Security encryption verification method based on cloud service

Abstract

The invention relates to the technical field of data encryption verification, and particularly discloses a security encryption verification method based on cloud service, and the method comprises the steps: encrypting data, judging whether an encrypted data verification code needs to be updated or not, distributing the updated verification code to an authorized user, and judging whether the verification code is successfully distributed to the authorized user or not, the method comprises the steps that a user uses a check code for verification, whether the user using the check code for verification is an authorized user capable of being verified or not is judged, an authorized user check code verification process data set is obtained, and whether the authorized user can obtain encrypted data or not is judged. The existing security encryption verification method based on the cloud service still needs to be further improved in the aspects of data privacy protection, identity authentication and the like, the data is encrypted, a verification code is updated and verified, the data is prevented from being acquired by an unauthorized user, and the confidentiality and the tampering resistance of the data are improved.

Description

Technical Field

[0001] The present invention relates to the technical field of data encryption verification, and specifically relates to a secure encryption verification method based on cloud services. Background Art

[0002] With the rapid development of cloud computing and big data technologies, more and more individuals and organizations have transferred data storage and processing to the cloud, which makes it easier for data to be at risk of leakage or tampering during transmission and storage. To ensure the security and integrity of data, experts have started to focus on how to use encryption and verification methods to ensure the secure storage and transmission of data in the cloud. The research on secure encryption verification methods involves the encryption protection of data and verifies the integrity and consistency of data to ensure that the data has not been tampered with or damaged during transmission and storage. In the fields of network security, data privacy protection, cloud computing security, etc., the research on secure encryption verification methods is an important research direction. Continuously exploring and improving secure encryption verification methods can enhance the security and reliability of data and provide users with a more secure cloud service experience.

[0003] For example, the invention patent with the publication number CN113379463A discloses a site selection method, device, equipment and storage medium, which relates to the technical field of computers, especially the technical field of blockchain, and can be used for cloud computing and cloud services. The specific implementation solution is as follows: in response to a site selection request from a task requester, determine the first feature data ciphertext of candidate grids in the target area and the first sub-public key associated with the first feature data ciphertext; verify the usage permission of the first feature data ciphertext; in the case of passing the verification, decrypt the first feature data ciphertext according to the first sub-public key and the first encryption public key of the first feature data source to obtain the first feature data original text; select a target grid from the candidate grids according to the first feature data original text. The embodiments of the present disclosure can improve data security.

[0004] Nowadays, there are still some deficiencies in the research on a secure encryption verification method based on cloud services. Specifically, the management of traditional verification codes is not secure enough, and the existing secure encryption verification methods based on cloud services still need to be further improved in aspects such as data privacy protection and identity authentication, which may cause users' identities to be disguised or identity information to be stolen, resulting in serious security risks. The insecure management of verification codes may lead to data tampering or loss during data transmission, thus destroying the integrity and reliability of data. The imperfect identity authentication may cause the system to make mistakes or errors when processing large-scale data, reducing the reliability and stability of the system. Summary of the Invention

[0005] In view of the deficiencies of the prior art, the present invention provides a security encryption verification method based on cloud services, which can effectively solve the problems involved in the above-mentioned background technology.

[0006] To achieve the above objectives, the present invention is realized through the following technical solutions: A security encryption verification method based on cloud services, including the following steps: encrypt the data to obtain an encrypted data status data set, and based on the obtained encrypted data status data set, determine whether the encrypted data verification code needs to be updated; distribute the updated verification code to authorized users to obtain a verification code distribution process data set, and based on the obtained verification code distribution process data set, determine whether the verification code is successfully distributed to the authorized users; the user uses the verification code for verification to obtain a user biometric data set, and based on the obtained user biometric data set, determine whether the user using the verification code for verification is an authorized user who can perform verification; obtain an authorized user verification code verification process data set, and based on the obtained authorized user verification code verification process data set, determine whether the authorized user can obtain the encrypted data.

[0007] As a further method, based on the obtained encrypted data status data set, determine whether the encrypted data verification code needs to be updated. The specific analysis process is as follows: obtain the encrypted data status data set, and the encrypted data status data set specifically includes the time duration from the current time to the last update of the encrypted data verification code and the number of consecutive verification failures of the encrypted data; based on the obtained encrypted data status data set, comprehensively analyze to obtain an encrypted data status characteristic value, and the encrypted data status characteristic value is used as the analysis basis for determining whether the encrypted data verification code needs to be updated; compare the encrypted data status characteristic value with the encrypted data status definition characteristic value stored in the database; if the encrypted data status characteristic value is higher than or equal to the encrypted data status definition characteristic value, the encrypted data verification code corresponding to the encrypted data status characteristic value needs to be updated; if the encrypted data status characteristic value is lower than the encrypted data status definition characteristic value, the encrypted data verification code corresponding to the encrypted data status characteristic value does not need to be updated.

[0008] As a further method, for the encrypted data status characteristic value, the specific analysis process is as follows: ; where is the encrypted data status characteristic value, is the time duration from the current time to the last update of the encrypted data verification code, is the number of consecutive verification failures of the encrypted data, is the compensation factor for the time duration from the current time to the last update of the encrypted data verification code set, is the compensation factor for the number of consecutive verification failures of the encrypted data set.

