Method and system for detecting four properties of single-set electronic archive

Abstract

The invention provides a four-property detection method and system for a single-set electronic file. The four-property detection method comprises the steps that a service system requests to call a service layer through a unified interface specification; and the service layer performs data analysis according to the to-be-detected data packet transmitted by the requester or the standard data packet of the electronic file, and feeds back an analysis result. And the service layer performs verification before detection according to the received information packet and the detection condition, and formally enters a four-property detection service if the verification is passed. And the service layer feeds back a detection result. The method can effectively solve the problems of low detection efficiency and poor result consistency caused by lack of standardized and automatic detection means in the electronic archive detection process in the prior art, supports calling of a third-party archive system or a service system, and pre-detects whether four elements of data meet requirements or not in advance.

Description

Technical Field

[0001] This application relates to the field of electronic records management technology, specifically to a four-property detection technology for single-set electronic records. Background Technology

[0002] With the advent of the digital age, the management and archiving of electronic documents has become increasingly important. Traditional electronic document management typically employs a dual-system approach, simultaneously retaining both electronic and paper documents. While this addresses the authenticity and integrity of electronic documents to some extent, it also brings enormous storage pressure and management costs. Especially in recent years, the surge in the number of paper documents has dramatically increased the space requirements for archives, forcing archivists to spend twice the time and effort maintaining two parallel archival systems. This clearly does not align with modern, efficient management principles. Furthermore, dual-system management can lead to resource waste and inefficiency, particularly in environments with rapid information updates and frequent document retrieval.

[0003] To address this challenge, the concept of single-set electronic records management emerged. Single-set management attempts to eliminate paper documents and retain only electronic records, thereby reducing the need for physical storage, improving the efficiency of records management, and adapting to the development trend of the information society. However, single-set management places higher demands on the quality of electronic records, especially regarding the authenticity, integrity, usability, and security (the "four properties") of electronic documents. Rigorous safeguards are needed to ensure the legality and usability of electronic records.

[0004] Currently, the "four verifications" of electronic records are typically conducted through manual review. This method is not only inefficient but also prone to human error, making it difficult to guarantee the consistency and accuracy of the results. In practice, staff need to check the digital signature, hash value, and file format of each electronic document to verify whether it has been tampered with, is complete, easy to read, and securely stored. This manual process is not only time-consuming but may also lead to inconsistent verification standards due to individual differences, affecting the impartiality and reliability of the verification process.

[0005] Furthermore, with the batch generation and archiving of electronic documents in business systems, existing "four properties" detection methods are difficult to integrate efficiently with these systems, often requiring extensive custom development work, which increases technical barriers and implementation difficulty. For example, the lack of a unified interface standard between the document management system and business systems leads to complex data exchange, makes it difficult to automate the detection process, and limits the popularization and application of single-set electronic archives.

[0006] In summary, existing technologies for detecting the "four properties" of single-set electronic archives have the following main problems: 1. Low efficiency of manual inspection: Relying on manual inspection of electronic documents one by one is time-consuming and prone to errors, making it difficult to guarantee the accuracy and consistency of inspection results.

[0007] 2. Lack of automated testing methods: Existing testing processes are difficult to integrate seamlessly with business systems, have a low degree of automation, and limit the efficiency and flexibility of testing.

[0008] 3. Inconsistent interface specifications: The lack of standardized data exchange interfaces between the business system and the document management system leads to complex system integration and hinders the optimization and expansion of the testing process. Summary of the Invention

[0009] This invention addresses the shortcomings of existing technologies by proposing a method and system for detecting the four properties of single-set electronic records. It aims to improve detection efficiency, reduce manual intervention, and ensure the consistency and accuracy of detection results through an automated and intelligent detection process. At the same time, it simplifies system integration and promotes the modernization of electronic record management.

[0010] The technical solution of the present invention is as follows: In one aspect, this invention proposes a method for detecting the four properties of a single-set electronic record at different management stages for business personnel or record administrators, including the following steps: Step 1: The business system initiates a request to the service layer to call the four properties detection service through a unified interface specification; Step 2: After receiving the call request, the service layer verifies the legality of the request, including the validity of parameters and user permissions. After successful verification, it parses the data according to the file package to be tested transmitted by the business system, extracts the key information in the file package, and returns the parsing results. Step 3: The service layer searches for and matches the corresponding detection scheme in the preset detection scheme library based on the received file package to be detected and the detection conditions. According to the matched detection scheme, the parsed file package is subjected to four tests, including authenticity, integrity, usability and security. The detection scheme defines specific detection rules, detection items and the pass / fail criteria for each detection item. Step 4: Feedback on Inspection Details and Results: Analyze the inspection results of the file package and output the four properties inspection report; analyze the inspection result data of the information package, output the inspection items and results of all file items in this inspection, quickly locate the information that fails and export it, to help the file administrator to correct and manage the unqualified file information.

