 3 Schematic diagram of a service intelligent matching device for commercial passwords disclosed in an embodiment of the present invention. Figure 3 As shown, the service intelligent matching device of the commercial password may include:

[0131] The acquisition module 301 is used to acquire basic parameters of each commercial cipher in a preset cipher resource pool;

[0132] A first determination module 302 is used to determine the password usage scenario type of the target user;

[0133] The second determination module 303 is used to determine a matching target commercial password for the target user according to the basic parameters of all commercial passwords and the password usage scenario type of the target user.

[0134] In an embodiment of the present invention, the basic parameters of each commercial password include at least one of the type parameters, usage parameters, security performance parameters, algorithm implementation parameters, algorithm efficiency parameters, compatibility parameters and maintenance method parameters of the commercial password; the password usage scenario types include at least one of the electronic platform login scenarios, electronic payment scenarios, device encryption scenarios and electronic certificate anti-counterfeiting scenarios that require the use of passwords.

[0135] It can be seen that implementation Figure 3 The described commercial password service intelligent matching device can determine the target commercial password that matches the target user from all commercial passwords based on the basic parameters of all commercial passwords and the password usage scenario type of the target user. This not only improves the matching efficiency of the commercial password service for the target user, but also improves the service matching degree between the target user and the target commercial password, thereby ensuring the security of the target user's information system.

[0136] In an optional embodiment, the second determination module 303 determines a matching target commercial password for the target user according to the basic parameters of all commercial passwords and the password usage scenario type of the target user, specifically including:

[0137] According to the password usage scenario type of the target user, obtain target parameters that match the password usage scenario of the target user;

[0138] A matching target commercial password is determined for the target user based on the target parameters that match the password usage scenario of the target user and the basic parameters of all commercial passwords.

[0139] In this optional embodiment, the target parameters include at least one of business background parameters, information system architecture parameters, expected decryption process parameters, access permission parameters, security authentication device parameters, and electronic certificate display content.

[0140] It can be seen that implementation Figure 3The described commercial password service intelligent matching device can determine a matching target commercial password for a target user through target parameters that match the target user's password usage scenario and the basic parameters of all commercial passwords. This effectively reduces the problem of commercial password service matching deviation caused by a single factor, improves the scientificity and rationality of commercial password service matching, and is conducive to making the target commercial password more in line with the actual needs of the target user.

[0141] In another optional embodiment, the second determination module 303 determines a target commercial password that matches the target user according to the target parameter that matches the password usage scenario of the target user and the basic parameters of all commercial passwords, specifically including:

[0142] Determine the target user's password service requirement parameters based on the target parameters that match the target user's password usage scenario;

[0143] Based on the basic parameters of all commercial passwords and the password service requirement parameters of the target user, a matching target commercial password is determined for the target user.

[0144] In this optional embodiment, the cryptographic service requirement parameters include at least one of a cryptographic service type requirement parameter, a cryptographic service validity period requirement parameter, a cryptographic service performance requirement parameter, a cryptographic compatibility requirement parameter, and a cryptographic maintenance method requirement parameter.

[0145] It can be seen that implementation Figure 3 The described commercial password service intelligent matching device can further determine the password service requirement parameters of the target user based on the target parameters, and then determine a matching target commercial password for the target user. In this way, it not only ensures that the matched target commercial password meets the current actual needs of the target user, reserves sufficient flexibility and expansion space to cope with future changes in the target user, but also provides the target user with a convenient and efficient password management strategy, enhancing the stability and sustainability of the target user's information system.

[0146] In another optional embodiment, the second determination module 303 determines the password service requirement parameter of the target user according to the target parameter matching the password usage scenario of the target user in a manner specifically including:

[0147] Get the password protection object corresponding to the target user;

[0148] Predict the target situation of the password-protected object based on the password-protected object corresponding to the target user and the target parameters matching the password usage scenario of the target user;

[0149] According to the target situation of the password-protected object, the password service requirement parameters of the target user are determined.

[0150] In this optional embodiment, the password-protected object corresponding to the target user includes at least one of the target user's own password-protected object, the target user's own password-protected data, the target user's customer's password-protected object and the customer's password-protected data; the target conditions affected by the password-protected object include at least one of damage to the target user's own password-protected object, damage to the target user's own password-protected data, leakage of the target user's own password-protected data, damage to the customer's password-protected object, damage to the customer's password-protected data and leakage of the customer's password-protected data.

[0151] In this optional embodiment, further, the second determination module 303 determines the password service requirement parameter of the target user according to the target situation of the password protection object in a manner specifically including:

[0152] Determine the sensitivity parameter corresponding to the target object password protection object;

[0153] Determine the loss of the target user and / or customer based on the target situation of the password-protected object and the sensitivity parameter corresponding to the password-protected object;

[0154] Determine the target user's cryptographic service requirement parameters based on the target user's and / or customer's loss situation.

