Electronic file security management system and method based on dynamic multiple identity authentication

Abstract

The invention relates to the technical field of archive management, and discloses an electronic archive security management system and method based on dynamic multiple identity authentication, and the system comprises a login verification module which is used for carrying out the primary verification of a user identity; the judgment module is used for judging whether identity rechecking is carried out or not according to the primary verification data; the identity re-checking module is used for performing identity re-checking according to the biological characteristics of the user; the authority management module is used for distributing a corresponding file access authority according to the user primary verification result and the identity rechecking result; the permission adjusting module is used for adjusting the current permission value according to the number of times of primary verification and the number of times of identity rechecking within the preset time to obtain a permission adjusting value; and adjusting the user permission according to the permission adjustment value. According to the invention, through a multi-identity authentication mechanism, the security of the electronic archive is improved, and the flexibility of the system and the user experience are improved through dynamic authority management.

Description

TECHNICAL FIELD

[0001] The present application relates to the technical field of archive management, in particular to an electronic archive security management system and method based on dynamic multiple identity authentication. BACKGROUND

[0002] With the rapid development of information technology, electronic archives are becoming increasingly widespread in enterprises and organizations. Electronic archive systems store a large amount of sensitive information, so it is crucial to ensure the security of this information. Traditional electronic archive security management systems usually rely on static password verification mechanisms, but such mechanisms have many security vulnerabilities, such as password leakage, guessing, or brute force cracking. In addition, static password verification cannot effectively deal with security threats such as identity theft and illegal access.

[0003] To solve the above problems, some security systems have begun to use biometric verification technologies such as fingerprint recognition and facial recognition to improve the accuracy of identity verification. However, a single biometric verification mechanism, while improving security, may cause inconvenience to users, and in some cases, biometric data may also be illegally obtained or copied.

[0004] Therefore, it is necessary to provide an electronic archive security management system and method based on dynamic multiple identity authentication to solve the security vulnerabilities and poor user experience problems in the prior art. SUMMARY

[0005] In view of this, the present application proposes an electronic archive security management system and method based on dynamic multiple identity authentication to solve the security vulnerabilities and poor user experience problems in the prior art.

[0006] In one aspect, the present application proposes an electronic archive security management system based on dynamic multiple identity authentication, comprising: a login verification module for obtaining a user dynamic two-dimensional code and performing initial verification of the user's identity; a judgment module for determining whether to perform identity review based on initial verification data, wherein the initial verification data includes an initial verification result and an initial verification count; an identity review module for obtaining user biometric features and performing identity review based on the user biometric features if it is determined that identity review is needed; a permission management module for assigning corresponding archive access permissions based on the user's initial verification result and identity review result; The permission adjustment module is configured to determine whether to adjust the current permission value of the user according to the number of identity rechecks in the preset time length, and if adjustment is determined, to adjust the current permission value according to the number of initial verifications and the number of identity rechecks in the preset time length, to obtain a permission adjustment value; and to adjust the permission of the user according to the permission adjustment value.

[0007] Further, the login verification module is configured to obtain a user dynamic two-dimensional code, and when performing initial verification on the identity of the user, includes: The user dynamic two-dimensional code includes a timestamp and randomly generated encrypted information, and the initial identity verification is completed by scanning the user dynamic two-dimensional code and comparing with the pre-stored user information. The user dynamic two-dimensional code is limited within a preset time period, and the user dynamic two-dimensional code automatically expires after the preset time period, and can only be re-generated to perform initial identity verification.

[0008] Further, the judgment module is configured to determine whether to perform identity recheck according to the initial verification data, and includes: Setting a threshold of the number of initial verifications, if the number of initial verifications is equal to the threshold of the number of initial verifications, and the last initial verification result is failure, it is determined that identity recheck is needed; If the number of initial verifications is equal to the threshold of the number of initial verifications, and the last initial verification result is success, it is determined that identity recheck is needed; If the number of initial verifications is less than the threshold of the number of initial verifications, it is determined that identity recheck is not needed.