[0011] Preferably, the service layer adopts the Spring Cloud microservice framework as its core architecture to implement comprehensive four-property detection access functions, including: a four-property detection SDK, which performs online monitoring of uploaded data archives and obtains the four-property detection results of the archives; and a four-property detection API, which is an interface service for business systems to integrate four-property detection capabilities, analyze and detect detection data according to business stages, output the final detection report, and support the storage of detection results and detection reports.

[0012] Preferably, in step 1, the business system initiates a four-property detection service call request, which includes: the business system first performs data collection and format checking preprocessing to ensure that the data meets the basic requirements of the detection service, generates a file package to be detected containing metadata, file directory, electronic file, business structured data, business identifier and other information, sends the packaged file package to be detected to the secure access gateway, verifies it and then sends the file package to be detected to the service layer through a data transmission encryption tunnel.

[0013] Preferably, in step 1, a series of parameters need to be passed when calling the function, including: detection scheme, detection stage, and other specific parameters that may be required, such as file type and size limit.

[0014] Preferably, in step 2, data parsing includes: file package identification and verification, identifying the file package type through file extension or binary signature; checking the file package checksum (such as CRC32, MD5) or digital signature to ensure that the file is not damaged or tampered with; specifying the file package as the decompression target directory, decompressing the file package and writing it; and extracting and analyzing file content, extracting metadata information, file information, and structured data information, and performing data analysis based on the detection items to calculate the validity of the data package.

[0015] Preferably, the method further includes step 5, evidence management service: This involves storing the test results as evidence, including recording detailed information about the test task, receiving and storing the four properties test results and reports sent by the service layer to ensure the validity of the test results in the archive package; it also provides an audit interface to support querying and auditing the stored test records. The detailed information about the test task includes the system timestamp that initiated the test, the identifier of the testing personnel / business system, the testing scheme used, and the electronic archive version number corresponding to the four properties test results, to facilitate subsequent auditing and version tracking.

[0016] 9. The present invention further provides a single-set electronic record four-property detection system, including an application layer, a service layer, a capability layer, and a data layer.

[0017] The application layer is used by third-party business systems to upload the archive package to be tested and select the archive category and testing stage for this test as request parameters to match the corresponding four-property testing scheme; it is also used to receive the result data fed back by the service layer, distribute it to the display terminal in real time for display, and respond to and notify the operation terminal of each operation result in real time, such as displaying the real-time progress, test results and test reports of the four-property testing, and supporting the archive administrator to preview and print the four-property testing report online.

[0018] The service layer supports data display for the operation terminal, display terminal, and third-party business systems. Based on the data returned after processing by the service layer itself, it can push real-time data to the operation terminal, PDA devices, and APIs of third-party business systems in the application layer, providing a data foundation for the display terminal.

[0019] The capability layer is used to parse the received file package to be tested according to the call request of the business system and return the parsing result; to perform pre-detection verification according to the received file package to be tested and the detection conditions; if the verification is successful, the authenticity, integrity, availability and security detection are performed and the detection result and detection report are returned. The data layer is used for data management, including testing plan data, related business data, testing document data, testing process data, evidence storage data, and other related data storage.

[0020] The advantages of this invention are as follows: The four-fold verification technology for single-set electronic archives provided by this invention automatically initiates verification when staff submit electronic documents for archiving in government departments. First, an authenticity check verifies the validity of the electronic signature; next, an integrity check verifies the completeness of the document content and metadata; then, a usability check ensures the document can be opened normally in different environments; and finally, a security check examines the storage environment for any security risks. Only after all four verifications pass can the electronic document be officially archived. This technology is highly automated and intelligent, capable of quickly and accurately completing the four-fold verification of single-set electronic archives, effectively reducing the cost and error of manual verification, ensuring the quality of electronic archives, providing reliable technical support for the management and utilization of single-set electronic archives, significantly improving the management level and security of electronic archives, achieving automated verification, and greatly saving the time and cost of manual review. Attached Figure Description

[0021] The accompanying drawings, which are included to provide a further understanding of the invention and form part of this application, illustrate exemplary embodiments of the invention and, together with their description, serve to explain the invention and do not constitute an undue limitation thereof. In the drawings: Figure 1 The diagram shown is a schematic diagram of the overall functional structure of the present invention.