[0009] As a further method, based on the obtained dataset of the verification code distribution process, it is determined whether the verification code has been successfully distributed to the authorized user. The specific analysis process is as follows: Obtain the dataset of the verification code distribution process, which specifically includes the transmission network bandwidth of the verification code distribution process, the transmission packet loss rate of the verification code distribution process, and the transmission delay of the verification code distribution process; Based on the obtained dataset of the verification code distribution process, comprehensively analyze to obtain the evaluation value of the verification code distribution process, and use the evaluation value of the verification code distribution process as the analysis basis for determining whether the verification code has been successfully distributed to the authorized user; Compare the evaluation value of the verification code distribution process with the reference evaluation value of the verification code distribution process stored in the database; If the evaluation value of the verification code distribution process is higher than or equal to the reference evaluation value of the verification code distribution process, the verification code corresponding to the evaluation value of the verification code distribution process has been successfully distributed to the authorized user; If the evaluation value of the verification code distribution process is lower than the reference evaluation value of the verification code distribution process, the verification code corresponding to the evaluation value of the verification code distribution process has not been successfully distributed to the authorized user, then update the encrypted data verification code and redistribute the updated verification code to the authorized user.

[0010] As a further method, for the evaluation value of the verification code distribution process, the specific analysis process is as follows: ; In the formula, is the evaluation value of the verification code distribution process, is the transmission network bandwidth of the verification code distribution process, is the transmission packet loss rate of the verification code distribution process, is the transmission delay of the verification code distribution process, is the compensation factor for the transmission network bandwidth of the verification code distribution process set, is the compensation factor for the transmission packet loss rate of the verification code distribution process set, is the compensation factor for the transmission delay of the verification code distribution process set, and e is the natural constant.

[0011] As a further method, the user biometric dataset specifically includes the user's keyboard key pressing force, the user's typing time interval, and the distance between the centers of the user's left and right pupils.

[0012] As a further method, based on the obtained user biometric data set, it is determined whether the user verified using the verification code is an authorized user who can be verified. The specific analysis process is as follows: Based on the obtained user biometric data set, the user biometric feature value is comprehensively analyzed. The user biometric feature value is used as the analysis basis for determining whether the user verified using the verification code is an authorized user who can be verified; the user biometric feature value is compared with the authorized user biometric feature values stored in the database to determine whether there is an authorized user biometric feature value equal to the user biometric feature value; if there is an authorized user biometric feature value equal to the user biometric feature value, the user verified using the verification code is an authorized user who can be verified; if there is no authorized user biometric feature value equal to the user biometric feature value, the user verified using the verification code is not an authorized user who can be verified.

[0013] As a further method, for the user biometric feature value, the specific analysis process is as follows: ; In the formula, is the user biometric feature value, is the user's keyboard key pressing force, is the user's typing time interval, is the distance between the centers of the user's left and right pupils, is the compensation factor for the user's keyboard key pressing force set, is the compensation factor for the user's typing time interval set, is the compensation factor for the distance between the centers of the user's left and right pupils set, and e is the natural constant.

[0014] As a further method, the data set for the authorized user verification code verification process specifically includes the number of single verifications of the authorized user verification code, the total duration of a single verification of the authorized user verification code, and the highest byte coincidence ratio between the IP address of the device used for the authorized user verification code verification and the IP addresses stored in the database.

[0015] As a further method, based on the obtained dataset of the authorization user verification code verification process, it is determined whether the authorized user can obtain the encrypted data. The specific analysis process is as follows: Based on the obtained dataset of the authorization user verification code verification process, the evaluation value of the authorization user verification code verification process is comprehensively analyzed. The evaluation value of the authorization user verification code verification process is used as the analysis basis for determining whether the authorized user can obtain the encrypted data; the evaluation value of the authorization user verification code verification process is compared with the evaluation value of the authorization user verification code verification process stored in the database; if the evaluation value of the authorization user verification code verification process is higher than or equal to the evaluation value of the authorization user verification code verification process, the authorization user verification code verification process corresponding to the evaluation value is credible, and the authorized user can obtain the encrypted data; if the evaluation value of the authorization user verification code verification process is lower than the evaluation value of the authorization user verification code verification process, the authorization user verification code verification process corresponding to the evaluation value is not credible, and the authorized user cannot obtain the encrypted data.

[0016] Compared with the prior art, the embodiments of the present invention have at least the following advantages or beneficial effects: (1) By providing a security encryption verification method based on cloud services, the present invention encrypts data and updates and verifies verification codes, preventing data from being obtained or tampered with by unauthorized users. Based on the obtained dataset of the encrypted data status and the dataset of the verification code distribution process, it is determined in real time whether the verification code needs to be updated and whether it has been successfully distributed to authorized users, improving the efficiency and accuracy of verification code distribution. Verifying authorized users improves the accuracy and security of user authentication. Obtaining the dataset of the authorization user verification code verification process can determine whether the authorized user can obtain the encrypted data, thereby strengthening the control of data access and improving the confidentiality and immutability of data.

[0017] (2) By encrypting data and obtaining the dataset of the encrypted data status, it is determined whether the encrypted data verification code needs to be updated. Data encryption can effectively protect data from unauthorized access and theft, ensuring the confidentiality and privacy of data. The dataset of the encrypted data status is used to detect whether the encrypted data verification code needs to be updated, improving the credibility of data during transmission and storage, preventing data from being tampered with during transmission, and timely updating the encrypted data verification code, improving the security management level of data and reducing the risk of data leakage and being attacked, which helps to protect the data security of users.

[0018] (3) By obtaining the dataset of the authorization user verification code verification process, the present invention determines whether an authorized user can obtain encrypted data, verifies the verification code for the authorized user and obtains the verification process dataset, effectively performs data access control, ensures that only authorized users can obtain encrypted data, avoids unauthorized users from obtaining sensitive data, and only allows authorized users to obtain encrypted data, which can effectively protect the data from leakage, protect the confidentiality and privacy of the data, authenticate the authorized users and restrict data access, helps to improve the security of the system, reduces the possibility of the data being accessed by malicious users, and enhances the security of the data. Description of the Drawings

[0019] The present invention will be further described with reference to the accompanying drawings. However, the embodiments in the drawings do not constitute any limitation to the present invention. For those of ordinary skill in the art, without creative efforts, other drawings can also be obtained according to the following drawings.

