Data security monitoring method, equipment and medium

Abstract

The invention provides a data security monitoring method and device and a medium, and relates to the technical field of data processing.The method comprises the steps that a data user sends an obtaining request of a target field to a third party, and the third party fills each encrypted field value corresponding to the target field into a fixed-length intermediate field value; the third party splices the intermediate field values which are converted into integer representation into a row vector; the third party sends the transmission data, the reversible matrix subjected to encryption operation and a secret key subjected to encryption operation to a data user, and the data user decrypts the reversible matrix subjected to encryption operation based on the secret key subjected to encryption operation. And the encrypted field value is decrypted by using the original key to obtain the decrypted field value corresponding to the target field value, and the data user obtains the answer to the target question by using the decrypted field value, so that the use security of the original data table is improved.

Description

Technical Field

[0001] The present invention relates to the field of data processing technology, and in particular to a data security monitoring method, device and medium. Background Art

[0002] In today's digital age, the role of data has become increasingly crucial. Data circulation faces significant security challenges. A single problem may require the use of data from multiple data providers. Integrating data from multiple platforms can facilitate problem solving, but this also raises the question of data security. Placing data from multiple providers directly on a third-party platform can lead to distrust and concern about misuse. Data users, on the other hand, cannot easily access data directly from multiple providers, leading to data leakage. Therefore, ensuring the secure use of data continues to be a pressing issue. Summary of the Invention

[0003] In view of the above technical problems, the technical solution adopted by the present invention is: According to a first aspect of the present invention, a data security monitoring method is provided, the method comprising the following steps: The data provider encrypts the field value list corresponding to each field in the original data table, obtains the encrypted field value list, and sends the encrypted field value list to a third party for storage; the field value list includes several field values; The data consumer sends a request to the third party to obtain the target fields required for the target problem; The third party fills each encrypted field value corresponding to the target field with an intermediate field value of a fixed length; and converts the intermediate field value into an integer representation; the fixed length is the maximum value of the byte length of the encrypted field value; The third party concatenates the intermediate field values ​​converted into integer representations into row vectors and uses a reversible matrix to operate on the row vectors to obtain the transmission data. The number of rows in the reversible matrix is ​​equal to the number of columns in the row vectors. The third party sends the transmission data, the length of the encrypted field value corresponding to the target field, the reversible matrix after the encryption operation, and the encryption key to the data user; The data user decrypts the reversible matrix after the encryption operation based on the encryption operation key to obtain the reversible matrix; and obtains the encrypted field value corresponding to the target field based on the reversible matrix, the transmitted data, and the length of the encrypted field value corresponding to the target field; The data consumer obtains the original key of the encrypted field value from the data provider, and uses the original key to decrypt the encrypted field value to obtain the decrypted field value corresponding to the target field value; The data consumer uses the decrypted field value to obtain the answer to the target question and sends the encrypted answer to the third party; the third party monitors the encrypted field value list and the encrypted answer.

[0004] According to a second aspect of the present invention, a non-transitory computer-readable storage medium is provided, in which a computer program is stored. The computer program is loaded and executed by a processor to implement the aforementioned method.

[0005] According to a third aspect of the present invention, an electronic device is provided, comprising: a processor, a memory, and a computer program stored in the memory and executable on the processor, wherein the processor implements the aforementioned method when executing the computer program.

