Weak current intelligent cloud computing platform construction method and system and storage medium

Abstract

The invention relates to the technical field of data security, and particularly discloses a weak current intelligent cloud computing platform construction method and system and a storage medium, and the method comprises the steps: obtaining an identity recognition result of a user, and judging the security state of a weak current intelligent cloud computing platform based on the identity recognition result; data stored in the weak current intelligent cloud computing platform is recorded as target data, and when the security state of the weak current intelligent cloud computing platform is secure, the target data is not encrypted; and marking the user whose identity recognition result is passed as a secure user, when the security state of the weak current intelligent cloud computing platform is unsecure, opening a corresponding sub-partition based on the situation that a single secure user browses the target data, and when all the secure users open the corresponding sub-partitions, opening a corresponding sub-partition based on the situation that the single secure user browses the target data. And encrypting the target data. According to the invention, the data security is protected, and the convenience during data use is improved.

Description

Technical Field

[0001] The present invention relates to the technical field of data security, and particularly to a method, system, and storage medium for constructing a weak-current intelligent cloud computing platform. Background Art

[0002] Weak-current intelligence refers to the use of modern information technology and intelligent means to digitally upgrade and intelligently transform traditional weak-current systems (such as security monitoring, access control, alarm systems, building intercom, etc.), so as to achieve automated management, real-time monitoring, data collection and analysis, fault warning, as well as remote control and centralized scheduling of the system.

[0003] Relying on the efficient storage and data processing capabilities of the cloud computing platform, a large amount of data generated after the digital upgrade of traditional weak-current systems is aggregated to the cloud. This centralized storage mode not only enables the system to achieve multiple intelligent functions such as real-time monitoring, data collection, and fault warning, but also greatly improves the overall operation efficiency and management convenience of the system.

[0004] However, with the rapid increase in the amount of data and the continuous flow of data during transmission, storage, and sharing, the issues of its privacy and security have become increasingly prominent. Especially when it comes to the access of personnel in the building, the operating status of equipment, and other sensitive information, once it is attacked by an external network or illegally invaded during storage and processing on the cloud platform, there may be risks of data leakage, tampering, and even loss, which greatly threatens the privacy security of users.

[0005] Currently, commonly used encryption methods include symmetric encryption (such as AES encryption) and asymmetric encryption (such as RSA encryption), etc. Through these methods, the original data can be transformed into ciphertext that can only be recognized after legitimate decryption. Although this technology can effectively prevent unauthorized data access and tampering, it also means that users must first perform a decryption operation when obtaining the required information, thus having certain limitations in terms of convenience. Summary of the Invention

[0006] The purpose of the present invention is to provide a method for constructing a weak-current intelligent cloud computing platform to solve the following technical problems:

[0007] Currently, commonly used encryption methods include symmetric encryption (such as AES encryption) and asymmetric encryption (such as RSA encryption), etc. Through these methods, the original data can be transformed into ciphertext that can only be recognized after legitimate decryption. Although this technology can effectively prevent unauthorized data access and tampering, it also means that users must first perform a decryption operation when obtaining the required information, thus having certain limitations in terms of convenience.

[0008] The purpose of the present invention can be achieved through the following technical solutions:

[0009] A method for constructing a weak-current intelligent cloud computing platform includes the following steps:

[0010] Obtain the identity recognition result of the user. The identity recognition result includes passed and not passed. Based on the identity recognition result, determine the security status of the weak-current intelligent cloud computing platform. The security status includes secure and insecure;

[0011] Record the data stored in the weak-current intelligent cloud computing platform as target data. When the security status of the weak-current intelligent cloud computing platform is secure, the target data is not encrypted;

[0012] Mark the user with a passed identity recognition result as a secure user. When the security status of the weak-current intelligent cloud computing platform is insecure, open a corresponding sub-zone based on the situation of a single secure user browsing the target data. After all secure users open the corresponding sub-zones, encrypt the target data.

