Dynamic data secure transmission and processing channel construction device and method based on zero trust

Abstract

The invention provides a zero-trust-based dynamic data secure transmission and processing channel construction device and method, and the method comprises the steps: S1, collecting to-be-transmitted data, and classifying the data to obtain a data classification result; s2, based on the data classification result, the user identity information and the environmental risk information, a dynamic security policy is generated, and the dynamic security policy comprises an encryption algorithm selection rule, a trust evaluation threshold and a data operation authority policy; according to the invention, the fine-grained security policy is generated and continuously adjusted by dynamically sensing the data sensitivity and the real-time trust state, so that the full-link self-adaptive security protection from transmission to processing is realized; according to the method, the security multi-party calculation is seamlessly integrated in a high-sensitivity scene, so that the end-to-end security and privacy protection level of data in a cross-domain and multi-participant environment are remarkably improved while the data mobility is guaranteed, and the problem that a traditional static security mechanism is difficult to adapt to dynamic risks is effectively solved.

Description

Technical Field

[0001] This invention relates to the field of network security technology, and more specifically to an apparatus and method for constructing a dynamic data security transmission and processing channel based on zero trust. Background Technology

[0002] In traditional data transmission and processing systems, security mechanisms primarily rely on static perimeter defenses, such as firewalls and virtual private networks (VPNs). These methods assume the internal network is trustworthy, but perimeter defenses are prone to failure when facing internal threats and advanced persistent threats (APS). Zero Trust architecture proposes the principle of "never trust, always verify," improving security through continuous verification and least privilege access.

[0003] However, existing zero-trust implementations often employ fixed security policies and encryption methods, failing to adapt to the dynamic changes in data flows. For example, data classification and access control policies are rarely updated after initialization, leading to security policy mismatches when data content or context changes. Furthermore, insufficient real-time monitoring and adjustment during data transmission and processing can result in data leakage or integrity breaches. In particular, existing technologies lack support for secure multi-party computation, dynamic encryption algorithm selection, and threshold deployment, making it difficult to achieve secure data sharing and processing in complex environments. Therefore, existing technologies lack a data transmission and processing channel capable of dynamically adjusting security policies in real time, supporting secure multi-party computation and threshold control, making it difficult to guarantee the confidentiality, integrity, and availability of data during transmission and processing. Summary of the Invention

[0004] To address the aforementioned technical problems, this invention provides a device and method for constructing a dynamic data security transmission and processing channel based on zero trust. By dynamically sensing data sensitivity and real-time trust status, it generates and continuously adjusts fine-grained security strategies, achieving end-to-end adaptive security protection from transmission to processing. This effectively addresses the challenge that traditional static security mechanisms are ill-suited to adapting to dynamic risks.

[0005] The technical solution adopted in this invention is as follows: A method for constructing a dynamic data security transmission and processing channel based on zero trust includes the following steps: Step S1: Collect the data to be transmitted and classify the data to obtain the data classification result; Step S2: Based on the data classification results, user identity information, and environmental risk information, generate a dynamic security policy, which includes encryption algorithm selection rules, trust assessment thresholds, and data operation permission policies. Step S3: Based on the dynamic security policy, construct a secure transmission channel and transmit the data through the secure transmission channel; Step S4: During the data transmission process, the security status is continuously verified, and the dynamic security policy is dynamically adjusted according to the verification results; wherein, the continuous verification includes adjudicating the trust score calculated in real time based on the trust assessment threshold; Step S5: At the data receiving end, based on the updated dynamic security policy, the data undergoes security processing; the security processing includes: Step S5.1: Based on the dynamic security policy, determine and instantiate the corresponding security processing environment, and load the received data into the security processing environment; Step S5.2: In the secure processing environment, each operation instruction executed on the data is intercepted, parsed, and checked for compliance with the policy according to the data operation permission policy, and the execution of the operation instruction is allowed or denied based on the check results; Step S5.3: For the output data generated by the approved operation instructions, conduct a leakage risk assessment based on the dynamic security policy, and control the final outflow of the output data according to the assessment results.

[0006] Further, in step S2, the generation of the dynamic security policy includes: Based on the data classification results, the data sensitivity level is determined; Calculate the initial trust score based on the user identity information and environmental risk information; Based on the data sensitivity level and the initial trust score, a preset rule base is applied to generate the encryption algorithm selection rule; wherein, the rule base includes: when the data sensitivity level is higher than a first preset threshold and the initial trust score is lower than a second preset threshold, an asymmetric encryption algorithm is selected; otherwise, a symmetric encryption algorithm is selected. Simultaneously, based on the data sensitivity level and user role, the data operation permission policy and environment configuration specification are generated. The data operation permission policy includes a list of allowed operation instructions and operation condition thresholds for each operation instruction. The environment configuration specification defines the isolation level, resource limits, and security baseline required for the secure processing environment.