[0006] The present invention has at least the following beneficial effects: the data provider encrypts the field value list corresponding to each field in the original data table, obtains the encrypted field value list and sends the encrypted field value list to a third party for storage, the data user sends a request to obtain the target field required by the target problem to the third party, the third party fills each encrypted field value corresponding to the target field with an intermediate field value of a fixed length; and converts the intermediate field value into an integer representation, the third party splices the intermediate field values ​​converted into integer representations into a row vector; and uses a reversible matrix to operate on the row vector to obtain transmission data, the third party sends the transmission data, the length of the encrypted field value corresponding to the target field, the reversible matrix after the encryption operation and the encryption operation key to the data user, the data user decrypts the reversible matrix after the encryption operation based on the encryption operation key to obtain the reversible matrix ; and based on the reversible matrix, the transmission data and the length of the encrypted field value corresponding to the target field, the encrypted field value corresponding to the target field is obtained, the data user obtains the original key of the encrypted field value from the data provider, and uses the original key to decrypt the encrypted field value to obtain the decrypted field value corresponding to the target field value, the data user uses the decrypted field value to obtain the answer to the target question, and sends the encrypted answer to the third party; the third party monitors the encrypted field value list and the encrypted answer. The present invention encrypts the original data table of the data provider and stores the encrypted data in a third-party storage. The original key is provided by the data provider to the data user, and the transmission security of the original data table is monitored throughout the entire process. The third party calculates the encrypted field value and then transmits it to the data user, further improving the security of the original data table. BRIEF DESCRIPTION OF THE DRAWINGS

[0007] In order to more clearly illustrate the technical solutions in the embodiments of the present invention, the following briefly introduces the drawings required for use in the description of the embodiments. Obviously, the drawings described below are only some embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without creative work.

[0008] Figure 1 The present invention provides a flowchart of a data security monitoring method. DETAILED DESCRIPTION

[0009] The following will clearly and completely describe the technical solutions in the embodiments of the present invention in conjunction with the accompanying drawings. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by those skilled in the art without making any creative efforts shall fall within the scope of protection of the present invention.

[0010] It should be noted that the terms "first", "second", etc. in the description and claims of the present invention and the above-mentioned drawings are used to distinguish similar tasks and are not necessarily used to describe a specific order or sequence. It should be understood that the numbers used in this way can be interchanged where appropriate so that the embodiments of the present invention described herein can be implemented in an order other than those illustrated or described herein. In addition, the terms "including" and "having" and any variations thereof are intended to cover non-exclusive inclusions. For example, a process, method, system, product or server that includes a series of steps or units is not necessarily limited to those steps or units clearly listed, but may include other steps or units that are not clearly listed or inherent to these processes, methods, products or devices.

[0011] The embodiment of the present invention provides a data security monitoring method, such as Figure 1 As shown, the method includes the following steps: S100, the data provider encrypts the field value list corresponding to each field in the original data table, obtains the encrypted field value list and sends the encrypted field value list to a third party for storage; the field value list includes several field values.

[0012] Specifically, the data provider sends the encrypted field value list to a third party via a secure channel (such as HTTPS / TLS). The third party stores the encrypted field value list and indexes it by field. The data provider stores the original key and sends it to the data consumer upon request.

[0013] S200: The data user sends a request to obtain the target fields required for the target problem to a third party.

[0014] S300: The third party fills each encrypted field value corresponding to the target field with an intermediate field value of a fixed length; and converts the intermediate field value into an integer representation.

[0015] Specifically, the length of each encrypted field value is recorded and converted into an integer. If the encrypted field value is less than the fixed length, bytes are added to the end of the encrypted field value until it reaches the fixed length. If the encrypted field value is equal to the fixed length, no changes are made.

[0016] Those skilled in the art will appreciate that any prior art method for converting intermediate field values ​​into integer representations falls within the scope of the present invention and will not be further described herein. Converting intermediate field values ​​into integers is a fundamental and widely used prior art in cryptography. Many encryption algorithms are based on number theory and modular arithmetic and are performed in the integer domain. For example, the ciphertext generated by asymmetric encryption is essentially a large integer. The fixed length is equal to the maximum byte length of all encrypted field values.

[0017] At step S400 , the third party concatenates the intermediate field values ​​converted into integer representations into row vectors, and uses a reversible matrix to operate on the row vectors to obtain transmission data, where the number of rows of the reversible matrix is ​​equal to the number of columns of the row vectors.

[0018] In one embodiment of the present invention, all intermediate field values ​​represented by integers are concatenated into a row vector; in another embodiment of the present invention, the intermediate field values ​​corresponding to a target field are concatenated into a row vector.

[0019] S500: The third party sends the transmission data, the length of the encrypted field value corresponding to the target field, the reversible matrix after the encryption operation, and the encryption operation key to the data user.

