A dynamic security storage method, system, device and medium of a big data platform

Abstract

The application discloses a kind of dynamic security storage method, system, equipment and medium of big data platform, it is related to data security storage technical field, including the following steps: generating platform encryption key for big data platform;Platform data is distributed to distributed storage node and is encrypted based on platform encryption key Platform data is encrypted and calculated, and encrypted data is obtained, and then it is changed into dynamic data;Dynamic data is stored safely;The application is used to solve the problem that the existing data security storage technology still has too single protection means, leading to the security of stored data.

Description

TECHNICAL FIELD

[0001] The present application relates to the technical field of data security storage, in particular to a dynamic security storage method, system, device and medium for a big data platform. BACKGROUND

[0002] Data security storage technology refers to a series of technical means and management measures to ensure that data meets the core goals of confidentiality, integrity and availability during storage (including local, cloud or other media), while resisting unauthorized access, tampering, leakage or destruction.

[0003] Existing data security storage technology usually encrypts data for storage, but the security of encrypted storage is not sufficient, and encrypted ciphertext is easily leaked. At the same time, the encryption process is too simple, and the data security protection means is too single, which still has the possibility of being cracked. For example, in the patent application with the publication number CN115270188A, a data security storage and processing method and system are disclosed, which ensures the secure storage of data by sequentially encrypting data. The security of the protection means is insufficient, and the existing data security storage technology still has the problem of single protection means, resulting in insufficient security of stored data. SUMMARY

[0004] The present application aims to at least solve one of the technical problems in the prior art. By generating a platform encryption key for a big data platform, setting distributed storage nodes, distributing platform data to different distributed storage nodes, then performing encryption calculation on platform data based on the platform encryption key to obtain encrypted data, setting dynamic conversion rules to convert encrypted data into dynamic data, and finally securely storing dynamic data, the problem of single protection means in existing data security storage technology is solved, resulting in insufficient security of stored data.

[0005] To achieve the above-mentioned purpose, in a first aspect, the present application provides a dynamic security storage method for a big data platform, comprising the following steps:

[0006] generating a platform encryption key for the big data platform;

[0007] allocating distributed storage nodes to platform data and performing encryption calculation on platform data based on the platform encryption key to obtain encrypted data, and then converting it into dynamic data;

[0008] securely storing dynamic data.

[0009] Further, generating a platform encryption key for the big data platform comprises the following sub-steps:

[0010] The management key is set by an administrator;

[0011] The management key is hashed, the hexadecimal hash value obtained is converted to decimal and marked as a platform encryption key;

[0012] The platform encryption key is not stored in the big data platform, but is directly used after being converted from the management key during encryption calculation, and is not stored in data form.

[0013] Further, the platform data is distributed to different distributed storage nodes, and the platform data is encrypted based on the platform encryption key to obtain encrypted data, and then the encrypted data is converted to dynamic data, including the following sub-steps:

[0014] Distributed storage nodes are set, and the platform data is distributed to different distributed storage nodes;

[0015] The platform data is encrypted based on the platform encryption key to obtain encrypted data;

[0016] A dynamic conversion rule is set to convert the encrypted data to dynamic data.

[0017] Further, setting the distributed storage nodes and distributing the platform data to different distributed storage nodes includes the following sub-steps:

[0018] The platform data is obtained, and the platform data is converted to hexadecimal Unicode encoding, and the prefix "\u" is removed to obtain a first encoding;

[0019] The Unicode encoding corresponding to each character after conversion is obtained in the order from left to right according to the first encoding, and is marked as E n , wherein n is a non-zero natural number and n is the serial number of E;

[0020] The maximum value of E n is obtained and marked as max(E), a storage loop is set, the storage loop is a virtual circle, max(E) data nodes are evenly set on the storage loop, the data nodes are numbered, and the symbol S i is used to represent, wherein i is a non-zero natural number and i is the serial number of S, the i of the data node directly above the storage loop is 1, and the i increases in the clockwise direction, 1≤i≤max(E);

[0021] A first number of distributed storage nodes are set on the storage loop, the distributed storage nodes are evenly distributed on the storage loop, and coincide with one of the data nodes, the S i corresponding to the distributed storage node is marked as T i , and the T iThe distributed storage nodes are numbered in ascending order of the middle index i, and are represented by the symbol P j , where j is a non-zero natural number and j is the index of P, and j is at most the first node number;

[0022] Find E n The corresponding data node S i , marked as R n , E n is assigned to R n The closest P j for storage.

[0023] Further, the platform data is encrypted based on the platform encryption key to obtain encrypted data, including the following sub-steps:

[0024] For any E n , add "n / " before the original Unicode encoding, not including quotes, and mark the modified E n as F n .

