Data security protection method and device

Abstract

The invention relates to the technical field of data security, and provides a data security protection method and device. The method comprises the steps of determining a target encryption mode and a target transmission buffer frame of production data according to a data sensitivity level corresponding to the production data; based on the target transmission buffer rack, encrypted data is stored in a main database as main data, and the encrypted data is obtained by encrypting the production data based on the target encryption mode; according to a dynamic weight coefficient of a standby transmission communication link, a target data backup link is determined from the standby transmission communication link, and the dynamic weight coefficient is constructed based on link state information of the standby transmission communication link; and based on the target data backup link, storing the encrypted data as backup data in a corresponding backup database. According to the invention, data tampering can be avoided, and the data transmission security is improved.

Description

Technical Field

[0001] This application relates to the field of data security technology, and in particular to a data security protection method and apparatus. Background Technology

[0002] In the field of industrial production technology, data generated during the production process plays a crucial role in monitoring production status, reviewing production processes, and improving production techniques. Typically, to ensure data reliability, industrial production companies employ backup storage methods when storing industrial production data.

[0003] Currently, backup servers are typically used in one or two ways. A large amount of sensitive data generated during the intelligent manufacturing process, such as product design, production parameters, and customer information, may be maliciously tampered with during transmission and storage. If the transmitted data and backup data are tampered with simultaneously, it will be impossible to monitor the tampering, affecting production decisions and product quality.

[0004] Therefore, there is an urgent need for a data security protection method and device to solve the above problems. Summary of the Invention

[0005] In view of the problems existing in the prior art, this application provides a data security protection method and device.

[0006] Firstly, this application provides a data security protection method, including: Based on the data sensitivity level corresponding to the production data, determine the target encryption method and target transmission buffer for the production data; Based on the target transmission buffer, encrypted data is stored as main data in the main database, wherein the encrypted data is obtained by encrypting the production data based on the target encryption method; The target data backup link is determined from the backup transmission communication links based on the dynamic weight coefficient of the backup transmission communication links, wherein the dynamic weight coefficient is constructed based on the link state information of the backup transmission communication links; Based on the target data backup link, the encrypted data is stored as backup data in the corresponding backup database.

[0007] In one embodiment, the method further includes: Determine the backup data to be queried in the backup database; Obtain a first hash value and a second hash value, wherein the first hash value represents the hash value of the master data corresponding to the backup data to be queried in the master database; and the second hash value represents the hash value of the backup data to be queried. Based on the first hash value and the second hash value, perform a data integrity verification operation to obtain a data security verification result.

[0008] In one embodiment, determining the target encryption method and target transmission buffer for the production data based on the data sensitivity level corresponding to the production data includes: When the data sensitivity level is determined to be high-sensitivity, the target encryption method is asymmetric encryption, and the first transmission buffer in the main transmission communication link is used as the target transmission buffer. The main transmission communication link is used to transmit the encrypted data in the target transmission buffer to the main database; the first transmission buffer is used to store the high-sensitivity production data. When the data sensitivity level is determined to be medium sensitive data level, the target encryption method is a symmetric encryption method, and the second transmission buffer in the main transmission communication link is used as the target transmission buffer, wherein the second transmission buffer is used to store the production data of the medium sensitive data level; When the data sensitivity level is determined to be low-sensitivity data level, the target encryption method is an irreversible encryption method, and the third transmission buffer in the main transmission communication link is used as the target transmission buffer, wherein the third transmission buffer is used to store the production data of the low-sensitivity data level.

[0009] In one embodiment, determining the target data backup link from the backup transmission communication links based on the dynamic weighting coefficient of the backup transmission communication links includes: Based on the dynamic weight coefficients, the total weights corresponding to the backup transmission communication links are calculated. Traverse the backup transmission communication links and calculate the sum of the traversed link weights corresponding to the traversed backup transmission communication links; If the sum of the weights of the traversed links is greater than or equal to a preset random number, the backup transmission communication link selected as the traversal object is used as the target data backup link, wherein the preset random number is obtained based on the sum of the weights.

