A cross-department virtual data joint analysis system and method

Abstract

This invention provides a cross-departmental virtual data joint analysis system and method. The method includes: a dynamic adaptive encryption / decryption module encrypting real pension data at the edge of the municipal social security bureau, and virtually mapping the encrypted data to the provincial inspection's virtualized joint query system; mapping the local data table of the municipal social security bureau to a cloud table in the provincial inspection's virtualized joint query system, forming a municipal encrypted data root model; an encryption algorithm controller selecting which encryption algorithm to use for joint querying in the provincial inspection's deployment system and the municipal social security bureau's deployment system at the current time; each city's algorithm encryption query module reading the real data root model to form a provincial inspection data meta-model; obtaining matching encrypted data based on the provincial inspection data meta-model and the municipal encrypted data root model and sending it back to the decryption module; and the decryption module decrypting the jointly queried data in the virtualized joint query system and storing it in a data table. Through the above method, real-time querying, low-cost collaboration, and flexible management of cross-departmental data are achieved.

Description

Technical Field

[0001] This invention relates to the field of cross-level information interaction technology, and in particular to a cross-departmental virtual data joint analysis system and method. Background Technology

[0002] While China's multi-source data joint query system has made some progress in its construction, significant shortcomings remain. Regarding data connectivity, substantial data barriers between departments, such as between procuratorates and social security agencies, hinder cross-departmental multi-source data joint queries due to data incompatibility. In terms of data format, the diverse data sources and varying formats across units increase the difficulty of data integration. Regarding security, existing multi-source data joint query systems lack online encryption, making data highly vulnerable to theft during transmission and highlighting network security issues. Furthermore, the system does not support cross-network transmission, limiting the flexibility and timeliness of data acquisition. Moreover, complex data access permissions across departments and the lack of unified standards hinder the reasonable sharing and querying of data. In terms of real-time performance, the system cannot quickly transmit relevant data on individuals involved in cases, resulting in delayed data updates and failing to meet current requirements for real-time and timely data delivery. These deficiencies significantly restrict the effective functioning of the system.

[0003] Currently, virtual mapping technology has been applied in cross-departmental data joint query systems. It can logically integrate information from databases of different departments, and by building a virtual layer, it centralizes data for querying in one place, reducing data migration costs. However, when faced with the complex and diverse data structures of departments such as the procuratorate and social security, existing technologies lack compatibility with data format differences, making it difficult to achieve efficient and accurate mapping. This results in delays in data parsing and association, affecting the real-time performance of joint queries.

[0004] Data access control technologies typically rely on encryption algorithms and permission management systems to restrict access. However, most current systems lack fine-grained permission settings. In cross-departmental scenarios, it's difficult to ensure that joint queries between social security and prosecutorial departments both prevent each other from seeing the other's original data and allow for the normal viewing of joint query results. For example, existing access controls are mostly based on fixed role assignments, which cannot flexibly adapt to the complex business processes and data sensitivity differences between the two departments. This makes it difficult to guarantee absolute data security throughout the entire joint query process.

[0005] Therefore, how to meet the requirements for joint virtual data analysis and computation under the cross-departmental virtual data joint analysis and computation scenario in the digital supervision model of the procuratorate has become one of the existing technical problems that urgently need to be solved. Summary of the Invention

[0006] This invention provides a cross-departmental virtual data joint analysis system and method to meet the requirements for virtual mapping joint query and data access control in the cross-departmental virtual data joint analysis and calculation scenario under the digital supervision model of the procuratorate.

[0007] Firstly, a cross-departmental virtual data joint analysis system is provided, comprising: a provincial inspection station deployment system and municipal social security bureau deployment systems; the provincial inspection station deployment system includes a virtualized joint query system, which includes an encryption algorithm controller and multiple algorithm encryption query modules for each city; the municipal social security bureau deployment systems include a dynamic adaptive encryption / decryption module; wherein...