[0025] For any F n , the characters in F n are numbered in left-to-right order, represented by the symbol H m , where m is a non-zero natural number and m is the index of H, and H m is converted to decimal ASCII encoding and marked as G m .

[0026] Get the maximum value of m, marked as max(m), construct a max(m)×max(m) matrix, named as the encoding matrix, number each data cell in the encoding matrix, represented by the symbol K(a,b), where a and b are non-zero natural numbers and (a,b) is the index of K, 1≤a≤max(m), 1≤b≤max(m), fill G m to K(m,m), and set the rest of K(a,b) to 0.

[0027] Get the platform encryption key, number the characters in the platform encryption key in left-to-right order, represented by the symbol D c , where c is a non-zero natural number and c is the index of D, construct another encoding matrix, named as the key matrix, number each data cell in the key matrix, represented by the symbol L(a,b), and fill D c to L(c,c), and set the rest of L(a,b) to 0.

[0028] The encoding matrix is ​​multiplied by the key matrix to obtain the computation matrix. The data cells in the computation matrix are numbered and represented by the symbol U(a,b). The minimum and maximum values ​​in U(a,b) are obtained and marked as min(U) and max(U) respectively. For U(a,b) where a≠b, random values ​​are assigned from min(U) to max(U).

[0029] The final result, U(a,b), is the encrypted data.

[0030] Furthermore, setting dynamic conversion rules to convert encrypted data into dynamic data includes the following sub-steps:

[0031] Set dynamic separators, which include dynamic same-part separators and dynamic different-part separators. The format of the dynamic same-part separator is QYQ, and the format of the dynamic different-part separator is QyQ, where Q represents any number from 0 to 9, Y represents any uppercase letter, and y represents any lowercase letter. Both the dynamic same-part separator and the dynamic different-part separator will change in real time.

[0032] Number U(a,b) in order from top left to bottom right, then from left to right and top to bottom, using the symbol W. v Let W be an integer, where v is a non-zero natural number and v is the index of W. v According to the order from left to right, W v The characters within are numbered using the symbol WG. h This indicates that h is a non-zero natural number and h is the index of WG;

[0033] In every two adjacent W v Add a dynamic disjoint separator between every two adjacent WGs. h Add a dynamic separator between the parts;

[0034] For any WG h WG h Convert the dynamic number to the first dynamic number of digits, mark the last digit of the dynamic number as the determination number, and mark the remaining digits as the transformation number;

[0035] Add the transformation numbers together to get the transformation addend. Add the transformation addend to the decision number and mark the final calculation result as the decision addend.

[0036] The transformation number can be changed in real time, and the decision number changes in real time based on the change of the transformation number. When the decision number changes, it is necessary to ensure that the units digit of the addend is consistent with WG. h same;

[0037] Each W v Each WG withinh All are changed to dynamic numbers, and the dynamic separator is unchanged, and the final obtained string is dynamic data.

[0038] Further, the secure storage of the dynamic data comprises the following sub-steps:

[0039] storing the dynamic data in the corresponding distributed storage node;

[0040] When the platform data is read, the analysis process of the dynamic data and the encrypted data is executed reversely, and after decryption, the F n sequence of n pairs of E n is restored to obtain a period of encoding, and the platform data can be obtained by restoring the Chinese from the period of encoding.

[0041] In the second aspect, the application provides a dynamic secure storage system of a big data platform, comprising a key generation module, a dynamic encryption module and a secure storage module; the key generation module and the secure storage module are respectively connected with the dynamic encryption module in data;

[0042] The key generation module is used for generating a platform encryption key for the big data platform;

[0043] The dynamic encryption module is used for allocating a distributed storage node for the platform data and performing encryption calculation on the platform data based on the platform encryption key to obtain encrypted data, and then converting the encrypted data into dynamic data;

[0044] The secure storage module is used for securely storing the dynamic data.

[0045] In the third aspect, the application provides an electronic device comprising a processor and a memory, wherein the memory stores computer readable instructions, and when the computer readable instructions are executed by the processor, the steps in the above method are executed.

[0046] In the fourth aspect, the application provides a storage medium, wherein the storage medium stores a computer program, and when the computer program is executed by a processor, the steps in the above method are executed.

[0047] The application has the following advantages: the application generates a platform encryption key for a big data platform, and sets a distributed storage node, and allocates platform data to different distributed storage nodes, and the advantage is that when the distributed storage node is allocated, the allocation is based on the storage loop and the Unicode encoding converted from the platform data, and the allocation is performed in units of characters, and after the allocation is completed, the data stored in different distributed storage nodes is relatively disordered, which can effectively prevent others from obtaining complete storage data, and improves the security and effectiveness of data secure storage.