[0010] In one embodiment, the method further includes: Obtain the link status information of the backup transmission communication link; Based on the link status information, the dynamic weight coefficient of the backup transmission communication link is updated to obtain the updated dynamic weight coefficient. The step of determining the target data backup link from the backup transmission communication links based on the dynamic weight coefficient of the backup transmission communication links includes: The target data backup link is determined from the backup transmission communication links based on the updated dynamic weight coefficients.

[0011] In one embodiment, the method further includes: Obtain the average data value and the expected cached data volume corresponding to the production data generated in the production process; The total cache capacity of the target transmission buffer is determined based on the average data value and the expected amount of cached data.

[0012] In one embodiment, performing a data integrity verification operation based on the first hash value and the second hash value to obtain a data security verification result includes: Determine whether the first hash value is equal to the second hash value; If the first hash value is equal to the second hash value, the data security verification result is determined to be free from malicious tampering. If the first hash value is not equal to the second hash value, the data security verification result is determined to be maliciously tampered with.

[0013] Secondly, this application provides a data security protection device, comprising: The data sensitivity level confirmation module is used to determine the target encryption method and target transmission buffer of the production data based on the data sensitivity level corresponding to the production data. The first transmission communication module is used to store encrypted data as main data in the main database based on the target transmission buffer, wherein the encrypted data is obtained by encrypting the production data based on the target encryption method; The backup link determination module is used to determine the target data backup link from the backup transmission communication links based on the dynamic weight coefficient of the backup transmission communication link, wherein the dynamic weight coefficient is constructed based on the link state information of the backup transmission communication link; The second transmission communication module is used to store the encrypted data as backup data in the corresponding backup database based on the target data backup link.

[0014] Thirdly, this application provides an electronic device, including a processor and a memory storing a computer program, wherein the processor executes the program to implement the steps of the data security protection method described in the first aspect.

[0015] Fourthly, this application provides a non-transitory computer-readable storage medium having a computer program stored thereon, wherein the computer program, when executed by a processor, implements the steps of the data security protection method described in the first aspect.

[0016] The data security protection method and apparatus provided in this application determine the target encryption method and transmission buffer based on the sensitivity level of the production data, encrypt the production data and store it in the main database, select the target data backup link according to the dynamic weight coefficient of the backup transmission communication link, and store the encrypted data as backup data in the backup database with the help of encryption and reasonable link selection, thereby avoiding data tampering and improving the security of data transmission. Attached Figure Description

[0017] To more clearly illustrate the technical solutions in this application or the prior art, the drawings used in the description of the embodiments or the prior art will be briefly introduced below. Obviously, the drawings described below are some embodiments of this application. For those skilled in the art, other drawings can be obtained based on these drawings without creative effort.

[0018] Figure 1 A flowchart illustrating the data security protection method provided in this application.

[0019] Figure 2 This is a schematic diagram of the overall process of the data security protection method for industrial internet platforms provided in this application.

[0020] Figure 3 A schematic diagram of the data security protection device provided in this application.

[0021] Figure 4 A schematic diagram of the structure of the electronic device provided in this application. Detailed Implementation

[0022] To make the objectives, technical solutions, and advantages of this application clearer, the technical solutions of this application will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only some embodiments of this application, not all embodiments. Based on the embodiments of this application, all other embodiments obtained by those skilled in the art without creative effort are within the scope of protection of this application.

[0023] Figure 1 A flowchart illustrating the data security protection method provided in this application is shown below. Figure 1 As shown, this application provides a data security protection method, including: Step 101: Determine the target encryption method and target transmission buffer for the production data based on the data sensitivity level corresponding to the production data.

[0024] In this application, data sensitivity level is a standard for classifying the importance and confidentiality of production data. For example, in an automobile manufacturing company, data involving core automobile design drawings and key engine parameters have a very high sensitivity level; while environmental data such as daily temperature and humidity in the workshop have a relatively low sensitivity level.

[0025] Then, an appropriate encryption method is selected based on the data sensitivity level. In this application, for highly sensitive data, such as the core automotive design drawings in the above embodiments, the Advanced Encryption Standard (AES) algorithm may be used for encryption. This algorithm has high security and reliability, and can effectively prevent data from being stolen or tampered with during transmission and storage. For low-sensitivity data, a relatively simple encryption method, such as simple XOR encryption, may be used to reduce the computational resource consumption of the encryption and decryption process while ensuring a certain level of security.