[0009] Further, the identity recheck module is configured to obtain user biological characteristics if it is determined that identity recheck is needed, and when performing identity recheck according to the user biological characteristics, includes: The user biological characteristics include fingerprint characteristics, facial characteristics or iris characteristics; Randomly selecting from the fingerprint characteristics, facial characteristics or iris characteristics each time identity recheck is performed to perform random recheck; Setting a threshold of the number of rechecks, if the number of identity rechecks is less than or equal to the threshold of the number of rechecks, and the final recheck result is pass, the identity recheck is successful; If the number of identity rechecks is less than or equal to the threshold of the number of rechecks, and the final recheck result is fail, the identity recheck fails.

[0010] Further, the permission management module is configured to assign corresponding file access permissions according to the initial verification result and the identity recheck result of the user, and includes: If the initial verification result is failure, and the identity recheck result is failure, access is denied, and an abnormal login alarm is performed; If the initial verification fails but the identity verification succeeds, access is granted. If the initial verification result is successful, but the identity verification result is unsuccessful, access will be denied and an abnormal login alert will be issued. If the initial verification is successful and the identity verification is successful, access is granted.

[0011] Furthermore, when the permission adjustment module determines whether to adjust the user's current permission value based on the number of identity verifications within a preset time period, it includes: Set a maximum number of identity verifications for multiple logins within a preset time period. If the total number of identity verifications for multiple logins within the preset time period is greater than or equal to the maximum number of verifications, then it is determined that the user's current permission value will be adjusted. If the total number of identity verifications for a user's multiple logins within a preset time period is less than the maximum number of verifications, it is determined that the user's current permission value will not be adjusted. The initial value for setting user permissions is 100.

[0012] Furthermore, the permission adjustment module is used to adjust the current permission value based on the number of initial verifications and identity verifications within a preset time period. When obtaining the permission adjustment value, it includes: Calculate the sum of the number of initial verification failures and the number of identity verification failures within a preset time period, and adjust the current permission value based on the sum of the number of failures; Set a sum value threshold; if the sum of the number of occurrences is less than the sum value threshold, then adjust the current permission value using a first adjustment coefficient; if the sum of the number of occurrences is greater than or equal to the sum value threshold, then adjust the current permission value using a second adjustment coefficient. The adjustment coefficient ranges from 1 to 0, and the permission adjustment value is the product of the current permission value and the adjustment coefficient.

[0013] Furthermore, when the permission adjustment module adjusts user permissions based on the permission adjustment value, it includes: If the permission adjustment value is less than the preset minimum permission value, then the user's permissions will be adjusted. If the permission adjustment value is greater than or equal to the preset minimum permission value, then the user's permissions will not be adjusted.

[0014] Furthermore, when adjusting user permissions if the permission adjustment value is less than a preset minimum permission value, the adjustment includes: User permission levels are divided into basic permissions, intermediate permissions, and advanced permissions, from lowest to highest. Basic permissions allow users to access non-confidential electronic files; intermediate permissions grant access to confidential files in addition to basic permissions; and advanced permissions grant users the permission to edit files in addition to intermediate permissions. If it is determined that user permissions need to be adjusted, then the user's permissions will be downgraded by one level; If a user's permissions were initially set to basic, the adjusted permissions will deny access to any electronic files, and an abnormal user access alert will be triggered the next time the user attempts to access the site.