[0020] Figure 1 It is a schematic flowchart of the method of the present invention.

[0021] Figure 2 It is a step flowchart for determining whether the verification code is successfully distributed to the authorized user. Detailed Embodiments

[0022] Next, the technical solutions in the embodiments of the present invention will be clearly and completely described in conjunction with the accompanying drawings in the embodiments of the present invention. Obviously, the described embodiments are only a part of the embodiments of the present invention, rather than all the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by those of ordinary skill in the art without creative efforts belong to the scope of protection of the present invention.

[0023] Refer to Figure 1 As shown, the present invention provides a secure encryption verification method based on cloud services, including: encrypting data, obtaining an encrypted data status dataset, and based on the obtained encrypted data status dataset, determining whether the encrypted data verification code needs to be updated.

[0024] Specifically, based on the obtained encrypted data status data set, it is determined whether the encrypted data verification code needs to be updated. The specific analysis process is as follows: Obtain the encrypted data status data set. The encrypted data status data set specifically includes the time duration from the current time to the last update of the encrypted data verification code and the number of consecutive failed verifications of the encrypted data. The time duration from the current time to the last update of the encrypted data verification code refers to the time interval from the last update operation of the encrypted data verification code to the current time, which is used to measure the security and integrity of the data. If it is not updated for a long time, the risk of data being tampered with or leaked may increase. The number of consecutive failed verifications of the encrypted data represents the number of consecutive failures of the data verification code during a series of data verification processes, reflecting the stability of the system and the reliability of the data. An increase in the number of consecutive failed verifications may mean that the integrity of the data is threatened and further review and processing are required; Based on the obtained encrypted data status data set, the encrypted data status eigenvalue is comprehensively analyzed. The encrypted data status eigenvalue is used as the analysis basis for determining whether the encrypted data verification code needs to be updated; Compare the encrypted data status eigenvalue with the encrypted data status definition eigenvalue stored in the database; If the encrypted data status eigenvalue is higher than or equal to the encrypted data status definition eigenvalue, the encrypted data verification code corresponding to the encrypted data status eigenvalue needs to be updated; If the encrypted data status eigenvalue is lower than the encrypted data status definition eigenvalue, the encrypted data verification code corresponding to the encrypted data status eigenvalue does not need to be updated.

[0025] In a specific embodiment, based on the obtained encrypted data status data set, determining whether the encrypted data verification code needs to be updated can achieve an automated decision on the update of the encrypted data verification code. According to the preset threshold, it is judged whether the verification code needs to be updated, reducing the cost and time of manual intervention and decision-making. The eigenvalue obtained by comprehensively analyzing the encrypted data status data set realizes the real-time monitoring and evaluation of the encrypted data status, timely discovers data security problems, and takes corresponding measures to protect the integrity and security of the data. Regularly updating the encrypted data verification code improves the security and integrity of the data and reduces the risk of data being tampered with or leaked. Timely updating the verification code helps protect the data from malicious attacks. Setting appropriate encrypted data status definition eigenvalues, judging whether to update the encrypted data verification code according to the actual situation of the system, reduces the risk of data being tampered with or leaked, improves the security of the data, automates the process of updating the encrypted data verification code, and ensures the traceability of the data update operation, which helps the system meet the requirements of relevant standards in terms of data security.

[0026] It should be noted that by encrypting the data, obtaining the encrypted data status data set, and determining whether the encrypted data check code needs to be updated, data encryption can effectively protect the data from unauthorized access and theft, ensure the confidentiality and privacy of the data. Encrypting the data status data set and detecting whether the encrypted data check code needs to be updated improves the credibility of the data during transmission and storage, prevents the data from being tampered with during transmission, updates the encrypted data check code in a timely manner, improves the security management level of the data, reduces the risk of data leakage and being attacked, and helps to protect the data security of users.

[0027] Specifically, for the encrypted data status eigenvalue, the specific analysis process is as follows: ; In the formula, is the encrypted data status eigenvalue, is the time duration from the current time to the last update of the encrypted data check code, is the number of consecutive failed verifications of the encrypted data, is the compensation factor for the time duration from the current time to the last update of the encrypted data check code set, is the compensation factor for the number of consecutive failed verifications of the encrypted data set.

