A digital management system and method for scientific and technological project archives
By combining file access assessment, hierarchical storage, and multi-level encryption with registration and login monitoring, the problems of imprecise access management and incomplete encryption in the management of science and technology project files have been solved. This has enabled secure hierarchical storage and access control of files, preventing information leakage.
Patent Information
- Authority / Receiving Office
- CN · China
- Patent Type
- Patents(China)
- Current Assignee / Owner
- Filing Date
- 2025-06-20
- Publication Date
- 2026-03-03
AI Technical Summary
In the current management of science and technology project archives, access control lacks refinement, archive encryption methods are simplistic, user registration and login are inconvenient and lack effective monitoring, resulting in unclear distinction of important archives, imperfect access control management, and a high risk of leakage of sensitive information.
The archive permission assessment and tagging module analyzes the archive association complexity, update frequency, and access fluctuation value, and stores them in a hierarchical manner and updates them periodically; the archive encryption module performs multi-level encryption processing, and combined with the registration, login, and authentication modules, it generates a unique key and monitors access behavior.
It enables precise control over file access, blocks information leakage paths, prevents unauthorized access, and improves the security and reliability of file management.
Smart Images

Figure CN120723960B_ABST
Abstract
Description
Technical Field
[0001] This invention belongs to the field of science and technology project archive management technology, specifically relating to a digital management system and method for science and technology project archives. Background Technology
[0002] In the field of science and technology project record management, with the rapid development of science and technology and the increasing complexity of projects, record management faces new challenges, and existing technologies have the following problems:
[0003] First, the management of file access is not refined, making it difficult to conduct dynamic level access assessment and hierarchical storage of files, resulting in unclear distinction between important files and ordinary files, and inadequate access control management.
[0004] Secondly, the encryption methods for archives are relatively simple, usually only encrypting the contents of the archives without effectively encrypting and protecting the archive titles, which can easily lead to the leakage of sensitive information.
[0005] Furthermore, the user registration, login, and authorization process is not simple enough and lacks an effective access monitoring and early warning mechanism, making it difficult to detect and prevent abnormal access behavior in a timely manner. Therefore, we propose a digital management system and method for scientific and technological project archives. Summary of the Invention
[0006] The purpose of this invention is to provide a digital management system and method for scientific and technological project archives to solve the problems mentioned in the background art.
[0007] To achieve the above objectives, the present invention provides the following technical solution: a digital management system for scientific and technological project archives, comprising: an archive access assessment and marking module, an archive analysis and storage module, a registration, login and authentication module, and an archive encryption module;
[0008] Archive Access Assessment and Tagging Module: This module digitizes archive data, analyzes the complexity of archive associations, update frequency, editing diversity, and access fluctuation, and performs a comprehensive analysis to obtain an access control value. Based on the access control value, it assesses the access control level of the archive.
[0009] Archive Analysis and Storage Module: Establishes a hierarchical permission database, stores archives according to their corresponding access permission levels into the corresponding hierarchical permission database, and periodically updates the archives in the hierarchical permission database and adjusts their storage locations.
[0010] Registration, login, and authentication module: Used for staff account registration, login, and permission authentication. After successful registration, it generates an access key for the corresponding level of permission library for the account and monitors access.
[0011] The file encryption module converts the file titles in the permission level library into a number sequence. Based on the number sequence, it draws circles to form a first-level encryption image. After processing, it generates isosceles triangles to form a second-level encryption image. It further extracts the major and minor axis information and maps it to a special character sequence. When the file is not decrypted, the special characters are displayed. After entering the key, the original title is restored.
[0012] Preferably, the specific process of digitizing archival materials and analyzing the complexity of their relationships is as follows:
[0013] Collect archival materials of science and technology projects and digitize the collected archival materials; store the digitized archival materials in the source database;
[0014] For each document in the source database, text mining techniques are used to extract keywords from the document text; named entity recognition techniques are used to identify entity information in the document text.
[0015] Based on this, dependency parsing is used to analyze the dependency relationships between various components in the archival text. At the same time, combined with pattern matching technology, the relationships between entities are determined. These relationships include: reference relationships, responsibility relationships, and association relationships.
[0016] The identified entities are used as nodes in the knowledge graph, and the relationships between entities are used as edges to construct the knowledge graph, which is then stored in the source database.