[0022] Figure 2 The diagram shown illustrates the overall working principle of this invention.

[0023] Figure 3 The diagram shows the overall system business process of this invention.

[0024] Figure 4 The image shown is an example of the structure of an electronic record transfer information package. Detailed Implementation

[0025] To enable those skilled in the art to better understand the present invention, the technical solutions of the present invention will be clearly and completely described below with reference to the accompanying drawings of the embodiments of the present invention. Obviously, the described embodiments are only some embodiments of the present invention, and not all embodiments. Based on the embodiments of the present invention, all other embodiments obtained by those skilled in the art without creative effort should fall within the scope of protection of the present invention.

[0026] It should be noted that the terms "comprising" and "having" and any variations thereof in the specification and claims of this invention are intended to cover non-exclusive inclusion. For example, a process, method, system, product, or device that includes a series of steps or units is not necessarily limited to those steps or units that are explicitly listed, but may include other steps or units that are not explicitly listed or that are inherent to such processes, methods, products, or devices.

[0027] It is obvious to those skilled in the art that the modules or steps of the present invention described above can be implemented using general-purpose computing devices. They can be centralized on a single computing device or distributed across a network of multiple computing devices. They can be implemented using computer-executable program code, and thus can be stored in a storage device for execution by a computing device. In some cases, the steps shown or described can be performed in a different order than those described herein, or they can be fabricated as separate integrated circuit modules, or multiple modules or steps can be fabricated as a single integrated circuit module. Thus, the present invention is not limited to any particular combination of hardware and software.

[0028] The technical solution of the present invention will be further described in detail below with reference to the accompanying drawings.

[0029] This invention provides a four-fold verification technology for single-set electronic archives, which is crucial in the electronic document archiving scenario of government departments. When staff submit electronic documents for archiving, the system automatically initiates the verification process. The business system requests and invokes the four-fold verification method of the service layer through a unified interface specification; the service layer parses the data packet to be tested or the standard data packet of the electronic archive transmitted by the requester, and returns the parsing results. The service layer performs pre-detection verification based on the received information packet and detection conditions; if the verification passes, the four-fold verification service is officially initiated. First, an authenticity check is performed to verify the validity of the electronic signature; next, an integrity check verifies the completeness of the document content and metadata; then, a usability check ensures the document can be opened normally in different environments; finally, a security check examines the storage environment for security risks, and the service layer returns the detection results. Only when all four verifications pass can the electronic document be officially archived. This technology ensures the quality of electronic archives, improves the efficiency of government work, and reduces management costs. This invention can effectively solve the problem of low detection efficiency and poor result consistency caused by the lack of standardized and automated detection methods in the existing electronic record detection process. It also supports the use of third-party record systems or business systems to pre-detect whether the four elements of the data meet the requirements.

[0030] The specific implementation of the present invention will be described in detail below through examples.

[0031] like Figure 1 The diagram shown is an overall functional structure diagram of the four-property detection system for single-set electronic archives provided by the present invention.

[0032] In one embodiment of the present invention, the four-property detection system for a single set of electronic archives includes: an application layer, a service layer, a capability layer, and a data layer, and adopts the Spring-Cloud microservice architecture as the core architecture layer of the four-property detection service.

[0033] The system calls the corresponding four-property testing tools based on the application layer's file management. The service layer performs the testing and returns the test results in real time. The system generates a corresponding PDF electronic file of the test report and notifies the caller's business system through API. The report is then displayed using HTML5 interactive rendering. The system supports the caller loading the test report PDF and transmits the real-time test data collected during the testing process to the evidence storage management service in the capability layer to store the test and its results.

[0034] Specifically: The application layer receives the result data from the service layer and distributes it to the display terminal in real time for display. For example, if the archivist selects a data packet of electronic archives to be tested on their computer and specifies the business stage (archiving, transfer, long-term preservation) and the corresponding category of the archives within the data packet, the application layer uploads it to the server, which then passes it to the service layer's four-property testing service to match the corresponding four-property testing solution. During the testing process, the application layer receives real-time progress, results, and reports from the service layer and supports online previewing and printing of the four-property testing reports by the archivist.

[0035] The service layer is used to support the data display of the operation terminal and third-party business systems. Based on the data returned by the service layer, it pushes the data to the operation terminal, PDA, third-party business system API, etc. of the application layer in real time, providing the data foundation for the display terminal.

[0036] The capability layer is used to parse the data packets of the electronic documents to be tested received according to the call request of the business system, and to return the parsing results; according to the data packets of the electronic documents to be tested and the testing conditions, to perform pre-test verification; if the verification is successful, to perform authenticity, integrity, availability and security tests, and to return the test results and test report.