[0015] Compared with existing technologies, the advantages of this invention are as follows: This invention improves the security and access control flexibility of electronic archives through the coordinated operation of a series of modules. First, the login verification module performs initial verification by obtaining the user's dynamic QR code, which not only improves security but also reduces the risk of password leakage. The use of dynamic QR codes means that each login request is unique, greatly reducing the possibility of interception and reuse. The judgment module determines whether further identity verification is needed based on the initial verification data (including verification results and number of times). This risk-based dynamic verification mechanism ensures that more in-depth identity checks are only performed when necessary, guaranteeing both security and optimizing the user experience. The identity verification module performs verification by obtaining the user's biometric features, which further enhances the accuracy of identity verification because biometric features are difficult to forge. The access control module allocates archive access permissions based on the user's initial verification result and identity verification result, ensuring that only fully verified users can access the corresponding archives. Furthermore, the permission adjustment module adjusts user permission values ​​based on the number of identity verifications within a preset time period. This provides the system with the ability to dynamically adjust user permissions to adapt to different user behavior patterns and security needs, ensuring the system can respond promptly to potential security threats and automatically adjust user permissions based on their behavior. Thus, while ensuring security, it also provides flexibility. In summary, this invention, through a multi-factor authentication mechanism, not only improves the security of electronic records but also enhances system flexibility and user experience through dynamic permission management.

[0016] On the other hand, this application also provides a method for secure management of electronic records based on dynamic multi-factor authentication, including: Obtain the user's dynamic QR code for initial verification of the user's identity; Whether to perform identity verification is determined based on the initial verification data; wherein, the initial verification data includes the initial verification result and the number of initial verifications; If it is determined that identity verification is required, the user's biometric characteristics are obtained, and identity verification is performed based on the user's biometric characteristics; Assign corresponding file access permissions based on the user's initial verification results and identity verification results; The system determines whether to adjust the user's current permission value based on the number of identity verifications within a preset time period. If it determines that an adjustment is needed, the system adjusts the current permission value based on the number of initial verifications and identity verifications within the preset time period to obtain an adjusted permission value. The system then adjusts the user's permissions based on the adjusted permission value.

[0017] It is understood that the electronic record security management system and method based on dynamic multi-identity authentication provided in this application have the same beneficial effects, and will not be elaborated here. Attached Figure Description

[0018] Various other advantages and benefits will become apparent to those skilled in the art upon reading the following detailed description of preferred embodiments. The accompanying drawings are for illustrative purposes only and are not intended to limit the invention. Furthermore, the same reference numerals denote the same parts throughout the drawings. In the drawings: Figure 1 A functional block diagram of an electronic record security management system based on dynamic multi-identity authentication provided in an embodiment of the present invention; Figure 2 A flowchart illustrating the electronic record security management method based on dynamic multi-identity authentication provided in this embodiment of the invention. Detailed Implementation

[0019] Exemplary embodiments of the present disclosure will now be described in more detail with reference to the accompanying drawings. While exemplary embodiments of the present disclosure are shown in the drawings, it should be understood that the present disclosure may be implemented in various forms and should not be limited to the embodiments set forth herein. Rather, these embodiments are provided to enable a more thorough understanding of the present disclosure and to fully convey the scope of the disclosure to those skilled in the art. It should be noted that, unless otherwise specified, embodiments and features in the embodiments of the present invention can be combined with each other. The present invention will now be described in detail with reference to the accompanying drawings and embodiments.

[0020] In some embodiments of this application, see Figure 1 As shown, this embodiment provides an electronic record security management system based on dynamic multi-factor authentication, including: The login verification module is used to obtain the user's dynamic QR code and perform initial verification of the user's identity. The judgment module is used to determine whether to perform identity verification based on the initial verification data; wherein, the initial verification data includes the initial verification result and the number of initial verifications; The identity verification module is used to obtain the user's biometric features and perform identity verification based on the user's biometric features if it is determined that identity verification is required. The access control module is used to assign corresponding file access permissions based on the user's initial verification result and identity verification result; The permission adjustment module is used to determine whether to adjust the user's current permission value based on the number of identity verifications within a preset time period. If it is determined that an adjustment is needed, the current permission value is adjusted based on the number of initial verifications and the number of identity verifications within the preset time period to obtain the permission adjustment value; and the user's permissions are adjusted based on the permission adjustment value.