[0008] The dynamic adaptive encryption / decryption module is used to encrypt the real pension data at the edge of the municipal social security bureau and virtually map the encrypted data to the provincial inspection's virtualized joint query system; and to logically integrate data information from different data sources through virtualization mapping, mapping the local data table of the municipal social security bureau to the cloud table in the provincial inspection's virtualized joint query system; and to decrypt the data after joint query in the virtualized joint query system.

[0009] The encryption algorithm controller is used to synchronously and dynamically switch the encryption modules used in the provincial inspection virtualized joint query system and the edge-end dynamic adaptive encryption and decryption module.

[0010] The encrypted query module is used to perform online encryption operations on the root model mapped from the provincial procuratorate's data on prisoners and output the result data; and to perform joint queries with the encrypted data mapped from the municipal social security bureau, providing the function of viewing the joint query result data online.

[0011] In one implementation, the cloud table in the provincial inspection virtualized joint query system is mapped to have the same structure as the original table through synchronous mapping. The mapped data can be viewed through the cloud table fields in the city encrypted data root model, and joint queries can be performed on two or more root models through the meta-model.

[0012] In one implementation, the cloud table in the provincial inspection virtualized joint query system is mapped to a structure different from the original table through heterogeneous mapping. The mapped data can be viewed through the cloud table fields in the city encrypted data root model, and joint queries can be performed on two or more root models through the meta-model.

[0013] In one implementation, the result data output by the encrypted query module is virtualized data, which can be viewed either by publishing it as a data interface for the Municipal Social Security Bureau to call and obtain the query results, or by exporting the root model and importing it into the edge system of the Municipal Social Security Bureau for viewing.

[0014] In one implementation, the provincial inspection terminal deployment system and the dynamic adaptive encryption / decryption module support importing and exporting root model files, while simultaneously meeting the real-time joint query requirements of data from both parties within the same network and the joint query requirements of different networks.

[0015] Secondly, a cross-departmental virtual data joint analysis method is provided, the method being applied to the aforementioned cross-departmental virtual data joint analysis system, comprising:

[0016] The dynamic adaptive encryption and decryption module encrypts the real pension data at the edge of the municipal social security bureau and virtually maps the encrypted data to the virtualized joint query system of the provincial inspection commission.

[0017] By using virtualization mapping, data information from different data sources is logically integrated, and the local data table of the Municipal Social Security Bureau is mapped to the cloud table in the provincial inspection virtualization joint query system, forming a municipal encrypted data root model after mapping.

[0018] The encryption algorithm controller selects which encryption algorithm is used by the provincial inspection terminal deployment system and the municipal social security bureau terminal deployment system at the current time for joint querying;

[0019] Each city's algorithm-encrypted query module reads the real data root model formed by the provincial inspection real data table, and encrypts it through an encryption algorithm to form the corresponding provincial inspection data element model;

[0020] Based on the provincial inspection data meta-model and the municipal encrypted data root model, the matched encrypted data is obtained through Join query and sent back to the decryption module in the dynamic adaptive encryption and decryption module.

[0021] The decryption module decrypts the data obtained from the joint query in the virtualized joint query system and stores it in a data table.

[0022] In one implementation, the cloud table in the provincial inspection virtualized joint query system is mapped to have the same structure as the original table through synchronous mapping. The mapped data can be viewed through the cloud table fields in the city encrypted data root model, and joint queries can be performed on two or more root models through the meta-model.

[0023] In one implementation, the cloud table in the provincial inspection virtualized joint query system is mapped to a structure different from the original table through heterogeneous mapping. The mapped data can be viewed through the cloud table fields in the city encrypted data root model, and joint queries can be performed on two or more root models through the meta-model.

[0024] In one implementation, the result data output by the encrypted query module is virtualized data, which can be viewed either by publishing it as a data interface for the Municipal Social Security Bureau to call and obtain the query results, or by exporting the root model and importing it into the edge system of the Municipal Social Security Bureau for viewing.

[0025] In one implementation, the provincial inspection terminal deployment system and the dynamic adaptive encryption / decryption module support importing and exporting root model files, while simultaneously meeting the real-time joint query requirements of data from both parties within the same network and the joint query requirements of different networks.