[0026] A target transmission buffer is a storage and buffering area for data during transmission. Different production data, due to differences in their volume, transmission frequency, and other characteristics, require transmission buffers with varying performance and capacity. For example, production line monitoring video data with high real-time requirements and large data volumes needs to be selected with a transmission buffer that has high-speed read / write capabilities and large capacity to ensure timely and stable data transmission. Conversely, for occasional equipment maintenance records with smaller data volumes and less stringent real-time requirements, a transmission buffer with relatively smaller capacity and lower performance can be selected.

[0027] In this application, for production line monitoring video data with high real-time requirements and large data volume, if the video data contains highly sensitive production process information, a transmission buffer with high-speed read / write capabilities, large capacity, and high security is required to ensure timely, stable, and secure data transmission. Conversely, for occasional equipment maintenance records, if the data is of low sensitivity, small in volume, and has low real-time requirements, a transmission buffer with relatively smaller capacity, lower performance, and lower security requirements can be selected. By determining the target transmission buffer based on the data sensitivity level, the data transmission process can be optimized, improving overall transmission efficiency and stability.

[0028] Step 102: Based on the target transmission buffer, the encrypted data is stored as the main data in the main database, wherein the encrypted data is obtained by encrypting the production data based on the target encryption method.

[0029] In this application, the original production data is encrypted using the target encryption method determined in step 101 to obtain encrypted data. For example, using the AES encryption algorithm, the encrypted production data results in a seemingly random string of binary code, which can only be recovered using the corresponding decryption algorithm and key.

[0030] The primary database is the main storage system for storing production data, possessing high reliability, high availability, and data management capabilities. This application stores encrypted data as primary data in the primary database to ensure a secure and stable storage environment for production data. For example, in a large chemical enterprise, the primary database can adopt a distributed architecture, deployed across multiple servers, and possess data redundancy backup capabilities to prevent data loss due to the failure of a single server. Transmitting encrypted data to the primary database via a target transmission buffer ensures the stability and accuracy of the data during transmission, preventing data loss or corruption.

[0031] Step 103: Determine the target data backup link from the backup transmission communication links according to the dynamic weight coefficient of the backup transmission communication link, wherein the dynamic weight coefficient is constructed based on the link status information of the backup transmission communication link.

[0032] In this application, a backup transmission communication link is an additional communication channel used for data backup transmission besides the main transmission communication link. In a complex production network environment, multiple backup transmission communication links may exist, and these links have different advantages and applicability in different scenarios.

[0033] Dynamic weighting coefficients are a quantitative evaluation metric for the status of backup transmission communication links. They are constructed based on link status information, including bandwidth, latency, packet loss rate, and signal strength. For example, if a backup transmission communication link has high bandwidth, low latency, and a near-zero packet loss rate, its dynamic weighting coefficient will be relatively high; conversely, if another link has low bandwidth, high latency, and frequent packet loss, its dynamic weighting coefficient will be low. Dynamic weighting coefficients can reflect the quality and reliability of backup transmission communication links in real time.

[0034] In this application, the target data backup link is the optimal link selected from multiple backup transmission communication links based on a dynamic weighting coefficient. For example, in a production data backup system, there are three backup transmission communication links. By monitoring the bandwidth, latency, and other status information of these three links in real time, their respective dynamic weighting coefficients are calculated. The data backup link with the highest dynamic weighting coefficient is determined as the target data backup link, and then encrypted data is transmitted to the backup database through this link for backup, ensuring the timeliness and reliability of data backup. Because the data transmission connection channel is dynamically acquired, the backup database cannot be known in advance, thus preventing the original production data and the backup data in the backup database from being modified simultaneously. By monitoring for malicious tampering of production data during transmission and storage, production decisions and product quality are prevented from being affected by malicious tampering.

[0035] Step 104: Based on the target data backup link, store the encrypted data as backup data in the corresponding backup database.

[0036] In this application, the backup database is a database system that works in conjunction with the primary database to store backups of production data. Its function is to provide timely backup data in case of primary database failure, data loss, or tampering, ensuring the normal operation of the production system. The backup database can use the same database management system as the primary database, or a different system can be selected based on actual needs. For example, if the primary database uses Oracle, the backup database can use MySQL to achieve heterogeneous data backup, improving data security and reliability.

