Weak electricity intelligent cloud computing platform construction method and system, and storage medium

Abstract

The application relates to the technical field of data security, and particularly discloses a weak-current intelligent cloud computing platform construction method and system and a storage medium, the method comprising the following steps: obtaining an identity recognition result of a user, determining the security state of a weak-current intelligent cloud computing platform based on the identity recognition result; regarding data stored in the weak-current intelligent cloud computing platform as target data, when the security state of the weak-current intelligent cloud computing platform is safe, the target data is not encrypted; marking a user whose identity recognition result is passed as a safe user, when the security state of the weak-current intelligent cloud computing platform is unsafe, opening corresponding sub-partitions based on the browsing of the target data by a single safe user, and when all the safe users open corresponding sub-partitions, the target data is encrypted. The application improves the convenience of using data while protecting data security.

Description

Technical Field

[0001] This invention relates to the field of data security technology, specifically to a method, system, and storage medium for constructing a low-voltage intelligent cloud computing platform. Background Technology

[0002] Intelligentization of low-voltage systems refers to the digital upgrade and intelligent transformation of traditional low-voltage systems (such as security monitoring, access control, alarm systems, building intercoms, etc.) using modern information technology and intelligent methods, thereby realizing automated management, real-time monitoring, data collection and analysis, fault early warning, as well as remote control and centralized scheduling of the system.

[0003] Leveraging the efficient storage and data processing capabilities of cloud computing platforms, the massive amounts of data generated after the digital upgrade of traditional low-voltage systems are aggregated to the cloud. This centralized storage model not only enables the system to achieve multiple intelligent functions such as real-time monitoring, data acquisition, and fault early warning, but also greatly improves the overall operating efficiency and management convenience of the system.

[0004] However, with the rapid increase in data volume and the continuous flow of data during transmission, storage, and sharing, privacy and security issues have become increasingly prominent. In particular, information concerning personnel access within buildings, equipment operating status, and other sensitive data poses a significant threat to user privacy and security if it is compromised by external network attacks or illegal intrusions during storage and processing on cloud platforms.

[0005] Currently, commonly used encryption methods include symmetric encryption (such as AES encryption) and asymmetric encryption (such as RSA encryption). These methods can transform raw data into ciphertext that can only be recognized after legitimate decryption. Although this technology can effectively prevent unauthorized data access and tampering, it also means that users must perform decryption operations before obtaining the information they need, which limits its convenience. Summary of the Invention

[0006] The purpose of this invention is to provide a method for constructing a low-voltage intelligent cloud computing platform, thereby solving the following technical problems:

[0007] Currently, commonly used encryption methods include symmetric encryption (such as AES encryption) and asymmetric encryption (such as RSA encryption). These methods can transform raw data into ciphertext that can only be recognized after legitimate decryption. Although this technology can effectively prevent unauthorized data access and tampering, it also means that users must perform decryption operations before obtaining the information they need, which limits its convenience.

[0008] The objective of this invention can be achieved through the following technical solutions:

[0009] A method for constructing a low-voltage intelligent cloud computing platform includes the following steps:

[0010] Obtain the user's identity recognition result, which includes pass and fail; determine the security status of the weak current intelligent cloud computing platform based on the identity recognition result, which includes secure and insecure.

[0011] The data stored in the intelligent cloud computing platform for low-voltage electricity is designated as target data. When the security status of the intelligent cloud computing platform for low-voltage electricity is secure, the target data is not encrypted.

[0012] Users whose identity verification results are successful are marked as secure users. When the security status of the intelligent cloud computing platform for weak current is insecure, a corresponding sub-partition is created based on the browsing of the target data by a single secure user. After all secure users have created their corresponding sub-partitions, the target data is encrypted.

[0013] As a further aspect of the present invention: determining the security status of the low-voltage intelligent cloud computing platform based on the identity recognition result includes:

[0014] Record the time point t1 when the identity recognition result is unsuccessful, set a monitoring period [t1, t1+t], where t represents the preset time length, and count the cumulative number n times the identity recognition result is unsuccessful within the monitoring period in real time. When the cumulative number reaches the preset cumulative number threshold, determine that the security status of the weak current intelligent cloud computing platform is unsafe at time point t2, where time point t2 represents the time point when the cumulative number reaches the preset cumulative number threshold.