[0021] Understandably, this invention enhances the security and flexibility of access control for electronic archives through the collaborative work of a series of modules. First, the login verification module performs initial verification by acquiring the user's dynamic QR code, which not only improves security but also reduces the risk of password leakage. The use of dynamic QR codes means that each login request is unique, significantly reducing the possibility of interception and reuse. The judgment module determines whether further identity verification is needed based on the initial verification data (including verification results and number of times). This risk-based dynamic verification mechanism ensures that more in-depth identity checks are only performed when necessary, guaranteeing both security and optimizing the user experience. The identity verification module performs verification by acquiring the user's biometric features, further strengthening the accuracy of identity verification, as biometric features are difficult to forge. The access control module allocates archive access permissions based on the user's initial verification result and identity verification result, ensuring that only fully verified users can access the corresponding archives. Furthermore, the permission adjustment module adjusts user permission values ​​based on the number of identity verifications within a preset time period. This provides the system with the ability to dynamically adjust user permissions to adapt to different user behavior patterns and security needs, ensuring the system can respond promptly to potential security threats and automatically adjust user permissions based on their behavior. Thus, while ensuring security, it also provides flexibility. In summary, this invention, through a multi-factor authentication mechanism, not only improves the security of electronic records but also enhances system flexibility and user experience through dynamic permission management.

[0022] In some embodiments of this application, the login verification module is used to obtain a user's dynamic QR code and perform initial verification of the user's identity, including: The user dynamic QR code includes a timestamp and randomly generated encrypted information. By scanning the user dynamic QR code, it is compared with the pre-stored user information to complete the initial identity verification. The user's dynamic QR code is restricted to a preset time period. After the preset time period, the user's dynamic QR code automatically expires and can only be regenerated for initial identity verification.

[0023] Understandably, by setting timestamps and randomly encrypted information, the validity period of the user's dynamic QR code is strictly controlled, effectively preventing the QR code from being intercepted and reused. At the same time, this dynamic generation mechanism also enhances the system's resistance to attacks; even if the QR code is intercepted during transmission, it will not be used by attackers for unauthorized login because the preset validity period has expired. In practical applications, the system can flexibly adjust the length of the preset time period according to security requirements to achieve the best balance between security and convenience.

[0024] In some embodiments of this application, when the determination module determines whether to perform identity verification based on the initial verification data, it includes: Set an initial verification count threshold. If the initial verification count is equal to the initial verification count threshold and the final initial verification result is a failure, then it is determined that identity verification is required. If the number of initial verifications is equal to the threshold number of initial verifications, and the final initial verification result is successful, then it is determined that identity verification is required. If the number of initial verifications is less than the threshold number of initial verifications, then it is determined that no identity verification is required.

[0025] In some embodiments of this application, the identity verification module is used to obtain user biometric features if it is determined that identity verification is required, and to perform identity verification based on user biometric features, including: The user's biometric features include fingerprint features, facial features, or iris features; Each time an identity is verified, a random selection is made from fingerprint features, facial features, or iris features for verification. Set a threshold for the number of identity verifications. If the number of identity verifications is less than or equal to the threshold and the final verification result is "pass", then the identity verification is successful. If the number of identity verification attempts is less than or equal to the threshold number of verification attempts, and the final verification result is "not passed", then the identity verification fails.

[0026] In some embodiments of this application, when the permission management module is used to assign corresponding file access permissions based on the user's initial verification result and identity verification result, it includes: If the initial verification fails and the identity verification also fails, access will be denied and an abnormal login alert will be triggered. If the initial verification fails but the identity verification succeeds, access is granted. If the initial verification result is successful, but the identity verification result is unsuccessful, access will be denied and an abnormal login alert will be issued. If the initial verification is successful and the identity verification is successful, access is granted.