[0026] This invention provides a cross-departmental virtual data joint analysis system and method. The method includes: a dynamic adaptive encryption / decryption module encrypting real pension data at the edge of the municipal social security bureau and virtually mapping the encrypted data to the provincial inspection's virtualized joint query system; logically integrating data information from different data sources through virtualization mapping, mapping the local data table of the municipal social security bureau to a cloud table in the provincial inspection's virtualized joint query system, forming a municipal encrypted data root model; an encryption algorithm controller selecting which encryption algorithm to use for joint querying in the provincial inspection's deployment system and the municipal social security bureau's deployment system at the current time; each city's algorithm encryption query module reading the real data root model formed by the provincial inspection's real data table and encrypting it through an encryption algorithm to form a corresponding provincial inspection data meta-model; obtaining matching encrypted data through a Join query based on the provincial inspection data meta-model and the municipal encrypted data root model, and sending it back to the decryption module in the dynamic adaptive encryption / decryption module; the decryption module decrypting the data after joint querying in the virtualized joint query system and storing it in a data table. Through the above method, real-time querying, low-cost collaboration, and flexible management of cross-level and cross-departmental data are achieved while ensuring data security.

[0027] Other features and advantages of the invention will be set forth in the following description, and will be apparent in part from the description, or may be learned by practicing the invention. The objects and other advantages of the invention may be realized and obtained by means of the structures particularly pointed out in the written description, claims, and accompanying drawings. Attached Figure Description

[0028] The accompanying drawings, which are included to provide a further understanding of the invention and form part of this invention, illustrate exemplary embodiments of the invention and are used to explain the invention, but do not constitute an undue limitation of the invention. In the drawings:

[0029] Figure 1 This is a flowchart of a cross-departmental virtual data joint analysis method according to an embodiment of the present invention;

[0030] Figure 2 This is a schematic diagram illustrating the principle of cross-departmental virtual data joint analysis within the same network according to an embodiment of the present invention.

[0031] Figure 3 This is a schematic diagram illustrating the principle of cross-departmental virtual data joint analysis under different networks according to an embodiment of the present invention. Detailed Implementation

[0032] To meet the requirements for joint virtual data analysis and computation under the digital supervision model of the procuratorate, specifically for joint virtual data query and data access control, a joint virtual data analysis system and method for cross-departmental data is provided.

[0033] The preferred embodiments of the present invention will be described below with reference to the accompanying drawings. It should be understood that the preferred embodiments described herein are for illustration and explanation only and are not intended to limit the present invention. Furthermore, the embodiments and features in the embodiments of the present invention can be combined with each other without conflict.

[0034] This embodiment provides a cross-departmental virtual data joint analysis system, including: a provincial inspection station deployment system and municipal social security bureau deployment systems; the provincial inspection station deployment system includes a virtualized joint query system, which includes an encryption algorithm controller and multiple algorithm encryption query modules for each city; the municipal social security bureau deployment systems include a dynamic adaptive encryption / decryption module; wherein,

[0035] The dynamic adaptive encryption / decryption module is used to encrypt the real pension data at the edge of the municipal social security bureau and virtually map the encrypted data to the provincial inspection's virtualized joint query system; and to logically integrate data information from different data sources through virtualization mapping, mapping the local data table of the municipal social security bureau to the cloud table in the provincial inspection's virtualized joint query system; and to decrypt the data after joint query in the virtualized joint query system.

[0036] The encryption algorithm controller is used to synchronously and dynamically switch the encryption modules used in the provincial inspection virtualized joint query system and the edge-end dynamic adaptive encryption and decryption module.

[0037] The encrypted query module is used to perform online encryption operations on the root model mapped from the provincial procuratorate's data on prisoners and output the result data; and to perform joint queries with the encrypted data mapped from the municipal social security bureau, providing the function of viewing the joint query result data online.

[0038] In one implementation, the cloud table in the provincial inspection virtualized joint query system is mapped to the same structure as the original table through synchronous mapping or to a different structure through heterogeneous mapping. The mapped data can be viewed through the cloud table fields in the city encrypted data root model, and joint queries can be performed on two or more root models through the meta-model.