[0155] In this optional embodiment, the sensitivity parameters corresponding to the target object's password-protected object include at least one of the sensitivity parameters corresponding to the target user's own password-protected object, the sensitivity parameters corresponding to the target user's own password-protected data, the sensitivity parameters corresponding to the customer's password-protected object, and the sensitivity parameters corresponding to the customer's password-protected data.

[0156] It can be seen that implementation Figure 3 The described commercial password service intelligent matching device can predict the target situation of the password protection object based on the password protection object corresponding to the target user and the target parameters matching the password usage scenario of the target user, and then determine the loss situation of the target user and / or customer in combination with the sensitivity parameters corresponding to the password protection object of the target object, thereby determining the password service demand parameters of the target user. In this way, not only the reliability and accuracy of determining the password service demand parameters of the target user are improved, but also it is conducive to effectively maintaining the information security of the target users and customers, thereby reducing the economic losses of the target users and customers and enhancing the competitive advantage of the target users.

[0157] In yet another alternative embodiment, the manner in which the second determination module 303 determines a target commercial cipher that matches the target user according to the basic parameters of all commercial ciphers and the password service requirement parameters of the target user specifically includes:

[0158] Obtain the expected password service expenditure parameters of the target user;

[0159] According to the basic parameters of each commercial cipher and the password service requirement parameters of the target user, determine the target password service expenditure parameters corresponding to each commercial cipher for the target user;

[0160] According to the expected password service expenditure parameters of the target user, the password service requirement parameters of the target user, and the target password service expenditure parameters corresponding to each commercial cipher for the target user, determine a target commercial cipher that matches the target user.

[0161] In this alternative embodiment, the expected password service expenditure parameters include the expected password service expenditure time parameter, the expected password service expenditure amount parameter, and the expected password service expenditure frequency; the target password service expenditure parameters include the target password service expenditure time parameter, the target password service expenditure amount parameter, and the target password service expenditure frequency.

[0162] It can be seen that implementing Figure 3 The described service intelligent matching device for commercial ciphers can further combine the comparison between the expected password service expenditure parameters of the target user and the target password service expenditure parameters corresponding to each commercial cipher for the target user to match a target commercial cipher for the target user. In this way, not only can a commercial cipher solution that meets the security requirements be matched for the target user, but it also helps to optimize the password service expenditure for the target user, reduce the overall operation cost, and thus is beneficial to improving the satisfaction and trust of the target user in the password matching service.

[0163] In yet another alternative embodiment, the manner in which the second determination module 303 determines a target commercial cipher that matches the target user according to the basic parameters of all commercial ciphers and the password service requirement parameters of the target user specifically further includes:

[0164] Before determining a target commercial cipher that matches the target user according to the expected password service expenditure parameters of the target user, the password service requirement parameters of the target user, and the target password service expenditure parameters corresponding to each commercial cipher for the target user, determine the target insurance purchase situation of the target user;

[0165] According to the target insurance purchase situation of the target user and the target situation suffered by the password protection object, determine the impact of the target insurance purchase situation on the password service matching of the target user;

[0166] According to the impact of password service matching, determine the impact degree of the target insurance purchase situation on the target user's password service matching, and determine whether the impact degree of password service matching is greater than or equal to the preset threshold of the impact degree of password service matching;

[0167] When the judgment result is yes, based on the target insurance purchase situation of the target user, the target user's expected password service expenditure parameter, the target user's password service demand parameter, and the target password service expenditure parameter corresponding to each commercial password of the target user, determine a matching target commercial password for the target user;

[0168] When the judgment result is no, based on the target user's expected password service expenditure parameter, the target user's password service demand parameter, and the target password service expenditure parameter corresponding to each commercial password of the target user, determine a matching target commercial password for the target user.

[0169] In this optional embodiment, the target insurance purchase situation includes the information security insurance purchase situation and / or the commercial password service liability insurance purchase situation.

[0170] It can be seen that implementing Figure 3 The described service intelligent matching device for commercial passwords can further determine the impact of the target insurance purchase situation on the target user's password service matching according to the target insurance purchase situation of the target user and in combination with the target situation suffered by the password protection object. Subsequently, in the case of a significant impact, a matching target commercial password can be determined for the target user in combination with the target insurance purchase situation of the target user. In this way, it helps to optimize the cost-benefit of the target user. When the target user has already purchased insurance and may provide partial risk coverage, the expenditure parameters of the commercial password service can be adjusted more flexibly to maximize cost savings while ensuring security.