[0027] Understandably, this invention can flexibly adjust access permissions based on the user's actual verification status. If both initial verification and identity verification fail, the system will resolutely deny access and trigger an abnormal login alarm, effectively preventing unauthorized user intrusion. Conversely, if initial verification fails but identity verification succeeds, the system will allow user access. This demonstrates that while ensuring security, the system also considers user experience, avoiding the problem of legitimate users being unable to access the system due to accidental initial verification failure. Similarly, if initial verification succeeds but identity verification fails, the system will also deny access and issue an alarm, further ensuring that only fully verified users can access electronic files. When both initial verification and identity verification succeed, the system will allow unimpeded access, ensuring smooth access for legitimate users while maintaining system security.

[0028] In some embodiments of this application, when the permission adjustment module determines whether to adjust the user's current permission value based on the number of identity verifications within a preset time period, it includes: Set a maximum number of identity verifications for multiple logins within a preset time period. If the total number of identity verifications for multiple logins within the preset time period is greater than or equal to the maximum number of verifications, then it is determined that the user's current permission value will be adjusted. If the total number of identity verifications for a user's multiple logins within a preset time period is less than the maximum number of verifications, it is determined that the user's current permission value will not be adjusted. The initial value for setting user permissions is 100.

[0029] In some embodiments of this application, the permission adjustment module is used to adjust the current permission value based on the number of initial verifications and the number of identity verifications within a preset time period. When obtaining the permission adjustment value, the module includes: Calculate the sum of the number of initial verification failures and the number of identity verification failures within a preset time period, and adjust the current permission value based on the sum of the number of failures; Set a sum value threshold; if the sum of the number of occurrences is less than the sum value threshold, then adjust the current permission value using a first adjustment coefficient; if the sum of the number of occurrences is greater than or equal to the sum value threshold, then adjust the current permission value using a second adjustment coefficient. The adjustment coefficient ranges from 1 to 0, and the permission adjustment value is the product of the current permission value and the adjustment coefficient.

[0030] Understandably, by setting a maximum number of identity verification attempts for multiple logins within a preset time period, and a threshold for the sum of initial verification failures and identity verification failures, the system can dynamically assess user behavior patterns and security risks. When a user's total number of identity verification attempts exceeds the maximum number of attempts within the preset time period, or when the sum of initial verification failures and identity verification failures exceeds the threshold, the system considers the user's behavior abnormal and subsequently lowers the user's current privilege level based on an adjustment coefficient. This dynamic adjustment mechanism not only enhances system security but also effectively addresses potential security threats, preventing unauthorized users from gaining higher privileges through repeated attempts. Furthermore, by setting a range for the adjustment coefficient, the system can minimize the impact on legitimate users while ensuring security, thereby improving system flexibility and user experience.

[0031] In some embodiments of this application, when the permission adjustment module adjusts user permissions according to a permission adjustment value, it includes: If the permission adjustment value is less than the preset minimum permission value, then the user's permissions will be adjusted. If the permission adjustment value is greater than or equal to the preset minimum permission value, then the user's permissions will not be adjusted.

[0032] In some embodiments of this application, when adjusting user permissions if the permission adjustment value is less than a preset minimum permission value, the following steps are included: User permission levels are divided into basic permissions, intermediate permissions, and advanced permissions, from lowest to highest. Basic permissions allow users to access non-confidential electronic files; intermediate permissions grant access to confidential files in addition to basic permissions; and advanced permissions grant users the permission to edit files in addition to intermediate permissions. If it is determined that user permissions need to be adjusted, then the user's permissions will be downgraded by one level; If a user's permissions were initially set to basic, the adjusted permissions will deny access to any electronic files, and an abnormal user access alert will be triggered the next time the user attempts to access the site.