[0048] The application encrypts platform data based on a platform encryption key to obtain encrypted data, converts the encrypted data into dynamic data by setting a dynamic conversion rule, and finally stores the dynamic data securely. The advantage is that the ciphertext of conventional encryption storage is usually a fixed value, while the ciphertext is finally converted into dynamic data in the application, which is changed in real time, greatly increasing the cracking difficulty and further improving the security and effectiveness of data security storage. BRIEF DESCRIPTION OF DRAWINGS

[0049] Figure 1 It is a principle block diagram of the system of the application;

[0050] Figure 2 It is a schematic diagram of the storage loop of the application;

[0051] Figure 3 It is a step flow chart of the method of the application;

[0052] Figure 4 It is a structural schematic diagram of the electronic device of the application. DETAILED DESCRIPTION

[0053] The technical solutions in the embodiments of the application will be clearly and completely described below with reference to the drawings in the embodiments of the application. Obviously, the described embodiments are only part of the embodiments of the application, not all the embodiments. Based on the embodiments in the application, all other embodiments obtained by those skilled in the art without creative labor are within the scope of protection of the application.

[0054] Embodiment 1, please refer to Figure 1 The application provides a dynamic security storage system of a big data platform, which comprises a key generation module, a dynamic encryption module and a security storage module. The key generation module and the security storage module are respectively connected with the dynamic encryption module.

[0055] The key generation module is configured to generate a platform encryption key for the big data platform.

[0056] The key generation module is configured with a key generation strategy, and the key generation strategy comprises:

[0057] The management key is set by an administrator;

[0058] The management key is calculated by a hash value, and the calculated hexadecimal hash value is converted into a decimal number and marked as a platform encryption key;

[0059] The platform encryption key is not stored in the big data platform, but is directly used after being converted from the management key during encryption calculation, and is not stored in the form of data.

[0060] In practical application, the management key is a built-in key of the big data platform, and the management key in the embodiment is set as "SecretKey", calculated by using the MD2 hash algorithm, and the hexadecimal hash value is "a36319714798f85559a5fa3279a94750", and the platform encryption key is "217178716737117055765393582500606461776" obtained by converting to decimal.

[0061] The dynamic encryption module is used for allocating the distributed storage nodes for the platform data and performing encryption calculation on the platform data based on the platform encryption key to obtain encrypted data, and then converting the encrypted data into dynamic data.

[0062] The distributed allocation unit is used for setting the distributed storage nodes and allocating the platform data into different distributed storage nodes.

[0063] The distributed allocation unit is configured with a distributed allocation strategy, and the distributed allocation strategy comprises:

[0064] The platform data is obtained, and the platform data is converted into hexadecimal Unicode encoding, and the prefix "" in the platform data is removed to obtain a first encoding;

[0065] According to the order of the first encoding from left to right, the Unicode encoding corresponding to each character after conversion is obtained, and is marked as E n , wherein n is a non-zero natural number and n is the serial number of E.

[0066] Referring to FIG. 1, Figure 2 the maximum value of E n is obtained, which is marked as max(E), a storage loop is set, the storage loop is a virtual circle, max(E) data nodes are uniformly set on the storage loop, the data nodes are numbered, and the data nodes are represented by S i , wherein i is a non-zero natural number and i is the serial number of S, the i of the data node directly above the storage loop is 1, and the i is increased along the clockwise direction, and 1≤i≤max(E).

[0067] In practical application, it is assumed in the embodiment that the platform data is "financing 100,000 yuan", and a first period code "878d8d44003100304e075143" is obtained by conversion. Each 4 characters are a Chinese character, and only " " needs to be added before each 4 characters in restoration. Marking obtains E1 to E6 as 878d, 8d44, 0031, 0030, 4e07 and 5143, which are all hexadecimal numbers. Max(E) is 8d44, a storage loop is set, 8d44 data nodes are evenly set on the storage loop, and S i is obtained by numbering. Figure 2 Figure 2 The black circle in the middle is a data node. Figure 2 The distribution of 4 data nodes and the distribution trend of the data nodes are shown. The interval between every two adjacent data nodes is the same, and the number at the data node represents the sequence number i in S i .

[0068] A first number of distributed storage nodes are set on the storage loop. The distributed storage nodes are evenly distributed on the storage loop and coincide with one of the data nodes. S i in the distributed storage nodes is marked as T i . The distributed storage nodes are numbered in the order of increasing sequence number i in T i , which is represented by symbol P j , where j is a non-zero natural number and j is the sequence number of P. The maximum j is the first number.

[0069] The data node S i corresponding to E n is found and marked as R n . E n is stored in the closest P j of R n .