[0013] As a further solution of the present invention: Determining the security status of the weak-current intelligent cloud computing platform based on the identity recognition result includes:

[0014] Record the time point t1 when the identity recognition result is not passed. Set the monitoring period [t1, t1 + t], where t represents a preset time length. Real-time statistics the cumulative number n of times the identity recognition result is not passed within the monitoring period. When the cumulative number reaches the preset cumulative number threshold, determine that the security status of the weak-current intelligent cloud computing platform is insecure at the time point t2, where the time point t2 represents the time point when the cumulative number reaches the preset cumulative number threshold;

[0015] Except for the above situation, determine that the security status of the weak-current intelligent cloud computing platform is secure.

[0016] As a further solution of the present invention: Opening a corresponding sub-zone based on the situation of a single secure user browsing the target data includes:

[0017] Obtain the time point t3 when the user is marked as the secure user. Obtain the target data browsed by the secure user after the time point t3, mark it as standard data, obtain the time stamp corresponding to the standard data, and obtain the minimum time stamp Cmin and the maximum time stamp Cmax;

[0018] Set the time interval [Cmin - C, Cmax + C], where C is a preset value. Copy the target data corresponding to the target device within the time interval [Cmin - C, Cmax + C] to obtain copied data, where the target device represents the weak-current intelligent device that generates the standard data;

[0019] Create sub - partitions, where the sub - partitions are used to store the replicated data, and the sub - partitions only allow access by the corresponding secure users. After the corresponding secure users log out of the weak - current intelligent cloud computing platform, the sub - partitions are automatically destroyed.

[0020] As a further solution of the present invention: After all the secure users create the corresponding sub - partitions, encrypting the target data includes:

[0021] Obtain the type of the target data, where the type includes text, pictures, and videos;

[0022] When the type of the target data is text, encode it to obtain numerical data;

[0023] When the type of the target data is a picture, encrypt the target data through chaotic encryption;

[0024] When the type of the target data is a video, perform frame - splitting processing on it to obtain video frames. Use the time stamp of the video frame as the number of the video frame, randomly exchange the numbers of the video frames, and recombine them into a video after the exchange of numbers.

[0025] As a further solution of the present invention: Obtaining the identity recognition result of a user includes:

[0026] Collect the biometric features of the user, where the biometric features include fingerprints and irises. When the biometric features match the pre - stored biometric features, the identity recognition result is passed; otherwise, the identity recognition result is not passed.

[0027] As a further solution of the present invention: When the security status of the weak - current intelligent cloud computing platform is insecure, send a warning message for reporting.

[0028] A weak - current intelligent cloud computing platform construction system includes:

[0029] A status judgment module: Obtain the identity recognition result of the user, where the identity recognition result includes passed and not passed. Based on the identity recognition result, determine the security status of the weak - current intelligent cloud computing platform, where the security status includes secure and insecure;

[0030] A security module: Denote the data stored in the weak - current intelligent cloud computing platform as target data. When the security status of the weak - current intelligent cloud computing platform is secure, the target data is not encrypted;

[0031] Encryption module: Mark the user whose identity verification result is passed as a secure user. When the security status of the weak current intelligent cloud computing platform is insecure, based on the browsing situation of a single secure user for the target data, create a corresponding subpartition. After all secure users have created the corresponding subpartitions, encrypt the target data.

[0032] A storage medium for building a weak current intelligent cloud computing platform, on which a computer program is stored. When the computer program is executed by a processor, the processor is caused to execute the steps of the method for building a weak current intelligent cloud computing platform.

[0033] Advantages of the present invention: Compared with the prior art:

[0034] 1) The data in the cloud computing platform in a secure state is not encrypted. In this way, there is no need to perform data decryption operations in daily business, avoiding the performance overhead caused by frequent encryption and decryption calculations, and improving the access speed and work efficiency.

[0035] 2) By real-time monitoring of the user biometric identification process, when an abnormal situation of multiple failed identifications is detected within a preset time window, it will be automatically determined that the weak current intelligent cloud computing platform is in an insecure state; at this moment, trigger the data encryption process; this monitoring mechanism has strong timeliness and flexibility, and will not delay the prevention of potential security threats. The encryption action is completed in the first time, so that attackers or unauthorized personnel cannot directly obtain the plaintext data; at the same time, in order to ensure that the risk can be noticed in time, a warning message will also be sent in an insecure state, so that the security administrator or relevant management department can carry out corresponding handling.