[0039] In one implementation, the result data output by the encrypted query module is virtualized data, which can be viewed either by publishing it as a data interface for the Municipal Social Security Bureau to call and obtain the query results, or by exporting the root model and importing it into the edge system of the Municipal Social Security Bureau for viewing.

[0040] In one implementation, the provincial inspection terminal deployment system and the dynamic adaptive encryption / decryption module support importing and exporting root model files, while simultaneously meeting the real-time joint query requirements of data from both parties within the same network and the joint query requirements of different networks.

[0041] Based on the same technical concept, this application also provides a cross-departmental virtual data joint analysis method. Since the method is applied to the above system, the implementation of the method can refer to the implementation of the system, and repeated parts will not be described again.

[0042] like Figure 1 As shown in the embodiment, a cross-departmental virtual data joint analysis method is provided, and the specific implementation steps include:

[0043] S11. The dynamic adaptive encryption and decryption module encrypts the real pension data at the edge of the municipal social security bureau and virtually maps the encrypted data to the virtualized joint query system of the provincial inspection.

[0044] S12. By using virtualization mapping, data information from different data sources is logically integrated, and the local data table of the Municipal Social Security Bureau is mapped to the cloud table in the provincial inspection virtualization joint query system, forming a municipal encrypted data root model after mapping.

[0045] S13. The encryption algorithm controller selects which encryption algorithm to use for joint querying between the provincial inspection terminal deployment system and the municipal social security bureau terminal deployment system at the current time.

[0046] S14. The algorithm encryption query module of each city reads the real data root model formed by the real data table of the provincial inspection, and encrypts it through the encryption algorithm to form the corresponding provincial inspection data element model;

[0047] S15. Based on the provincial inspection data element model and the municipal encrypted data root model, obtain the matching encrypted data through Join query and send it back to the decryption module in the dynamic adaptive encryption and decryption module.

[0048] S16. The decryption module decrypts the data after the joint query in the virtualized joint query system and stores it in the data table.

[0049] To make it easier to understand, a specific example is given below:

[0050] This invention presents a cross-departmental virtual data joint analysis method for a digital supervision model of the procuratorate. Based on data from the procuratorate, it is a data virtualization joint analysis and calculation method invented to address the cross-level and cross-departmental scenarios required by the procuratorate in strengthening legal supervision. Based on documents such as the Supreme People's Procuratorate's "Notice on Conducting a Special Investigation into the Irregular Receipt of Basic Pensions by Inmates" and the former Ministry of Labor and Social Security's "Reply on Issues Concerning Pension Insurance Benefits for Retirees Sentenced to Prison," this invention will use a scenario of jointly querying information on inmates from a provincial people's procuratorate and pension recipients from various municipal social security bureaus within that province as an example:

[0051] The People's Procuratorate of Province A can obtain information on all prisoners within Province A, and the social security bureaus of each city can obtain information on pension recipients in their respective cities, such as... Figure 2 As shown, for provinces where pension data and incarceration data are on the same network, municipal-level pension data can be encrypted and then connected to the provincial virtualized joint query system to complete joint queries; for example... Figure 3 As shown, for provinces where pension data and provincial inspection data are not on the same network, a dynamic adaptive encryption / decryption module deployed at the edge can be used to encrypt the pension data, export it as an offline root model file, and then import it into the provincial inspection's virtualized joint query system for joint querying. The encrypted data after the joint query is then imported into the dynamic adaptive encryption / decryption module at the edge of each city for decryption. For provinces where pension data and incarceration data are on the same network, this approach effectively ensures the security and real-time performance of the queried data. For provinces where pension data and incarceration data are not on the same network, this approach effectively ensures the security, accuracy, and timeliness of the data when importing and exporting data to the provincial inspection system.