[0070] In practical application, the first number is set by the user. In the embodiment, the first number is set to 4, and 8d44÷4 is calculated to obtain 2351. Therefore, 1 is the first distributed storage node, and a distributed storage node is set every 2351 data nodes thereafter. Figure 2 The 4 data nodes in the above are the distributed storage nodes in the embodiment, and the above numbers are all hexadecimal numbers. The value of E n is the sequence number i of R i . Taking E3 as an example, E3 is 0031, the corresponding data node is R 31 , and the closest distributed storage node is P1. Therefore, E3 is stored in P1, and encryption and dynamic conversion are required before storage. ​

[0071] The encryption calculation unit is configured to perform an encryption calculation on the platform data based on the platform encryption key to obtain encrypted data;

[0072] The encryption calculation unit is configured with an encryption calculation policy, and the encryption calculation policy comprises:

[0073] For any E n , add "n / " before the original Unicode encoding, not including the quotation marks, modify E n to F n ;

[0074] For any F n , the characters in F n are numbered in left-to-right order, represented by symbol H m , where m is a non-zero natural number and m is the serial number of H, and H m is converted to decimal ASCII code and marked as G m ;

[0075] The maximum value of m is obtained, marked as max(m), a matrix of max(m) x max(m) is constructed, named as encoding matrix, each data cell in the encoding matrix is numbered, represented by symbol K(a,b), where a and b are non-zero natural numbers and (a,b) is the serial number of K, 1≤a≤max(m), 1≤b≤max(m), G m is filled into K(m,m), and the rest of K(a,b) is set to 0;

[0076] In actual application, taking E3 as an example, F3 is modified to "3 / 0031", numbered to obtain H1 to H6 in turn "3", " / ", "0", "0", "3" and "1", converted to decimal ASCII code to obtain G1 to G6 in turn 51, 47, 48, 48, 51 and 49, max(m) is 6, a 6x6 matrix is constructed, and G m is filled based on it to obtain the encoding matrix as

[0077] The platform encryption key is obtained, the characters in the platform encryption key are numbered in left-to-right order, represented by symbol D c , where c is a non-zero natural number and c is the serial number of D, another encoding matrix is constructed, named as key matrix, each data cell in the key matrix is numbered, represented by symbol L(a,b), D c is filled into L(c,c), and the rest of L(a,b) is set to 0;

[0078] In practical application, the platform encryption key is "217178716737117055765393582500606461776", and since the coding matrix specification is 6*6, the key matrix obtained by construction is also 6*6, so only the first 6 digits of the platform encryption key, i.e. D1 to D6, are needed, which are 2, 1, 7, 1, 7 and 8, D1 is filled into L(1,1), D2 is filled into L(2,2), and so on, and the key matrix obtained by construction is

[0079] The coding matrix is multiplied by the key matrix to obtain the calculation matrix, the data cells in the calculation matrix are numbered and represented by the symbol U(a,b), the minimum and maximum values in U(a,b) are obtained and marked as min(U) and max(U) respectively, and random values are assigned to U(a,b) with a≠b, and the range of the values is from min(U) to max(U);

[0080] The final U(a,b) is the encrypted data;

[0081] In practical application, the calculation matrix obtained by calculation is Wherein, min(U) and max(U) are 47 and 392 respectively, random values are assigned to U(a,b) with a≠b in the calculation matrix, and the range of the values is from 47 to 392, and the final calculation matrix is When decrypting later, only U(a,b) with a=b needs to be obtained for analysis, and the rest can be set to 0, and the inverse of the calculation matrix*key matrix can be restored to the coding matrix;

[0082] The dynamic conversion unit is used to set dynamic conversion rules to convert the encrypted data into dynamic data;

[0083] The dynamic conversion unit is configured with a dynamic conversion strategy, and the dynamic conversion strategy includes:

[0084] A dynamic separator is set, and the dynamic separator includes a dynamic same part separator and a dynamic different part separator, the format of the dynamic same part separator is QYQ, and the format of the dynamic different part separator is QyQ, wherein Q represents any digit from 0 to 9, Y represents any capital letter, and y represents any lowercase letter, and the dynamic same part separator and the dynamic different part separator will change in real time;

[0085] U(a,b) is numbered in the order from top left to bottom right and from left to right first and from top to bottom second, and represented by the symbol W v , wherein v is a non-zero natural number and v is the serial number of W, and for any W v , the characters in W v are numbered in the order from left to right, and represented by the symbol WG hThis indicates that h is a non-zero natural number and h is the index of WG;

[0086] In every two adjacent W v Add a dynamic disjoint separator between every two adjacent WGs. h Add a dynamic separator between the parts;

[0087] In practical applications, the numbers are obtained as W1 to W 36 Taking W1 and W2 as examples, W1 is 102, where WG1 to WG3 are 1, 0 and 2 respectively. W2 is 65, and WG1 and WG2 belonging to W2 are 6 and 5 respectively. For W1, its adjacent WG h Add dynamic same-part separators between W1 and W2, and add dynamic different-part separators between W1 and W2, thus obtaining "1QYQ0QYQ2QyQ6QYQ5". Based on the definitions of QYQ and QyQ, the result is "16G305U327b862T95" which is randomly changed in real time.