[0007] Furthermore, the step S5.1 of determining and instantiating the corresponding security processing environment according to the dynamic security policy includes: Analyze the environment configuration specifications in the dynamic security policy; Based on the aforementioned environment configuration specifications, a matching template is selected from the predefined security environment templates; Based on the selected template, dynamically create a runtime environment instance with specified isolation characteristics; The integrity of the created runtime environment instance is verified, and if the verification is successful, it is determined to be a usable secure processing environment.

[0008] Further, the step S5.1 of loading the received data into the secure processing environment includes: Establish a controlled data injection channel from the data receiving module to the secure processing environment; The data, still in an encrypted state, is transmitted to the secure processing environment through the controlled data injection channel. Within the secure processing environment, the encrypted data is decrypted using a key provided according to the dynamic security policy to obtain plaintext data that can be processed.

[0009] Furthermore, in step S2, the generation of the dynamic security policy further includes: When the data sensitivity level is higher than the third preset threshold, and the data processing is configured to be completed collaboratively by multiple untrusted parties, a secure multi-party computation framework is enabled in the dynamic security policy, and corresponding multi-party computation protocol parameters and dedicated secure computation environment specifications are configured for the secure multi-party computation framework.

[0010] Furthermore, step S5.2, which involves intercepting, parsing, and checking the compliance of operation instructions based on the data operation permission policy, includes: Intercepting operation commands targeting the data initiated in the secure processing environment; The operation instructions are parsed to obtain the instruction type and instruction parameters; Match the instruction type with the list of allowed operation instructions in the data operation permission policy; If the match fails, the operation instruction is rejected and a first security event log is generated; If the match is successful, it is further determined whether the instruction parameters meet the operation condition threshold corresponding to the instruction type; If the conditions are met, the operation instruction is allowed to be executed; if not, the operation instruction is rejected and a second security event log is generated.

[0011] Furthermore, step S5.3, which involves assessing the leakage risk and controlling the outflow based on the dynamic security strategy, includes: Obtain the result data generated by the approved operation instructions as the data to be output; Analyze the content characteristics of the data to be output, and combine the data classification results to calculate a data leakage risk score through a risk assessment model; The data breach risk score is compared with the output security threshold defined in the dynamic security policy; If the risk score is lower than the output security threshold, the data to be output is allowed to flow out of the secure processing environment; If the risk score is not lower than the output security threshold, the data to be output is anonymized or its outflow is directly blocked, and a third security event log is generated.

[0012] Furthermore, when the dynamic security policy enables a secure multi-party computation framework, step S5 is specifically implemented as follows: In accordance with the dedicated secure computing environment specification, instantiate a secure processing environment that supports secure multi-party computation; In the secure processing environment, a secure multi-party computation session is initialized according to the multi-party computation protocol parameters; Each participating party provides its own private data to the secure multi-party computation session through the secure transmission channel in the form of secret sharing or homomorphic encryption; The predetermined secure computation protocol is executed in the session, and the participants interact to calculate the final result. No party can directly obtain the other party's original privacy data during the execution of the protocol. The final result is used as the output data in step S5.3 for subsequent leakage risk assessment and outflow control.

[0013] This invention also provides a device for constructing a zero-trust-based dynamic data security transmission and processing channel, comprising: The data acquisition and classification module is used to acquire the data to be transmitted, classify the data, and obtain the data classification results; The dynamic policy management module is used to generate dynamic security policies based on the data classification results, user identity information, and environmental risk information. The dynamic security policies include encryption algorithm selection rules, trust assessment thresholds, and data operation permission policies. A secure channel construction module is used to construct a secure transmission channel according to the dynamic security policy and transmit the data through the secure transmission channel; A continuous verification monitoring module is used to continuously verify the security status during the data transmission process and dynamically adjust the dynamic security policy based on the verification results; wherein, the continuous verification includes adjudicating the trust score calculated in real time based on the trust assessment threshold; A security processing execution module is used to perform security processing on the data at the data receiving end based on the updated dynamic security policy; the security processing execution module includes: The environment instantiation and loading unit is used to determine and instantiate the corresponding security processing environment according to the dynamic security policy, and load the received data into the security processing environment; A fine-grained instruction control unit is used in the secure processing environment to intercept, parse, and perform policy compliance checks on each operation instruction executed on the data according to the data operation permission policy, and to allow or deny the execution of the operation instruction based on the check results. The output risk assessment and control unit is used to assess the leakage risk of the output data generated by the approved operation instructions according to the dynamic security policy, and control the final outflow of the output data based on the assessment results.