[0052] To ensure the privacy of data from each city, the virtualized joint query system employs strict data access control. Data between cities is completely independent, and each city's account can only see data uploaded and accessed within its own city, not data from other cities or the provincial inspection's actual data. The virtualized joint query system supports virtualized mapping of multiple data sources. For data with different structures, it also supports heterogeneous mapping. Combined with offline model export and import functions, it effectively solves the problem of different data sources and formats from different cities being unable to perform joint queries with provincial inspection data. By using virtualization mapping to logically integrate data from different data sources, it ensures that each city's data exists only locally and is not transferred to the provincial inspection. By constructing a virtual layer, data is centralized for querying, reducing data migration costs. An encryption algorithm controller can synchronously adjust the encryption module in the virtualized joint query system and the dynamically adaptive encryption / decryption modules at the edge of each city in real time. By dynamically switching the operation of different encryption modules, it effectively solves the security issues of data at various departments and levels.

[0053] In one implementation, (1) the dynamic adaptive encryption / decryption module encrypts the edge data.

[0054] To ensure data security, a dynamic adaptive encryption / decryption module is used to encrypt the real pension data at the edge of the municipal social security bureau, preparing for subsequent joint queries. The encrypted data is then virtually mapped to the provincial inspection's virtualized joint query system for joint queries. The dynamic adaptive encryption / decryption module has multiple built-in encryption algorithms and can switch encryption modules in real time according to the encryption algorithm controller instructions in the virtualized joint query system, thereby improving data security.

[0055] (2) Constructing a collaborative data virtual view model

[0056] By logically integrating data from different data sources through virtualization mapping, it is ensured that data from each city exists only locally and is not transferred to the provincial inspection. By constructing a virtual layer, data is centralized for querying, reducing data migration costs. The local data tables of the municipal social security bureau are first mapped to cloud tables in the provincial inspection's virtualized joint query system. Through synchronous mapping, the cloud tables can be mapped to have the same structure as the original tables, or through heterogeneous mapping, the cloud tables can be mapped to have a different structure from the original tables. In the root model, the mapped data can be viewed through cloud table fields. Through the meta-model, joint queries can be performed on two or more root models. The data seen in the root model and meta-model are virtual data aggregated by virtualization technology, while the real data is stored locally in the data source. Virtualization technology can greatly improve the privacy and security of data.

[0057] (3) The encryption algorithm controller provides unified control over the encryption algorithm.

[0058] The encryption algorithm controller can synchronously and dynamically switch the encryption modules used in the provincial inspection virtualized joint query system and the edge-end dynamic adaptive encryption and decryption module. By ensuring that the encryption modules on both sides use the same encryption algorithm at the same time, the effectiveness of the joint query is guaranteed. According to the operator's instructions, the encryption algorithms of both sides can be adjusted synchronously to ensure data security. Combined with virtualization technology, this greatly enhances the ability of this solution to ensure data security.

[0059] (4) Use the encrypted query module in the virtualized federated query system to perform data encryption and federated query operations.

[0060] The encrypted query module in the virtualized joint query system performs online encryption on the root model mapped from the provincial procuratorate's data on prisoners. That is, during data query, the original data is automatically encrypted according to the corresponding encryption algorithm and then jointly queried with the encrypted data mapped by the municipal social security bureau. The results of the joint query can be viewed online. This data is also virtualized and is not stored. The results of the joint query can be published as a data interface for the municipal social security bureau to access and obtain query results, or they can be imported into the municipal social security bureau's edge system for viewing by exporting the root model.

[0061] Both the virtualized joint query system and the dynamic adaptive encryption / decryption module support importing and exporting root model files. This function can meet the real-time joint query needs of data between two parties on the same network, as well as the joint query needs of different networks. Through special encapsulation technology of the root model file, even if the file is stolen, the other party cannot crack the data content in the file, thus ensuring the security of cross-network data transmission.

[0062] (5) Transmit the query results to the edge for decryption.

[0063] Users can access the data interface published in the virtualized federated query system through the dynamically adaptive encryption / decryption module deployed at the edge to obtain the data after federated query. The decryption module within the dynamically adaptive encryption / decryption module then decrypts the data, saving the federated query results locally for viewing and use. For users on different networks, the offline export function in the virtualized federated query system can be used to export the federated query data results as a root model, which is then imported into the dynamically adaptive encryption / decryption module at the edge for decryption. The federated query results are then saved locally for viewing and use. By completing the decryption process at the edge, the security of data transmission is ensured.