[0037] The data layer is used for data management, including detection plan data, related business data, detection file data, detection process data, evidence storage data, and other related data storage.

[0038] In this context, the operating end is a physical device, such as a computer or mobile phone. The display end is a system, such as desktop software or an app.

[0039] The Spring Cloud microservice framework, a service governance platform, is adopted as the core architecture for the four properties testing service, enabling a fully open ecosystem for accessing the four properties testing ecosystem. This includes: third-party business systems can call the four properties testing service internally by connecting to the four properties testing SDK, independently integrate the four properties testing capability interface service, analyze and test the testing data according to the business stage, output the final testing report, and support the storage of testing results and reports; archive administrators can also upload data archive packages for online monitoring through the entry page provided by the four properties testing service, independent of the archive management system, and obtain the four properties testing results for the archive packages.

[0040] As a preferred embodiment, the four-property detection system provides a unified, open detection interface for third-party integrators to integrate on demand. It uses a standard data format (supporting JSON) and employs authentication mechanisms such as API Keys and OAuth 2.0 to authenticate and authorize third-party callers, managing user authentication and interface access permissions. A consistent error handling and exception information mechanism is designed, returning appropriate HTTP status codes and error messages when errors or exceptions occur. Data transmission is encrypted to ensure interface security during transmission; rate limiting and circuit breaking strategies are implemented to prevent malicious attacks or overload. This facilitates data exchange and parsing between different systems.

[0041] As a preferred embodiment, the four-property detection system provides a standardized interface design framework for building an efficient, secure, and scalable cross-system data interaction system, supporting seamless integration and secure calls from third-party systems. The standardized interface protocol provides an open detection interface in a RESTful style, achieving cross-platform compatibility based on HTTP / HTTPS protocols, and supporting on-demand access by third-party integrators. The interface design follows the OpenAPI 3.0 specification, providing clear interface documentation and interaction examples to reduce integration costs; lightweight data interaction uses JSON format as the standard data carrier, supporting efficient transmission and parsing of structured data. The interface response field design follows the principle of minimization, returning only necessary fields to reduce data redundancy.

[0042] As a preferred embodiment, the four-factor authentication system employs multi-level security authentication and access control. Identity authentication and authorization mechanisms include: API Key authentication: assigning a unique key to third-party systems and verifying identity through request headers (such as X-API-Key); OAuth2.0 authorization: supporting Authorization Code and ClientCredentials modes for fine-grained access control (such as interface-level and data-level permissions); JWT token verification: implementing stateless session management based on JSON WebToken, supporting token expiration refresh and blacklist mechanisms; and dynamic access management, providing an RBAC (Role-Based Access Control) model, supporting the allocation of interface call permissions according to user roles, departments, or business scenarios, and supporting real-time activation and auditing of permissions.

[0043] As a preferred embodiment, the four-property detection system involves standardized error handling and response specifications. This includes consistent error feedback, defining a unified error code system (such as 400 Bad Request, 401 Unauthorized, 429 TooMany Requests), and returning structured error information based on business scenarios (such as {"code": "4001", "message": "Parameter validation failed", "details": {...}}). It also includes exception log tracking, recording interface call logs and exception stacks, supporting end-to-end tracing via a unique request ID, facilitating problem localization and troubleshooting.

[0044] As a preferred embodiment, the four-property detection system features data transmission security and privacy protection. This includes: end-to-end encrypted communication, mandatory use of TLS 1.2 and above protocols, and encryption of transmitted data using the AES-256 encryption algorithm to prevent man-in-the-middle attacks and data theft. Sensitive information desensitization involves dynamically desensitizing sensitive data returned by the interface (such as ID card numbers and mobile phone numbers), supporting on-demand configuration of desensitization rules (such as partial hiding and hash replacement).

[0045] As a preferred embodiment, the four-property detection system employs high availability and attack resistance protection, intelligent rate limiting, and circuit breaking. This includes: Token bucket algorithm rate limiting: Configuring QPS thresholds based on the interface dimension; exceeding the limit returns a 429 Too Many Requests error with a retry time (Retry-After header). Circuit breaking and degradation mechanism: Automatically triggering circuit breaking when the interface error rate exceeds the threshold, returning backup data or a user-friendly message to avoid cascading failures. DDoS attack defense, integrating WAF (Web Application Firewall) and IP blacklist mechanisms, to intercept abnormal traffic (such as high-frequency requests and SQL injection) in real time, supporting dynamic adjustment of protection strategies.