[0088] For any WG h WG h Convert the dynamic number to the first dynamic number of digits, mark the last digit of the dynamic number as the determination number, and mark the remaining digits as the transformation number;

[0089] Add the transformation numbers together to get the transformation addend. Add the transformation addend to the decision number and mark the final calculation result as the decision addend.

[0090] The transforming number can be changed in real time, and the determining number changes in real time based on the changes in the transforming number. When the determining number changes, it is necessary to ensure that the units digit of the addend is consistent with WG. h same;

[0091] Each W v Each WG within h All are changed to dynamic numbers, while the dynamic delimiter remains unchanged. The final string obtained is the dynamic data.

[0092] In practical applications, taking WG1 of W1 as an example, WG1 of W1 is 1. The first dynamic bit length has no specific requirements and can be set by the administrator. To save storage space, the first dynamic bit length should generally not exceed 5. In this embodiment, the dynamic bit length is set to 3. In this embodiment, α, β, and γ represent the first, second, and third bits of the dynamic number, respectively. α and β are transformation numbers, and γ is the determination number. The transformation number is a number that changes in real time. For example, when α and β change to 5 and 7 respectively, the transformation addend is calculated to be 12. 12 + γ is the determination addend. Since WG1 of W1 is 1, it is necessary to ensure that the units digit of the determination addend is 1, that is, γ is set to 9. And so on, for each W v Each WG withinh Change all numbers to dynamic numbers, keep the dynamic delimiter unchanged, and the final string is the dynamic data.

[0093] The secure storage module is used to securely store dynamic data;

[0094] The secure storage module is configured with secure storage policies, which include:

[0095] Dynamic data is stored in the corresponding distributed storage nodes;

[0096] When reading platform data, the analysis process of dynamic and encrypted data can be reversed. After decryption, it is based on F n n pairs of E n The sequence is restored to obtain a first-phase code, and then the first-phase code is restored to Chinese to obtain the platform data;

[0097] In practical applications, the computational matrix used in this embodiment is the computational matrix corresponding to E3. The dynamically generated data obtained through further conversion is stored in P1. The decryption of the dynamically generated data can be completed by reversing the analysis process of the dynamically generated data and the encrypted data. This embodiment will not provide a specific explanation. Taking F3 as an example, if F3 is "3 / 0031", then 0031 is placed in the third position E. n That's all.

[0098] Example 2, please refer to Figure 3 As shown, this application provides a dynamic secure storage method for a big data platform, including the following steps:

[0099] Step S1: Generate a platform encryption key for the big data platform; Step S1 includes the following sub-steps:

[0100] Step S101: The administrator sets the management key;

[0101] Step S102: Calculate the hash value of the management key, convert the calculated hexadecimal hash value to decimal and mark it as the platform encryption key;

[0102] Step S103: The platform encryption key is not stored in the big data platform. It is only used directly after being converted from the management key to the platform encryption key during encryption calculations. It is not stored in the form of data.

[0103] Step S2 involves allocating distributed storage nodes to the platform data and performing encryption calculations on the platform data based on the platform encryption key to obtain encrypted data, which is then transformed into dynamic data. Step S2 includes the following sub-steps:

[0104] Step S201: Set up distributed storage nodes and distribute platform data to different distributed storage nodes;

[0105] Step S201 includes the following sub-steps:

[0106] Step S2011, obtaining platform data, converting the platform data into a hexadecimal Unicode encoding, while removing the prefix "\u" therein, to obtain a first encoding;

[0107] Step S2012, obtaining the Unicode encoding corresponding to each character converted in the order from left to right according to the first encoding, and marking it as E n , wherein n is a non-zero natural number and n is the serial number of E;

[0108] Step S2013, obtaining the maximum value of E n , marking it as max(E), setting a storage loop, the storage loop being a virtual circle, evenly setting max(E) data nodes on the storage loop, numbering the data nodes, and denoting by S i , wherein i is a non-zero natural number and i is the serial number of S, the i of the data node directly above the storage loop being 1, and sequentially increasing along the clockwise direction, 1≤i≤max(E);

[0109] Step S2014, setting a first number of distributed storage nodes on the storage loop, the distributed storage nodes being evenly distributed on the storage loop and coinciding with one of the data nodes, and marking the S i corresponding to the distributed storage nodes as T i , numbering the distributed storage nodes in the order from small to large of the serial number i in T i , and denoting by P j , wherein j is a non-zero natural number and j is the serial number of P, j being at most the first number;