[0015] Except as described above, the security status of the intelligent cloud computing platform for low-voltage electrical systems is determined to be secure.

[0016] As a further aspect of the present invention: creating corresponding sub-partitions based on the browsing of the target data by a single secure user includes:

[0017] Obtain the time point t3 when the user is marked as the safe user, obtain the target data browsed by the safe user after the time point t3, mark it as standard data, obtain the timestamp corresponding to the standard data, and obtain the minimum timestamp Cmin and the maximum timestamp Cmax;

[0018] Set a time interval [Cmin-C, Cmax+C], where C is a preset value. Copy the target data corresponding to the target device within the time interval [Cmin-C, Cmax+C] to obtain the copied data. The target device refers to the low-voltage intelligent device that generates the standard data.

[0019] A sub-partition is created to store the copied data. The sub-partition is only accessible to the corresponding secure user and is automatically destroyed after the corresponding secure user exits the intelligent cloud computing platform for low-voltage electrical systems.

[0020] As a further aspect of the present invention: after all the security users have opened the corresponding sub-partitions, encrypting the target data includes:

[0021] Obtain the type of the target data, which includes text, images, and videos;

[0022] When the target data is text, it is encoded to obtain numerical data.

[0023] When the target data is an image, the target data is encrypted using chaotic encryption.

[0024] When the target data is of video type, it is processed into frames to obtain video frames. The timestamp of the video frame is used as the number of the video frame. The numbers of the video frames are randomly swapped and then combined into a new video.

[0025] As a further aspect of the present invention: obtaining the user's identity verification result includes:

[0026] The system collects the user's biometric features, including fingerprints and iris scans. When the biometric features match pre-stored biometric features, the identity verification result is successful; otherwise, the identity verification result is unsuccessful.

[0027] As a further aspect of the present invention: when the security status of the intelligent cloud computing platform for low-voltage systems is unsafe, an early warning message is sent for reporting.

[0028] A low-voltage intelligent cloud computing platform construction system includes:

[0029] Status determination module: acquires the user's identity recognition result, which includes pass and fail, and determines the security status of the weak current intelligent cloud computing platform based on the identity recognition result, which includes secure and insecure status;

[0030] Security module: The data stored in the intelligent cloud computing platform for weak current is designated as target data. When the security status of the intelligent cloud computing platform for weak current is secure, the target data is not encrypted.

[0031] Encryption module: Marks users whose identity recognition results pass as secure users. When the security status of the weak current intelligent cloud computing platform is insecure, it opens a corresponding sub-partition based on the browsing of the target data by a single secure user. After all secure users have opened the corresponding sub-partitions, the target data is encrypted.

[0032] A storage medium for constructing a low-voltage intelligent cloud computing platform is provided. The storage medium stores a computer program. When the computer program is executed by a processor, the processor performs the steps of the method for constructing a low-voltage intelligent cloud computing platform.

[0033] The beneficial effects of this invention compared to the prior art are as follows:

[0034] 1) In a secure state, data within the cloud computing platform is not encrypted. This eliminates the need for data decryption in daily business operations, avoiding the performance overhead caused by frequent encryption and decryption calculations, and improving access speed and work efficiency.

[0035] 2) By monitoring the user's biometric identification process in real time, if multiple identification failures are detected within a preset time window, the intelligent cloud computing platform for low-voltage electrical systems will be automatically determined to be in an insecure state. At this moment, the data encryption process will be triggered. This monitoring mechanism has strong timeliness and flexibility, and will not delay the prevention of potential security threats. The encryption action is completed in the first instance, so that attackers or unauthorized personnel cannot directly obtain plaintext data. At the same time, in order to ensure that risks are noticed in a timely manner, warning information will also be sent in an insecure state so that security administrators or relevant management departments can take appropriate measures.

