Quantum secure trusted weather data system based on quantum key

Abstract

The application relates to data security, in particular to a quantum security and reliable meteorological data system based on a quantum key, a quantum security service platform, life cycle management of the quantum key, and identity authentication of a quantum security application terminal; a quantum security database, quantum key interaction with the quantum security service platform, encryption storage of data in an application system by means of quantum cryptography technology in a development and reconstruction-free mode, provision of a compliance and easy-to-implement data security protection scheme; quantum application services, docking with business application services through customized research and development, automatic encryption and decryption of data after simple configuration of the business application, and provision of rich data security strategy management capabilities; the technical scheme provided by the application can effectively overcome the defects that the prior art cannot effectively guarantee meteorological data security.

Description

TECHNICAL FIELD

[0001] The present application relates to data security, in particular to a quantum secure and reliable meteorological data system based on quantum key. BACKGROUND

[0002] As the core of data storage and management, the security of the database is directly related to the confidentiality, integrity and availability of the data. The security problems existing in the existing database can be analyzed from multiple dimensions, as follows:

[0003] I. Defects in authentication and authorization mechanism

[0004] Authentication and authorization are the first line of defense for database security. If there are defects, it will directly lead to unauthorized access. Common problems include:

[0005] 1) Weak identity authentication: such as using simple passwords (such as "123456", "password", etc.), not changing passwords for a long time, or strong correlation between username and password (such as username "admin" and password "admin"), which is easy to be brute-forced; some systems even allow empty password login, further reducing the attack threshold;

[0006] 2) Excessive permission allocation: ordinary users are given unnecessary high permissions (such as "database administrator" permissions), or permissions are not recycled in time (such as employees leaving without logging out), resulting in unauthorized users being able to manipulate sensitive data (such as deleting tables, modifying core configurations, etc.);

[0007] 3) Lack of multi-factor authentication (MFA): relying only on a single password for authentication, once the password is compromised (such as through phishing, keyloggers, etc.), attackers can directly log into the database;

[0008] II. Data transmission and storage security vulnerabilities

[0009] Insufficient protection of data in the "transmission" and "storage" links will lead to data leakage or tampering:

[0010] 1) Transmission process is not encrypted: the communication between the database and the application program, backup server uses plaintext protocol (such as HTTP, unencrypted TCP, etc.), data may be attacked by man-in-the-middle (MITM), resulting in data eavesdropping or tampering (such as modifying query results, replacing sensitive fields, etc.);

[0011] 2) Unencrypted stored data: sensitive data (such as user passwords, bank card numbers, ID numbers, etc.) are stored in plaintext in the database, once the database is compromised (such as hacking), the data will be directly leaked; even if some scenes use encryption algorithms, but if the encryption algorithm is outdated (such as DES, MD5, etc.), it is also easy to be cracked;

[0012] 3) Key management confusion: encryption keys are stored in the same location as the data (e.g., key plaintext written in code), or keys are not rotated for a long time, resulting in ineffective encryption mechanisms;

[0013] III. Inappropriate configuration and management

[0014] Omissions in the daily configuration and management of databases can significantly reduce security protection capabilities:

[0015] 1) Default configuration not modified: the default settings are retained after database installation (e.g., default username "sa", "root", default port 3306 / 1433 not modified, etc.), attackers can use public default configuration dictionary to attempt login;

[0016] 2) Server "exposure" too large: the database server runs other unrelated services (such as web services, FTP services, etc.), or opens unnecessary ports (such as opening the 3389 remote desktop port in addition to the database port), increasing the probability of attack (vulnerabilities in other services may indirectly affect the database);

[0017] IV. Internal threats and third-party risks

[0018] In addition to external attacks, the risks of internal personnel and third-party components cannot be ignored:

[0019] 1) Inappropriate internal personnel operations: employees cause data security incidents due to mistakes (such as accidentally deleting core tables, configuration errors leading to permission leaks, etc.) or maliciousness (such as leaking data to competitors, blackmailing companies, etc.); for example, a company violated the rules by downloading weather data, resulting in a large amount of weather data loss, causing serious damage to the overall interests of the weather department;

[0020] 2) Third-party component vulnerabilities: the database relies on third-party libraries (such as JDBC drivers, ODBC components, etc.) that have security vulnerabilities, and attackers can indirectly attack the database through these components; for example, a version of MySQL JDBC driver had a vulnerability that "malicious SQL injection parameters can bypass filtering", resulting in the failure of application protection;

[0021] V. Inadequate physical and environmental security

[0022] The lack of protection at the physical layer directly threatens the security of database hardware and media:

[0023] Physical access out of control: the database server room has not been strictly restricted (such as no access control, unauthorized personnel can enter at will, etc.), attackers may directly steal hard drives, insert U disks to plant malicious programs, or export data through physical interfaces (such as HDMI, USB, etc.).