[0028] It should be noted that the above-mentioned encrypted data status eigenvalue is calculated based on the duration from the current time to the last update of the encrypted data verification code and the number of consecutive failed verifications of the encrypted data. By normalizing the duration from the current time to the last update of the encrypted data verification code and the number of consecutive failed verifications of the encrypted data, and tracking the update duration of the encrypted data verification code and the number of failed verifications, the status of the encrypted data can be better monitored. If the encrypted data verification code has not been updated for a long time or the number of consecutive failed verifications is too large, it may indicate potential security risks, helping the system to detect abnormal situations in a timely manner, so as to take measures to protect data security in a timely manner. By calculating the encrypted data status eigenvalue in real time, the system can timely understand the status changes of the encrypted data without waiting for manual inspection or regular updates, improving the real-time and accuracy of data status monitoring, contributing to a quick response to potential security issues. Monitoring the update duration of the encrypted data verification code and the number of failed verifications to achieve preventive maintenance of the encrypted data status, detecting abnormal situations in a timely manner and taking corresponding measures can avoid the occurrence of data security problems, prevent potential data leakage or damage in advance, and also help the system better manage and protect the encrypted data, improving the reliability and stability of the system. Detecting and handling abnormal situations in a timely manner helps reduce the risk of system failures and data loss, ensuring the normal operation of the system. The system can more effectively allocate resources and optimize data management strategies. According to the changes in the data status eigenvalue, the system dynamically adjusts data processing and protection strategies to ensure the security and reliability of the data while maximizing the use of resources. The Network Time Protocol server is used to ensure that all network devices and servers are synchronized at the same time, so that the time since the last verification code update can be accurately calculated. The application server or security gateway will record all failed verification attempts when processing data verification requests. These devices are usually equipped with a logging system that can record consecutive failed verification attempts. The set compensation factors for the duration from the current time to the last update of the encrypted data verification code and the number of consecutive failed verifications of the encrypted data are obtained from the database. Based on historical data, a mapping set of the duration from the current time to the last update of the encrypted data verification code and the number of consecutive failed verifications of the encrypted data in historical measurements and the compensation factors for the duration from the current time to the last update of the encrypted data verification code and the number of consecutive failed verifications of the encrypted data is established to obtain the compensation factors for the duration from the current time to the last update of the encrypted data verification code and the number of consecutive failed verifications of the encrypted data corresponding to the current duration from the current time to the last update of the encrypted data verification code and the number of consecutive failed verifications of the encrypted data.

[0029] Distribute the updated verification code to authorized users, obtain the dataset of the verification code distribution process, and based on the obtained dataset of the verification code distribution process, determine whether the verification code has been successfully distributed to authorized users.

[0030] Specifically, based on the obtained dataset of the verification code distribution process, determine whether the verification code has been successfully distributed to authorized users, such asFigure 2 As shown in the figure, the specific analysis process is as follows: Obtain the dataset of the verification code distribution process. The dataset of the verification code distribution process specifically includes the transmission network bandwidth, transmission packet loss rate, and transmission delay of the verification code distribution process. Network bandwidth refers to the rate of data transmission over the network, which is expressed as the speed of data transmission per second in data volume units such as bits and bytes. The higher the network bandwidth, the faster the data transmission speed, and the verification code can be distributed to the corresponding target devices more quickly. The transmission packet loss rate refers to the ratio of lost data packets during data transmission. The lower the packet loss rate, the higher the reliability of data transmission, and the integrity and accuracy of the verification code distribution are more guaranteed. Transmission delay refers to the time required for data to travel from the sender to the receiver. The smaller the transmission delay, the shorter the data transmission delay, and the verification code can reach the receiver more quickly, thereby improving the efficiency and real-time performance of data transmission. Based on the obtained dataset of the verification code distribution process, comprehensively analyze to obtain the evaluation value of the verification code distribution process. The evaluation value of the verification code distribution process is used as the analysis basis for determining whether the verification code is successfully distributed to the authorized user. Compare the evaluation value of the verification code distribution process with the reference evaluation value of the verification code distribution process stored in the database. If the evaluation value of the verification code distribution process is higher than or equal to the reference evaluation value of the verification code distribution process, the verification code corresponding to the evaluation value of the verification code distribution process is successfully distributed to the authorized user. If the evaluation value of the verification code distribution process is lower than the reference evaluation value of the verification code distribution process, the verification code corresponding to the evaluation value of the verification code distribution process is not successfully distributed to the authorized user, then update the encrypted data verification code and redistribute the updated verification code to the authorized user.

[0031] In a specific embodiment, the higher the bandwidth, the faster the network transmission rate, and the speed of verification code distribution will also increase accordingly. The lower the transmission packet loss rate, the higher the reliability of data transmission, and the accuracy and integrity of verification code distribution are more guaranteed. A high packet loss rate may cause data packets to be lost, affecting the effective transmission of the verification code. The smaller the transmission delay, the lower the data transmission delay, and the verification code can reach the receiver more quickly, thereby improving the real-time performance of data transmission. A long delay may affect the timeliness and real-time performance of data.

[0032] In a specific embodiment, updating the verification code can ensure the integrity of data during transmission, prevent data from being tampered with or lost, and enhance the security of data. Only authorized users can obtain the correct and complete encrypted data. Timely updating of the verification code can improve the stability and reliability of the system, reduce errors and risks during data transmission, enable users to obtain updated data more quickly, and improve the user experience and data access efficiency.

[0033] Furthermore, the evaluation value of the verification code distribution process, the specific analysis process is as follows: ; In the formula, is the evaluation value of the check code distribution process is the transmission network bandwidth of the check code distribution process is the transmission packet loss rate of the check code distribution process is the transmission delay of the check code distribution process is the compensation factor for the transmission network bandwidth of the check code distribution process is the compensation factor for the transmission packet loss rate of the check code distribution process is the compensation factor for the transmission delay of the check code distribution process, where e is the natural constant