[0020] In another embodiment of the present invention, S500 is replaced by: the third party sends the transmission data, the metadata after the encryption operation, the reversible matrix after the encryption operation and the key of the encryption operation to the data user, and the metadata at least includes the length of the encrypted field value corresponding to the target field.

[0021] S600, the data user decrypts the reversible matrix after the encryption operation based on the encryption operation key to obtain the reversible matrix; and obtains the encrypted field value corresponding to the target field based on the reversible matrix, the transmission data and the length of the encrypted field value corresponding to the target field.

[0022] S700: The data user obtains the original key of the encrypted field value from the data provider, and uses the original key to decrypt the encrypted field value to obtain the decrypted field value corresponding to the target field value.

[0023] Specifically, the third party sends a request to the data provider for the data user to use the original key of the encrypted field value. The data provider reviews the data user. If the review is successful, the third party sends the original key of the encrypted field value to the data user.

[0024] At S800, the data consumer uses the decrypted field value to obtain the answer to the target question and sends the encrypted answer to a third party. The third party monitors the encrypted field value list and the encrypted answer. Specifically, the third party monitors whether the encrypted field value list has been encrypted and monitors whether the encrypted answer has been encrypted.

[0025] In summary, the data provider encrypts the field value list corresponding to each field in the original data table, obtains the encrypted field value list and sends the encrypted field value list to a third party for storage. The data user sends a request to obtain the target field required by the target problem to the third party. The third party fills each encrypted field value corresponding to the target field with an intermediate field value of a fixed length; and converts the intermediate field value into an integer representation. The third party splices the intermediate field values ​​converted into integer representations into a row vector; and uses a reversible matrix to operate on the row vector to obtain transmission data. The third party sends the transmission data, the length of the encrypted field value corresponding to the target field, the reversible matrix after the encryption operation, and the encryption operation key to the data user. The data user decrypts the reversible matrix after the encryption operation based on the encryption operation key to obtain the reversible matrix; and based on the reversible matrix The invention obtains the encrypted field value corresponding to the target field, obtains the original key of the encrypted field value from the data provider, and uses the original key to decrypt the encrypted field value to obtain the decrypted field value corresponding to the target field value, and uses the decrypted field value to obtain the answer to the target question and sends the encrypted answer to the third party; the third party monitors the encrypted field value list and the encrypted answer. The invention encrypts the original data table of the data provider and stores the encrypted data in the third party. The original key is provided by the data provider to the data user. The transmission security of the original data table is monitored throughout the entire process, and the third party calculates the encrypted field value and then transmits it to the data user, thereby further improving the security of the original data table.

[0026] Specifically, in S400, the reversible matrix is ​​used to operate the row vector to obtain the transmission data, including: S410, generate a reversible matrix M, the number of rows of the reversible matrix is ​​equal to the number of columns of the row vector, and the reversible matrix is ​​reversible under mod p, and the prime number p is greater than 2 to the power of x, x is equal to 8 times b, b is a fixed length; mod is a modular operation. Specifically, the number of rows of the reversible matrix is ​​equal to the number of columns of the reversible matrix is ​​equal to the number of columns of the row vector. It can be understood that the prime number p>28b , use a sufficiently large p to avoid integer truncation caused by modular operations, in the integer range [0, 2 8b -1] is completely covered by p, without information loss, allowing data users to recover the encrypted field value. The reversible matrix is ​​reversible under mod p, so that the integer ring modulo p forms a field.

[0027] Specifically, the data provider, data user, and third party all use the same byte order.

[0028] In one embodiment of the present invention, the prime number p is equal to 2 to the power of y, y is equal to 8 times a, a is equal to the sum of b and 1, p is set to the power of 2 to the power of y, and the number of digits of 2 to the power of 8 is set more to ensure security.

[0029] S420 , obtaining transmission data, where the transmission data D is equal to the product of the row vector C, the reversible matrix M, and mod p: D=C×M×mod p.

[0030] Furthermore, S600 obtains the encrypted field value corresponding to the target field based on the reversible matrix, the transmission data, and the length of the encrypted field value corresponding to the target field, and further includes: S610, obtaining the inverse matrix M of the reversible matrix M -1 .