[0024] In summary, database security issues are the result of the combined effects of "technical defects", "management oversights", "personnel risks", etc. and need to be prevented and controlled in multiple dimensions through "technical protection (such as encryption, MFA, etc.) + process specification (such as permission audit, patch management, etc.) + personnel training". SUMMARY

[0025] (I) Technical problems solved

[0026] In view of the above-mentioned defects of the prior art, the present application provides a quantum security and trusted meteorological data system based on quantum keys, which can effectively overcome the defect that the prior art cannot effectively guarantee the security of meteorological data.

[0027] (II) Technical solutions

[0028] To achieve the above-mentioned purposes, the present application is realized by the following technical solutions:

[0029] A quantum security and trusted meteorological data system based on quantum keys, comprising:

[0030] A quantum security service platform for life cycle management of quantum keys and identity authentication of quantum security application terminals;

[0031] A quantum security database for quantum key interaction with the quantum security service platform, using quantum cryptography technology to realize encrypted storage of data in the application system without development and reconstruction, and providing a compliant and easy-to-implement data security protection scheme;

[0032] A quantum application service for interfacing with business application services through customized research and development, and realizing automatic encryption and decryption of data after simple configuration of the business application, and providing rich data security policy management capabilities;

[0033] Among them, the encrypted storage of data in the application system without development and reconstruction using quantum cryptography technology includes:

[0034] Dynamic quantum keys are generated through quantum key distribution and quantum entanglement, and unified quantum encryption of structured data and unstructured data is realized in combination with data form transformation, and finally the encrypted data is stored in a hybrid quantum key library through quantum teleportation synchronization.

[0035] Preferably, the quantum security service platform includes a quantum key generation system, a quantum key charging system, and a quantum key scheduling system for life cycle management of quantum keys including generation, storage, distribution, use, update, and destruction, and identity authentication of quantum security application terminals.

[0036] Preferably, the quantum security database interacts with the quantum security service platform for quantum key exchange, uses quantum cryptography technology to realize encrypted storage of structured data and unstructured data in the application system without development and modification, provides fine-grained identity access control, multiple de-identification strategies and audit functions, provides users with a compliant and easy-to-implement data security protection solution, and solves the problem of sensitive data leakage.

[0037] Preferably, the quantum cryptography technology is used to realize encrypted storage of structured data and unstructured data in the application system without development and modification, including:

[0038] The dynamic quantum key is generated through quantum key distribution and quantum entanglement, and the unified quantum encryption of structured data and unstructured data is realized in combination with data form transformation, and finally the encrypted data is stored in the hybrid quantum key library through quantum teleportation synchronization:

[0039] ;

[0040] Among them, is the encrypted data;

[0041] is a temporary key segment generated by quantum key distribution, and the temporary key segment is extended in real time by a quantum random number generator QRNG;

[0042] is a data quantum state, indicates that the temporary key segment is bound with the data quantum state entangled pair, for structured data, the key bits and the field quantum state are entangled through a CNOT gate; for unstructured data, the key photons and the data photons generate an entangled pair in a parameter down-conversion crystal, and the temporary key segment is bound with the data quantum state entangled pair, so that any eavesdropping will cause Bell inequality violation, triggering key self-destruction;

[0043] indicates that the tensor product operation is performed on n key-data quantum state entangled pairs to generate a high-dimensional composite quantum key;

[0044] is a data form transformation, for structured data, the field relationship is converted into a non-Abelian statistical topological state by using anyon weaving to generate a topological encoding layer; for unstructured data, it is mapped to a high-dimensional Hilbert space, and the semantic information is hidden by phase encoding to generate a quantum Fourier layer, and by deeply binding the encryption rule and the data semantics, even if the key is leaked, the attacker cannot parse the data form logic;

[0045] For quantum encryption function, Indicates that the high-dimensional composite quantum key And data form transformation Nonlinear combination, through the parameterized quantum gate array of quantum neural network QNN, dynamically adjust the encryption strength;

[0046] Indicates quantum teleportation synchronization, For mixed quantum key library.