[0036] 3) When some secure users who have passed biometric identification still need to use data in an insecure state, the present invention creates subpartitions to isolate and store information related to the target data they access. The subpartitions are only open to the corresponding secure users. Even if the main system is determined to be insecure, as long as the secure users do have legitimate access rights, they can continue to use the data related to their work in a relatively isolated area; moreover, only the necessary and relevant part of the target data is copied in the subpartitions to minimize the exposure surface.

[0037] 4) When the corresponding secure user exits, the subpartition will be automatically destroyed, and all the relevant data copied in will also be completely cleared. The platform will not leave redundant, sensitive or redundant data storage in the system, significantly reducing the possibility of being attacked or stolen afterwards.

[0038] 5) When encrypting the target data, the type of the target data will be identified first, and different encryption or transformation means will be adopted for text, pictures, and videos respectively, so as to flexibly cope with various types and scales of data, taking into account both encryption efficiency and security. BRIEF DESCRIPTION OF THE DRAWINGS

[0039] The present invention will be further described below with reference to the accompanying drawings.

[0040] Figure 1 is a schematic flowchart of a method for constructing a weak current intelligent cloud computing platform of the present invention. DETAILED DESCRIPTION OF THE EMBODIMENTS

[0041] The technical solutions in the embodiments of the present invention will be clearly and completely described below with reference to the accompanying drawings in the embodiments of the present invention. Obviously, the described embodiments are only a part of the embodiments of the present invention, rather than all the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by those of ordinary skill in the art without creative efforts shall fall within the protection scope of the present invention.

[0042] Please refer to Figure 1 As shown, the present invention is a method for constructing a weak current intelligent cloud computing platform, including the following steps:

[0043] Obtain the identity recognition result of the user, where the identity recognition result includes pass and fail, and determine the security status of the weak current intelligent cloud computing platform based on the identity recognition result, where the security status includes secure and insecure;

[0044] In a preferred embodiment of the present invention, obtaining the identity recognition result of the user includes:

[0045] Collect the biometric features of the user, where the biometric features include fingerprints and irises. When the biometric features match the pre-stored biometric features, the identity recognition result is pass; otherwise, the identity recognition result is fail.

[0046] It can be understood that in specific implementation, a fingerprint recognition device can be configured on the terminal device to obtain the fingerprint image of the user and convert it into a digital feature template, and the pre-registered fingerprint template can be retrieved from the server database or local storage for similarity comparison; when the similarity is higher than the set threshold, it is determined that the fingerprint match is successful. When further combined with iris recognition, the user needs to face the iris recognition camera for eye scanning, and the collected iris pattern will also be converted into an encrypted feature and compared with the iris template in the database; if either the fingerprint or the iris does not match, it is determined that the user recognition fails and the result of failed recognition is output;

[0047] Another preferred embodiment of the present invention is to send a warning message for reporting when the security status of the weak-current intelligent cloud computing platform is insecure;

[0048] Another preferred embodiment of the present invention is that determining the security status of the weak-current intelligent cloud computing platform based on the identity recognition result includes:

[0049] Record the time point t1 when the identity recognition result is not passed, set the monitoring period [t1, t1 + t], where t represents a preset time length, and statistically count the cumulative number n of times when the identity recognition result is not passed within the monitoring period in real time. When the cumulative number reaches the preset cumulative number threshold, determine that the security status of the weak-current intelligent cloud computing platform is insecure at the time point t2, where the time point t2 represents the time point when the cumulative number reaches the preset cumulative number threshold;

[0050] Except for the above situation, determine that the security status of the weak-current intelligent cloud computing platform is secure.