[0033] Understandably, by meticulously dividing user permission levels and setting clear adjustment rules, the system can more accurately manage user access permissions. Setting basic permissions ensures that fundamental access needs, excluding confidential electronic files, are met, while preventing the leakage of sensitive information. The gradual opening of intermediate and advanced permissions provides users with the possibility of acquiring more permissions as needed for their work, while also imposing stricter control over user behavior. When the system determines that user permissions need adjustment, lowering the user's permission level demonstrates the system's serious attitude towards security risks and provides users with the opportunity to improve or restore their permissions. Especially for users who were originally at the basic permission level, if their permissions are adjusted to deny access to any electronic files and trigger an abnormal user access alarm on the next access attempt, this mechanism can effectively prevent potential security threats and alert system administrators to promptly address and handle abnormal situations.

[0034] On the other hand, see Figure 2 As shown, this application also provides an electronic record security management method based on dynamic multi-identity authentication, applied to the aforementioned electronic record security management system based on dynamic multi-identity authentication, including the following steps: S100: Obtain the user's dynamic QR code and perform initial verification of the user's identity; S200. Determine whether to perform identity verification based on the initial verification data; wherein, the initial verification data includes the initial verification result and the number of initial verifications; S300: If it is determined that identity verification is required, obtain the user's biometric characteristics and perform identity verification based on the user's biometric characteristics; S400: Assign corresponding file access permissions based on the user's initial verification result and identity verification result; S500: Determine whether to adjust the user's current permission value based on the number of identity verifications within a preset time period. If it is determined that an adjustment is needed, adjust the current permission value based on the number of initial verifications and identity verifications within the preset time period to obtain a permission adjustment value; adjust the user's permissions based on the permission adjustment value.

[0035] It is understood that this invention forms a complete and efficient electronic record security protection system, achieving dynamic multi-factor authentication of user identity and refined management of permissions through a series of steps. First, in step S100, the initial identity verification process is initiated by acquiring the user's dynamic QR code. Utilizing the uniqueness and timeliness of the dynamic QR code, the leakage and illegal copying of identity information are effectively prevented, laying a solid foundation for subsequent verification processes. Next, in step S200, based on the initial verification data, including the verification result and the number of verifications, the system intelligently determines whether further identity verification is needed. This risk-based judgment mechanism ensures security while avoiding unnecessary verification steps, improving the user experience. If identity verification is deemed necessary, the system proceeds to step S300, where more stringent identity confirmation is performed by acquiring the user's biometric features, such as fingerprints, facial features, or iris scans. The uniqueness and difficulty in forging biometric features provide higher accuracy and reliability for identity verification. In step S400, corresponding record access permissions are allocated based on the user's initial verification result and identity verification result. This step ensures that only fully authenticated users can access the corresponding electronic files, effectively preventing unauthorized access and data leakage. Finally, in step S500, the user's permission value is dynamically adjusted based on the number of identity verifications within a preset time period, as well as the number of failed initial verifications and identity verifications. This dynamic permission management mechanism can adjust user access permissions in real time based on user behavior patterns and security risks, ensuring both the security of electronic file access and improving flexibility and user experience. In summary, this invention provides strong protection for the secure storage and access of electronic files through dynamic multi-factor authentication and dynamic permission management.

[0036] Those skilled in the art will understand that embodiments of this application can be provided as methods, systems, or computer program goods. Therefore, this application can take the form of a completely hardware embodiment, a completely software embodiment, or an embodiment combining software and hardware aspects. Furthermore, this application can take the form of a computer program goods embodied on one or more computer-usable storage media (including, but not limited to, disk storage, CD-ROM, optical storage, etc.) containing computer-usable program code.

[0037] This application is described with reference to flowchart illustrations and / or block diagrams of methods, apparatus (systems), and computer program goods according to embodiments of this application. It will be understood that each block of the flowchart illustrations and / or block diagrams, and combinations of blocks in the flowchart illustrations and / or block diagrams, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, special-purpose computer, embedded processor, or other programmable data processing apparatus to produce a machine, such that the instructions, which execute via the processor of the computer or other programmable data processing apparatus, generate instructions for implementing the flowchart... Figure 1 One or more processes and / or boxes Figure 1 A device that provides the functions specified in one or more boxes.