[0014] Furthermore, the environment instantiation and loading unit includes: The template management subunit is used to store predefined security environment templates; The environment instantiation subunit is used to parse the environment configuration specifications in the dynamic security policy, select a template from the template management subunit based on the specifications, and dynamically create a runtime environment instance. The environment verification subunit is used to perform integrity verification on the created runtime environment instance. The secure loading subunit is used to establish a controlled data injection channel to inject encrypted data into a verified environment for decryption. The security processing execution module further includes a secure multi-party computation engine, which is used to initialize and execute a secure multi-party computation session in a dedicated secure computing environment according to the configured protocol parameters when the dynamic security policy indicates that the secure multi-party computation framework is enabled.

[0015] The beneficial effects of this invention are: This invention generates and continuously adjusts fine-grained security strategies by dynamically sensing data sensitivity and real-time trust status, achieving end-to-end adaptive security protection from transmission to processing. It applies the zero-trust principle to real-time interception of data operation instructions and risk assessment of output content, and seamlessly integrates secure multi-party computation in highly sensitive scenarios. Thus, while ensuring data flow, it significantly improves the end-to-end security and privacy protection of data in cross-domain, multi-participant environments, effectively addressing the challenge that traditional static security mechanisms are ill-suited to dynamic risks. Attached Figure Description

[0016] Figure 1 This is a flowchart of Embodiment 1 of the present invention; Figure 2 This is a flowchart illustrating the dynamic strategy generation process of Embodiment 1 of the present invention; Figure 3 This is a flowchart of the instruction interception and policy compliance check according to Embodiment 1 of the present invention; Figure 4 This is a structural block diagram of Embodiment 2 of the present invention. Detailed Implementation

[0017] The technical solutions of the embodiments of the present invention will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only some embodiments of the present invention, and not all embodiments. Based on the embodiments of the present invention, all other embodiments obtained by those skilled in the art without creative effort are within the scope of protection of the present invention.

[0018] Example 1 like Figures 1-3 As shown, the method for constructing a dynamic data security transmission and processing channel based on zero trust according to an embodiment of the present invention includes the following steps: Step S1: Collect the data to be transmitted and classify the data to obtain the data classification result; Establish a classification model; the classification model will classify the original data set to be transmitted. and its attributes As input, through the classification function Output classification results Here This can be a rule-based, statistical, or machine learning-based classifier, whose purpose is to provide a data-level semantic understanding foundation for subsequent security policy formulation. Classification results. Mapped to data sensitivity level ,Right now This mapping typically uses predefined sensitivity grading standards to label data as public, internal, secret, or top secret, etc. It is the first key input for all subsequent security decisions, directly determining the baseline of the required level of protection for the data.

[0019] While acquiring the data sensitivity level, the system initiates a trust assessment model. This model integrates user identity information. (such as roles, permissions, historical behavior records) and environmental risk information (Such as access device health status, network location, time, threat intelligence), through an evaluation function. Calculate the initial trust score The evaluation function is designed as a weighted combination: ,in and These are the quantification functions for identity credibility and environmental security, respectively. and To adjust the weights. The initial trust score characterizes the initial level of trustworthiness of the entity requesting access to data in the current context.

[0020] Step S2: Based on the data classification results, user identity information, and environmental risk information, generate a dynamic security policy. The dynamic security policy includes encryption algorithm selection rules, trust assessment thresholds, and data operation permission policies. Establish a dynamic security policy generation model to classify data sensitivity levels. and initial trust score As the core basis for decision-making, a complete strategy tuple is generated. .

[0021] First, the rules for selecting encryption algorithms. It arises from a decision-making logic: if (Highly sensitive) and (For low trust scenarios), choose asymmetric encryption to enhance confidentiality and identity binding; otherwise, choose the more efficient symmetric encryption. and It is a configurable threshold parameter. Secondly, the trust evaluation threshold. Usually with A negative correlation means that the more sensitive the data, the higher the minimum real-time trust score required to maintain access.