[0047] Preferably, the quantum application service includes SDK+ quantum security medium and data security management;

[0048] SDK+ quantum security medium, through customized research and development and business application service docking, business application only needs to introduce plug-in jar package and perform simple configuration, so as to realize automatic encryption and decryption of data, and the encryption plug-in itself is a software password module, which uses collaborative signature algorithm and white box password algorithm to protect the security of quantum key in the encryption plug-in;

[0049] Data security management provides rich data security policy management capabilities including dashboard, login security enhancement, application management, data source management, sensitive data automatic discovery, correlation query automatic discovery, dual-track operation mode, encryption policy configuration, database and table separation, data migration, desensitization policy configuration, desensitization access control, log management and system management.

[0050] Preferably, when internal operation and maintenance personnel perform data cleaning and processing, double identity authentication is performed through the client or the WEB end, including business level identity authentication, that is, login personnel compliance is determined through account and password login, and key level identity authentication, that is, two-way authentication and identification are performed through quantum security service platform and SDK+ quantum security medium, to improve the credibility of the login personnel.

[0051] Preferably, when data is shared to related businesses including meteorological forecast, meteorological research and meteorological service:

[0052] Based on SDK+ quantum security medium and its business information system for customized development, from the perspective of quantum key management, the sharing times, sharing time and sharing content of data are controllable;

[0053] At the same time, a security monitoring and log auditing system is established to continuously monitor the shared business, timely discover abnormal behaviors and potential security threats, and once a security event occurs, immediately start the emergency response plan, remotely control the quantum key in real time, take corresponding measures to control the loss, so that the shared data cannot be decrypted, viewed and used.

[0054] Preferably, when data is shared to industry users:

[0055] The API calling interface is standardized, multi-factor authentication mechanisms including account password, biometric recognition and dynamic token are implemented to enhance the security of identity verification, and the principle of least privilege is adopted to ensure that industry users can only access the data necessary to complete their work;

[0056] Multi-type identity verification methods including business platform authentication and password service platform authentication are formulated to enhance the credibility of identity verification;

[0057] Explicit sharing agreement and compliance requirements including data usage purpose, usage specification, storage period and responsibility attribution are implemented, and desensitization strategy is implemented to ensure that the same type of data sees different content when shared to different industry users.

[0058] (Three) beneficial effects

[0059] Compared with the prior art, the quantum security and reliable meteorological data system based on quantum key provided by the application has the following beneficial effects:

[0060] 1) From the perspective of quantum key management, the number of data sharing, the time of data sharing and the content of data sharing are controllable;

[0061] 2) A security monitoring and log auditing system is established to continuously monitor the shared business, timely detect abnormal behavior and potential security threats, and improve the identity verification mechanism, and through quantum keys, quantum security media and quantum security service platforms, authentication and authentication are performed in real time. Once a security event occurs, an emergency response plan is immediately started, and the quantum key is remotely controlled in real time, appropriate measures are taken to control the loss, so that the shared data cannot be decrypted, viewed and used;

[0062] 3) The data encryption process becomes more automated and transparent, allowing users to focus on the implementation details of data encryption without worrying about the implementation details of data encryption, and using encrypted data like ordinary data, while the quantum application service also supports: ciphertext fuzzy query, sensitive data automatic discovery, correlation data encryption consistency, function adaptation and other advanced features;

[0063] Through the technical scheme of the application, the provincial meteorological database not only improves the security and privacy of data in the sharing business, but also enhances the controllability and auditability of data, providing strong protection for the safe sharing of meteorological data. BRIEF DESCRIPTION OF DRAWINGS

[0064] In order to make the technical solutions of the embodiments of the present application or the prior art clearer, the accompanying drawings needed in the embodiments or prior art description will be briefly introduced. Obviously, the accompanying drawings in the following description are only some embodiments of the present application, and other drawings can be obtained by those skilled in the art without any creative effort on the basis of these drawings.

[0065] Figure 1 The system schematic diagram of the present application;

[0066] Figure 2 The schematic diagram of data sharing in the present application;

[0067] Figure 3 The schematic diagram of ground time table data sharing in the present application. DETAILED DESCRIPTION

[0068] In order to make the technical solutions of the embodiments of the present application or the prior art clearer, the accompanying drawings needed in the embodiments or prior art description will be briefly introduced. Obviously, the accompanying drawings in the following description are only some embodiments of the present application, and other drawings can be obtained by those skilled in the art without any creative effort on the basis of these drawings.