[0034] It should be noted that the evaluation value of the above check code distribution process is calculated through the transmission network bandwidth of the check code distribution process, the packet loss rate of the check code distribution process transmission, and the transmission delay of the check code distribution process. By normalizing the transmission network bandwidth of the check code distribution process, the packet loss rate of the check code distribution process transmission, and the transmission delay of the check code distribution process, and comprehensively considering factors such as network bandwidth, packet loss rate, and transmission delay, the performance of the check code distribution process can be evaluated, which helps to identify performance bottlenecks and potential problems, provides directions for improving network transmission efficiency and stability, locates and optimizes the links that do not meet expectations, thereby optimizing the performance of the check code distribution process. Evaluating key indicators such as network bandwidth, packet loss rate, and transmission delay can help evaluate the security of the check code distribution process. If there is a serious packet loss rate or a high transmission delay during the transmission process, it may lead to untimely check code distribution or incomplete data transmission, thereby reducing the security of the data. Timely discovery and resolution of potential security hazards can enhance the security of the check code distribution process. Evaluating indicators such as the transmission network bandwidth, packet loss rate, and transmission delay of the check code distribution process can help system administrators discover and troubleshoot faults in a timely manner, quickly identify the reasons for abnormal data transmission, such as network congestion, equipment failure, or excessive transmission data volume. Timely adjustment of network configuration or optimization of transmission strategies can help reduce the likelihood of faults and improve the stability and reliability of the system. Evaluating indicators such as the transmission network bandwidth, packet loss rate, and transmission delay of the check code distribution process can help the system optimize resource utilization, manage network bandwidth resources more effectively, reduce the packet loss rate during transmission, and reduce transmission delay, thereby maximizing the use of network resources, improving data transmission efficiency and reliability, and saving costs. Specialized network performance monitoring tools such as SolarWinds can monitor the usage of network bandwidth in real time. Network analysis tools can capture and analyze network data packets to help detect whether data packets are lost during transmission. Tools such as Ping or Traceroute can be used to measure the time it takes for a data packet to be sent and received, thereby calculating the transmission delay of the network. The compensation factors for the transmission network bandwidth of the check code distribution process, the packet loss rate of the check code distribution process transmission, and the transmission delay of the check code distribution process are obtained from the database. By establishing a mapping set of the historical measured transmission network bandwidth of the check code distribution process, the packet loss rate of the check code distribution process transmission, the transmission delay of the check code distribution process, and the compensation factors for the transmission network bandwidth of the check code distribution process, the packet loss rate of the check code distribution process transmission, and the transmission delay of the check code distribution process based on historical data, the compensation factors for the transmission network bandwidth of the check code distribution process, the packet loss rate of the check code distribution process transmission, and the transmission delay of the check code distribution process corresponding to the current check code distribution process are obtained.

[0035] The user uses the verification code for verification, obtains the user's biometric data set, and based on the obtained user's biometric data set, determines whether the user using the verification code for verification is an authorized user who can be verified.

[0036] Specifically, the user's biometric data set specifically includes the user's keyboard key pressing force, the user's typing time interval, and the distance between the centers of the user's left and right pupils. The user's keyboard key pressing force refers to the force exerted by the user when pressing the keyboard keys. The key pressing force of each person is different. This biometric feature can be used to identify the user's identity. Some systems can verify the user's identity by monitoring the change in the key pressing force, thereby increasing the security of the system. The user's typing time interval refers to the time interval when the user continuously inputs keyboard characters. The typing speed and interval of each person are different. This feature can be used to identify the user. By analyzing the user's typing time interval, the system can identify legitimate users and conduct identity verification. The distance between the centers of the user's left and right pupils refers to the distance between the centers of the pupils of the two eyes and is used for biometric identification. Since the pupil distance of each person is unique, by measuring and analyzing the distance between the centers of the user's left and right pupils, the system can perform eye biometric identification for identity verification or behavior recognition.

[0037] Specifically, based on the obtained user's biometric data set, it is determined whether the user using the verification code for verification is an authorized user who can be verified. The specific analysis process is as follows: Based on the obtained user's biometric data set, the user's biometric feature value is comprehensively analyzed. The user's biometric feature value is used as the analysis basis for determining whether the user using the verification code for verification is an authorized user who can be verified; the user's biometric feature value is compared with the biometric feature values of authorized users stored in the database to determine whether there is a biometric feature value of an authorized user equal to the user's biometric feature value; if there is a biometric feature value of an authorized user equal to the user's biometric feature value, then the user using the verification code for verification is an authorized user who can be verified; if there is no biometric feature value of an authorized user equal to the user's biometric feature value, then the user using the verification code for verification is not an authorized user who can be verified.

[0038] In a specific embodiment, comprehensively analyzing the user's biometric feature values and the authorized user's biometric feature values stored in the comparison database can enhance the security of the verification process. Biometric features are unique and not easily forged. Using these features for verification can effectively reduce the risks of identity theft and fraud. Comparing the user's biometric feature values with the authorized user's biometric feature values in the database can increase the accuracy of identity verification, effectively identify legitimate users and exclude illegal users, and improve the accuracy rate of verification. Quickly comparing the user's biometric feature values with the authorized user's biometric feature values in the database can quickly respond to the user's verification request, reduce the waiting time, and improve the response speed of the system. Verifying by comparing biometric feature values in real time can make an instant judgment when the user is being verified, without relying on outdated information, bringing a more real-time and reliable verification method.

[0039] Furthermore, for the user's biometric feature values, the specific analysis process is as follows: ; In the formula, is the user's biometric feature value, is the user's keyboard key pressing force, is the user's typing time interval, is the distance between the centers of the user's left and right pupils, is the compensation factor for the user's keyboard key pressing force set, is the compensation factor for the user's typing time interval set, is the compensation factor for the distance between the centers of the user's left and right pupils set, and e is the natural constant.