[0022] In addition, data operation permission policies Defined as a series of allowed operation instruction types and its associated conditional thresholds For example, the maximum amount of data that can be accessed at one time and the operation time window are generated strictly according to the principle of least privilege. It is decided jointly with the user's role.

[0023] Therefore, environmental configuration specifications The definition specifies the isolation level, resource limitations, and security baseline required for the secure processing environment at the receiving end, and its stringency varies accordingly. Increased and enhanced. Especially when data sensitivity... Above a higher threshold Furthermore, when multi-party collaboration is required, the strategy will enable the Secure Multi-Party Computation (MPC) framework and configure specific multi-party computation protocol parameters. And dedicated computing environment specifications, thereby preparing for privacy-preserving computation of highly sensitive data at the policy level.

[0024] Step S3: Based on the dynamic security policy, construct a secure transmission channel and transmit data through the secure transmission channel; Step S4: During data transmission, continuously verify the security status and dynamically adjust the dynamic security policy based on the verification results; wherein, continuous verification includes adjudicating the trust score calculated in real time based on the trust assessment threshold; After the policy is generated, the secure transmission channel construction module constructs the channel according to the policy. An encrypted link is selected and instantiated. Simultaneously, the continuous verification and dynamic adjustment model begins operation. Throughout the entire transmission and processing lifecycle, the dynamic adjustment model continuously monitors behavioral and environmental changes and dynamically updates the real-time trust score. Its update can be modeled as ,in This is a trust change rate function, influenced by positive or negative events detected in real time. This is the real-time score. Will be related to the dynamic threshold in the strategy A continuous comparison and decision will be made. Once... If this happens, a dynamic policy adjustment loop will be immediately triggered, which may include increasing encryption strength, tightening operation permissions, or even terminating the session, thereby achieving adaptive synchronization between security policies and real-time risks.

[0025] Step S5: At the data receiving end, based on the updated dynamic security policy, perform security processing on the data; the security processing includes: Step S5.1: Based on the dynamic security policy, determine and instantiate the corresponding security processing environment, and load the received data into the security processing environment; Step S5.2: In the secure processing environment, each operation instruction executed on the data is intercepted, parsed, and checked for compliance with the policy based on the data operation permission policy, and the execution of the operation instruction is allowed or denied based on the check results. Step S5.3: For the output data generated by the approved operation instructions, conduct a leakage risk assessment based on the dynamic security policy, and control the final outflow of the output data according to the assessment results.

[0026] After the data arrives at the receiving end, it enters the secure processing environment to execute the model. First, the environment instantiation unit parses the strategy... It selects a matching template from the template library to dynamically create and validate an isolated, controlled runtime environment instance, Env. Encrypted data is securely loaded into Env via a controlled data injection channel using a key specified by the policy. Decrypt to obtain plaintext data For processing.

[0027] Subsequently, the fine-grained instruction control unit processes each data operation instruction initiated within the Env. Interception is initiated. The fine-grained instruction control unit executes a policy compliance check function. First, it checks if the instruction type is within the specified range. If the instruction is not in the allowed list, it is rejected directly; if it is, the instruction parameters are further verified to see if they meet the threshold conditions for the operation. This process strictly ensures that all data access activities are confined within the scope of dynamic policy authorization.

[0028] Output data generated by the approved operation instructions The output leakage risk assessment and control model is then activated. This model uses a risk assessment function. Calculate its leakage risk score . It can integrate data content feature analysis, contextual correlation, and historical leakage patterns for comprehensive judgment. The calculated... This will be compared with the output security threshold defined in the policy. Compare. If Data is allowed to flow out of the environment; otherwise, data anonymization or direct blocking of outflow will be triggered, thus setting up a final content-based audit and filtering checkpoint before the data leaves the secure environment.

[0029] Specifically, in step S2, generating a dynamic security policy includes: Based on the data classification results, the data sensitivity level is determined; Calculate the initial trust score based on user identity information and environmental risk information; Based on the data sensitivity level and the initial trust score, a preset rule base is applied to generate encryption algorithm selection rules; wherein, the rule base includes: when the data sensitivity level is higher than a first preset threshold and the initial trust score is lower than a second preset threshold, an asymmetric encryption algorithm is selected; otherwise, a symmetric encryption algorithm is selected. Simultaneously, based on data sensitivity levels and user roles, data operation permission policies and environment configuration specifications are generated. The data operation permission policies include a list of allowed operation instructions and operation condition thresholds for each operation instruction. The environment configuration specifications define the isolation level, resource limits, and security baseline required for the secure processing environment.