[0110] Step S2015, finding the data node S n corresponding to E i , marking it as R n , and storing E n in the P n closest to R j ;

[0111] Step S202, performing encryption calculation on the platform data based on a platform encryption key, to obtain encrypted data;

[0112] Step S202 includes the following sub-steps:

[0113] Step S2021, for any E n , adding "n / " before the original Unicode encoding, not including the quotation marks, marking the modified E n as Fn ;

[0114] Step S2022, for any F n , the characters in F n are numbered in left-to-right order, denoted by symbol H m , where m is a non-zero natural number and m is the sequence number of H, H m is converted to decimal ASCII code and marked as G m ;

[0115] Step S2023, get the maximum value of m, marked as max(m), construct a max(m)×max(m) matrix, named as encoding matrix, number each data cell in the encoding matrix, denoted by symbol K(a,b), where a and b are both non-zero natural numbers and (a,b) is the sequence number of K, 1≤a≤max(m), 1≤b≤max(m), fill G m to K(m,m), and set the rest K(a,b) to 0;

[0116] Step S2024, get the platform encryption key, number the characters in the platform encryption key in left-to-right order, denoted by symbol D c , where c is a non-zero natural number and c is the sequence number of D, construct another encoding matrix, named as key matrix, number each data cell in the key matrix, denoted by symbol L(a,b), fill D c to L(c,c), and set the rest L(a,b) to 0;

[0117] Step S2025, multiply the encoding matrix and the key matrix to get a calculation matrix, number the data cells in the calculation matrix, denoted by symbol U(a,b), get the minimum and maximum values in U(a,b), marked as min(U) and max(U) respectively, randomly assign values to U(a,b) where a≠b, the range of the assigned values is from min(U) to max(U);

[0118] Step S2026, the final U(a,b) is the encrypted data;

[0119] Step S203, set a dynamic conversion rule to convert the encrypted data into dynamic data;

[0120] Step S203 includes the following sub-steps:

[0121] Step S2031, setting a dynamic separator symbol, the dynamic separator symbol including a dynamic same part separator and a dynamic different part separator, the dynamic same part separator being in the format of QYQ, and the dynamic different part separator being in the format of QyQ, wherein Q represents any digit from 0 to 9, Y represents any capital letter, and y represents any small letter, and the dynamic same part separator and the dynamic different part separator both change in real time;

[0122] Step S2032, numbering U(a, b) in the order from top left to bottom right and from left to right first and from top to bottom second, and represented by the symbol W v , wherein v is a non-zero natural number and v is the serial number of W, and for any W v , numbering the characters in W v in the order from left to right, and represented by the symbol WG h , wherein h is a non-zero natural number and h is the serial number of WG;

[0123] Step S2033, adding a dynamic different part separator between every two adjacent W v , and adding a dynamic same part separator between every two adjacent WG h ;

[0124] Step S2034, for any WG h , converting WG h into a dynamic number of the first dynamic bit, marking the last digit in the dynamic number as a decision number, and marking the remaining digits as transform numbers;

[0125] Step S2035, adding the transform numbers to calculate a sum, obtaining a transform addend, adding the transform addend to the decision number, and marking the final calculation result as a judgment addend;

[0126] Step S2036, the transform numbers can change in real time, the decision number changes in real time based on the change of the transform numbers, and when the decision number changes, it is necessary to ensure that the unit digit of the judgment addend is the same as WG h ;

[0127] Step S2037, changing each WG v in each W h into a dynamic number, and the dynamic separator symbol remains unchanged, and finally obtaining a string of dynamic data;

[0128] Step S3, securely storing the dynamic data; Step S3 includes the following sub-steps:

[0129] Step S301, storing the dynamic data in the corresponding distributed storage node;

[0130] Step S302, when reading the platform data, the analysis process of dynamic data and encrypted data is performed in reverse, and after decryption, the sequence of the previous n pairs of E n is restored to obtain a first encoding, and the first encoding is restored to Chinese to obtain the platform data. n

[0131] Embodiment 3, please refer to Figure 4 , Figure 4 An example of a structural diagram of an electronic device, which can include: a processor, a communication interface, a memory and a communication bus, wherein the processor, the communication interface, the memory complete the communication between each other through the communication bus. The memory stores computer readable instructions, and the processor can call the instructions in the memory, when the computer readable instructions are executed by the processor, run the steps in a dynamic security storage method of a big data platform, to realize the following functions: generating a platform encryption key for the big data platform; distributing a distributed storage node for platform data and performing encryption calculation based on the platform encryption key to obtain encrypted data, and then converting it into dynamic data; securely storing the dynamic data.