[0036] 3) In an insecure state, when some secure users identified by biometrics still need to use the data, this invention creates sub-partitions to isolate and store information related to the target data they access. The sub-partitions are only open to the corresponding secure users. Even if the main system is deemed insecure, as long as the secure user does have legitimate access rights, they can continue to use the data related to their work in a relatively isolated area. Furthermore, only the necessary and relevant part of the target data is copied in the sub-partitions to minimize the exposure surface.

[0037] 4) When the corresponding security user logs out, the sub-partition will be automatically destroyed, and all related data copied into it will be completely cleared. The platform will not leave any extra, sensitive or redundant data storage in the system, which significantly reduces the possibility of being attacked or stolen afterward.

[0038] 5) When encrypting target data, the type of target data will be identified first, and different encryption or transformation methods will be adopted for text, images and videos, so as to flexibly deal with data of various types and sizes, and balance encryption efficiency and security. Attached Figure Description

[0039] The invention will now be further described with reference to the accompanying drawings.

[0040] Figure 1 This is a flowchart illustrating a method for constructing a low-voltage intelligent cloud computing platform according to the present invention. Detailed Implementation

[0041] The technical solutions of the embodiments of the present invention will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only some embodiments of the present invention, and not all embodiments. Based on the embodiments of the present invention, all other embodiments obtained by those skilled in the art without creative effort are within the scope of protection of the present invention.

[0042] Please see Figure 1 As shown, this invention is a method for constructing a low-voltage intelligent cloud computing platform, comprising the following steps:

[0043] Obtain the user's identity recognition result, which includes pass and fail; determine the security status of the weak current intelligent cloud computing platform based on the identity recognition result, which includes secure and insecure.

[0044] In a preferred embodiment of the present invention, obtaining the user's identity verification result includes:

[0045] The system collects the user's biometric features, including fingerprints and iris scans. When the biometric features match pre-stored biometric features, the identity verification result is successful; otherwise, the identity verification result is unsuccessful.

[0046] Understandably, in practice, a fingerprint scanner can be configured on the terminal device to acquire the user's fingerprint image and convert it into a digital feature template. A pre-registered fingerprint template can then be retrieved from a server database or local storage and compared for similarity. When the similarity exceeds a set threshold, the fingerprint is considered a successful match. Further integration with iris recognition requires the user to face an iris recognition camera for an eye scan. The captured iris pattern is also converted into encrypted features and compared with the iris template in the database. If either the fingerprint or iris does not match, the user's recognition is deemed unsuccessful, and a failure result is output.

[0047] In another preferred embodiment of the present invention, when the security status of the weak current intelligent cloud computing platform is unsafe, an early warning message is sent for reporting.

[0048] In another preferred embodiment of the present invention, determining the security status of the low-voltage intelligent cloud computing platform based on the identity recognition result includes:

[0049] Record the time point t1 when the identity recognition result is unsuccessful, set a monitoring period [t1, t1+t], where t represents the preset time length, and count the cumulative number n times the identity recognition result is unsuccessful within the monitoring period in real time. When the cumulative number reaches the preset cumulative number threshold, determine that the security status of the weak current intelligent cloud computing platform is unsafe at time point t2, where time point t2 represents the time point when the cumulative number reaches the preset cumulative number threshold.

[0050] Except as described above, the security status of the intelligent cloud computing platform for low-voltage electrical systems is determined to be secure.

[0051] For example, t can be set to 3 minutes. When the first failed identification result is detected, the time point t1 is recorded. Then, during the monitoring period of [t1, t1+3 minutes], subsequent verification results such as face recognition, fingerprint or iris recognition are collected in real time, and the cumulative number of failures n is counted. For example, if someone enters the wrong biometric feature 3 times in a row or fails to match within these 3 minutes, it means that the system may be facing an abnormal access attempt. Therefore, at the actual time of the 3rd failed identification (denoted as t2), the platform is determined to enter an insecure state, and further security policies such as encryption or warnings are triggered. If the number of failures within the monitoring period does not reach 3 times or does not reach the threshold after the monitoring period, the platform automatically maintains or restores to a secure state, and the normal use of the system will not be excessively affected by a few erroneous operations.