[0030] Specifically, step S5.1, which involves determining and instantiating the corresponding security processing environment based on the dynamic security policy, includes: Analyze the environment configuration specifications in dynamic security policies; Based on the environment configuration specifications, a matching template is selected from the predefined security environment templates; Based on the selected template, dynamically create a runtime environment instance with specified isolation characteristics; Perform integrity verification on the created runtime environment instance, and determine it as a usable secure processing environment if the verification is successful.

[0031] Specifically, step S5.1, loading the received data into the secure processing environment, includes: Establish a controlled data injection channel from the data receiving module to the secure processing environment; Data that is still in an encrypted state is transmitted to the inside of a secure processing environment through a controlled data injection channel; Within the secure processing environment, encrypted data is decrypted using a key provided according to a dynamic security policy, yielding plaintext data that can be processed.

[0032] Specifically, in step S2, generating a dynamic security policy also includes: When the data sensitivity level is higher than the third preset threshold, and the data processing is configured to be completed collaboratively by multiple untrusted parties, a secure multi-party computation framework is enabled in the dynamic security policy, and corresponding multi-party computation protocol parameters and dedicated secure computation environment specifications are configured for the secure multi-party computation framework.

[0033] When processing tasks involving multi-party collaboration on privacy-preserving data, the aforementioned general security processing flow will seamlessly integrate with the secure multi-party computation execution model. Based on the enabled MPC framework configuration in the policy, the system will instantiate a dedicated secure computing environment and, according to protocol parameters... Initialize the multi-simulation computing session. Each participating party... Each person's privacy data The input is converted into a cryptographic state through cryptographic techniques such as secret sharing or homomorphic encryption and then provided to the organization via a secure transmission channel.

[0034] Within the session, the pre-defined secure computation function This allows execution on encrypted or distributed shares, with all parties collaboratively calculating the final result (Result) through protocol interaction. Neither party can access the other's original data. This calculation result is then used as... The data is input into the aforementioned risk assessment model for final outflow control, thereby achieving data value integration while strictly adhering to the privacy protection principle under zero trust.

[0035] Specifically, step S5.2, which involves intercepting, parsing, and checking the compliance of operation commands based on data operation permission policies, includes: Intercept data manipulation commands initiated in a secure processing environment; Parse the operation instructions to obtain the instruction type and instruction parameters; Match the instruction type with the list of allowed operation instructions in the data operation permission policy; If the match fails, the operation instruction is rejected and a first security event log is generated; If a match is found, the system will further determine whether the instruction parameters meet the operation condition threshold corresponding to the instruction type. If the conditions are met, the operation instruction is allowed to be executed; if not, the operation instruction is rejected and a second security event log is generated.

[0036] Specifically, step S5.3, which involves assessing the risk of leakage and controlling outflow based on the dynamic security policy, includes: Obtain the result data generated by the approved operation instructions as the data to be output; Analyze the content characteristics of the data to be output, and combine the data classification results to calculate a data leakage risk score through a risk assessment model; Compare the data breach risk score with the output security thresholds defined in the dynamic security policy; If the risk score is lower than the output security threshold, the data to be output is allowed to flow out of the secure processing environment; If the risk score is not lower than the output security threshold, the output data will be anonymized or its outflow will be blocked, and a third security event log will be generated.

[0037] Specifically, when the dynamic security policy enables the secure multi-party computation framework, step S5 is implemented as follows: Instantiate a secure processing environment that supports secure multi-party computation, based on the dedicated secure computing environment specification. In a secure processing environment, a secure multi-party computation session is initialized based on the parameters of the multi-party computation protocol. Each participating party provides its own private data to the secure multi-party computation session in the form of secret sharing or homomorphic encryption through a secure transmission channel; The pre-defined secure computation protocol is executed during the session, and the participants interact to compute the final result. No party can directly obtain the other party's raw privacy data during the execution of the protocol. The final result will be used as the output data in step S5.3 for subsequent leakage risk assessment and outflow control.