[0038] These computer program instructions may also be stored in a computer-readable storage medium that can direct a computer or other programmable data processing device to function in a particular manner, such that the instructions stored in the computer-readable storage medium produce an article of manufacture including instruction means, which are implemented in a process Figure 1 One or more processes and / or boxes Figure 1 The function specified in one or more boxes.

[0039] These computer program instructions may also be loaded onto a computer or other programmable data processing equipment to cause a series of operational steps to be performed on the computer or other programmable equipment to produce a computer-implemented process, thereby providing instructions that execute on the computer or other programmable equipment for implementing the process. Figure 1 One or more processes and / or boxes Figure 1 The steps of the function specified in one or more boxes.

[0040] Finally, it should be noted that the above embodiments are only used to illustrate the technical solutions of the present invention and not to limit it. Although the present invention has been described in detail with reference to the above embodiments, those skilled in the art should understand that modifications or equivalent substitutions can still be made to the specific implementation of the present invention. Any modifications or equivalent substitutions that do not depart from the spirit and scope of the present invention should be covered within the scope of protection of the claims of the present invention.

Claims

1. An electronic record security management system based on dynamic multi-identity authentication, characterized in that, include: The login verification module is used to obtain the user's dynamic QR code and perform initial verification of the user's identity. The judgment module is used to determine whether to perform identity verification based on the initial verification data; wherein, the initial verification data includes the initial verification result and the number of initial verifications; The identity verification module is used to obtain the user's biometric features and perform identity verification based on the user's biometric features if it is determined that identity verification is required. The access control module is used to assign corresponding file access permissions based on the user's initial verification result and identity verification result; The permission adjustment module is used to determine whether to adjust the user's current permission value based on the number of identity verifications within a preset time period. If it is determined that an adjustment is needed, the current permission value is adjusted based on the number of initial verifications and the number of identity verifications within the preset time period to obtain the permission adjustment value; and the user's permissions are adjusted based on the permission adjustment value.

2. The electronic record security management system based on dynamic multi-identity authentication according to claim 1, characterized in that, The login verification module is used to obtain the user's dynamic QR code and, during the initial verification of the user's identity, includes: The user dynamic QR code includes a timestamp and randomly generated encrypted information. By scanning the user dynamic QR code, it is compared with the pre-stored user information to complete the initial identity verification. The user's dynamic QR code is restricted to a preset time period. After the preset time period, the user's dynamic QR code automatically expires and can only be regenerated for initial identity verification.

3. The electronic record security management system based on dynamic multi-identity authentication according to claim 1, characterized in that, The judgment module is used to determine whether to perform identity verification based on the initial verification data, including: Set an initial verification count threshold. If the initial verification count is equal to the initial verification count threshold and the final initial verification result is a failure, then it is determined that identity verification is required. If the number of initial verifications is equal to the threshold number of initial verifications, and the final initial verification result is successful, then it is determined that identity verification is required. If the number of initial verifications is less than the threshold number of initial verifications, then it is determined that no identity verification is required.

4. The electronic record security management system based on dynamic multi-identity authentication according to claim 3, characterized in that, The identity verification module is used to obtain the user's biometric features if it is determined that identity verification is required. When performing identity verification based on the user's biometric features, the module includes: The user's biometric features include fingerprint features, facial features, or iris features; Each time an identity is verified, a random selection is made from fingerprint features, facial features, or iris features for verification. Set a threshold for the number of identity verifications. If the number of identity verifications is less than or equal to the threshold and the final verification result is "pass", then the identity verification is successful. If the number of identity verification attempts is less than or equal to the threshold number of verification attempts, and the final verification result is "not passed", then the identity verification fails.