[0069] The specific function modules of the quantum security and trusted meteorological data system based on quantum key provided by the present application will be introduced below in combination with specific examples (such as Figure 1 The system function modules include:

[0070] The quantum security service platform manages the life cycle of the quantum key and authenticates the identity of the quantum security application terminal;

[0071] The quantum security database interacts with the quantum security service platform to realize the encrypted storage of data in the application system in a way of quantum cryptography technology without development and reconstruction, and provides a compliant and easy-to-implement data security protection scheme;

[0072] The quantum application service is connected with the business application service through customized research and development, and after simple configuration of the business application, the automatic encryption and decryption of data can be realized, and rich data security policy management capabilities are provided.

[0073] In the technical solutions of the present application, the encrypted storage of data in the application system is realized in a way of quantum cryptography technology without development and reconstruction, which includes:

[0074] The dynamic quantum key is generated through quantum key distribution and quantum entanglement, the unified quantum encryption of structured data and unstructured data is realized by combining data form transformation, and finally the encrypted data is stored in the hybrid quantum key library through quantum teleportation synchronization.

[0075] I. Quantum security service platform

[0076] The quantum security service platform includes a quantum key generation system, a quantum key charging system, and a quantum key scheduling system, which are used for lifecycle management of quantum keys including generation, storage, distribution, use, update, and destruction, and identity authentication of quantum security application terminals.

[0077] II. Quantum security database

[0078] The quantum security database interacts with the quantum security service platform for quantum keys, uses quantum cryptography technology to realize encrypted storage of structured data and unstructured data in the application system without development and modification, provides fine-grained identity access control, multiple desensitization strategies, and audit functions, provides users with a compliant and easy-to-implement data security protection solution, and solves the problem of sensitive data leakage.

[0079] Specifically, the quantum cryptography technology is used to realize encrypted storage of structured data and unstructured data in the application system without development and modification, including:

[0080] The dynamic quantum key is generated through quantum key distribution and quantum entanglement, the unified quantum encryption of structured data and unstructured data is realized by combining data form transformation, and finally the encrypted data is stored in the hybrid quantum key library through quantum teleportation synchronization:

[0081] ;

[0082] Among them, is the encrypted data;

[0083] is a temporary key segment generated by quantum key distribution, and the temporary key segment is extended in real time by a quantum random number generator QRNG;

[0084] is a data quantum state, represents that the temporary key segment is bound with the data quantum state For structured data, the key bits and field quantum states are entangled through a CNOT gate. For unstructured data, the key photons and data photons generate an entangled pair in a parametric down-conversion crystal, and the temporary key segment is bound with the data quantum state The entangled pairs are bound so that any eavesdropping will cause Bell inequality violation, triggering key self-destruction;

[0085] represents the tensor product operation on n key-data quantum state entangled pairs, generating high-dimensional composite quantum keys;

[0086] For data form transformation, for structured data, the field relationship is converted into a non-Abelian statistical topological state by using anyon weaving, generating a topological encoding layer; for unstructured data, it is mapped to a high-dimensional Hilbert space, and the semantic information is hidden by phase encoding, generating a quantum Fourier layer, by deeply binding the encryption rule with the data semantics, even if the key is leaked, the attacker cannot parse the data form logic;

[0087] For quantum encryption function, represents the high-dimensional composite quantum key and data form transformation Nonlinear combination, through the parameterized quantum gate array of quantum neural network QNN, dynamically adjust the encryption strength;

[0088] represents quantum teleportation synchronization, Hybrid quantum key library.

[0089] III. Quantum application service

[0090] Quantum application service includes SDK+ quantum security medium and data security management;

[0091] SDK+ quantum security medium, through customized research and development and business application service docking, business application only needs to introduce plug-in jar package and simple configuration, can realize automatic encryption and decryption of data, at the same time, the encryption plug-in itself is a software password module, using collaborative signature algorithm and white box cryptographic algorithm to protect the security of quantum key in encryption plug-in;

[0092] Data security management provides rich data security policy management capabilities including dashboard, login security enhancement, application management, data source management, sensitive data automatic discovery, correlation query automatic discovery, dual-track operation mode, encryption policy configuration, sharding, data migration, desensitization policy configuration, desensitization access control, log management and system management.