[0017] The number of other files or entities that are related to the current file is obtained by querying the knowledge graph and performing statistics.
[0018] The knowledge graph filters out files of the same type as the current file. For each filtered file, the number of associated entities is counted, and the average number of associated entities of these files is calculated to obtain the average number of associations.
[0019] The association complexity GF is obtained by dividing the number of associated entities by the average number of associations.
[0020] Preferably, the specific process for analyzing the update frequency, editing diversity value, and access fluctuation value of the archives is as follows:
[0021] Set the permission update cycle, extract the update records of the current file within the permission update cycle, and count the number of times the file is updated; obtain the update frequency GP by dividing the number of times the current file is updated by the number of days in the permission update cycle;
[0022] Retrieve the editing history of the current file. The editing history includes: the name of the person who performed the editing operation, their department, and their professional background;
[0023] Analyze the extracted editing records, identify and count the number of different departments involved in the editing, and denote it as the number of editing departments n;
[0024] For each department, the number of different professional backgrounds of the editors involved in the statistics department is recorded as the background category number. Where i is the part number, i = 1, 2, ..., n;
[0025] Using the formula: This yields the editable diversity value BD; among which The preset weight coefficient for the i-th department;
[0026] Retrieve the access records of the current file during the permission update cycle, divide the permission update cycle into several sub-time periods, and count the number of accesses to the file in each sub-time period. g is the sub-time period number, g=1,2,...,G; G is the total number of sub-time periods within the permission update cycle;
[0027] Calculate the average number of accesses to files during the permission update cycle. Using the formula: ; Obtain the access fluctuation value FB.
[0028] Preferably, the specific process of analyzing weight values and assessing the access permission level of the archives based on these weight values is as follows:
[0029] After normalizing the association complexity GF, update frequency GP, editing diversity value BD, and access fluctuation value FB corresponding to the current file, the weighted evaluation value QPZ is obtained using the formula: QPZ=GF×a1+GP×a2+BD×a3+FB×a4; where a1, a2, a3, and a4 are preset weight coefficients.
[0030] Several weight value ranges are set, and each weight value range corresponds to an access permission level. For each file in the source database, the corresponding access permission level is output by matching the weight value of the file with the ownership value range, and the corresponding access permission level is marked.
[0031] Preferably, the specific working process of the archive analysis and storage module is as follows:
[0032] Based on the number of access permission levels, set up several permission level databases accordingly; extract all files that have completed access permission level marking from the source database;
[0033] Read all files from the source database whose permission level is less than or equal to the highest permission level database, and store them in the highest permission level database;
[0034] According to the order of permission levels in the permission database from high to low, read and store the permission databases that have not yet been read. Specifically, for each permission database, read all files in the source database with access permission levels less than or equal to the corresponding permission database level and store them in the permission database.
[0035] Once all files in the current batch have been allocated in the source database, delete the files in the source database.
[0036] For files in each level of permission library, when the set permission update cycle arrives, the permission level update process is automatically triggered. Specifically, the permission evaluation value of each file is recalculated, and the access permission level of each file is determined accordingly.
[0037] For each file, it is re-stored into the corresponding access permission library according to its new access permission level;
[0038] During the re-storage process, the file is first copied to the target permission level library and the index in the target permission level library is updated. After the file is copied, the file is deleted in the original permission level library.
[0039] Preferably, the specific working process of the registration, login, and authentication module is as follows:
[0040] Staff members register accounts by entering personal information, including: name, mobile phone number, and ID card number;
[0041] The constructed permission allocation library presets the permission levels of staff members based on their positions, responsibilities, and project requirements; it establishes a mapping relationship between staff members' personal information and their corresponding permission levels to obtain a personnel permission level mapping relationship table; and it stores this table in the permission allocation library.
[0042] Staff members register accounts and set passwords by entering personal information; the personal information submitted during registration is matched with the personnel permission level mapping table in the permission allocation database, and the corresponding permission level of the staff member is determined based on the matching result, and the staff member's registered account is bound and marked with its corresponding permission level;
[0043] After successful account registration, an access key for the corresponding permission library is generated for the account based on the permission level associated with the account. The access keys for accounts with the same permission level are all different.
[0044] Once staff successfully log in using their registered account and password, they will be automatically navigated to the corresponding permission level database to search for files based on the permission level associated with the account, and will be prompted to enter the key for that permission level database.