[0031] S620, obtain row vector C, which is equal to the product of the transmission data, the inverse matrix of the reversible matrix, and mod p. C=D×M -1 ×mod p.

[0032] S630: Obtain the encrypted field value corresponding to the target field according to the length and row vector of the encrypted field value.

[0033] Specifically, based on the row vector and the fixed length, the intermediate field value represented by the integer is obtained, and the intermediate field value is split based on the length of the encrypted field value to obtain the encrypted field value.

[0034] In summary, the third party generates a reversible matrix and obtains the transmission data. The data user obtains the inverse matrix of the reversible matrix and obtains the row vector based on the inverse matrix. The secure transmission of the transmission data is achieved through p and the reversible matrix.

[0035] Specifically, obtain the target fields required for the target problem through the following steps: Based on the preset prompt word template, the preset prompt word template and the target question are sent to the large model to obtain the sub-questions of the target question output by the large model.

[0036] In an exemplary description of the present invention, the preset prompt word template is: As a senior data analyst, please split the target problem into feasible sub-problems: Target problem: Output requirements: 1. Layered decomposition (main problem → key factors → quantifiable sub-problems); 2. Label the type of data (behavior / attribute / environment) required for each sub-problem.

[0037] Send the sub-problems of the target problem to the big model, obtain the required fields of each sub-problem, and use the required fields of each sub-problem as the target fields.

[0038] Furthermore, after obtaining the target field required for the target problem, the method further includes: obtaining the field matching condition of the target field and the target function for solving the target problem.

[0039] Furthermore, after obtaining the target fields required by the target problem, it also includes: Use the field matching condition of the target field to filter the decrypted field value corresponding to the target field to obtain the final field value.

[0040] Based on the final field value and the objective function, the answer to the target question is obtained.

[0041] Specifically, in S100, the field value list corresponding to each field in the original data table is encrypted to obtain the encrypted field value list, which also includes: S110, extracting a field value list from the original data table according to the field. In an exemplary description of the present invention, the field "age" has a corresponding field value list V = {20, 30, 40}.

[0042] S120: Generate an original key for each field. Specifically, the data provider generates a unique composite encryption key for each field. In one embodiment of the present invention, AES-256 is used to generate the original key for the field "age".

[0043] S130: Based on the original key, encrypt each field value to obtain an encrypted field value, and assemble the encrypted field values ​​into an encrypted field value list. Specifically, serialize each field value into bytes, encrypt each byte using AES-256, and obtain an encrypted field value. In an exemplary embodiment of the present invention, the field value list V = {20, 30, 40} is encrypted: 20 is encrypted to obtain A1, 30 is encrypted to obtain A2, and 40 is encrypted to obtain A3. The encrypted values ​​are assembled to obtain the encrypted field value list {A1, A2, A3}.

[0044] In summary, a list of field values ​​is extracted from the original data table according to the fields, an original key is generated for each field, each field value is encrypted based on the original key to obtain an encrypted field value, and the encrypted field values ​​are assembled into an encrypted field value list.

[0045] An embodiment of the present invention also provides a non-transitory computer-readable storage medium, which can be set in an electronic device to store a computer program related to a method in the method embodiment. The computer program is loaded and executed by the processor to implement the method provided in the above embodiment.

[0046] An embodiment of the present invention further provides an electronic device, comprising: a processor, a memory, and a computer program stored in the memory and executable on the processor, wherein the processor implements the method provided in the above embodiment when executing the computer program.

[0047] An embodiment of the present invention further provides a computer program product comprising program code. When the program product is run on an electronic device, the program code is used to enable the electronic device to execute the steps of the method according to various exemplary embodiments of the present invention described above in this specification.

[0048] Although some specific embodiments of the present invention have been described in detail by way of examples, it should be understood by those skilled in the art that the above examples are for illustration only and are not intended to limit the scope of the present invention. It should also be understood by those skilled in the art that various modifications may be made to the embodiments without departing from the scope and spirit of the present invention.