[0132] In addition, the logical instructions in the memory described above can be implemented in the form of a software function unit and sold or used as an independent product, which can be stored in a computer readable storage medium. Based on such understanding, the technical solutions of the present application essentially or the part that contributes to the prior art or part of the technical solutions can be embodied in the form of a software product, and the computer software product is stored in a storage medium, including a plurality of instructions to make a computer device (which can be a personal computer, a server, or a network device, etc.) execute all or part of the steps of the method described in the embodiments of the present application. The foregoing storage medium includes: a U disk, a mobile hard disk, a read-only memory (ROM, Read-Only Memory), a random access memory (RAM, Random Access Memory), a magnetic disk or an optical disk, and various media that can store program codes.

[0133] Embodiment 4, the present application also provides a computer readable storage medium, the present application provides a storage medium, which stores a computer program, and the computer program is executed by the processor to run the steps in the dynamic security storage method of the big data platform as above, to realize the following functions: generating a platform encryption key for the big data platform; distributing a distributed storage node for platform data and performing encryption calculation based on the platform encryption key to obtain encrypted data, and then converting it into dynamic data; securely storing the dynamic data.

[0134] ​Through the description of the above embodiments, the embodiments of the present application can be provided as a method, a system or a computer program product. Based on such understanding, the above technical solutions can be embodied in the form of a software product, which can be stored in a computer readable storage medium, such as a ROM / RAM, a magnetic disk, an optical disk, etc., and includes a plurality of instructions to make a computer device (which can be a personal computer, a server, or a network device, etc.) execute the methods described in various embodiments or some parts of the embodiments.

[0135] In the embodiments provided by the present application, it should be understood that the disclosed system or method can be implemented in other manners. The embodiments described above are merely schematic, and should not be construed as limiting. For example, the division of the modules or the units is merely logical function division, and there can be other division manners in actual implementation. For example, a plurality of modules or units can be combined or integrated into another system, or some features can be ignored or not executed. In addition, the displayed or discussed mutual couplings or direct couplings or communication connections between different modules can be indirect couplings or communication connections through some interfaces, and there can be electric, mechanical or other forms.

[0136] Finally, it should be noted that the above-mentioned embodiments are merely used to illustrate the technical solutions of the present application, rather than limit them; even if the present application has been described in detail with reference to the foregoing embodiments, those skilled in the art should understand that they can still modify the technical solutions recorded in the foregoing embodiments, or make equivalent replacements to some technical features; and these modifications or replacements do not cause the corresponding technical solutions to deviate from the spirit and scope of the technical solutions of the embodiments of the present application.