[0045] Record the time interval between successful account login and actual key input, which is called key input duration. If the key input duration exceeds the corresponding threshold, restrict the current account's access permissions for the day and generate an alert message to be sent to the account's associated mobile device.
[0046] Preferably, the process of converting the file titles in the permission level database into encrypted images is as follows:
[0047] For each file in the permission level database, obtain its title name; construct a text-number mapping table; in the text-number mapping table, each Chinese character corresponds to an Arabic numeral; substitute the title name into this mapping table, perform number conversion, and obtain the title number sequence;
[0048] Following the sequential order of the numbers in the title, draw circles tangent to each other on a straight line, with the radius of each circle equal to the numerical value, and the centers of all circles lying on the straight line; combine the drawn circles to obtain a level-one encrypted image;
[0049] The semicircles located below the straight line in the first-level encrypted image are shaded, and then the shaded areas in the first-level encrypted image are removed. For each remaining semicircle, the two endpoints of the semicircle on the straight line are connected to the vertex of the semicircle in the order of sequence generation to construct isosceles triangles. The drawn isosceles triangles are combined to obtain the second-level encrypted image.
[0050] For each isosceles triangle in the level 2 encrypted image, following the sequence generation order, for each isosceles triangle, draw a perpendicular line from the vertex of the isosceles triangle to the center of the circle, and mark this perpendicular line as the major axis. Then, connect the midpoints of the two legs of the isosceles triangle with a line segment, and mark this connecting line segment as the minor axis. Finally, remove all semicircles from the level 2 encrypted image to obtain the level 3 encrypted image.
[0051] Preferably, the specific process of mapping the title to a special character sequence based on the information in the encrypted image is as follows:
[0052] Draw concentric circles, each consisting of two circles; divide the concentric circles evenly into several sector regions; for each sector region, mark the sector formed by the inner circle as the inner circle region and the sector formed by the outer circle as the outer circle region.
[0053] For each sector, its inner circle corresponds to a unique major axis length value, and its outer circle corresponds to a unique special character; special characters include: English characters, combinations of letters and numbers, and combinations of letters and symbols;
[0054] All sector regions are marked with major axis length values and special characters to construct major axis transformation graphics; similarly, minor axis transformation graphics are constructed using the same method as above.
[0055] The isosceles triangles in the three-level encrypted image are substituted into the corresponding transformed graphics according to the sequence generation order, so as to obtain the special character combination sequence of the title.
[0056] For each file in the access control database, before key decryption, its displayed title is a sequence of special characters corresponding to its title; after key input, the file titles in the access control database will be decrypted to restore the original file titles.
[0057] Compared with the prior art, the beneficial effects of the present invention are:
[0058] (1) The above-mentioned digital management system and method for scientific and technological project archives comprehensively analyzes the association complexity, update frequency, editing diversity value and access fluctuation value of archives through the archive permission assessment and marking module, calculates the weight value and assesses the access permission level, and then the archive analysis and storage module stores the archives in the corresponding level permission library and periodically updates and adjusts the storage location; this mechanism solves the problems of lack of refinement, difficulty in dynamic assessment and hierarchical storage of archive permission management in the existing technology, so that important archives and ordinary archives can be clearly distinguished, and precise control of access permissions is achieved.
[0059] (2) The scientific and technological project archive digitization management system and method converts the archive title into a digital sequence through the archive encryption module. After three-level encryption processing of "circle drawing → isosceles triangle construction → special characters mapped by major and minor axes", only the special character sequence is displayed when not decrypted. If the login password of the level permission library is cracked or the account is stolen, the attacker cannot restore the title content due to the lack of the corresponding key. For example, even if the system is illegally logged in, the archive titles seen are all "meaningless combinations of letters and symbols", and it is impossible to judge the sensitivity of the archive or the content theme, thereby blocking the information leakage path. This encryption method and the title display mechanism are linked, providing a sufficient time window for the background to detect abnormal login behavior.