[0038] Example 2 like Figure 4 As shown, the zero-trust-based dynamic data security transmission and processing channel construction device of this invention includes: The data acquisition and classification module is used to collect the data to be transmitted, classify the data, and obtain the data classification results; The dynamic policy management module is used to generate dynamic security policies based on data classification results, user identity information, and environmental risk information. The dynamic security policies include encryption algorithm selection rules, trust assessment thresholds, and data operation permission policies. The secure channel construction module is used to construct a secure transmission channel based on dynamic security policies and transmit data through the secure transmission channel. The continuous verification and monitoring module is used to continuously verify the security status during data transmission and dynamically adjust the dynamic security policy based on the verification results; the continuous verification includes adjudicating the trust score calculated in real time based on the trust assessment threshold. The security processing execution module is used to perform security processing on the data receiving end based on the updated dynamic security policy; the security processing execution module includes: The environment instantiation and loading unit is used to determine and instantiate the corresponding security processing environment according to the dynamic security policy, and load the received data into the security processing environment; Fine-grained instruction control unit is used in a secure processing environment to intercept, parse, and check the policy compliance of each operation instruction executed on data according to the data operation permission policy, and allow or deny the execution of the operation instruction based on the check results; The output risk assessment and control unit is used to assess the leakage risk of the output data generated by the approved operation instructions based on the dynamic security policy, and control the final outflow of the output data according to the assessment results.

[0039] Specifically, the environment instantiation and loading unit includes: The template management subunit is used to store predefined security environment templates; The environment instantiation subunit is used to parse the environment configuration specifications in the dynamic security policy, select a template from the template management subunit based on the specifications, and dynamically create a runtime environment instance. The environment verification subunit is used to perform integrity verification on the created runtime environment instance. The secure loading subunit is used to establish a controlled data injection channel to inject encrypted data into a verified environment for decryption. The secure processing execution module also includes a secure multi-party computation engine, which initializes and executes a secure multi-party computation session in a dedicated secure computation environment based on the configured protocol parameters when a dynamic security policy indicates that the secure multi-party computation framework is enabled.

[0040] This invention maps raw data into quantified sensitivity levels through an intelligent classification model, and calculates an initial trust score by combining the identity of the requesting entity and the risk of the context environment. These two core parameters are input into a dynamic policy engine to generate an instant, fine-grained security policy tuple, which covers encryption algorithm selection, real-time trust threshold, operation permissions accurate to the instruction level, and security processing environment specifications.

[0041] Driven by this strategy, the system constructs encrypted transmission channels in parallel to ensure the confidentiality of data transmission and initiates a continuous verification and monitoring loop. By collecting behavior and risk signals in real time, the trust score is dynamically updated. Once the score falls below the policy threshold, the policy is dynamically adjusted and upgraded, forming a feedback loop that ensures that the protection strength adapts to the risk.

[0042] Once the data arrives at the receiving end, the system dynamically instantiates an isolated, controlled, and secure processing environment based on the policy and securely loads the data. Within this environment, all data operation commands are intercepted and subjected to real-time parsing and fine-grained compliance checks according to the policy to ensure that the execution process does not exceed authority. Finally, the system performs another content-based risk assessment on the output data generated by the operation and compares it with the policy threshold to determine whether it is allowed to flow out or needs to be anonymized, thus setting up a final content-based risk filtering checkpoint before the data leaves.

[0043] For highly sensitive multi-party collaboration scenarios, the system can be seamlessly embedded with a secure multi-party computation protocol to complete collaborative computation while protecting the data privacy of all parties.

[0044] Any process or method description in the flowchart or otherwise herein can be understood as representing a module, segment, or portion of code comprising one or more executable instructions for implementing a particular logical function or process, and the scope of the preferred embodiments of the invention includes additional implementations in which functions may be performed not in the order shown or discussed, including substantially simultaneously or in reverse order depending on the functions involved, as will be understood by those skilled in the art to which embodiments of the invention pertain.

[0045] The logic and / or steps represented in the flowchart or otherwise described herein, for example, can be considered as a ordered list of executable instructions for implementing logical functions, and can be embodied in any computer-readable medium for use by, or in conjunction with, an instruction execution system, apparatus, or device (such as a computer-based system, a processor-included system, or other system that can fetch and execute instructions from, an instruction execution system, apparatus, or device). For the purposes of this specification, "computer-readable medium" can be any means that can contain, store, communicate, propagate, or transmit programs for use by, or in conjunction with, an instruction execution system, apparatus, or device. More specific examples (a non-exhaustive list) of computer-readable media include: an electrical connection having one or more wires (electronic device), a portable computer disk drive (magnetic device), random access memory (RAM), read-only memory (ROM), erasable and editable read-only memory (EPROM or flash memory), fiber optic devices, and portable optical disc read-only memory (CDROM). Alternatively, the computer-readable medium may be paper or other suitable media on which the program can be printed, since the program can be obtained electronically, for example, by optically scanning the paper or other medium, followed by editing, interpreting, or otherwise processing as necessary, and then stored in a computer memory.