[0052] The data stored in the intelligent cloud computing platform for low-voltage electricity is designated as target data. When the security status of the intelligent cloud computing platform for low-voltage electricity is secure, the target data is not encrypted.

[0053] It should be noted that in practice, for example, a security monitoring management platform routinely records visitor information, real-time video streams, and sensor data. All of this is considered target data. When the system is in a secure state, the platform stores all newly generated and existing target data directly in plaintext in the database without executing any encryption algorithms. For instance, when a surveillance camera uploads footage to the cloud every second, if the system detects no abnormal events or risks and determines that the security status remains valid, it immediately saves this footage data in a standard file format. Subsequent retrieval or reading does not require decryption; the original content can be quickly retrieved directly through the backend interface or frontend application programming interface, reducing the computational time and bandwidth consumption associated with encryption and decryption. For text-based data, such as visitor registration information in access control system logs, when the system determines there is no risk, it is also directly written to the plaintext table in the database, allowing administrators to quickly view and search. This facilitates subsequent statistical analysis and ensures the platform maintains high access speed and system throughput during daily operation, avoiding excessive encryption overhead for less sensitive data in a secure state, thus achieving a balance between daily business processing efficiency and security requirements.

[0054] Users whose identity recognition results are successful are marked as secure users. When the security status of the weak current intelligent cloud computing platform is insecure, a corresponding sub-partition is opened based on the browsing of the target data by a single secure user. After all secure users have opened the corresponding sub-partitions, the target data is encrypted.

[0055] It's important to note that, imagine a building's intelligent low-voltage system platform managing subsystems like access control, surveillance, and air conditioning. When the platform enters an insecure state due to multiple failed identity verifications, it first marks all users who have successfully passed biometric verification as secure users. Then, based on the target data viewed or accessed by each secure user during this phase, it generates a separate sub-partition for them. For example, if a security supervisor views surveillance footage and access control card swipe records for a floor in the cloud, the system copies the relevant footage and log information to their dedicated sub-partition, restricting access only to that supervisor. If other secure users (such as property managers or data center engineers) also need to view data from different devices, the system creates corresponding sub-partitions for each, isolating them from each other, and preventing any user outside their designated sub-partition from viewing their content. Once all verified secure users have finished browsing the data they need and created sub-partitions accordingly, the platform will perform a unified encryption operation on the entire batch of target data in the main partition when it is confirmed that no other secure users need to directly access plaintext. This allows the system to strengthen important information in an insecure state and avoid more potential risks.

[0056] In another preferred embodiment of the present invention, creating a corresponding sub-partition based on the browsing of the target data by a single secure user includes:

[0057] Obtain the time point t3 when the user is marked as the safe user, obtain the target data browsed by the safe user after the time point t3, mark it as standard data, obtain the timestamp corresponding to the standard data, and obtain the minimum timestamp Cmin and the maximum timestamp Cmax;

[0058] Set a time interval [Cmin-C, Cmax+C], where C is a preset value. Copy the target data corresponding to the target device within the time interval [Cmin-C, Cmax+C] to obtain the copied data. The target device refers to the low-voltage intelligent device that generates the standard data.

[0059] A sub-partition is created to store the copied data. The sub-partition is only accessible to the corresponding security user and is automatically destroyed after the corresponding security user exits the intelligent cloud computing platform for low-voltage electrical systems.

[0060] For example, suppose a smart building detects a secure user's successful authentication at time t3 in an insecure state. From that moment on, the system will record all target data viewed or queried by that secure user on the cloud platform and mark it as standard data. For instance, if the secure user views certain access control card swipe records and video surveillance clips in the background, each record will have a timestamp accurate to the second. Therefore, the system can identify the earliest timestamp Cmin and the latest timestamp Cmax corresponding to all the data viewed by the user. To include information with temporal or logical connections to this data within the protection scope in an insecure state, the platform will extend Cmin and Cmax forward and backward by a preset time period C, forming a time interval [Cmin-C, Cmax+C]. Next, the platform will copy all target data generated by the corresponding low-voltage intelligent devices (such as access controllers, surveillance cameras, air conditioning sensors, etc.) within this time interval to obtain copied data related to the user's browsing behavior. Then, a dedicated sub-partition will be created to centrally store this copied data. This sub-partition is only accessible to the current secure user, and no other user or process can view or read it. At the same time, once the secure user logs out or disconnects, the platform will automatically destroy this area and the data therein, making it impossible for subsequent potential malicious activities to mine or steal it. This strengthens the dynamic isolation and protection of sensitive content by the low-voltage intelligent cloud computing platform under abnormal conditions.