[0060] (3) This kind of digital management system and method for scientific and technological project archives, through the registration, login and authentication module, not only presets the permission level according to the personnel's position and generates a unique access key, but also records the "password"
[0061] The "key input timeout" mechanism enables dynamic protection: if a staff member does not enter the key within the threshold time after logging in, the system automatically restricts access permissions for the day and sends an alert to the mobile device; this mechanism complements the title encryption; when the account password is leaked, even if an attacker logs into the system, they will not be able to continue accessing it due to the "key input timeout limit", and the special characters in the encrypted title further delay the time for the attacker to identify the information, thus effectively preventing unauthorized access through the dual measures of "time threshold control + title encryption obfuscation". Attached Figure Description
[0062] Figure 1 This is a flowchart of the present invention;
[0063] Figure 2 The encrypted image for the file title of this invention;
[0064] Figure 3 This is the major-minor axis conversion diagram of the present invention. Detailed Implementation
[0065] The technical solutions of the embodiments of the present invention will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only some embodiments of the present invention, and not all embodiments. Based on the embodiments of the present invention, all other embodiments obtained by those skilled in the art without creative effort are within the scope of protection of the present invention. Example
[0066] Please see Figure 1-3 This invention provides a digital management system for scientific and technological project archives, including: an archive access assessment and marking module, an archive analysis and storage module, a registration, login and authentication module, and an archive encryption module;
[0067] The archive access control assessment module digitizes archive data, analyzes the archive's relational complexity, update frequency, editing diversity, and access fluctuation, and performs a comprehensive analysis to obtain an access control value. Based on the access control value, the access control level of the archive is assessed. The specific process is as follows:
[0068] Collect archival materials of scientific and technological projects, including paper archives, electronic documents, charts, audio and video, etc.; digitize the collected archival materials; and store the digitized archival materials in the source database.
[0069] For each document in the source database, text mining techniques are used to extract keywords from the document text. Keywords include: project name, technical terms, personnel names, and document number. Named entity recognition technology is used to identify entity information in the document text. Entity information includes: person name, organization name, date, etc.
[0070] Based on this, dependency parsing is used to analyze the dependency relationships between various components (such as subject, predicate, object, attributive, adverbial, complement, etc.) in the archival text. These dependency relationships include subject-predicate-object relationships, attributive-adverbial-complement relationships, etc. At the same time, combined with pattern matching technology, the relationships between entities are determined. These relationships include citation relationships, responsibility relationships, and association relationships, etc.
[0071] The identified entities are used as nodes in the knowledge graph, and the relationships between entities are used as edges to construct the knowledge graph, which is then stored in a graph database.
[0072] The number of other files or entities that are related to the current file is obtained by querying the knowledge graph and performing statistics.
[0073] The knowledge graph filters out files of the same type as the current file. For each filtered file, the number of associated entities is counted, and the average number of associated entities of these files is calculated to obtain the average number of associations.
[0074] The association complexity GF is obtained by dividing the number of associated entities by the average number of associations.
[0075] It should be noted that if the complexity of the association is high, it means that the relationship between the file and other files or entities is relatively complex, and it may be located at the core of the project or involve multiple key links. The leakage or improper access to its content may have a significant impact on the overall project.
[0076] Set the permission update cycle, extract the update records of the current file within the permission update cycle, and count the number of times the file is updated; obtain the update frequency GP by dividing the number of times the current file is updated by the number of days in the permission update cycle;
[0077] It should be noted that a high update frequency usually indicates that the content of the archives is developing or changing rapidly, and may involve the latest progress of the project, key decisions or important technological updates. Such archives are relatively sensitive.
[0078] Retrieve the editing history of the current file. The editing history includes: the name of the person who performed the editing operation, their department, professional background, etc.
[0079] Analyze the extracted editing records, identify and count the number of different departments involved in the editing, and denote it as the number of editing departments n;
[0080] For each department, the number of different professional backgrounds of the editors involved in the statistics department is recorded as the background category number. Where i is the part number, i = 1, 2, ..., n;
[0081] Using the formula: This yields the editable diversity value BD; among which The preset weight coefficient for the i-th department;
[0082] It should be noted that the higher the editing diversity value, the more parts of the archive were involved in the editing, the more people with different professional backgrounds participated, and the more information the archive covers in terms of disciplines and business areas, indicating that the archive is more important.
[0083] Retrieve the access records of the current file during the permission update cycle, divide the permission update cycle into several sub-time periods, and count the number of accesses to the file in each sub-time period. g is the sub-time period number, g=1,2,...,G; G is the total number of sub-time periods within the permission update cycle;
[0084] Calculate the average number of accesses to files during the permission update cycle. Using the formula: The access fluctuation value FB is obtained;
[0085] It should be noted that large fluctuations in access values may indicate that the file content is of high interest or sensitivity, and that there may be significant changes or hot topics recently. In such cases, the access level should be increased to prevent the risk of information leakage due to a surge in access volume.