[0040] It should be noted that the above user biometric feature values are calculated based on the user's keyboard key pressing force, the time interval between user typing, and the distance between the centers of the user's left and right pupils. After normalizing the user's keyboard key pressing force, the time interval between user typing, and the distance between the centers of the user's left and right pupils, the biometric feature values are calculated based on the unique biometric characteristics of the user's body, with high security. Authenticating identities through biometric feature values can effectively prevent identity forgery and fraud, improving the security of the system. Biometric feature values such as the user's keyboard key pressing force, typing time interval, and pupil distance are naturally generated when the user is using the device normally, without the need for additional devices or operations, with high convenience. The user does not need additional operations or to remember passwords, and only needs to operate according to normal habits to complete identity authentication. Biometric feature values are calculated based on the unique biometric characteristics of the user, so they have high accuracy. Compared with traditional identity authentication methods such as passwords or PIN codes, biometric feature values are more difficult to be forged or counterfeited, and can verify the user's identity more accurately. Biometric feature values are calculated based on the user's biometric characteristics, without the need for the user to input sensitive information, which can effectively prevent the leakage and theft of user information, helping to protect the user's privacy and personal information security. The biometric characteristics of different users are unique. Identifying based on biometric feature values such as the user's keyboard key pressing force, typing time interval, and pupil distance can achieve personalized identity authentication, improving the user experience and security. The keyboard is equipped with a force sensor that can measure the force of each key press. The software program can run in the background and record the timestamp of each key press, thereby calculating the time interval between two key presses. The eye tracker can capture the movement and positioning of the eyeball through a high-precision camera, and then measure the pupil distance. The compensation factors for the set user's keyboard key pressing force, the time interval between user typing, and the distance between the centers of the user's left and right pupils are obtained from the database. Based on historical data, a mapping set of the user's keyboard key pressing force, the time interval between user typing, and the distance between the centers of the user's left and right pupils in historical measurements and the compensation factors for the user's keyboard key pressing force, the time interval between user typing, and the distance between the centers of the user's left and right pupils is established, and the compensation factors for the user's keyboard key pressing force, the time interval between user typing, and the distance between the centers of the user's left and right pupils corresponding to the current user's keyboard key pressing force, the time interval between user typing, and the distance between the centers of the user's left and right pupils are obtained.

[0041] Obtain the verification process dataset of the authorized user verification code. Based on the obtained verification process dataset of the authorized user verification code, determine whether the authorized user can obtain the encrypted data.

[0042] Specifically, the dataset for verifying the authorization user verification code process specifically includes the number of single verifications of the authorization user verification code, the total duration of a single verification of the authorization user verification code, the highest byte coincidence ratio between the IP address of the device used for verifying the authorization user verification code and the IP addresses of each device stored in the database. The number of single verifications of the authorization user verification code indicates the number of times the authorization user enters the verification code during one verification. The total duration of a single verification of the authorization user verification code represents the total time spent by the authorization user during the entire process of one verification. The highest byte coincidence ratio between the IP address of the device used for verifying the authorization user verification code and the IP addresses of each device stored in the database refers to the situation with the highest byte similarity ratio between the IP address of the device used by the user during the verification process and the IP addresses of each device stored in the database. This ratio can be used to determine whether the device used by the user is similar to or matches the device previously authenticated.

[0043] Specifically, based on the obtained dataset for the authorization user verification code verification process, it is determined whether the authorization user can obtain encrypted data. The specific analysis process is as follows: Based on the obtained dataset for the authorization user verification code verification process, the evaluation value of the authorization user verification code verification process is comprehensively analyzed. The evaluation value of the authorization user verification code verification process is used as the analysis basis for determining whether the authorization user can obtain encrypted data; the evaluation value of the authorization user verification code verification process is compared with the evaluation value of the authorization user verification code verification process stored in the database; if the evaluation value of the authorization user verification code verification process is higher than or equal to the evaluation value of the authorization user verification code verification process, then the authorization user verification code verification process corresponding to this evaluation value is credible, and the authorization user can obtain encrypted data; if the evaluation value of the authorization user verification code verification process is lower than the evaluation value of the authorization user verification code verification process, then the authorization user verification code verification process corresponding to this evaluation value is not credible, and the authorization user cannot obtain encrypted data.

[0044] In a specific embodiment, by comprehensively analyzing the evaluation value of the authorized user verification code verification process, it is possible to more accurately determine whether the user's identity is trustworthy, which helps to reduce misjudgment and improve the accuracy of authentication. Only when the evaluation value of the authorized user verification code verification process is higher than or equal to the evaluation value stored in the database can it be determined that the user is a trustworthy authorized user, and then obtain the encrypted data. Evaluating the authorized user verification code verification process and comparing it with the data stored in the database helps the system to promptly identify and prevent malicious or unauthorized users from obtaining encrypted data, intercepting untrusted verification processes or requiring further verification, thereby improving the security of the system. On the premise of ensuring security, accurate evaluation of authorized users can improve the user experience. Authorized users can obtain encrypted data faster, enhancing the user experience while ensuring the security and reliability of the system. Evaluating the authorized user verification code verification process can promptly detect and quickly respond to potential security risks. If the evaluation value of a certain authorized user verification code verification process is low, the system can identify it in real time and take corresponding security measures.

[0045] In a specific embodiment, the evaluation value of the authorized user verification code verification process, the specific analysis process is as follows: ; In the formula, is the evaluation value of the authorized user verification code verification process, is the number of single verifications of the authorized user verification code, is the total duration of a single verification of the authorized user verification code, is the highest proportion of byte coincidence between the IP address of the device used for authorized user verification code verification and the IP addresses of each device stored in the database, is the compensation factor for the number of single verifications of the authorized user verification code set, is the compensation factor for the total duration of a single verification of the authorized user verification code set, is the compensation factor for the highest proportion of byte coincidence between the IP address of the device used for authorized user verification code verification and the IP addresses of each device stored in the database set.