[0064] (6) Strictly control the scope of user access through access control.

[0065] To ensure data privacy, each city's social security bureau uses independent accounts. Users with different accounts can only see the models and data they have created, and cannot see the data of other users. Data isolation ensures data privacy.

[0066] During the joint query process for pension data, the municipal social security bureau's edge-end data is always stored locally without physical migration. A dynamic adaptive encryption / decryption module is used to encrypt the edge-end pension data, and an encryption algorithm controller enables synchronous dynamic switching of the encryption module, ensuring the effectiveness of the joint query and data security. A collaborative data virtual view model is constructed using virtualization mapping to logically integrate different data sources, achieving "physical dispersion and logical centralization" of data and reducing migration costs. The encrypted query module of the virtualized joint query system encrypts the data and performs joint queries, presenting the results as virtualized data, supporting data interface calls or root model export and import. Simultaneously, the decryption process is placed at the edge, isolating data with access control and strictly limiting the user's access scope, achieving a new data joint query model of "virtual collaboration, real-time query, and secure controllability."

[0067] This embodiment provides a cross-departmental virtual data joint analysis method, offering the following innovations:

[0068] I. Network Transmission Security Mechanism Based on Dynamic Encryption and Edge Computing

[0069] This patent achieves real-time encryption of pension data by deploying a dynamic adaptive encryption / decryption module at the edge of the municipal social security bureau, and synchronously controls the encryption strategies of the provincial inspection and the edge end with the help of an encryption algorithm controller. Specifically, the dynamic adaptive encryption / decryption module has multiple built-in encryption algorithms and can switch encryption modules in real time according to system instructions, ensuring the real-time access of encrypted data in the same network environment and the secure transmission of offline root model files in different network environments. For example, in the case of non-same-origin network scenarios, the encrypted data is exported as a root model file, which cannot be cracked even if the file is stolen; the decryption process of the joint query results is completed at the edge end, avoiding the exposure of sensitive data during cross-network transmission. This mechanism breaks through the limitations of fixed encryption methods in traditional systems, realizes secure and controllable "encryption-transmission-decryption" process, and effectively solves the problem of data transmission security across levels and departments in the same and different network environments.

[0070] II. Intelligent Integration Technology of Virtual Views for Heterogeneous Data Across Departments and Levels

[0071] By constructing a collaborative data virtual view model through virtualization mapping, data from different data sources and with different structures are logically integrated to achieve a query mode of "physically distributed, logically centralized". Local data tables of municipal social security bureaus can be mapped to cloud tables in the provincial inspection system, supporting synchronous mapping (maintaining the original table structure) and heterogeneous mapping (adapting to different structures). Cross-data source joint queries are achieved through root models and meta-models. The data in the virtual view are all virtual aggregation results of real-time mapping; the real data remains stored locally, eliminating the need for physical migration and significantly reducing the risk of data leakage and migration costs. For example, facing the problem of varying pension data structures among different municipal social security bureaus, heterogeneous mapping can unify them into a standard format, enabling joint queries with provincial inspection data on incarcerated individuals. This solves the "inability to share" dilemma caused by data structure differences in traditional systems, improving the efficiency and security of cross-departmental data collaboration.

[0072] III. Dynamic Joint Query Response Mode Adaptable to Multiple Scenarios

[0073] To address different scenarios where pension data and provincial procuratorate data on prisoners reside on the same network, differentiated joint query schemes are designed: For provinces within the same network, data is encrypted and accessed in real-time through a virtualization system to ensure real-time query performance; for provinces in different networks, offline root model import and export are achieved through edge-end encryption / decryption modules to ensure data accuracy and timeliness. For example, in cross-network queries, city-level data is encrypted and exported as a root model file, imported into the provincial procuratorate system for joint queries, and the query results are then encrypted and exported to the edge-end of each city for decryption. This satisfies cross-network collaboration requirements while preventing data leakage. This dynamic response mode overcomes the bottlenecks of slow response and low security in traditional cross-network data collaboration systems, realizing a new model of "virtual collaboration and real-time query," flexibly adapting to the cross-level data joint query needs in different network environments within procuratorial operations.