[0086] After normalizing the association complexity GF, update frequency GP, editing diversity value BD, and access fluctuation value FB corresponding to the current file, the weighted evaluation value QPZ is obtained using the formula: QPZ=GF×a1+GP×a2+BD×a3+FB×a4; where a1, a2, a3, and a4 are preset weight coefficients.
[0087] Several weighting value ranges are set, and each weighting value range corresponds to an access permission level. For each file in the source database, the corresponding access permission level is output by matching the weighting value of the file with the ownership value range, and the access permission level is marked accordingly. The larger the upper and lower limits of the weighting value range, the higher the access permission level and the more difficult it is to access the file.
[0088] The document analysis and storage module establishes a hierarchical permission database, storing documents according to their corresponding access permission levels. The module also periodically updates the documents in the permission database and adjusts their storage locations. The specific process is as follows:
[0089] Based on the number of access permission levels, set up several permission level databases accordingly; extract all files that have completed access permission level marking from the source database;
[0090] Read all files with permission levels less than or equal to the highest permission level from the source database and store them in the highest permission level database; at this point, the highest permission level database contains all files marked with permissions from the lowest to the highest.
[0091] According to the order of permission levels in the permission database from high to low, read and store the permission databases that have not yet been read. Specifically, for each permission database, read all files in the source database with access permission levels less than or equal to the corresponding permission database level and store them in the permission database.
[0092] After all files in the current batch have been allocated in the source database, delete the files in the source database, retaining only the necessary metadata and operation records;
[0093] For files in each level of permission library, when the set permission update cycle arrives, the permission level update process is automatically triggered. Specifically, the permission evaluation value of each file is recalculated, and the access permission level of each file is determined accordingly.
[0094] For each file, it is re-stored into the corresponding access permission library according to its new access permission level;
[0095] During the re-storage process, the file is first copied to the target permission level library and the index in the target permission level library is updated. After the file is copied, the file is deleted in the original permission level library; only the necessary metadata and operation records are retained.
[0096] The registration, login, and authentication module is used to register, log in, and authenticate staff accounts. After successful registration, an access key for the corresponding level of permission database is generated for the account, and access is monitored. The specific process is as follows:
[0097] Staff members register accounts by entering personal information, including name, mobile phone number, ID card number, etc.; and verify the authenticity of the information through identity verification.
[0098] The constructed permission allocation library presets the permission levels of staff members based on their positions, responsibilities, and project requirements; it establishes a mapping relationship between staff members' personal information and their corresponding permission levels to obtain a personnel permission level mapping relationship table; and it stores this table in the permission allocation library.
[0099] Staff members register accounts and set passwords by entering personal information; the personal information submitted during registration is matched with the personnel permission level mapping table in the permission allocation database, and the corresponding permission level of the staff member is determined based on the matching result, and the staff member's registered account is bound and marked with its corresponding permission level;
[0100] After successful account registration, an access key for the corresponding permission library is generated for the account based on the permission level associated with the account. The access keys for accounts with the same permission level are all different.
[0101] Once staff successfully log in using their registered account and password, they will be automatically navigated to the corresponding permission level database to search for files based on the permission level associated with the account, and will be prompted to enter the key for that permission level database.
[0102] Record the time interval between successful account login and actual key input, denoted as key input duration. A key input duration threshold is preset. If the key input duration exceeds the corresponding threshold, the current account's access permissions for the day will be restricted, and an alert message will be generated and sent to the account's associated mobile device.
[0103] The file encryption module converts file titles in the access control database into numerical sequences. Based on these sequences, it draws circles to form a first-level encryption image. After processing, it generates isosceles triangles to form a second-level encryption image. Further, it extracts the major and minor axis information and maps it to a sequence of special characters. These special characters are displayed when the file is not decrypted. After inputting the key, the original title is restored. The specific process is as follows:
[0104] For each file in the permission level database, obtain its title name; construct a text-number mapping table; in the text-number mapping table, each Chinese character corresponds to an Arabic numeral; substitute the title name into this mapping table, perform number conversion, and obtain the title number sequence;
[0105] like Figure 2 Following the sequential order of the numbers in the title, draw circles tangent to each other on a straight line, with the radius of each circle equal to the numerical value, and the centers of all circles lying on the straight line; combine the drawn circles to obtain a level-one encrypted image;
[0106] The semicircles located below the straight line in the first-level encrypted image are shaded, and then the shaded areas in the first-level encrypted image are removed. For each remaining semicircle, the two endpoints of the semicircle on the straight line are connected to the vertex of the semicircle in the order of sequence generation to construct isosceles triangles. The drawn isosceles triangles are combined to obtain the second-level encrypted image.