[0046] It should be noted that the evaluation value of the above-mentioned authorized user verification code verification process is calculated through the number of single verifications of the authorized user verification code, the total duration of a single verification of the authorized user verification code, and the highest byte coincidence ratio between the IP address of the device used for the authorized user verification code verification and the IP addresses of each device stored in the database. Normalize the number of single verifications of the authorized user verification code, the total duration of a single verification of the authorized user verification code, and the highest byte coincidence ratio between the IP address of the device used for the authorized user verification code verification and the IP addresses of each device stored in the database, and analyze the evaluation value of the authorized user verification code verification process, which can evaluate the system security. The number of single verifications and the total duration of the authorized user verification code can be used to detect whether there are abnormal verification behaviors and identify possible fraud behaviors. The coincidence ratio of the verification device IP addresses can help detect whether there are illegal access or account theft behaviors. Analyzing the evaluation value can help detect abnormal behaviors of authorized users. If the verification times or duration of a certain authorized user are significantly higher than the average level, there may be a risk of identity theft. Exclude the possibility of incorrect verification or malicious attacks, improve the accuracy of the verification process, further improve the system's recognition accuracy of authorized users, reduce false positives and misjudgments. Evaluating the evaluation value of the authorized user verification code verification process can promptly identify and correct possible problems in the system, thereby optimizing the verification process, enhancing the user experience, and improving user satisfaction. It can promptly discover possible security risks, strengthen the security guarantee mechanism, adjust the verification strategy in a timely manner, strengthen the verification of user identities, and reduce the risks of identity theft and fraud. The server can record the verification requests of each user. When the user submits the verification code for verification, the application program on the server side can count the number of verification attempts in a single session. The application server can record timestamps at the start and end of the user's verification, and determine the total duration of a single verification by calculating the difference between these two timestamps. Network security and access management tools can analyze the IP address and compare it with the records in the database to calculate the byte coincidence rate and find the IP address with the highest matching degree. The compensation factors for the number of single verifications of the authorized user verification code, the total duration of a single verification of the authorized user verification code, and the highest byte coincidence ratio between the IP address of the device used for the authorized user verification code verification and the IP addresses of each device stored in the database are obtained from the database. Establish a mapping set of the number of single verifications of the authorized user verification code, the total duration of a single verification of the authorized user verification code, the highest byte coincidence ratio between the IP address of the device used for the authorized user verification code verification and the IP addresses of each device stored in the database and the compensation factors for the number of single verifications of the authorized user verification code, the total duration of a single verification of the authorized user verification code, and the highest byte coincidence ratio between the IP address of the device used for the authorized user verification code verification and the IP addresses of each device stored in the database based on historical data.Obtain the single - verification times of the current authorized user verification code, the total duration of a single verification of the authorized user verification code, the IP address of the device used for verifying the authorized user verification code, and the compensation factor corresponding to the highest byte - coincidence ratio between the IP address of the device used for verifying the authorized user verification code and each IP address stored in the database, the total duration of a single verification of the authorized user verification code, and the highest byte - coincidence ratio between the IP address of the device used for verifying the authorized user verification code and each IP address stored in the database.

[0047] It should be noted that by obtaining the dataset of the authorized user verification code verification process above, determining whether the authorized user can obtain the encrypted data, verifying the verification code for the authorized user and obtaining the verification process dataset, effective data access control can be carried out to ensure that only authorized users can obtain the encrypted data, prevent unauthorized users from obtaining sensitive data, and only allowing authorized users to obtain the encrypted data can effectively protect the data from leakage, protect the confidentiality and privacy of the data. Authenticating the authorized user and restricting data access helps to improve the security of the system, reduce the possibility of the data being accessed by malicious users, and enhance the security of the data.

[0048] It should be noted that by providing a security encryption verification method based on cloud services above, encrypting the data and updating and verifying the verification code, preventing the data from being obtained or tampered with by unauthorized users, and based on the obtained encrypted data status dataset and verification code distribution process dataset, real - time judging whether the verification code needs to be updated and whether it is successfully distributed to the authorized user, improving the efficiency and accuracy of the verification code distribution, verifying the authorized user, improving the accuracy and security of user authentication, and obtaining the authorized user verification code verification process dataset, it can be judged whether the authorized user can obtain the encrypted data, thereby strengthening the control of data access and improving the confidentiality and immutability of the data.

[0049] The above content is only an example and explanation of the structure of the present invention. Those skilled in the art of this technology can make various modifications, supplements, or use similar methods to replace the described specific embodiments, as long as they do not deviate from the structure of the invention or exceed the scope defined by this claim book, they should fall within the protection scope of the present invention.

Claims

1. A security encryption verification method based on cloud services, characterized in that It includes the following steps: Encrypt the data to obtain an encrypted data status data set. Based on the obtained encrypted data status data set, determine whether the encrypted data check code needs to be updated; Distribute the updated check code to authorized users to obtain a check code distribution process data set. Based on the obtained check code distribution process data set, determine whether the check code has been successfully distributed to authorized users; The user uses the check code for verification to obtain a user biometric data set. Based on the obtained user biometric data set, determine whether the user using the check code for verification is an authorized user who can be verified; Obtain an authorized user check code verification process data set. Based on the obtained authorized user check code verification process data set, determine whether the authorized user can obtain the encrypted data.