[0046] It should be understood that various parts of the present invention can be implemented in hardware, software, firmware, or a combination thereof. In the above embodiments, multiple steps or methods can be implemented in software or firmware stored in memory and executed by a suitable instruction execution system. For example, if implemented in hardware, as in another embodiment, it can be implemented using any one or a combination of the following techniques known in the art: discrete logic circuits having logic gates for implementing logical functions on data signals, application-specific integrated circuits (ASICs) having suitable combinational logic gates, programmable gate arrays (PGAs), field-programmable gate arrays (FPGAs), etc.

[0047] Those skilled in the art will understand that all or part of the steps of the methods in the above embodiments can be implemented by a program instructing related hardware. The program can be stored in a computer-readable storage medium, and when executed, the program includes one or a combination of the steps of the method embodiments.

[0048] Furthermore, the functional units in the various embodiments of the present invention can be integrated into a processing module, or each unit can exist physically separately, or two or more units can be integrated into a module. The integrated module can be implemented in hardware or as a software functional module. If the integrated module is implemented as a software functional module and sold or used as an independent product, it can also be stored in a computer-readable storage medium.

[0049] Although embodiments of the present invention have been shown and described above, it is understood that the above embodiments are exemplary and should not be construed as limiting the present invention. Those skilled in the art can make changes, modifications, substitutions and variations to the above embodiments within the scope of the present invention.

Claims

1. A method for constructing a dynamic data security transmission and processing channel based on zero trust, characterized in that, The method comprises the following steps: Step S1: Collecting data to be transmitted, and classifying the data to obtain a data classification result; Step S2: Generating a dynamic security policy based on the data classification result, user identity information, and environmental risk information, wherein the dynamic security policy comprises encryption algorithm selection rules, trust evaluation threshold values, and data operation permission policies; Step S3: Constructing a secure transmission channel according to the dynamic security policy, and transmitting the data through the secure transmission channel; Step S4: Continuously verifying the security state during the data transmission process, and dynamically adjusting the dynamic security policy according to the verification result; wherein the continuous verification comprises judging a real-time calculated trust score based on the trust evaluation threshold values; Step S5: At the data receiving end, performing security processing on the data based on the updated dynamic security policy; the security processing comprises: Step S5.1: Determining and instantiating a corresponding security processing environment according to the dynamic security policy, and loading the received data into the security processing environment; Step S5.2: Intercepting, analyzing, and performing policy compliance checking on each operation instruction executed on the data in the security processing environment according to the data operation permission policies, and allowing or rejecting the execution of the operation instruction according to the checking result; Step S5.3: Performing leakage risk evaluation on the output data generated by the operation instruction allowed to execute according to the dynamic security policy, and controlling the final outflow of the output data according to the evaluation result.

2. The method of claim 1, wherein, In step S2, the generation of the dynamic security policy comprises: Determining a data sensitivity level based on the data classification result; Calculating an initial trust score based on the user identity information and the environmental risk information; Applying a preset rule base to generate the encryption algorithm selection rules according to the data sensitivity level and the initial trust score; wherein the rule base comprises: selecting an asymmetric encryption algorithm when the data sensitivity level is higher than a first preset threshold value and the initial trust score is lower than a second preset threshold value; otherwise, selecting a symmetric encryption algorithm; At the same time, generating the data operation permission policies and environmental configuration specifications according to the data sensitivity level and the user role, wherein the data operation permission policies contain a list of operation instructions allowed to execute and operation condition threshold values for each operation instruction, and the environmental configuration specifications define the isolation level, resource limitation, and security baseline required by the security processing environment.

3. The method of claim 1, wherein, In step S5.1, the determination and instantiation of the corresponding security processing environment according to the dynamic security policy comprises: Analyzing the environmental configuration specifications in the dynamic security policy; Selecting a matching template from predefined security environment templates based on the environmental configuration specifications; Dynamically creating a running environment instance with specified isolation characteristics according to the selected template; Performing integrity verification on the created running environment instance, and determining it as the available security processing environment after the verification is passed.

4. The method of claim 3, wherein, In step S5.1, the loading of the received data into the security processing environment comprises: establishing a controlled data injection channel from the data receiving module to the secure processing environment; transmitting the data still in an encrypted state to the inside of the secure processing environment through the controlled data injection channel; decrypting the encrypted data inside the secure processing environment using a key provided according to the dynamic security policy to obtain plaintext data available for processing.