5. The electronic record security management system based on dynamic multi-identity authentication according to claim 3, characterized in that, The access control module is used to assign corresponding file access permissions based on the user's initial verification result and identity verification result, including: If the initial verification fails and the identity verification also fails, access will be denied and an abnormal login alert will be triggered. If the initial verification fails but the identity verification succeeds, access is granted. If the initial verification result is successful, but the identity verification result is unsuccessful, access will be denied and an abnormal login alert will be issued. If the initial verification is successful and the identity verification is successful, access is granted.

6. The electronic record security management system based on dynamic multi-identity authentication according to claim 5, characterized in that, The permission adjustment module is used to determine whether to adjust the user's current permission value based on the number of identity verifications within a preset time period, including: Set a maximum number of identity verifications for multiple logins within a preset time period. If the total number of identity verifications for multiple logins within the preset time period is greater than or equal to the maximum number of verifications, then it is determined that the user's current permission value will be adjusted. If the total number of identity verifications for a user's multiple logins within a preset time period is less than the maximum number of verifications, it is determined that the user's current permission value will not be adjusted. The initial value for setting user permissions is 100.

7. The electronic record security management system based on dynamic multi-identity authentication according to claim 6, characterized in that, The permission adjustment module is used to adjust the current permission value based on the number of initial verifications and identity verifications within a preset time period. When obtaining the permission adjustment value, it includes: Calculate the sum of the number of initial verification failures and the number of identity verification failures within a preset time period, and adjust the current permission value based on the sum of the number of failures; Set a sum value threshold; if the sum of the number of occurrences is less than the sum value threshold, then adjust the current permission value using a first adjustment coefficient; if the sum of the number of occurrences is greater than or equal to the sum value threshold, then adjust the current permission value using a second adjustment coefficient. The adjustment coefficient ranges from 1 to 0, and the permission adjustment value is the product of the current permission value and the adjustment coefficient.

8. The electronic record security management system based on dynamic multi-identity authentication according to claim 1, characterized in that, The permission adjustment module is used to adjust user permissions according to permission adjustment values, including: If the permission adjustment value is less than the preset minimum permission value, then the user's permissions will be adjusted. If the permission adjustment value is greater than or equal to the preset minimum permission value, then the user's permissions will not be adjusted.

9. The electronic record security management system based on dynamic multi-identity authentication according to claim 8, characterized in that, If the permission adjustment value is less than the preset minimum permission value, then when adjusting the user permissions, the following steps are included: User permission levels are divided into basic permissions, intermediate permissions, and advanced permissions, from lowest to highest. Basic permissions allow users to access non-confidential electronic files; intermediate permissions grant access to confidential files in addition to basic permissions; and advanced permissions grant users the permission to edit files in addition to intermediate permissions. If it is determined that user permissions need to be adjusted, then the user's permissions will be downgraded by one level; If a user's permissions were initially set to basic, the adjusted permissions will deny access to any electronic files, and an abnormal user access alert will be triggered the next time the user attempts to access the site.

10. A method for secure management of electronic records based on dynamic multi-identity authentication, applied to the secure management system for electronic records based on dynamic multi-identity authentication as described in any one of claims 1-9, characterized in that, include: Obtain the user's dynamic QR code for initial verification of the user's identity; Whether to perform identity verification is determined based on the initial verification data; wherein, the initial verification data includes the initial verification result and the number of initial verifications; If it is determined that identity verification is required, the user's biometric characteristics are obtained, and identity verification is performed based on the user's biometric characteristics; Assign corresponding file access permissions based on the user's initial verification results and identity verification results; The system determines whether to adjust the user's current permission value based on the number of identity verifications within a preset time period. If it determines that an adjustment is needed, the current permission value is adjusted based on the number of initial verifications and identity verifications within the preset time period to obtain an adjusted permission value. The user's permissions are then adjusted based on the adjusted permission value.

Images