[0051] Exemplarily, t can be set to 3 minutes. When the recognition result is first detected as not passed, record the time point t1, and then collect the subsequent face recognition, fingerprint or iris verification results in real time within the monitoring period [t1, t1 + 3 minutes], and statistically count the cumulative number n of times that are not passed. For example, if someone enters the wrong biometric features continuously 3 times or fails to match successfully within these 3 minutes, it means that the system may be facing an abnormal access attempt. Therefore, at the actual occurrence time of the 3rd recognition not passed (denoted as t2), determine that the platform enters an insecure state, and further trigger security policies such as encryption or warning; if the number of times not passed within the monitoring time does not reach 3 times or still does not reach the threshold after exceeding the monitoring period, the platform automatically maintains or resumes to a secure state, and will not overly affect the normal use of the system due to a few wrong operations;

[0052] Denote the data stored in the weak-current intelligent cloud computing platform as target data. When the security status of the weak-current intelligent cloud computing platform is secure, the target data is not encrypted;

[0053] It should be noted that in specific practices, for example, a security monitoring and management platform daily records information of visitors, real-time video streams, sensor data, etc. These contents are uniformly regarded as target data. When the system is in a safe state, the platform will directly store all newly generated and existing target data in plain text in the database without performing any encryption algorithms. For example, when a surveillance camera uploads images to the cloud every second, if the system detects no abnormal events and risks and determines that the safe state is still valid, it will immediately save these image data in the conventional file format, and there is no need to decrypt them first when retrieving or reading them later. The original content can be quickly obtained directly through the background interface or the front-end application programming interface, reducing the computational time and bandwidth consumption caused by encryption and decryption. For text data, such as the visitor registration information in the access control system log, when the system determines there is no risk, it is also directly written into the plain text table of the database, enabling administrators to quickly view and search. This not only facilitates subsequent statistical analysis but also ensures that the platform maintains high access speed and system throughput during daily operation, avoiding excessive encryption overhead for data with lower sensitivity in the safe state, thus achieving a balance between the efficiency of daily business processing and security requirements;

[0054] Mark the users with the identity recognition result of passing as safe users. When the security state of the weak current intelligent cloud computing platform is unsafe, based on the situation of a single safe user browsing the target data, create a corresponding sub-partition. After all the safe users create the corresponding sub-partitions, encrypt the target data;

[0055] It should be noted that it can be imagined that in the weak current intelligent platform of a certain building, subsystems such as access control, monitoring, and air conditioning are managed simultaneously. When the platform enters an unsafe state due to detecting multiple identity recognition failures, the system will first mark all users who have passed biometric verification and successful identity authentication as safe users, and then generate an independent sub-partition for each safe user according to the target data browsed or called by the user at this stage. For example, if a security supervisor views the surveillance videos and access card swiping records of a certain floor in the cloud, the system will copy the images and log information closely related to the data viewed by this security supervisor into his exclusive sub-partition and restrict access only to this security supervisor. If other safe users (such as property managers or computer room engineers) also need to view data of different devices, the system will create corresponding sub-partitions for them respectively. Different sub-partitions are isolated from each other, and any user outside this sub-partition cannot view the content inside. After all the verified safe users have completed browsing the data they need and the corresponding sub-partitions are established, when the platform confirms that no other safe users need to directly access the plain text, it will perform a unified encryption operation on the entire batch of target data in the main partition, strengthening the important information in the system in the unsafe state and avoiding more potential risks;

[0056] Another preferred embodiment of the present invention, creating a corresponding sub - partition based on the situation of a single said secure user browsing the target data includes:

[0057] Obtain the time point t3 when the user is marked as the secure user, obtain the target data browsed by the secure user after the time point t3, mark it as standard data, obtain the time stamp corresponding to the standard data, and obtain the minimum time stamp Cmin and the maximum time stamp Cmax;

[0058] Set the time interval [Cmin - C, Cmax + C], where C is a preset value, copy the target data corresponding to the target device within the time interval [Cmin - C, Cmax + C], and obtain the copied data, where the target device represents the weak - current intelligent device that generates the standard data;

[0059] Create a sub - partition, which is used to store the copied data, and the sub - partition only allows the corresponding secure user to access. After the corresponding secure user exits the weak - current intelligent cloud computing platform, the sub - partition is automatically destroyed;