[0037] Furthermore, through the target data backup link determined in step 103 above, the encrypted production data (i.e., encrypted data) is transmitted to the corresponding backup database for storage. In this way, even if the data in the primary database is corrupted, complete and unaltered backup data can be obtained from the backup database for data recovery or verification operations.

[0038] The data security protection method provided in this application determines the target encryption method and transmission buffer based on the sensitivity level of production data, encrypts the production data and stores it in the main database, selects the target data backup link based on the dynamic weight coefficient of the backup transmission communication link, and stores the encrypted data as backup data in the backup database with the help of encryption and reasonable link selection, thereby avoiding data tampering and improving data transmission security.

[0039] Based on the above embodiments, the method further includes: Determine the backup data to be queried in the backup database; Obtain a first hash value and a second hash value, wherein the first hash value represents the hash value of the master data corresponding to the backup data to be queried in the master database; and the second hash value represents the hash value of the backup data to be queried. Based on the first hash value and the second hash value, perform a data integrity verification operation to obtain a data security verification result.

[0040] In a production data storage system that includes a primary database and multiple backup databases, the backup databases are used to back up and store the data in the primary database to ensure data security and integrity.

[0041] In this application, determining the backup data to be queried in the backup database depends on specific query requirements and business scenarios. For example, in an order management system, the main database stores order information for all users. When it is necessary to query order data within a certain time period, the corresponding backup data can be retrieved from the backup database. Specifically, the backup database can be filtered based on conditions such as the time range of order generation, the region to which the order belongs, and the order type (e.g., regular order, expedited order) to determine the backup data to be queried.

[0042] The first hash value represents the hash value of the master data corresponding to the backup data to be queried in the master database. The process of obtaining it is as follows: Taking the generation of hash values ​​using the SHA-256 algorithm as an example, the corresponding master data in the master database is first treated as a whole message and processed.

[0043] To ensure the data length conforms to the SHA-256 algorithm, the main data needs to be padded to make its length a multiple of 512 bits. Specifically, a "1" bit is added to the end of the data, followed by a sufficient number of "0" bits, and finally a 64-bit length field is added. This field represents the original data length (in bits). For example, if the original main data length is 300 bits, a certain number of "0" bits need to be added to ensure that the total message length, including the added "1" bit and the 64-bit length field, becomes a multiple of 512 bits.

[0044] Furthermore, the padded data is divided into blocks of 512 bits each, with each block containing 64 32-bit words. For example, if the padded data is 1024 bits long, it can be divided into two blocks of 512 bits each. In this application, the SHA-256 algorithm uses eight 32-bit hash initial values ​​as the starting point for calculation. These initial values ​​are typically taken from the first 32 bits of the fractional part of the square root of the first eight prime numbers (2, 3, 5, 7, 11, 13, 17, 19).

[0045] For each piece of data, the SHA-256 algorithm performs a compression function. This function updates the hash value through a series of complex mathematical and logical operations. The specific process is as follows: The hash value from the previous block (or, for the first block, the initial hash value) is used to initialize eight working variables (a, b, c, d, e, f, g, h). Then, for each word in the data block (64 words in total), a series of operations, including bitwise operations, circular shifts, and constant addition, are performed to update the values ​​of these eight working variables. Finally, the values ​​of these eight working variables are added to the hash value from the previous block (modulo 2^32 addition) to obtain the first hash value of the data block.

[0046] Once all data blocks have been processed, the final hash value obtained is the SHA-256 hash value of the master data, which is also the first hash value.

[0047] The second hash value represents the hash value of the backup data to be queried. It is obtained in a similar way to the first hash value, also using the SHA-256 algorithm. The backup data to be queried in the backup database is processed according to the steps described above: padding, block division, hash value initialization, compression function processing, and final hash value generation. The result is the SHA-256 hash value of the backup data, i.e., the second hash value.