[0171] Embodiment 4

[0172] Please refer to Figure 4 , Figure 4 which is a schematic structural diagram of another service intelligent matching device for commercial passwords disclosed in the embodiments of the present invention. As Figure 4 shown, the service intelligent matching device for commercial passwords may include:

[0173] A memory 401 storing executable program code;

[0174] A processor 402 coupled to the memory 401;

[0175] The processor 402 calls the executable program code stored in the memory 401 and executes the steps in the service intelligent matching method for commercial passwords described in Embodiment 1 or Embodiment 2 of the present invention.

[0176] Embodiment 5

[0177] An embodiment of the present invention discloses a computer storage medium, which stores computer instructions. When the computer instructions are called, they are used to execute the steps in the service intelligent matching method of commercial passwords described in Embodiment 1 or Embodiment 2 of the present invention.

[0178] Embodiment 6

[0179] An embodiment of the present invention discloses a computer program product, which includes a non-transitory computer-readable storage medium storing a computer program, and the computer program is operable to enable a computer to execute the steps in the service intelligent matching method for commercial passwords described in Example 1 or Example 2.

[0180] The device embodiments described above are only illustrative, wherein the modules described as separate components may or may not be physically separated, and the components displayed as modules may or may not be physical modules, i.e., they may be located in one place, or they may be distributed on multiple network modules. Some or all of the modules may be selected according to actual needs to achieve the purpose of the scheme of this embodiment. Those of ordinary skill in the art may understand and implement it without creative work.

[0181] Through the specific description of the above embodiments, those skilled in the art can clearly understand that each implementation method can be implemented by means of software plus a necessary general hardware platform, and of course, it can also be implemented by hardware. Based on such an understanding, the above technical solution can be essentially or partly contributed to the prior art in the form of a software product, and the computer software product can be stored in a computer-readable storage medium, and the storage medium includes a read-only memory (ROM), a random access memory (RAM), a programmable read-only memory (PROM), an erasable programmable read-only memory (EPROM), a one-time programmable read-only memory (OTPROM), an electronically erasable rewritable read-only memory (EEPROM), a compact disc (CD-ROM) or other optical disc storage, magnetic disk storage, magnetic tape storage, or any other computer-readable medium that can be used to carry or store data.

[0182] Finally, it should be noted that the service intelligent matching method and device for a commercial password disclosed in the embodiment of the present invention discloses only the preferred embodiments of the present invention, which are only used to illustrate the technical solution of the present invention, rather than to limit it. Although the present invention has been described in detail with reference to the aforementioned embodiments, a person skilled in the art should understand that the technical solutions recorded in the aforementioned embodiments can still be modified, or some of the technical features therein can be replaced by equivalents. However, these modifications or replacements do not deviate the essence of the corresponding technical solutions from the spirit and scope of the technical solutions of the various embodiments of the present invention.

Claims

1. A service intelligent matching method for commercial passwords, characterized in that: The method comprises: Obtaining basic parameters of each commercial password in a preset password resource pool; the basic parameters of each commercial password include at least one of a type parameter, a usage parameter, a security performance parameter, an algorithm implementation parameter, an algorithm efficiency parameter, a compatibility parameter, and a maintenance parameter of the commercial password; Determine the password usage scenario type of the target user; the password usage scenario type includes at least one of an electronic platform login scenario, an electronic payment scenario, a device encryption scenario, and an electronic credential anti-counterfeiting scenario that requires the use of a password; According to the basic parameters of all the commercial passwords and the password usage scenario type of the target user, a matching target commercial password is determined for the target user.

2. The service intelligent matching method of commercial password according to claim 1, characterized in that: The determining a matching target commercial password for the target user according to the basic parameters of all the commercial passwords and the password usage scenario type of the target user includes: According to the password usage scenario type of the target user, a target parameter matching the password usage scenario of the target user is obtained; the target parameter includes at least one of a business background parameter, an information system architecture parameter, an expected decryption process parameter, an access permission parameter, a security authentication device parameter, and electronic certificate display content; A matching target commercial password is determined for the target user according to the target parameters matching the password usage scenario of the target user and the basic parameters of all the commercial passwords.

3. The service intelligent matching method of commercial password according to claim 2 is characterized in that: The determining a matching target commercial password for the target user according to the target parameter matching the password usage scenario of the target user and the basic parameters of all the commercial passwords includes: Determining the password service requirement parameters of the target user according to the target parameters matching the password usage scenario of the target user; the password service requirement parameters include at least one of the password service type requirement parameters, the password service validity period requirement parameters, the password service performance requirement parameters, the password compatibility requirement parameters and the password maintenance method requirement parameters; According to the basic parameters of all the commercial passwords and the password service requirement parameters of the target user, a matching target commercial password is determined for the target user.