[0046] As a preferred embodiment, the four-property detection system has cross-system compatibility and scalability, a plug-in extension architecture, decoupling the core interface logic from business plug-ins, and supports rapid expansion of detection rules, data formats, or authentication methods through configuration to adapt to future business changes.

[0047] In one embodiment of the present invention, a method for detecting the four properties of a single-set electronic archive is provided, such as... Figure 2 As shown, it includes the following 5 steps: Step 1, External network request for four properties testing service: The business system initiates a request to the service layer to call the four properties testing service through a unified interface specification.

[0048] Specifically, the user or external system initiates a call to the four-property detection service through the external network interface. The third-party business system in the external network area ensures that the data meets the basic requirements of the detection service through data collection and format checking preprocessing, and generates a detection request packet containing metadata, file directory, electronic file, business structured data, business identifier (for subsequent result association), etc. The packaged detection request packet is sent to the secure access gateway. After authentication, the secure access gateway transmits the data through a data transmission encryption tunnel.

[0049] When making the call, a series of parameters need to be passed, including but not limited to: detection scheme (specifying which set of detection rules to use), detection stage (such as initial detection, re-detection, etc.), and other specific parameters that may be required (such as file type, size limit, etc.).

[0050] Step 2: Receive and parse the file packet on the intranet: The call request is transmitted to the internal network service layer through a secure channel. Upon receiving the call request, the service layer first verifies the validity of the request, including the validity of the parameters and user permissions. After successful verification, the service layer receives the file package to be tested uploaded by the user, parses the data, extracts the key information from the file package, and returns the parsing results.

[0051] The service layer performs data parsing by parsing the metadata, file directories, and electronic files contained in the data packet, ensuring the integrity of the data packet through hash verification, and providing real-time feedback of the parsing results to provide a data foundation for the detection process.

[0052] It also includes: automatically identifying the compression algorithm and encryption method in the data packet, and calling the corresponding decompression and decryption modules for preprocessing to ensure the integrity and original state of the electronic file before detection.

[0053] In a further preferred embodiment, the four-property detection service of the service layer parses the hierarchical structure of the electronic archive package using a multi-branch tree model, associating metadata paths, electronic file paths, and detection rules. Hierarchical parsing associates package directory files (such as "transfer list") with root nodes, and detects array-type data to generate child nodes; the subdirectory files continue to parse the nested structure, forming a multi-branch tree model corresponding to the hierarchy. Rule matching compares metadata field identifiers with target detection rule keywords (including synonyms / near-synonyms), triggering corresponding detection logic (e.g., when detecting the continuity of "sequence number," traversing node metadata and verifying the numerical sequence). Interface design: Provides a standardized API, supporting client / interface calls, and implements four-property detection (availability, maintainability, security, and performance) for each stage of archiving, transfer, and long-term preservation through a RESTful interface, with accompanying interface documentation to guide integration.

[0054] Step 3: Match the corresponding detection scheme and perform the four-property detection. Based on the received file package to be tested and the testing conditions, the service layer searches for and matches the corresponding testing solution in the preset testing solution library. Each testing solution defines the specific testing stage, testing items, testing rules, and the pass / fail criteria for each testing item.

[0055] The system performs four tests on the parsed file package based on the matched detection scheme, including authenticity, integrity, usability and security.

[0056] 1. Authenticity detection: Verifies the validity of technologies such as mathematical summaries, electronic signatures, and electronic seals in electronic documents or archives. Automatically obtains the electronic attributes of electronic archive content data and compares them with the electronic attributes recorded in the metadata. If the results are consistent, the detection is successful. Based on the file storage path recorded in the metadata, it detects whether the file content data exists and whether the electronic archive content data is associated with the directory information. 2. Integrity check: Automatically count the total number of items and total bytes, and compare the quantity with the relevant registration forms and metadata records. If manual inspection is required, staff will open the electronic files or archives and copy data to determine if there are any missing or omitted items and record them. The computer will automatically compare the number of files recorded in the metadata with the file data contained in the information package.

[0057] 3. Availability testing: This test checks whether the XML file containing metadata in the information can be read and parsed normally, and whether it can connect to the database normally. It also ensures that the information package does not contain non-public compression algorithms or encryption, in order to reduce dependence on technology. 4. Security testing: Call the antivirus software interface to detect whether the archived information package or electronic file is infected with a virus. Take measures from technical and management aspects to ensure that the archived information package is safe and controllable during the archiving process. Use professional vulnerability scanning tools to detect whether there are security vulnerabilities in the computer system where the electronic file is stored for a long time. Manually judge whether the various media on which the electronic file is stored for a long time meet the requirements.