[0061] In a preferred embodiment of the present invention, after all the security users have opened the corresponding sub-partitions, encrypting the target data includes:

[0062] Obtain the type of the target data, which includes text, images, and videos;

[0063] When the target data is text, it is encoded to obtain numerical data.

[0064] When the target data is an image, the target data is encrypted using chaotic encryption.

[0065] When the target data is of video type, it is processed into frames to obtain video frames. The timestamp of the video frame is used as the number of the video frame. The numbers of the video frames are randomly swapped and then combined into a new video.

[0066] It is important to note that, to accommodate different types of low-voltage intelligent data, this invention first identifies the category of each data item during the encryption process. For example, some cloud database tables store text information such as visitor lists and equipment parameters, while some storage buckets retain image files generated by monitoring screenshots or sensor photos, and the server archives a large number of video monitoring streams. For text data, the system first encodes the original character information into numerical values ​​or byte streams, so that hash or high-strength symmetric encryption algorithms can be optionally combined later. For image data, since it is necessary to strengthen the protection of pixel distribution, the platform can call a chaotic encryption algorithm to significantly increase the difficulty of image reconstruction by obfuscating or rearranging pixels and adding random displacements. For video data, the video stream is first divided into multiple consecutive frames through frame segmentation, with each frame's timestamp as its number. Then, the frame numbers are randomly shuffled, and finally, all frames are reassembled into an encrypted video file in the shuffled order, making it difficult to reconstruct the normal image without decryption or the correct key. After the above encryption steps are completed, if a new access request wants to use this data, it will be necessary to restore the plaintext through the platform's decryption interface or process, thereby further strengthening the protection of weak current intelligent data when there are security risks in the system.

[0067] A low-voltage intelligent cloud computing platform construction system includes:

[0068] Status determination module: acquires the user's identity recognition result, which includes pass and fail, and determines the security status of the weak current intelligent cloud computing platform based on the identity recognition result, which includes secure and insecure status;

[0069] Security module: The data stored in the intelligent cloud computing platform for weak current is designated as target data. When the security status of the intelligent cloud computing platform for weak current is secure, the target data is not encrypted.

[0070] Encryption module: Marks users whose identity recognition results pass as secure users. When the security status of the weak current intelligent cloud computing platform is insecure, it opens a corresponding sub-partition based on the browsing of the target data by a single secure user. After all secure users have opened the corresponding sub-partitions, the target data is encrypted.

[0071] A storage medium for constructing a low-voltage intelligent cloud computing platform is provided. The storage medium stores a computer program. When the computer program is executed by a processor, the processor performs the steps of the method for constructing a low-voltage intelligent cloud computing platform.

[0072] The foregoing has provided a detailed description of one embodiment of the present invention, but this description is merely a preferred embodiment and should not be construed as limiting the scope of the invention. All equivalent variations and modifications made within the scope of the claims of this invention should still fall within the patent coverage of this invention.

Claims

1. A method for constructing a low-voltage intelligent cloud computing platform, characterized in that, Includes the following steps: Obtain the user's identity recognition result, which includes pass and fail; determine the security status of the weak current intelligent cloud computing platform based on the identity recognition result, which includes secure and insecure. The data stored in the intelligent cloud computing platform for low-voltage electricity is designated as target data. When the security status of the intelligent cloud computing platform for low-voltage electricity is secure, the target data is not encrypted. Users whose identity recognition results are successful are marked as secure users. When the security status of the weak current intelligent cloud computing platform is insecure, a corresponding sub-partition is opened based on the browsing of the target data by a single secure user. After all secure users have opened the corresponding sub-partitions, the target data is encrypted. Creating corresponding sub-partitions based on the browsing of the target data by a single secure user includes: Obtain the time point t3 when the user is marked as the safe user, obtain the target data browsed by the safe user after the time point t3, mark it as standard data, obtain the timestamp corresponding to the standard data, and obtain the minimum timestamp Cmin and the maximum timestamp Cmax; Set time range C is a preset value, and the time interval is copied. The target data corresponding to the target device is used to obtain copied data, where the target device represents the low-voltage intelligent device that generates the standard data. A sub-partition is created to store the copied data. The sub-partition is only accessible to the corresponding secure user and is automatically destroyed after the corresponding secure user exits the intelligent cloud computing platform for low-voltage electrical systems.