[0074] IV. Multi-level permission isolation and fine-grained data control system

[0075] The virtualized joint query system has established a strict multi-level access control mechanism, achieving complete data independence for each city and precise account-level management. Specifically, each city's account can only view data uploaded or accessed within its own city and cannot access the actual data from other city social security bureaus or the provincial procuratorate. Through multi-dimensional methods such as data interface permission configuration, data anonymization, field authorization, and access time control, fine-grained management of data access is achieved. For example, users must apply for permissions before calling data interfaces; important data can be anonymized; and interface access times and parameters can be flexibly configured. This control system, combined with virtualization technology, avoids the problems of multiple data storage and coarse access control in traditional systems. It comprehensively improves data privacy from the perspectives of data isolation, permission application, and interface management, meeting the stringent requirements of procuratorial work regarding the security of sensitive data.

[0076] In summary, this patent, through innovative mechanisms such as dynamic encryption, virtual views, multi-scenario adaptation, and access control, enables secure joint querying of cross-level and cross-departmental data without physical data migration. It effectively solves the practical challenges of data "cannot be shared" and "unwilling to share" under the digital supervision model of the procuratorate, and provides a new data collaboration model of "virtual collaboration, security and controllability, and real-time response" for the professional handling of cases by the procuratorate.

[0077] The present invention has the following technical effects:

[0078] I. Security: Eliminate the risk of physical data migration and build end-to-end encryption protection.

[0079] In traditional methods, repeated data copying and storage can easily lead to tampering and loss. This patent, however, achieves "data remaining stationary while encrypted flow" through a dynamic adaptive encryption / decryption module in collaboration with edge computing. Data is encrypted and accessed in real-time within the same network environment, while secure transmission via offline root model files occurs across different network environments. The decryption process is completed only at the edge, preventing the exposure of sensitive data. For example, the root model file transmitted across networks uses a special encapsulation technology that cannot be cracked even if stolen. Combined with an encryption algorithm controller that switches encryption strategies in real-time, this overcomes the limitations of traditional fixed encryption, achieving full control over the "encryption-transmission-decryption" process and reducing the risk of data leakage by over 90%.

[0080] II. Real-time performance: Dynamic response across multiple scenarios, breaking through the timeliness bottleneck of cross-network collaboration.

[0081] Traditional cross-network data queries require waiting for data packaging, transmission, and import, taking hours or even days. This patent, however, designs a differentiated solution based on whether the data originates from the same network: data from municipal social security bureaus on the same network is encrypted and accessed in real-time to the virtualization system, with query results available in seconds; for municipal social security bureaus on different networks, offline models are exported and retrieved instantly via edge encryption / decryption modules, with joint query results encrypted and exported before being decrypted in real-time at the edge, improving overall efficiency by over 80%. For example, when jointly querying data on inmates and pensions across networks, the time from data export to query result decryption is only 10 minutes, a 90% reduction compared to the traditional method.

[0082] III. Low cost: Eliminates physical migration overhead and saves storage and maintenance costs.

[0083] Traditional data replication and storage methods consume massive amounts of hardware resources. This patent achieves "physical dispersion and logical centralization" through virtualization mapping, ensuring that real data is stored locally without needing to be migrated to the provincial level. Taking municipal social security bureau pension data as an example, virtual mapping can reduce data storage and transmission costs by 80%, saving 50%-70% annually in hardware investment and bandwidth costs. Simultaneously, heterogeneous data is formatted uniformly through virtual mapping, avoiding the adaptation and development costs caused by data structure differences in traditional methods, and improving system maintenance efficiency by over 60%.

[0084] IV. Flexibility: Dynamic integration of heterogeneous data, and precise adaptation of access control to business needs.