[0058] Step 4: Feedback on Inspection Details and Results: After the inspection is completed, the inspection results of the file package are analyzed and a four-property inspection report is output; the inspection result data of the information package is analyzed, and the inspection items and results of all file items in this inspection are output. The information that fails the inspection is quickly located and exported to help the file administrator to correct and manage the unqualified file information.

[0059] The system generates detailed test reports, including the test results for each item and specific explanations of any non-conformities. The test reports are returned to the user or external systems in a user-understandable format (such as HTML, PDF, JSON, etc.).

[0060] Step 5, Evidence Management Service: Store the test records and results. The system stores detailed records of this testing task (including testing time, testing personnel / system, testing scheme used, testing results, etc.) and the four-property testing results sent by the service layer as evidence to ensure the validity of the test results in the file package. The evidence data is usually stored in a secure database or file system, and an audit interface is also provided for subsequent auditing, querying, or re-verification.

[0061] Calculation formula: H(D) = Hash function(D) Hash functions are fundamental tools in computer science, and their security directly impacts data protection, system reliability, and the effectiveness of cryptographic applications. Here, we refer to hash functions, which use specific algorithms to map the results of evidence storage into a fixed-length output (called a hash value, such as 256 bits for SHA-256), serving as a unique identifier for the stored evidence for subsequent verification.

[0062] like Figure 3 As shown, the overall process of this invention based on system invocation of the four-property detection service is further illustrated, including: (1) Request call: After the third-party archive management business system is authorized through interface authentication, it calls the four properties detection service (call parameters: detection category, detection stage). The service layer matches the corresponding detection scheme according to the parameters.

[0063] (2) Submitting the detection data packet: After receiving the verification instruction for successful authentication, the third-party file management system uploads the data packet to be detected and transmits it to the server for parsing. The server parses the detection data packet during the detection process. The following figure shows the structure of the transferred file packet as an example. The uploaded zip / rar format compressed file is decompressed and then... Figure 4 The structure is checked and the format is parsed to ensure its standardization.

[0064] (3) After parsing, the file package is subjected to four-property checks according to the four-property check scheme, and the test results of each test item are fed back in real time. After the test is completed, the requester is notified that the four-property check is completed. Real-time encrypted transmission between the front end and the back end ensures data security through dynamic encryption and key management. Its core is to use symmetric encryption (such as AES) to efficiently process data, combine it with asymmetric encryption (such as RSA) or DH protocol to securely exchange keys, and supplement it with HMAC or digital signature to ensure integrity. When implementing this, a TLS secure channel or dynamic key derivation needs to be established. During transmission, encrypted data and HMAC are packaged and sent, and the back end decrypts and verifies. Security enhancement measures include two-way authentication, anti-replay attack and key rotation.

[0065] (4) Service layer feedback of test results and four-property test reports: After the four-property test is completed, the caller is notified that the execution is complete. When the applicant receives the notification of test completion, it has the authority to send a request to the server to generate a four-property test report. After successfully generating the report, the server will promptly send the unique identifier ID of the report to the applicant. With this report ID, the applicant can flexibly carry out subsequent operations, including previewing the report content, performing printing operations, or downloading the report to the local device. In the entire process of generating and processing the four-property test report, every key operation node is recorded in detail. The recorded content covers important data such as the operator's identity information, the specific operation time, the operation stage, and the final operation result, and forms a record of evidence. This evidence provides a solid and reliable basis for subsequent business retrospective, audit verification, and other work, ensuring the transparency, traceability, and compliance of the entire process.

[0067] The four-dimensional verification process ensures the security, reliability, and traceability of the archive data package during the verification process. The process for requesting association with external third-party business systems / services needs to ensure the accuracy of the package to be verified, the authenticity of the verification request, and ease of operation.

[0068] Request for authorization and authentication. When an archivist requests to use the four properties testing service, the external third-party business system / service requests the testing service and first authenticates it. Authentication is granted a token as proof for the requester to perform subsequent operations.

[0069] The system organizes and tests data packets. External third-party business systems / services, following the requirements of the four-property testing (property, integrity, and reliability), encapsulate the archive data to be tested according to the archive structure package. After encapsulation, the archive package is uploaded to the service layer for unified parsing by the testing service: 1. Archive package identification and verification: Identify the archive package type through file extensions (e.g., .zip, .rar) or binary signatures (e.g., the PK header of a ZIP file). Check the archive package checksum (e.g., CRC32, MD5) or digital signature to ensure the file is not corrupted or tampered with; 2. Decompress the archive package and write it to the specified decompression target directory; 3. File content extraction and analysis: Extract metadata information, file information, structured data information, etc., and perform data analysis based on the testing items to calculate the validity of the data packet.