[0048] Furthermore, the obtained first hash value (the hash value of the master data) and second hash value (the hash value of the backup data) are compared. If the two hash values ​​are exactly the same, it means that the master data and the backup data are consistent in content, and the data has not been tampered with during transmission and storage. At this time, the data security verification result is "data is complete and has not been tampered with".

[0049] If two hash values ​​differ, it indicates that the master data and backup data are inconsistent, and the data may have been maliciously tampered with during transmission or storage. In this case, the data security verification result is "data incomplete, may have been tampered with." This application's method of verifying data integrity through hash value comparison is efficient and accurate, enabling timely detection of data security issues, ensuring the reliability and security of production data, and thus preventing data errors from affecting production decisions and product quality.

[0050] Based on the above embodiments, determining the target encryption method and target transmission buffer for the production data according to the data sensitivity level corresponding to the production data includes: When the data sensitivity level is determined to be high-sensitivity, the target encryption method is asymmetric encryption, and the first transmission buffer in the main transmission communication link is used as the target transmission buffer. The main transmission communication link is used to transmit the encrypted data in the target transmission buffer to the main database; the first transmission buffer is used to store the high-sensitivity production data. When the data sensitivity level is determined to be medium sensitive data level, the target encryption method is a symmetric encryption method, and the second transmission buffer in the main transmission communication link is used as the target transmission buffer, wherein the second transmission buffer is used to store the production data of the medium sensitive data level; When the data sensitivity level is determined to be low-sensitivity data level, the target encryption method is an irreversible encryption method, and the third transmission buffer in the main transmission communication link is used as the target transmission buffer, wherein the third transmission buffer is used to store the production data of the low-sensitivity data level.

[0051] In this application, the highly sensitive data in the industrial internet platform often involves the core secrets of an enterprise, such as product design drawings, key production parameters, and highly confidential customer information. Asymmetric encryption methods (such as RSA, ECC, etc.) have unique security characteristics, using a pair of keys, namely a public key and a private key. The public key can be publicly distributed and used to encrypt data, while the private key is strictly kept by authorized users and used to decrypt data.

[0052] Taking the RSA encryption algorithm as an example, before data transmission, the sender encrypts highly sensitive data using the receiver's public key. Since only the receiver possesses the corresponding private key, only the receiver can decrypt and obtain the original data. This method ensures data security during transmission; even if the data is intercepted during transmission, attackers cannot obtain the data content because they do not have the private key.

[0053] In this application, the main transmission communication link is the main channel for data transmission in the industrial internet platform, connecting the data source (such as production equipment, sensors, etc.) and the main database. When transmitting data, the connectivity status of the main transmission communication link is queried. Data is only uploaded after the connectivity status is confirmed, to prevent data loss due to link interruption.

[0054] The first transmission buffer is a dedicated storage area for highly sensitive data within the main transmission communication link. After encryption, highly sensitive data is transmitted to this buffer for storage, enabling centralized management of the encrypted data. This facilitates subsequent transmission and monitoring, and alleviates data transmission pressure to some extent. When the main database is busy, highly sensitive data can wait for a suitable transmission opportunity in the first buffer, avoiding data loss or transmission delays due to congestion. Simultaneously, it enhances data transmission security. The first transmission buffer can employ additional security measures, such as access control and encrypted data storage, to further protect highly sensitive data. For example, in the industrial internet platform of a large chemical enterprise, the first transmission buffer is located in a secure internal area, accessible only to authorized devices and personnel, ensuring the secure storage of highly sensitive data before transmission.

[0055] During transmission, the main transmission communication link can employ various security mechanisms to ensure data security, such as encrypted transmission, authentication, and access control. For example, SSL / TLS protocols can be used to encrypt transmitted data, preventing it from being stolen or tampered with during transmission; authentication mechanisms ensure that only legitimate devices and users can access the main transmission communication link for data transmission; and access control policies can be set to restrict different users' access to highly sensitive data. Once the highly sensitive encrypted data is successfully transmitted to the main database via the main transmission communication link, the main database will further store and manage the data, providing support for enterprise production decisions and data analysis.

[0056] Medium-sensitivity data also holds some importance in industrial internet platforms, such as equipment maintenance plans and repair records. While this data doesn't involve core corporate secrets like highly sensitive data, its leakage can still impact a company's production and operations. Symmetric encryption methods (such as AES and DES) are characterized by fast encryption and decryption speeds and high efficiency, making them suitable for encrypting medium-sensitivity data.