[0107] For each isosceles triangle in the level 2 encrypted image, following the sequence generation order, for each isosceles triangle, draw a perpendicular line from the vertex of the isosceles triangle to the center of the circle, and mark this perpendicular line as the major axis. Then, connect the midpoints of the two legs of the isosceles triangle with a line segment, and mark this connecting line segment as the minor axis. Finally, remove all semicircles from the level 2 encrypted image to obtain the level 3 encrypted image.
[0108] Draw concentric circles, each consisting of two circles; divide the concentric circles evenly into several sector regions; for each sector region, mark the sector formed by the inner circle as the inner circle region and the sector formed by the outer circle as the outer circle region.
[0109] For each sector, its inner circle corresponds to a unique major axis length value, and its outer circle corresponds to a unique special character; special characters include: English characters, combinations of letters and numbers, and combinations of letters and symbols;
[0110] All sector regions are marked with major axis length values and special characters to construct major axis transformation graphics;
[0111] Based on the above method for constructing the major axis transformation graph, the minor axis transformation graph can be constructed similarly, such as... Figure 3 ;
[0112] The isosceles triangles in the three-level encrypted image are substituted into the corresponding transformed graphics according to the sequence generation order, so as to obtain the special character combination sequence of the title.
[0113] For each file in the access control database, before key decryption, its displayed title is a sequence of special characters corresponding to its title; after key input, the file titles in the access control database will be decrypted to restore the original file titles.
[0114] A method for digital management of science and technology project archives, comprising:
[0115] Step 1: Digitize the archival data, analyze the complexity of the archives' relationships, update frequency, editing diversity, and access fluctuation, and conduct a comprehensive analysis to obtain a weighting value. Based on the weighting value, assess the access permission level of the archives.
[0116] Step 2: Establish a permission level database. Store files in the corresponding permission level database according to their access level, and periodically update the files in the permission level database and adjust their storage locations.
[0117] Step 3: Used for staff account registration, login, and permission authentication. After successful registration, an access key for the corresponding level of permission library is generated for the account, and access is monitored.
[0118] Step 4: Convert the file titles in the access control database into numerical sequences. Draw circles based on the numerical sequences to form a first-level encrypted image. After processing, generate isosceles triangles to form a second-level encrypted image. Further extract the major and minor axis information and map it into a special character sequence. Display the special characters when not decrypted. Restore the original title after entering the key.
[0119] Although embodiments of the invention have been shown and described, it will be understood by those skilled in the art that various changes, modifications, substitutions and alterations can be made to these embodiments without departing from the principles and spirit of the invention, the scope of which is defined by the appended claims and their equivalents.