5. The method of claim 2, wherein the method further comprises: In step S2, the generation of the dynamic security policy further comprises: when the data sensitivity level is higher than a third preset threshold and the data processing is configured to be completed by multiple mutually untrusted participants in collaboration, enabling a secure multi-party computation framework in the dynamic security policy, and configuring corresponding multi-party computation protocol parameters and a dedicated secure computation environment specification for the secure multi-party computation framework.

6. The method of claim 2, wherein the method further comprises: The interception, analysis and policy compliance check of the operation instruction according to the data operation permission policy in step S5.2 comprises: intercepting an operation instruction initiated in the secure processing environment for the data; analyzing the operation instruction to obtain an instruction type and an instruction parameter; matching the instruction type with a list of allowed execution operation instructions in the data operation permission policy; if the matching fails, rejecting the operation instruction and generating a first security event log; if the matching succeeds, further judging whether the instruction parameter meets the operation condition threshold corresponding to the instruction type; if it meets, allowing the execution of the operation instruction; if it does not meet, rejecting the operation instruction and generating a second security event log.

7. The method of claim 1, wherein the method further comprises: The leakage risk assessment and control outflow according to the dynamic security policy in step S5.3 comprises: obtaining result data generated by the operation instruction as output data; analyzing the content characteristics of the output data, combining the data classification result, and calculating a data leakage risk score through a risk assessment model; comparing the data leakage risk score with the output security threshold defined in the dynamic security policy; if the risk score is lower than the output security threshold, allowing the output data to flow out of the secure processing environment; if the risk score is not lower than the output security threshold, desensitizing the output data or directly blocking its outflow, and generating a third security event log.

8. The method of claim 5, wherein the method further comprises: When the dynamic security policy enables a secure multi-party computation framework, step S5 is implemented as: instantiating a secure processing environment supporting secure multi-party computation according to the dedicated secure computation environment specification; in the secure processing environment, initializing a secure multi-party computation session according to the multi-party computation protocol parameters; each participant provides their own private data in the form of secret sharing or homomorphic encryption to the secure multi-party computation session through the secure transmission channel; performing a predetermined secure computation protocol in the session, and each participant interacts to obtain the final result, and any party cannot directly obtain the original private data of other parties during the protocol execution; the final result is used as the output data in step S5.3 for subsequent leakage risk assessment and outflow control.

9. The zero trust based dynamic data security transmission and processing channel construction apparatus, characterized in that, comprises: The data collection and classification module is configured to collect data to be transmitted and classify the data to obtain a data classification result. The dynamic policy management module is configured to generate a dynamic security policy based on the data classification result, user identity information, and environment risk information, wherein the dynamic security policy includes encryption algorithm selection rules, trust evaluation threshold values, and data operation permission policies. The secure channel construction module is configured to construct a secure transmission channel according to the dynamic security policy and transmit the data through the secure transmission channel. The continuous verification and monitoring module is configured to continuously verify a security state during the data transmission process and dynamically adjust the dynamic security policy according to a verification result, wherein the continuous verification includes making a decision on a real-time calculated trust score based on the trust evaluation threshold values. The secure processing execution module is configured to perform secure processing on the data based on the updated dynamic security policy at a data receiving end, and includes: The environment instantiation and loading unit is configured to determine and instantiate a corresponding secure processing environment according to the dynamic security policy and load received data into the secure processing environment. The fine-grained instruction control unit is configured to intercept, analyze, and perform policy compliance checking on each operation instruction for the data in the secure processing environment according to the data operation permission policies, and allow or reject execution of the operation instruction according to a checking result. The output risk evaluation and control unit is configured to perform leakage risk evaluation on output data generated by the operation instruction allowed to be executed according to the dynamic security policy, and control final outflow of the output data according to an evaluation result.

10. The zero trust based dynamic data security transfer and processing lane construction apparatus of claim 9, wherein, The environment instantiation and loading unit includes: The template management subunit is configured to store predefined secure environment templates. The environment instantiation subunit is configured to analyze environment configuration specifications in the dynamic security policy, select a template from the template management subunit based on the specifications, and dynamically create a running environment instance. The environment verification subunit is configured to perform integrity verification on the created running environment instance. The secure loading subunit is configured to establish a controlled data injection channel, inject encrypted data into the verified environment for decryption. The secure processing execution module further includes a secure multi-party computation engine configured to initialize and execute a secure multi-party computation session in a dedicated secure computation environment according to configured protocol parameters when the dynamic security policy indicates that a secure multi-party computation framework is enabled.

Images