[0093] When internal operation and maintenance personnel perform data cleaning and processing, double identity authentication is performed through a client or a WEB end, including business level identity authentication, that is, login compliance of the login personnel is determined through account and password login, and key level identity authentication, that is, two-way authentication and identification are performed through a quantum security service platform and SDK+ quantum security medium, so that the credibility of the login personnel is improved.

[0094] When data sharing is performed by using the quantum security and reliable meteorological data system based on the quantum key provided in the application, as shown in Figure 2 , the system includes:

[0095] 1) when data sharing is performed for related businesses including meteorological forecasting, meteorological scientific research and meteorological services:

[0096] SDK+ quantum security medium and its business information system are used for customized development, from the perspective of quantum key management, the number of times of data sharing, the time of data sharing and the content of data sharing are controlled;

[0097] At the same time, a security monitoring and log auditing system is established to continuously monitor the shared business, discover abnormal behaviors and potential security threats in a timely manner, and once a security event occurs, an emergency response plan is started immediately, quantum keys are remotely controlled in real time, corresponding measures are taken to control the loss, so that the shared data cannot be decrypted, viewed and used;

[0098] 2) when data sharing is performed for industry users:

[0099] Standard API calling interface is implemented, a multi-factor identity authentication mechanism including account password, biometric recognition and dynamic token is implemented, the security of identity authentication is enhanced, and at the same time, the principle of least privilege is adopted to ensure that the industry users can only access the data necessary for their work;

[0100] A multi-type identity authentication method including business platform authentication and password service platform authentication is formulated to enhance the credibility of identity authentication;

[0101] A sharing agreement is specified, and compliance requirements including the purpose of data use, the specification of data use, the storage period and the responsibility attribution are implemented, a desensitization strategy is implemented to ensure that the same type of data sees different content when shared to different industry users.

[0102] In order to better illustrate the technical scheme of the application, the ground hourly table data sharing is taken as an example for illustration, as shown in Figure 3 , the system includes:

[0103] For structured data such as ground hour table, by referencing quantum encryption database, the meteorological data sharing service system obtains real-time ground hour table data from the service interface of Tianxing according to a unified format through the Internet or the e-government extranet, these data are encrypted according to the unified format when collected, and are stored in the sharing service system database in a structured form of ciphertext according to the correlation of the data and the encryption requirements, so as to ensure the security and integrity of the data;

[0104] In the above process, the meteorological data sharing service system is deeply integrated with the SDK+ quantum security medium provided by the quantum security service platform, bidirectional authentication and authentication with the quantum security service platform are realized, this integration not only improves the security of data transmission, but also provides a solid guarantee for the legal use of data;

[0105] When the peripheral system needs to call real-time ground hour table data, the meteorological data sharing service system will configure the interface parameter information, and generate the corresponding SDK (quantum), provide the calling interface, and the peripheral App can call the encapsulated SDK according to the needs, so as to obtain the related data ciphertext, and obtain the real-time ground hour table data after decryption in the local, further ensuring the security and availability of the data.

[0106] The above embodiments are only used to illustrate the technical solutions of the present application, but not limit it; although the present application has been described in detail with reference to the foregoing embodiments, those skilled in the art should understand that: it can still modify the technical solutions recorded in the foregoing embodiments, or make equivalent replacement for part of the technical features; and these modifications or replacements will not make the essence of the corresponding technical solutions deviate from the spirit and scope of the technical solutions of the embodiments of the present application.