4. The service intelligent matching method of commercial password according to claim 3 is characterized in that: The step of determining the password service requirement parameters of the target user according to the target parameters matching the password usage scenario of the target user includes: Acquire the password-protected object corresponding to the target user; the password-protected object corresponding to the target user includes at least one of the target user's own password-protected object, the target user's own password-protected data, the target user's customer's password-protected object, and the customer's password-protected data; Predicting a target situation of the password-protected object based on the password-protected object corresponding to the target user and a target parameter matching the password usage scenario of the target user; the target situation of the password-protected object includes at least one of damage to the target user's own password-protected object, damage to the target user's own password-protected data, leakage of the target user's own password-protected data, damage to the customer's password-protected object, damage to the customer's password-protected data, and leakage of the customer's password-protected data; According to the target situation of the password protection object, the password service requirement parameters of the target user are determined.

5. The service intelligent matching method of commercial password according to claim 4 is characterized in that: The step of determining the password service requirement parameters of the target user according to the target situation of the password protection object includes: Determine a sensitivity parameter corresponding to the password-protected object of the target object; the sensitivity parameter corresponding to the password-protected object of the target object includes at least one of a sensitivity parameter corresponding to the password-protected object of the target user, a sensitivity parameter corresponding to the password-protected data of the target user, a sensitivity parameter corresponding to the password-protected object of the customer, and a sensitivity parameter corresponding to the password-protected data of the customer; Determine the loss of the target user and / or the client according to the target situation of the password-protected object and the sensitivity parameter corresponding to the password-protected object for the target object; According to the loss situation of the target user and / or the customer, the cryptographic service requirement parameters of the target user are determined.

6. The service intelligent matching method of commercial password according to claim 4 or 5, characterized in that: The step of determining a matching target commercial password for the target user according to the basic parameters of all the commercial passwords and the password service requirement parameters of the target user includes: Acquire the expected cryptographic service expenditure parameters of the target user; the expected cryptographic service expenditure parameters include an expected cryptographic service expenditure time parameter, an expected cryptographic service expenditure amount parameter, and an expected number of cryptographic service expenditures; Determine, according to the basic parameters of each commercial password and the password service requirement parameters of the target user, the target password service expenditure parameters corresponding to each commercial password of the target user; the target password service expenditure parameters include a target password service expenditure time parameter, a target password service expenditure amount parameter and a target password service expenditure number; A matching target commercial password is determined for the target user based on the expected cryptographic service expenditure parameters of the target user, the cryptographic service demand parameters of the target user, and the target cryptographic service expenditure parameters corresponding to each commercial password of the target user.

7. The service intelligent matching method of commercial password according to claim 6, characterized in that: Before determining a matching target commercial password for the target user based on the target user's expected cryptographic service expenditure parameter, the target user's cryptographic service requirement parameter, and the target cryptographic service expenditure parameter corresponding to each commercial password of the target user, the method further includes: Determining the target insurance purchase situation of the target user; the target insurance purchase situation includes information security insurance purchase situation and / or commercial cryptographic service liability insurance purchase situation; Determine the impact of the target insurance purchase situation on the password service matching of the target user according to the target insurance purchase situation of the target user and the target situation of the password protection object; According to the password service matching impact situation, determine the password service matching impact degree caused by the target insurance purchase situation on the target user, and judge whether the password service matching impact degree is greater than or equal to a preset password service matching impact degree threshold; When the judgment result is yes, a matching target commercial password is determined for the target user according to the target insurance purchase situation of the target user, the expected cryptographic service expenditure parameter of the target user, the cryptographic service demand parameter of the target user, and the target cryptographic service expenditure parameter corresponding to each commercial password of the target user; When the judgment result is no, a matching target commercial password is determined for the target user based on the expected cryptographic service expenditure parameters of the target user, the cryptographic service demand parameters of the target user, and the target cryptographic service expenditure parameters corresponding to each commercial password of the target user.

8. A service intelligent matching device for commercial passwords, characterized in that: The device comprises: An acquisition module, used to acquire basic parameters of each commercial password in a preset password resource pool; the basic parameters of each commercial password include at least one of the type parameter, usage parameter, security performance parameter, algorithm implementation parameter, algorithm efficiency parameter, compatibility parameter and maintenance parameter of the commercial password; A first determination module is used to determine the password usage scenario type of the target user; the password usage scenario type includes at least one of an electronic platform login scenario, an electronic payment scenario, a device encryption scenario, and an electronic certificate anti-counterfeiting scenario that requires the use of a password; The second determination module is used to determine a matching target commercial password for the target user according to the basic parameters of all the commercial passwords and the password usage scenario type of the target user.

9. A service intelligent matching device for commercial passwords, characterized in that: The device comprises: A memory storing executable program code; a processor coupled to the memory; The processor calls the executable program code stored in the memory to execute the service intelligent matching method for commercial passwords as described in any one of claims 1-7.

10. A computer storage medium, characterized in that: The computer storage medium stores computer instructions, which, when called, are used to execute the service intelligent matching method for commercial passwords as described in any one of claims 1 to 7.

Images