[0070] If the data packet is confirmed as valid in the previous step, the corresponding four-property detection scheme is obtained based on the requested detection conditions, and the four-property detections within the specified range are executed sequentially according to the detection scheme: The system generates a four-property test report upon completion of the tests. The report should include information such as the test items, results, and testing time. Users can view, print, or download the generated report online as needed. For inconsistent electronic records, the system should provide a prompt and can restore the records using methods such as data recovery and electronic record import.

[0071] Evidence storage management is used to store the test results and reports, supporting subsequent auditing and retrieval. This includes recording all test task requests, verifications, test results, and related operation logs. The system provides auditing functionality, allowing system administrators and relevant operators to view and track any anomalies or violations throughout the testing process.

[0072] The interactive interface of the four-property testing tool of this invention is as follows: Specify the test data. Select the file package to be tested and match the test items associated with the test plan to the specified test stage (collection stage, archiving stage, transfer stage, long-term storage) of the file package.

[0073] The Four Properties Detection (In Progress) page displays file entries that are currently being tested and those that have been tested (passed / failed) in groups according to their testing progress. You can click on an entry to view all the test items and the corresponding test results.

[0074] The Four Properties Detection (Manual Entry) page allows you to configure detection items based on their settings. If the system does not have the necessary detection conditions, these items can be configured as manual detection items. After the system completes the detection, you can manually select the detection results, with the user's selection before the file as the detection result (the system will record the formation of this detection item as a manual mark).

[0075] The Four Properties Detection (Detection Completed) page loads and displays the detection complete page after all detection items in the detection task have been completed. It lists the detection details of all detection items and displays the pass rate of this detection task. It supports previewing / printing / downloading the Four Properties Detection Report.

[0076] The specific embodiments described above further illustrate the purpose, technical solution, and beneficial effects of the present invention. It should be understood that the above description is only a specific embodiment of the present invention and is not intended to limit the scope of protection of the present invention. Any modifications, equivalent substitutions, improvements, etc., made within the spirit and principles of the present invention should be included within the scope of protection of the present invention.

Claims

1. A single set electronic file four-property detection method, characterized in that, The method comprises the following steps: Step 1: The business system initiates a call request for the four-property detection service to the service layer through a unified interface specification; Step 2: After receiving the call request, the service layer verifies the legality of the request, including the validity of the parameters, the user's rights, etc., and after verification, it performs data analysis on the archive package, extracts the key information in the archive package, and feeds back the analysis result; Step 3: The service layer finds and matches the corresponding detection scheme in the preset detection scheme library according to the received archive package to be detected and the detection conditions, and performs four-property detection on the analyzed archive package according to the matched detection scheme, including authenticity, integrity, usability and security detection; the detection scheme defines specific detection rules, detection items and the qualified standard of each detection item; Step 4: Feedback detection details and results: analyze the detection results of the archive package and output the four-property detection report; analyze the detection result data of the information package, output the detection items and detection results of all archive items in this time, quickly locate the unqualified information and export it, and help the archive administrator to correct and manage the unqualified archive information.

2. The single lot electronic archive four-property detection method according to claim 1, characterized in that, The service layer uses the Spring Cloud micro-service framework as the core architecture to realize comprehensive four-property detection access functions, including: four-property detection SDK, which performs online monitoring on the uploaded data archive package to obtain the four-property detection result of the archive package; four-property detection API, which integrates the capability interface service of four-property detection by the business system, analyzes and detects the detection data according to the business stage, outputs the final detection report, and supports the storage of the detection result and the detection report.

3. The single lot electronic archive four-property detection method of claim 1, wherein, In step 1, the business system initiates a call request for the four-property detection service, which includes: the business system first preprocesses data collection and format checking to make the data meet the basic requirements of the detection service, generates a to-be-detected archive package containing metadata, file directory, electronic file, business structured data, business identifier and other information, sends the packaged to-be-detected archive package to a secure access gateway, and after verification, sends the to-be-detected archive package to the service layer through a data transmission encryption tunnel.

4. The single lot electronic archive four-property detection method according to claim 3, characterized in that, In step 1, a series of parameters need to be passed when calling, including: detection scheme, detection stage and other specific parameters that may be needed, including archive type, size limit, etc.

5. The single lot electronic archive four-property detection method of claim 1, wherein, In step 2, data analysis includes: archive package identification and verification, identification of archive package type through file extension or binary signature; checking the uniqueness verification (such as CRC32, MD5) or digital signature of the archive package to ensure that the file is not damaged or tampered with; specifying the archive package decompression target directory, performing archive package decompression and writing; file content extraction and analysis, extracting metadata information, file information, structured data information, and performing data analysis according to the detection items to calculate the validity of the data package.