Claims

1. A quantum secure trusted weather data system based on quantum keys, characterized by: Comprise: A quantum security service platform, which performs life cycle management on quantum keys and identity authentication on quantum security application terminals; A quantum security database, which interacts with the quantum security service platform for quantum key interaction, and realizes encrypted storage of data in an application system in a development-free manner by using quantum cryptography technology; A quantum application service, which is connected to business application services through customized research and development, and realizes automatic encryption and decryption of data after simple configuration of the business application, and provides data security policy management capabilities; Among them, the encrypted storage of data in an application system in a development-free manner by using quantum cryptography technology comprises: Dynamic quantum keys are generated through quantum key distribution and quantum entanglement, and unified quantum encryption of structured data and unstructured data is realized by combining data form transformation, and finally the encrypted data is stored in a hybrid quantum key library through quantum teleportation synchronization: ； wherein, is encrypted data; temporary key fragments generated for quantum key distribution, temporary key fragments extended in real time by a quantum random number generator QRNG; for the data quantum state, representing the temporary key segment is entangled with the data quantum state The entangled pair binding is performed for structured data by entangling the key bits with the field quantum states via CNOT gates; for unstructured data, the key photons are entangled with the data photons in a parametric down-conversion crystal, and the temporary key segment is entangled with the data quantum state The entangled pair binding is performed for structured data by entangling the key bits with the field quantum states via CNOT gates; for unstructured data, the key photons are entangled with the data photons in a parametric down-conversion crystal, and the temporary key segment denotes the tensor product operation on n key-data quantum state entanglement pairs to generate a high-dimensional composite quantum key; For data form transformation, for structured data, the field relationship is converted into a non-Abelian statistical topological state by using arbitrary sub-weaving to generate a topological coding layer; for unstructured data, it is mapped to a high-dimensional Hilbert space, and the semantic information is hidden by phase coding to generate a quantum Fourier layer. By binding the encryption rule with the data semantic depth, even if the key is leaked, the attacker cannot analyze the data form logic; For quantum encryption function, Indicate that the high-dimensional composite quantum key With data form transformation Nonlinear combination, through the parameterized quantum gate array of quantum neural network QNN, dynamically adjust the encryption strength; representing quantum teleportation synchronization, is a hybrid quantum key library.

2. The quantum key based quantum secure trusted meteorological data system of claim 1, wherein: The quantum security service platform comprises a quantum key generation system, a quantum key charging system, and a quantum key scheduling system, which are used for life cycle management of quantum keys, including generation, storage, distribution, use, update, and destruction, and identity authentication on quantum security application terminals.

3. The quantum key based quantum secure trusted meteorological data system of claim 2, wherein: The quantum security database interacts with the quantum security service platform for quantum key interaction, and realizes encrypted storage of structured data and unstructured data in an application system in a development-free manner by using quantum cryptography technology, and provides fine-grained identity access control, multiple desensitization strategies, and audit functions.

4. The quantum key based quantum secure trusted meteorological data system of claim 3, wherein: The quantum application service comprises SDK+ quantum security media and data security management. SDK+ quantum security media are connected to business application services through customized research and development, and only need to introduce plug-in jar packages and perform simple configuration, so that automatic encryption and decryption of data can be realized, and the encryption plug-in itself is a software cryptography module, which uses a collaborative signature algorithm and a white-box cryptography algorithm to protect the security of quantum keys in the encryption plug-in. Data security management provides dashboards, login security enhancements, application management, data source management, automatic discovery of sensitive data, automatic discovery of correlation queries, dual-track operation mode, encryption policy configuration, database and table splitting, data migration, desensitization strategy configuration, desensitization access control, log management, and system management.

5. The quantum key based quantum secure trusted meteorological data system of claim 4, wherein: When internal operation and maintenance personnel perform data cleaning and processing, double identity authentication is performed through a client or a WEB, including business level identity authentication, i.e., login of a login personnel is determined by an account and a password to determine compliance, and key level identity authentication, i.e., two-way authentication and identification are performed by the quantum security service platform and the SDK+ quantum security media.

6. The quantum key based quantum secure trusted meteorological data system of claim 5, wherein: When data is shared to related businesses including weather forecasting, weather research, and weather services: SDK+ quantum security media and their business information systems are customized developed, from the perspective of quantum key management, to realize controllable number of sharing times, controllable sharing time, and controllable sharing content of data. At the same time, a security monitoring and log auditing system is established to continuously monitor shared services, promptly discover abnormal behavior and potential security threats, and immediately initiate an emergency response plan in the event of a security incident. Real-time remote control of quantum keys is implemented to take appropriate measures to control losses and ensure that shared data cannot be decrypted, viewed, or used.

7. The quantum key based quantum secure trusted meteorological data system of claim 6, wherein: When data is shared with industry users: Standardize API call interfaces and implement multi-factor authentication mechanisms, including account passwords, biometric identification, and dynamic tokens, while adhering to the principle of least privilege to ensure that industry users can only access the data necessary to complete their work; Develop multi-type identity verification methods, including business platform authentication and password service platform authentication; Clearly define sharing agreements and compliance requirements, including data usage purposes, usage specifications, storage periods, and responsibility attributions, and implement desensitization strategies to ensure that the same type of data shared with different industry users sees different content.

Images