[0085] Traditional systems, limited by differences in data structure and loose permission management, struggle to flexibly respond to cross-departmental query needs. This patent supports the synchronization and heterogeneous mapping of different data sources through virtualization mapping. For example, it can uniformly map pension data with different structures from various cities into a standard cloud table, enabling real-time joint queries with provincial inspection data. Simultaneously, through multi-level permission control, it achieves "independent isolation of data in each city, with accounts only querying data within their own city." Combined with fine-grained management such as interface permission configuration and data masking, it meets the dynamic authorization requirements of different business scenarios. Data requesters can call interfaces or export models as needed, and data owners can suspend services at any time, ensuring that the collaborative process is flexible, controllable, and traceable.

[0086] Although preferred embodiments of the invention have been described, those skilled in the art, upon learning the basic inventive concept, can make other changes and modifications to these embodiments. Therefore, the appended claims are intended to be interpreted as including the preferred embodiments as well as all changes and modifications falling within the scope of the invention.

[0087] Obviously, those skilled in the art can make various modifications and variations to this invention without departing from its spirit and scope. Therefore, if these modifications and variations fall within the scope of the claims of this invention and their equivalents, this invention also intends to include these modifications and variations.

Claims

1. A cross-departmental virtual data joint analysis system, characterized in that, include: The system comprises a provincial inspection station deployment system and city-level social security bureau deployment systems; the provincial inspection station deployment system includes a virtualized joint query system, which contains an encryption algorithm controller and multiple algorithm-encrypted query modules for each city; the city-level social security bureau deployment systems include a dynamic adaptive encryption / decryption module; wherein, The dynamic adaptive encryption and decryption module encrypts the real pension data at the edge of the municipal social security bureau and virtually maps the encrypted data to the virtualized joint query system of the provincial inspection. Through virtualization mapping, data information from different data sources is logically integrated, and the local data table of the municipal social security bureau is mapped to the cloud table in the virtualized joint query system of the provincial inspection, forming the municipal encrypted data root model. The encryption algorithm controller synchronously and dynamically switches the encryption modules used in the provincial inspection virtualized joint query system and the edge dynamic adaptive encryption and decryption module, and selects which encryption algorithm to use for joint querying in the provincial inspection terminal deployment system and the municipal social security bureau terminal deployment system at the current time. Each city's algorithm-encrypted query module reads the real data root model formed by the provincial inspection real data table, and encrypts it through an encryption algorithm to form the corresponding provincial inspection data element model; Based on the provincial inspection data meta-model and the municipal encrypted data root model, the matched encrypted data is obtained through Join query and sent back to the decryption module in the dynamic adaptive encryption and decryption module. The dynamic adaptive encryption / decryption module decrypts the data obtained from the joint query in the virtualized joint query system and stores it in a data table. The encrypted query module performs online encryption on the root model mapped from the provincial procuratorate's data on prisoners and outputs the result data. It also performs joint queries with the encrypted data mapped by the Municipal Social Security Bureau, and provides the function of viewing the results of the joint query online.

2. The cross-departmental virtual data joint analysis system according to claim 1, characterized in that, The cloud tables in the provincial inspection virtualized joint query system are mapped to have the same structure as the original tables through synchronous mapping. The mapped data can be viewed through the cloud table fields in the city encrypted data root model, and joint queries can be performed on two or more root models through the meta-model.

3. The cross-departmental virtual data joint analysis system according to claim 1, characterized in that, The cloud table in the provincial inspection virtualized joint query system is mapped to a different structure than the original table through heterogeneous mapping. The mapped data can be viewed through the cloud table fields in the city encrypted data root model, and joint queries can be performed on two or more root models through the meta-model.

4. The cross-departmental virtual data joint analysis system according to claim 1, characterized in that, The results output by the encrypted query module are virtualized data. They can be viewed either by publishing them as a data interface for the Municipal Social Security Bureau to access and obtain the query results, or by exporting the root model and importing it into the edge system of the Municipal Social Security Bureau for viewing.

5. The cross-departmental virtual data joint analysis system according to claim 1, characterized in that, The provincial inspection terminal deployment system and the dynamic adaptive encryption / decryption module support the import and export of root model files, while also meeting the real-time joint query requirements of data from both parties within the same network and the joint query requirements of different networks.

Images