[0060] Exemplarily, assume that the verification passing time point of a secure user is detected at t3 when an intelligent building is in an insecure state. Then the system will record all the target data browsed or queried by this secure user on the cloud platform since this moment and mark it as standard data. For example, this secure user views some access control card - swiping records and video surveillance clips in the background, and each record will carry a time stamp accurate to the second level. Therefore, the system can identify the earliest time stamp Cmin and the latest time stamp Cmax corresponding to all the data viewed by this user. To include the information that has temporal or logical association with these data in the protection scope in the insecure state, the platform will extend a preset time period C forward and backward based on Cmin and Cmax respectively to form the time interval [Cmin - C, Cmax + C]. Next, the platform will copy all the target data generated by the corresponding weak - current intelligent devices (such as access control controllers, surveillance cameras, air - conditioning sensors, etc.) within this time interval to obtain the copied data related to the user's browsing behavior, and then create a dedicated sub - partition to centrally store these copied data. This sub - partition is only open to the current secure user for access, and any other user or process cannot view or read it; at the same time, once this secure user logs out or disconnects, the platform will automatically destroy this area and the data in it, so that it cannot be mined or stolen by subsequent potential malicious behaviors, thereby strengthening the dynamic isolation protection of sensitive content by the weak - current intelligent cloud computing platform in the abnormal state;

[0061] In a preferred embodiment of the present invention, after all the secure users open the corresponding sub - partitions, encrypting the target data includes:

[0062] Obtain the type of the target data, where the type includes text, pictures, and videos;

[0063] When the type of the target data is text, encode it to obtain numerical data;

[0064] When the type of the target data is a picture, encrypt the target data through chaotic encryption;

[0065] When the type of the target data is a video, perform frame - splitting processing on it to obtain video frames, use the time stamp of the video frame as the number of the video frame, randomly exchange the numbers of the video frames, and recombine them into a video after the exchange of numbers;

[0066] It should be noted that to accommodate different types of weak - current intelligent data, the present invention first identifies the category of each piece of data in the encryption process. For example, some cloud database tables store text information such as visitor lists and device parameters, some storage buckets retain picture files formed by monitoring screenshots or sensor photos, and a large number of video monitoring streams are also archived in the server. The system will first perform encoding processing on text data, converting the original character information into numerical values or byte streams for subsequent optional combination with hashing or high - strength symmetric encryption algorithms; for picture - type data, since it is necessary to strengthen the protection of pixel distribution, the platform can call the chaotic encryption algorithm to significantly increase the difficulty of image restoration by confusing or rearranging pixels and adding random displacements; for video - type data, the video stream is first split into multiple consecutive frames through frame - splitting operations, the time stamp carried by each frame is used as the number, then the frame numbers are randomly shuffled, and finally all the frames are recombined into an encrypted video file in the shuffled order, so that it is difficult to restore the normal picture without decryption or the correct key. After completing the above - mentioned encryption steps, if there is a new access request to use these data at this time, it is necessary to pass through the decryption interface or process of the platform to restore the plaintext, thereby further strengthening the protection of weak - current intelligent data when there are security risks in the system.

[0067] A weak - current intelligent cloud computing platform construction system includes:

[0068] A status judgment module: Obtain the identity recognition result of the user, where the identity recognition result includes passed and not passed, and determine the security status of the weak - current intelligent cloud computing platform based on the identity recognition result, where the security status includes secure and insecure;

[0069] Security module: Denote the data stored in the weak-current intelligent cloud computing platform as target data. When the security status of the weak-current intelligent cloud computing platform is secure, the target data is not encrypted;

[0070] Encryption module: Mark the user whose identity recognition result is passed as a secure user. When the security status of the weak-current intelligent cloud computing platform is insecure, open a corresponding sub-partition based on the situation of a single secure user browsing the target data. After all secure users open the corresponding sub-partitions, encrypt the target data.

[0071] A storage medium for constructing a weak-current intelligent cloud computing platform, on which a computer program is stored. When the computer program is executed by a processor, the processor is caused to execute the steps of the method for constructing a weak-current intelligent cloud computing platform.

[0072] The above has described an embodiment of the present invention in detail, but the content is only a preferred embodiment of the present invention and cannot be considered as limiting the scope of implementation of the present invention. All equivalent changes and improvements made according to the scope of the application of the present invention shall still fall within the scope covered by the patent of the present invention.