2. The method for constructing a low-voltage intelligent cloud computing platform according to claim 1, characterized in that, Determining the security status of the low-voltage intelligent cloud computing platform based on the identity recognition results includes: Record the time point t1 when the identity recognition result is unsuccessful, set a monitoring period [t1, t1+t], where t represents the preset time length, and count the cumulative number n times the identity recognition result is unsuccessful within the monitoring period in real time. When the cumulative number reaches the preset cumulative number threshold, determine that the security status of the weak current intelligent cloud computing platform is unsafe at time point t2, where time point t2 represents the time point when the cumulative number reaches the preset cumulative number threshold. Except as described above, the security status of the intelligent cloud computing platform for low-voltage electrical systems is determined to be secure.

3. The method for constructing a low-voltage intelligent cloud computing platform according to claim 1, characterized in that, After all the aforementioned security users have opened the corresponding sub-partitions, encrypting the target data includes: Obtain the type of the target data, which includes text, images, and videos; When the target data is text, it is encoded to obtain numerical data. When the target data is an image, the target data is encrypted using chaotic encryption. When the target data is of video type, it is processed into frames to obtain video frames. The timestamp of the video frame is used as the number of the video frame. The numbers of the video frames are randomly swapped and then combined into a new video.

4. The method for constructing a low-voltage intelligent cloud computing platform according to claim 1, characterized in that, Obtaining user identification results includes: The system collects the user's biometric features, including fingerprints and iris scans. When the biometric features match pre-stored biometric features, the identity verification result is successful; otherwise, the identity verification result is unsuccessful.

5. The method for constructing a low-voltage intelligent cloud computing platform according to claim 1, characterized in that, When the security status of the intelligent cloud computing platform for low-voltage electrical systems is unsafe, an early warning message is sent for reporting.

6. A low-voltage intelligent cloud computing platform construction system, characterized in that, include: Status determination module: acquires the user's identity recognition result, which includes pass and fail, and determines the security status of the weak current intelligent cloud computing platform based on the identity recognition result, which includes secure and insecure status; Security module: The data stored in the intelligent cloud computing platform for weak current is designated as target data. When the security status of the intelligent cloud computing platform for weak current is secure, the target data is not encrypted. Encryption module: Marks users whose identity recognition results are successful as secure users. When the security status of the weak current intelligent cloud computing platform is insecure, it opens a corresponding sub-partition based on the browsing of the target data by a single secure user. After all secure users have opened the corresponding sub-partitions, the target data is encrypted. Creating corresponding sub-partitions based on the browsing of the target data by a single secure user includes: Obtain the time point t3 when the user is marked as the safe user, obtain the target data browsed by the safe user after the time point t3, mark it as standard data, obtain the timestamp corresponding to the standard data, and obtain the minimum timestamp Cmin and the maximum timestamp Cmax; Set time range C is a preset value, and the time interval is copied. The target data corresponding to the target device is used to obtain copied data, where the target device represents the low-voltage intelligent device that generates the standard data. A sub-partition is created to store the copied data. The sub-partition is only accessible to the corresponding secure user and is automatically destroyed after the corresponding secure user exits the intelligent cloud computing platform for low-voltage electrical systems.

7. A storage medium for constructing a low-voltage intelligent cloud computing platform, characterized in that, The storage medium stores a computer program, which, when executed by a processor, causes the processor to perform the steps of the method for constructing a low-voltage intelligent cloud computing platform as described in any one of claims 1 to 5.

Images