2. The security encryption verification method based on cloud service according to claim 1, characterized in that: The specific analysis process for determining whether the encrypted data check code needs to be updated based on the obtained encrypted data status data set is as follows: Obtain an encrypted data status data set. The encrypted data status data set specifically includes the time duration from the current time to the last update of the encrypted data check code and the number of consecutive verification failures of the encrypted data; Based on the obtained encrypted data status data set, comprehensively analyze to obtain an encrypted data status characteristic value. The encrypted data status characteristic value is used as the analysis basis for determining whether the encrypted data check code needs to be updated; Compare the encrypted data status characteristic value with the encrypted data status definition characteristic value stored in the database; If the encrypted data status characteristic value is higher than or equal to the encrypted data status definition characteristic value, the encrypted data check code corresponding to the encrypted data status characteristic value needs to be updated; If the encrypted data status characteristic value is lower than the encrypted data status definition characteristic value, the encrypted data check code corresponding to the encrypted data status characteristic value does not need to be updated.

3. A security encryption verification method based on cloud service according to claim 2, characterized in that: The specific analysis process for the encrypted data status characteristic value is as follows: ； Wherein, is the eigenvalue of the encrypted data status feature, is the duration from the current time to the last update of the encrypted data check code, is the number of consecutive failed verifications of the encrypted data, is the compensation factor for the duration from the current time to the last update of the encrypted data check code set, is the compensation factor for the number of consecutive failed verifications of the encrypted data set.

4. A security encryption verification method based on cloud service according to claim 1, characterized in that: The specific analysis process for determining whether the check code has been successfully distributed to authorized users based on the obtained check code distribution process data set is as follows: Obtain a check code distribution process data set. The check code distribution process data set specifically includes the transmission network bandwidth during the check code distribution process, the packet loss rate during the check code distribution process, and the transmission delay during the check code distribution process; Based on the obtained check code distribution process data set, comprehensively analyze to obtain a check code distribution process evaluation value. The check code distribution process evaluation value is used as the analysis basis for determining whether the check code has been successfully distributed to authorized users; Compare the check code distribution process evaluation value with the check code distribution process reference evaluation value stored in the database; If the check code distribution process evaluation value is higher than or equal to the check code distribution process reference evaluation value, the check code corresponding to the check code distribution process evaluation value has been successfully distributed to authorized users; If the check code distribution process evaluation value is lower than the check code distribution process reference evaluation value, the check code corresponding to the check code distribution process evaluation value has not been successfully distributed to authorized users. Then, update the encrypted data check code and redistribute the updated check code to authorized users.

5. A security encryption verification method based on cloud service according to claim 4, characterized in that: The specific analysis process for the check code distribution process evaluation value is as follows: ； Wherein, is the evaluation value of the check code distribution process, is the transmission network bandwidth of the check code distribution process, is the transmission packet loss rate of the check code distribution process, is the transmission delay of the check code distribution process, is the compensation factor for the transmission network bandwidth of the set check code distribution process, is the compensation factor for the transmission packet loss rate of the set check code distribution process, is the compensation factor for the transmission delay of the set check code distribution process, and e is the natural constant.

6. A security encryption verification method based on cloud service according to claim 1, characterized in that: The user biometric data set specifically includes the user's keyboard key pressing force, the user's typing time interval, and the distance between the centers of the user's left and right pupils.

7. A security encryption verification method based on cloud service according to claim 6, characterized in that: Based on the obtained user biometric data set, determine whether the user verified with the verification code is an authorized user who can be verified. The specific analysis process is as follows: Based on the obtained user biometric data set, comprehensively analyze to obtain the user biometric feature value, and the user biometric feature value is used as the analysis basis for determining whether the user verified with the verification code is an authorized user who can be verified; Compare the user biometric feature value with the authorized user biometric feature values stored in the database to determine whether there is an authorized user biometric feature value equal to the user biometric feature value; If there is an authorized user biometric feature value equal to the user biometric feature value, the user verified with the verification code is an authorized user who can be verified; If there is no authorized user biometric feature value equal to the user biometric feature value, the user verified with the verification code is not an authorized user who can be verified.

8. A security encryption verification method based on cloud service according to claim 7, characterized in that: The specific analysis process of the user biometric feature value is as follows: ； Wherein, is the user's biometric feature value, is the user's keyboard key pressing force, is the user's typing time interval, is the distance between the centers of the user's left and right pupils, is the compensation factor for the user's keyboard key pressing force set, is the compensation factor for the user's typing time interval set, is the compensation factor for the distance between the centers of the user's left and right pupils set, and e is the natural constant.

9. A security encryption verification method based on cloud service according to claim 1, characterized in that: The data set of the authorized user verification code verification process specifically includes the number of single verifications of the authorized user verification code, the total duration of single verification of the authorized user verification code, and the highest byte coincidence ratio between the IP address of the device used for the authorized user verification code verification and the IP addresses of each device stored in the database.

10. A security encryption verification method based on cloud service according to claim 9, characterized in that: Based on the obtained data set of the authorized user verification code verification process, determine whether the authorized user can obtain the encrypted data. The specific analysis process is as follows: Based on the obtained data set of the authorized user verification code verification process, comprehensively analyze to obtain the evaluation value of the authorized user verification code verification process, and the evaluation value of the authorized user verification code verification process is used as the analysis basis for determining whether the authorized user can obtain the encrypted data; Compare the evaluation value of the authorized user verification code verification process with the evaluation value of the authorized user verification code verification process stored in the database; If the evaluation value of the authorized user verification code verification process is higher than or equal to the evaluation value of the authorized user verification code verification process, the authorized user verification code verification process corresponding to the evaluation value of the authorized user verification code verification process is credible, and the authorized user can obtain the encrypted data; If the evaluation value of the authorized user verification code verification process is lower than the evaluation value of the authorized user verification code verification process, the authorized user verification code verification process corresponding to the evaluation value of the authorized user verification code verification process is not credible, and the authorized user cannot obtain the encrypted data.

Images