Claims

1. A data security monitoring method, characterized in that: The method comprises the following steps: The data provider encrypts the field value list corresponding to each field in the original data table, obtains the encrypted field value list, and sends the encrypted field value list to a third party for storage; the field value list includes several field values; The data consumer sends a request to the third party to obtain the target fields required for the target problem; The third party fills each encrypted field value corresponding to the target field with an intermediate field value of a fixed length; and converts the intermediate field value into an integer representation; the fixed length is the maximum value of the byte length of the encrypted field value; The third party concatenates the intermediate field values ​​converted into integer representations into row vectors and uses a reversible matrix to operate on the row vectors to obtain the transmission data. The number of rows in the reversible matrix is ​​equal to the number of columns in the row vectors. The third party sends the transmission data, the length of the encrypted field value corresponding to the target field, the reversible matrix after the encryption operation, and the encryption key to the data user; The data user decrypts the reversible matrix after the encryption operation based on the encryption operation key to obtain the reversible matrix; and obtains the encrypted field value corresponding to the target field based on the reversible matrix, the transmitted data, and the length of the encrypted field value corresponding to the target field; The data consumer obtains the original key of the encrypted field value from the data provider, and uses the original key to decrypt the encrypted field value to obtain the decrypted field value corresponding to the target field value; The data consumer uses the decrypted field value to obtain the answer to the target question and sends the encrypted answer to the third party; The third party monitors the encrypted field value list and the encrypted answer.

2. The data security monitoring method according to claim 1, characterized in that: Use the reversible matrix to operate on the row vector to obtain the transmitted data, including: Generate a reversible matrix. The number of rows of the reversible matrix is ​​equal to the number of columns of the row vector. The reversible matrix is ​​reversible under mod p. The prime number p is greater than 2 to the power of x. x is equal to 8 times b. b is a fixed length. mod is a modular operation. Get the transmission data. The transmission data is equal to the product of the row vector, the reversible matrix, and mod p.

3. The data security monitoring method according to claim 2, characterized in that: Obtaining the encrypted field value corresponding to the target field based on the reversible matrix, the transmitted data, and the length of the encrypted field value corresponding to the target field, further comprising: Get the inverse matrix of a reversible matrix; Get the row vector, which is equal to the product of the transmitted data, the inverse matrix of the reversible matrix, and mod p; Get the encrypted field value corresponding to the target field based on the length and row vector of the encrypted field value.

4. The data security monitoring method according to claim 1, characterized in that: Obtain the target fields required for the target question by following the steps below: Based on the preset prompt word template, the preset prompt word template and the target question are sent to the large model to obtain the sub-questions of the target question output by the large model; Send the sub-problems of the target problem to the big model, obtain the required fields of each sub-problem, and use the required fields of each sub-problem as the target fields.

5. The data security monitoring method according to claim 4, characterized in that: After obtaining the target field required for the target problem, the following steps are also included: obtaining the field matching conditions of the target field and the target function for solving the target problem.

6. The data security monitoring method according to claim 5, characterized in that: After getting the target fields required for the target question, also include: Use the field matching condition of the target field to filter the decrypted field value corresponding to the target field to obtain the final field value; Based on the final field value and the objective function, the answer to the target question is obtained.

7. The data security monitoring method according to claim 1, characterized in that: Encrypt the field value list corresponding to each field in the original data table to obtain the encrypted field value list, which also includes: Extract a list of field values ​​from the original data table by field; Generate a raw key for each field; Based on the original key, each field value is encrypted to obtain an encrypted field value, and the encrypted field values ​​are assembled into an encrypted field value list.

8. The data security monitoring method according to claim 2, characterized in that: The prime number p is equal to 2 to the power of y, y is equal to 8 times a, and a is equal to the sum of b and 1.

9. A non-transitory computer-readable storage medium, characterized in that The storage medium stores a computer program, which is loaded and executed by a processor to implement the data security monitoring method according to any one of claims 1 to 8.

10. An electronic device comprising: A processor, a memory, and a computer program stored in the memory and executable on the processor, wherein the processor implements the data security monitoring method according to any one of claims 1 to 8 when executing the computer program.

Images