Claims
1. A digital management system for scientific and technological project archives, comprising: The system comprises a file access assessment and marking module, a file analysis and storage module, a registration, login and authentication module, and a file encryption module; its features include: Archive Access Assessment and Tagging Module: This module digitizes archive data, analyzes the complexity of archive associations, update frequency, editing diversity, and access fluctuation, and performs a comprehensive analysis to obtain an access control value. Based on the access control value, it assesses the access control level of the archive. Archive Analysis and Storage Module: Establishes a hierarchical permission database, stores archives according to their corresponding access permission levels into the corresponding hierarchical permission database, and periodically updates the archives in the hierarchical permission database and adjusts their storage locations. Registration, login, and authentication module: Used for staff account registration, login, and permission authentication. After successful registration, it generates an access key for the corresponding level of permission library for the account and monitors access. The file encryption module converts the file titles in the access control database into a number sequence. Based on the number sequence, it draws circles to form a first-level encryption image. After processing, it generates isosceles triangles to form a second-level encryption image. It further extracts the major and minor axis information and maps it to a special character sequence. When the file is not decrypted, the special characters are displayed. After the key is entered, the original title is restored. The process of converting the file titles in the access control database into encrypted images is as follows: For each file in the permission level database, obtain its title name; construct a text-number mapping table; in the text-number mapping table, each Chinese character corresponds to an Arabic numeral; substitute the title name into this mapping table, perform number conversion, and obtain the title number sequence; Following the sequential order of the numbers in the title, draw circles tangent to each other on a straight line, with the radius of each circle equal to the numerical value, and the centers of all circles lying on the straight line; combine the drawn circles to obtain a level-one encrypted image; The semicircles located below the straight line in the first-level encrypted image are shaded, and then the shaded areas in the first-level encrypted image are removed. For each remaining semicircle, the two endpoints of the semicircle on the straight line are connected to the vertex of the semicircle in the order of sequence generation to construct isosceles triangles. The drawn isosceles triangles are combined to obtain the second-level encrypted image. For each isosceles triangle in the level 2 encrypted image, following the sequence generation order, for each isosceles triangle, draw a perpendicular line from the vertex of the isosceles triangle to the center of the circle, and mark this perpendicular line as the major axis. Then, connect the midpoints of the two legs of the isosceles triangle with a line segment, and mark this connecting line segment as the minor axis. Finally, remove all semicircles from the level 2 encrypted image to obtain the level 3 encrypted image.
2. The digital management system for scientific and technological project archives according to claim 1, characterized in that: The specific process of digitizing archival materials and analyzing the complexity of their relationships is as follows: Collect archival materials of science and technology projects and digitize the collected archival materials; store the digitized archival materials in the source database; For each document in the source database, text mining techniques are used to extract keywords from the document text; named entity recognition techniques are used to identify entity information in the document text. Based on this, dependency parsing is used to analyze the dependency relationships between various components in the archival text. At the same time, combined with pattern matching technology, the relationships between entities are determined. Relationships include: referencing, responsibility, and association. The identified entities are used as nodes in the knowledge graph, and the relationships between entities are used as edges to construct the knowledge graph, which is then stored in the source database. The number of other files or entities that are related to the current file is obtained by querying the knowledge graph and performing statistics. The knowledge graph filters out files of the same type as the current file. For each filtered file, the number of associated entities is counted, and the average number of associated entities of these files is calculated to obtain the average number of associations. The association complexity GF is obtained by dividing the number of associated entities by the average number of associations.
3. The digital management system for scientific and technological project archives according to claim 2, characterized in that: The specific process for analyzing the update frequency of the archives, editing diversity values, and access fluctuation values is as follows: Set a permission update cycle, extract the update records of the current file within the permission update cycle, and count the number of times the file is updated; The update frequency GP is obtained by dividing the current number of file updates by the number of days in the permission update cycle. Retrieve the editing history of the current file. The editing history includes: the name of the person who performed the editing operation, their department, and their professional background; Analyze the extracted editing records, identify and count the number of different departments involved in the editing, and denote it as the number of editing departments n; For each department, the number of different professional backgrounds of the editors involved in the statistics department is recorded as the background category number. Where i is the part number, i = 1, 2, ..., n; Using the formula: This yields the editable diversity value BD; among which The preset weight coefficient for the i-th department; Retrieve the access records of the current file during the permission update cycle, divide the permission update cycle into several sub-time periods, and count the number of accesses to the file in each sub-time period. g is the sub-time period number, g=1,2,...,G; G is the total number of sub-time periods within the permission update cycle; Calculate the average number of accesses to files during the permission update cycle. Using the formula: ; Obtain the access fluctuation value FB.
4. The digital management system for scientific and technological project archives according to claim 3, characterized in that: The specific process of analyzing weighted assessment values and evaluating the access permission level of a file based on those values is as follows: After normalizing the association complexity GF, update frequency GP, editing diversity value BD, and access fluctuation value FB corresponding to the current file, the weighted evaluation value QPZ is obtained using the formula: QPZ=GF×a1+GP×a2+BD×a3+FB×a4; where a1, a2, a3, and a4 are preset weight coefficients. Several weight value ranges are set, and each weight value range corresponds to an access permission level. For each file in the source database, the corresponding access permission level is output by matching the weight value of the file with the ownership value range, and the corresponding access permission level is marked.