Claims

1. A method for constructing a weak current intelligent cloud computing platform, characterized in that, Including the following steps: Obtain the user's identity recognition result, where the identity recognition result includes pass and fail, and determine the security status of the weak current intelligent cloud computing platform based on the identity recognition result, where the security status includes secure and insecure; Record the data stored in the weak current intelligent cloud computing platform as target data. When the security status of the weak current intelligent cloud computing platform is secure, the target data is not encrypted; Mark the user with a pass identity recognition result as a secure user. When the security status of the weak current intelligent cloud computing platform is insecure, open corresponding sub - partitions based on the browsing situation of each secure user for the target data. After all secure users have opened the corresponding sub - partitions, encrypt the target data.

2. A method for constructing a weak-current intelligent cloud computing platform according to claim 1, characterized in that, Determining the security status of the weak current intelligent cloud computing platform based on the identity recognition result includes: Record the time point t1 when the identity recognition result is fail, set the monitoring period [t1, t1 + t], where t represents a preset time length, and statistically count the cumulative number n of times the identity recognition result is fail within the monitoring period in real - time. When the cumulative number reaches the preset cumulative number threshold, determine that the security status of the weak current intelligent cloud computing platform is insecure at the time point t2, where the time point t2 represents the time point when the cumulative number reaches the preset cumulative number threshold; In addition to the above situation, determine that the security status of the weak current intelligent cloud computing platform is secure.

3. A method for constructing a weak current intelligent cloud computing platform according to claim 1, characterized in that, Opening corresponding sub - partitions based on the browsing situation of each secure user for the target data includes: Obtain the time point t3 when the user is marked as a secure user, obtain the target data browsed by the secure user after the time point t3, mark it as standard data, obtain the time stamp corresponding to the standard data, and obtain the minimum time stamp Cmin and the maximum time stamp Cmax; Set the time interval [Cmin - C, Cmax + C], where C is a preset value, copy the target data corresponding to the target device within the time interval [Cmin - C, Cmax + C], and obtain the copied data, where the target device represents the weak current intelligent device that generates the standard data; Establish a sub - partition, where the sub - partition is used to store the copied data, and the sub - partition is only accessible to the corresponding secure user, and after the corresponding secure user exits the weak current intelligent cloud computing platform, the sub - partition is automatically destroyed.

4. A method for constructing a weak current intelligent cloud computing platform according to claim 1, characterized in that When all secure users have opened the corresponding sub - partitions, encrypting the target data includes: Obtain the type of the target data, where the type includes text, picture, and video; When the type of the target data is text, encode it to obtain numerical data; When the type of the target data is picture, encrypt the target data through chaotic encryption; When the type of the target data is video, perform frame - splitting processing on it to obtain video frames, use the time stamp of the video frame as the number of the video frame, randomly exchange the numbers of the video frames, and re - synthesize them into a video after the exchange.

5. A method for constructing a weak current intelligent cloud computing platform according to claim 1, characterized in that, Obtaining the user's identity recognition result includes: Collect the biometric features of the user, where the biometric features include fingerprints and irises. When the biometric features match the pre-stored biometric features, the identity recognition result is passed; otherwise, the identity recognition result is not passed.

6. A method for constructing a weak-current intelligent cloud computing platform according to claim 1, characterized in that, When the security status of the low-voltage intelligent cloud computing platform is insecure, send a warning message for reporting.

7. A weak current intelligent cloud computing platform construction system, characterized in that, Comprising: Status judgment module: Obtain the identity recognition result of the user, where the identity recognition result includes passed and not passed, and determine the security status of the low-voltage intelligent cloud computing platform based on the identity recognition result, where the security status includes secure and insecure; Security module: Denote the data stored in the low-voltage intelligent cloud computing platform as target data. When the security status of the low-voltage intelligent cloud computing platform is secure, the target data is not encrypted; Encryption module: Mark the user with a passed identity recognition result as a secure user. When the security status of the low-voltage intelligent cloud computing platform is insecure, open corresponding sub-partitions based on the situation of a single secure user browsing the target data. After all secure users open the corresponding sub-partitions, encrypt the target data.

8. A storage medium for constructing a weak-current intelligent cloud computing platform, characterized in that, A computer program is stored on the storage medium. When the computer program is executed by a processor, the processor is caused to execute the steps of a method for constructing a low-voltage intelligent cloud computing platform according to any one of claims 1 to 6.

Images