6. The single set electronic file four-property detection method according to any one of claims 1-5, characterized in that, It also includes step 5, storage management service: storing this detection record and result, including recording the detailed information of the detection task, receiving the four-property detection result and report sent by the service layer and storing to ensure the validity of the detection result of the archive package; An audit interface is also provided to support the query and audit of the stored detection record.

7. The single lot electronic file four-attribute detection method according to claim 6, characterized in that, The detailed information of the detection task includes system timestamp of initiating detection, detection personnel / business system identification, detection scheme used, and electronic archive version number corresponding to four-property detection result, so as to facilitate subsequent audit and version tracking.

8. The single-set electronic archive four-property detection system according to any one of claims 1-5, characterized in that, The authenticity detection includes verifying whether the content, structure and background information of the electronic archive are not tampered with, forged, and consistent with the original state during formation and processing; The integrity detection includes checking whether the content, structure and background information of the electronic archive are complete and have no missing, including file body, metadata and related subsidiary information, etc.; The availability detection includes testing whether the electronic archive can be normally opened, read, searched and utilized under specific environment and conditions, and its long-term accessibility; The security detection includes protecting the electronic archive by using encryption technology, implementing role-based access control mechanism to ensure safe access of the archive and prevent information leakage, and calling antivirus software interface to scan viruses and malicious codes in the electronic archive, detect whether it is tampered with or destroyed, and ensure data confidentiality.

9. A single set electronic file four-property detection system, characterized in that, It includes an application layer, a service layer, a capability layer, and a data layer; The application layer is configured to upload an archive package to be detected by a third-party business system, select an archive category and a detection stage for this detection as request parameters, match a corresponding four-property detection scheme, receive result data fed back by the service layer, and distribute the result data to a display end in real time for display and real-time response to each operation result of an operation end, such as real-time progress, detection result and detection report of the four-property detection, and support online preview and printing of the four-property detection report by an archive administrator. The service layer is configured to support data display of the operation end, the display end and the third-party business system, and to realize real-time data push to the operation end of the application layer, a PDA device and an API of the third-party business system according to data returned after processing by the service layer itself, and provide data basis for display of the display end. The capability layer is configured to perform data analysis on the received archive package to be detected according to a call request of the business system, feed back analysis result, perform pre-detection verification according to the received archive package to be detected and detection conditions, execute authenticity detection, integrity detection, availability detection and security detection if the verification is passed, and feed back detection result and detection report. The data layer is configured to manage data, including detection scheme data, associated business data, detection file data, detection process data, evidence storage data and other related data storage.

10. The single set electronic file four-parameter detection system according to claim 9, wherein, The system adopts a service governance platform Spring Cloud microservice framework as a core architecture to realize comprehensive four-property detection access functions, including: four-property detection SDK, an archive manager can upload data archive packages for online monitoring without separating from an archive management system to obtain four-property detection results of the archive packages; four-property detection API, a business system integrates an ability interface service of four-property detection by itself, analyzes and detects detection data according to a business stage, outputs a final detection report, and supports evidence storage of detection results and the detection report.

11. The single set electronic file four-property detection system according to any one of claims 9-10, characterized in that, The system adopts multi-level security authentication and permission management and control: Multi-level security authentication includes: API Key authentication: a unique key is allocated for a third-party system to perform identity verification through a request header; OAuth2.0 authorization: authorization code mode and client credential mode are supported to realize fine-grained permission control (such as interface level and data level permissions); JWT token verification: stateless session management is realized based on a JSON Web Token, and a token expiration refresh and a blacklist mechanism are supported; Permission management and control is dynamic permission management, provides an RBAC (role-based access control) model, supports allocation of interface calling permissions according to user roles, departments or business scenarios, and supports real-time effectiveness and auditing of permissions.

12. The single set electronic file four-property detection system according to any one of claims 9-10, characterized in that, Standardized interface protocol provides an open detection interface in a RESTful style, realizes cross-platform compatibility based on an HTTP / HTTPS protocol, supports on-demand access of a third-party integrator; interface response field design follows a minimization principle and only returns necessary fields; Lightweight data interaction adopts a JSON format as a standard data carrier to support efficient transmission and analysis of structured data.

13. The single set electronic file four-property detection system according to any one of claims 9-10, wherein, The business system submits a data package of an electronic archive to be detected through an API, supports transmission of a request data set in a JSON format, and ensures standardization and efficiency of detection requests.

Images