Claims

1. A dynamic secure storage method of a big data platform, characterized in that, It comprises the following steps: generating a platform encryption key for the big data platform; allocating distributed storage nodes for platform data and performing encryption calculation on the platform data based on the platform encryption key to obtain encrypted data, and then converting the encrypted data into dynamic data; securely storing the dynamic data; generating a platform encryption key for the big data platform comprises the following sub-steps: setting a management key by an administrator; calculating the hash value of the management key, converting the calculated hexadecimal hash value into decimal, and marking it as the platform encryption key; the platform encryption key is not stored in the big data platform, and is directly used after being converted from the management key during encryption calculation, and is not stored in the form of data; allocating distributed storage nodes for platform data and performing encryption calculation on the platform data based on the platform encryption key to obtain encrypted data, and then converting the encrypted data into dynamic data comprises the following sub-steps: setting distributed storage nodes and distributing platform data to different distributed storage nodes; performing encryption calculation on the platform data based on the platform encryption key to obtain encrypted data; setting dynamic conversion rules to convert the encrypted data into dynamic data; setting distributed storage nodes and distributing platform data to different distributed storage nodes comprises the following sub-steps: obtaining platform data, converting the platform data into hexadecimal Unicode encoding, and removing the prefix "\u" to obtain a period of encoding; According to the order of the first-stage encoding from left to right, the Unicode code corresponding to each character after conversion is obtained, marked as E n wherein n is a non-zero natural number and n is the serial number of E; Get E n The maximum value is denoted as max(E). A storage loop is set up, which is a virtual circle. Max(E) data nodes are evenly distributed on the storage loop, and the data nodes are numbered using the symbol S. i It is represented as follows, where i is a non-zero natural number and i is the index of S. Starting with the data node directly above the storage loop, i is 1, and the index increases sequentially in a clockwise direction, 1≤i≤max(E). A first number of distributed storage nodes are arranged on the storage loop, the distributed storage nodes are uniformly distributed on the storage loop and coincide with one of the data nodes, and S i is marked as T i , the distributed storage nodes are numbered in ascending order of the serial number i in T i , and are represented by a symbol P j , wherein j is a non-zero natural number and j is the serial number of P, and j is at most the first number. Find E n Corresponding data node S i , marked R n , assign E n to R n Closest P j for storage. 2.The dynamic security storage method of a big data platform of claim 1, wherein, performing encryption calculation on the platform data based on the platform encryption key to obtain encrypted data comprises the following sub-steps: For any E n Add "n / " before the original Unicode encoding, not including quotes, and modify the E n Marked as F n ; For any F n , the characters in F n are numbered in left-to-right order, and are represented by a symbol H m , where m is a non-zero natural number and m is the order number of H m , H m is converted to decimal ASCII code and marked as G The maximum value of m is obtained, marked as max(m), a matrix of max(m) x max(m) is constructed, named as an encoding matrix, each data cell in the encoding matrix is numbered, and is represented by a symbol K(a, b), wherein a and b are both nonzero natural numbers and (a, b) is the serial number of K, 1≤a≤max(m), 1≤b≤max(m), G m is filled in K(m, m), and the rest of K(a, b) is set to 0; The acquisition platform encryption key, the characters in the platform encryption key are numbered in the order from left to right, through the symbol D c Indicates that c is a non-zero natural number and c is the serial number of D, another encoding matrix is constructed, named as key matrix, each data cell in the key matrix is numbered, represented by the symbol L(a,b), and D c Filled to L(c,c), and the rest L(a,b) are set to 0; multiplying the encoding matrix and the key matrix to obtain a calculation matrix, numbering the data cells in the calculation matrix, and obtaining the minimum value and the maximum value in U(a, b) through the symbol U(a, b), marking them as min(U) and max(U) respectively, and randomly assigning values to U(a, b) where a≠b, the range of the assigned values is from min(U) to max(U); the final U(a, b) is the encrypted data. 3.The dynamic security storage method of a big data platform of claim 2, wherein, setting dynamic conversion rules to convert the encrypted data into dynamic data comprises the following sub-steps: setting dynamic separator symbols, the dynamic separator symbols include dynamic same part separators and dynamic different part separators, the format of the dynamic same part separator is QYQ, and the format of the dynamic different part separator is QyQ, wherein Q represents any digit from 0 to 9, Y represents any uppercase letter, and y represents any lowercase letter, and the dynamic same part separator and the dynamic different part separator will change in real time; U(a, b) is numbered in the order from top left to bottom right and first from left to right and then from top to bottom, and is represented by a symbol W v , where v is a non-zero natural number and v is the sequence number of W, for any W v , the characters in W v are numbered in the order from left to right, and is represented by a symbol WG h , where h is a non-zero natural number and h is the sequence number of WG; adding a dynamic hetero-partition between every two adjacent W v adding a dynamic homo-partition between every two adjacent WG h adding a dynamic homo-partition between every two adjacent WG For any WG h convert the WG h to a dynamic number of a first dynamic bit number, mark the last digit in the dynamic number as a decision number, and mark the remaining digits as transformation numbers; adding the transformation sum to obtain a transformation addend, adding the transformation addend and the decision number, and marking the final calculation result as a judgment addend; The conversion number can convert in real time, the decision number changes in real time based on the change of the conversion number, and the decision number needs to ensure that the unit digit of the judgment adder is the same as WG h when the decision number changes Change each WG v in each W h to a dynamic number, and the dynamic separator symbol remains unchanged. The final string is the dynamic data.

4. The dynamic security storage method of a big data platform according to claim 3, characterized in that, securely storing the dynamic data comprises the following sub-steps: storing the dynamic data in the corresponding distributed storage nodes; When reading the platform data, the analysis process of dynamic data and encrypted data is performed reversely, and after decryption, the platform data is obtained based on F n The sequence of n pairs of E n is restored to obtain a first encoding, and the first encoding is restored to Chinese to obtain the platform data.

5. A dynamic security storage system of a big data platform, used for implementing the dynamic security storage method of any one of claims 1-4. it comprises a key generation module, a dynamic encryption module, and a secure storage module; the key generation module and the secure storage module are respectively connected with the data of the dynamic encryption module; the key generation module is used to generate a platform encryption key for the big data platform; The dynamic encryption module is configured to allocate a distributed storage node for platform data, perform encryption calculation on the platform data based on a platform encryption key to obtain encrypted data, and convert the encrypted data into dynamic data. The secure storage module is configured to securely store the dynamic data.

6. An electronic device, comprising: A computer readable medium stores a computer readable instruction, and when the computer readable instruction is executed by a processor, the steps in the method of any one of claims 1-4 are performed.

7. A storage medium having stored thereon a computer program, characterized in that The computer program is executed by a processor, and the steps in the method of any one of claims 1-4 are performed.

Images