5. The digital management system for scientific and technological project archives according to claim 4, characterized in that: The specific working process of the document analysis and storage module is as follows: Based on the number of access permission levels, set up several permission level databases accordingly; extract all files that have completed access permission level marking from the source database; Read all files from the source database whose permission level is less than or equal to the highest permission level database, and store them in the highest permission level database; According to the order of permission levels in the permission database from high to low, read and store the permission databases that have not yet been read. Specifically, for each permission database, read all files in the source database with access permission levels less than or equal to the corresponding permission database level and store them in the permission database. Once all files in the current batch have been allocated in the source database, delete the files in the source database. For files in each level of permission library, when the set permission update cycle arrives, the permission level update process is automatically triggered. Specifically, the permission evaluation value of each file is recalculated, and the access permission level of each file is determined accordingly. For each file, it is re-stored into the corresponding access permission library according to its new access permission level; During the re-storage process, the file is first copied to the target permission level library and the index in the target permission level library is updated. After the file is copied, the file is deleted in the original permission level library.
6. The digital management system for scientific and technological project archives according to claim 5, characterized in that: The specific working process of the registration, login, and authentication module is as follows: Staff members register accounts by entering personal information, including: name, mobile phone number, and ID card number; The constructed permission allocation library presets the permission levels of staff members based on their positions, responsibilities, and project requirements; it establishes a mapping relationship between staff members' personal information and their corresponding permission levels to obtain a personnel permission level mapping relationship table; and it stores this table in the permission allocation library. Staff members register accounts and set passwords by entering personal information; the personal information submitted during registration is matched with the personnel permission level mapping table in the permission allocation database, and the corresponding permission level of the staff member is determined based on the matching result, and the staff member's registered account is bound and marked with its corresponding permission level; After successful account registration, an access key for the corresponding permission library is generated for the account based on the permission level associated with the account. The access keys for accounts with the same permission level are all different. Once staff successfully log in using their registered account and password, they will be automatically navigated to the corresponding permission level database to search for files based on the permission level associated with the account, and will be prompted to enter the key for that permission level database. Record the time interval between successful account login and actual key input, which is called key input duration. If the key input duration exceeds the corresponding threshold, restrict the current account's access permissions for the day and generate an alert message to be sent to the account's associated mobile device.
7. The digital management system for scientific and technological project archives according to claim 6, characterized in that: The specific process of mapping the title to a special character sequence based on the information in the encrypted image is as follows: Draw concentric circles, each consisting of two circles; divide the concentric circles evenly into several sector regions; for each sector region, mark the sector formed by the inner circle as the inner circle region and the sector formed by the outer circle as the outer circle region. For each sector, its inner circle corresponds to a unique major axis length value, and its outer circle corresponds to a unique special character; special characters include: English characters, combinations of letters and numbers, and combinations of letters and symbols; All sector regions are marked with major axis length values and special characters to construct major axis transformation graphics; similarly, minor axis transformation graphics are constructed using the same method as above. The isosceles triangles in the three-level encrypted image are substituted into the corresponding transformed graphics according to the sequence generation order, so as to obtain the special character combination sequence of the title. For each file in the access control database, before key decryption, its displayed title is a sequence of special characters corresponding to its title; after key input, the file titles in the access control database will be decrypted to restore the original file titles.
8. A method for digital management of scientific and technological project archives, applied to the digital management system for scientific and technological project archives proposed in any one of claims 1-7, characterized in that: include: Step 1: Digitize the archival data, analyze the complexity of the archives' relationships, update frequency, editing diversity, and access fluctuation, and conduct a comprehensive analysis to obtain a weighting value. Based on the weighting value, assess the access permission level of the archives. Step 2: Establish a permission level database. Store files in the corresponding permission level database according to their access level, and periodically update the files in the permission level database and adjust their storage locations. Step 3: Used for staff account registration, login, and permission authentication. After successful registration, an access key for the corresponding level of permission library is generated for the account, and access is monitored. Step 4: Convert the file titles in the access control database into numerical sequences. Draw circles based on the numerical sequences to form a first-level encrypted image. After processing, generate isosceles triangles to form a second-level encrypted image. Further extract the major and minor axis information and map it into a special character sequence. Display the special characters when not decrypted. Restore the original title after entering the key.
Citation Information
Patent Citations
Archive digital management system
CN108491495A
New energy station data safe and credible transmission method and system
CN118764240A