[0057] Symmetric encryption uses the same key for both encryption and decryption. Before data transmission, the sender and receiver need to share the same key. The sender uses this key to encrypt sensitive data, and the receiver, upon receiving the encrypted data, decrypts it using the same key. For example, in a smart manufacturing enterprise, the equipment management system uses the AES encryption algorithm to encrypt equipment maintenance plans, then transmits the encrypted data to the relevant maintenance personnel. The maintenance personnel use the pre-shared key to decrypt the data, obtain the equipment maintenance information, and thus rationally schedule equipment maintenance work.

[0058] In this application, the second transmission buffer is a storage area specifically set up for sensitive data in the main transmission communication link. Similar to the first transmission buffer, it also serves to centrally manage, alleviate transmission pressure, and enhance security.

[0059] After sensitive data undergoes symmetric encryption, it is transmitted to a second transmission buffer for storage. Within this second buffer, sensitive data can be categorized and managed, for example, by equipment type or maintenance cycle, facilitating subsequent retrieval and use. Simultaneously, the second transmission buffer can employ basic security measures such as access control and data backup to ensure the security of sensitive data. For instance, in an industrial internet platform for a power company, the second transmission buffer is located in the company's data center and protected by firewalls and other security devices to prevent unauthorized access.

[0060] In this application, the primary function of the second transmission buffer is to store production data at the medium-sensitivity level. During the operation of the industrial internet platform, the generation of medium-sensitivity data is continuous, such as real-time equipment operating status data and maintenance record updates. This data needs to be encrypted and transmitted to the main database for storage and analysis in a timely manner. However, due to the limited processing capacity of the main database, data transmission congestion may occur. The existence of the second transmission buffer can effectively solve this problem; it can temporarily store medium-sensitivity data and transmit it when the main database is idle.

[0061] Low-sensitivity data in industrial internet platforms typically refers to publicly available data or data with relatively low security requirements, such as environmental monitoring data, press releases, and announcements issued by companies. The main purpose of this data is information sharing and transparency, but to prevent data tampering or forgery, irreversible encryption methods (such as MD5, SHA-1, etc.) are needed to generate unique identifiers for the data.

[0062] Irreversible encryption is characterized by the fact that the encryption process is irreversible, meaning it's impossible to recover the original data from the encrypted data. It generates a fixed-length hash value by performing a series of complex mathematical operations on the data. This hash value serves as a unique identifier for the data. For example, after a company publishes a press release, it uses the SHA-1 algorithm to encrypt the content, generating a hash value. When a user accesses the press release, the system can encrypt the content again and compare it to the previously generated hash value. If the two hash values ​​match, it means the press release content has not been tampered with.

[0063] In this application, the third transmission buffer is a storage area specifically set up for low-sensitivity data in the main transmission communication link. Although the security requirements for low-sensitivity data are relatively low, it still needs to be properly managed and stored to ensure data integrity and availability.

[0064] Once low-sensitivity data is irreversibly encrypted, it is transferred to a third transmission buffer for storage. Within this buffer, the data can be categorized and organized, for example, by data type and publication time, facilitating subsequent retrieval and use. Simultaneously, the third transmission buffer can employ basic data backup and recovery mechanisms to prevent data loss. For instance, in an industrial internet platform for a logistics company, the third transmission buffer stores environmental monitoring data and periodically backs it up to external storage devices to ensure data security.

[0065] In industrial internet platforms, the volume of low-sensitivity data is typically large. For example, environmental monitoring data may generate a large number of data points in real time. This data needs to be encrypted and stored promptly, but due to its large volume, direct transmission to the main database could put significant pressure on it. In this application, a third transmission buffer can alleviate this pressure. It first stores the low-sensitivity data and then transmits it in batches to the main database according to certain rules and frequencies. Simultaneously, the third transmission buffer can also perform simple analysis and processing on the low-sensitivity data, such as calculating the average, maximum, and minimum values, providing basic statistical information for the enterprise's production and operations. For example, in an industrial internet platform for a wastewater treatment company, the third transmission buffer stores and analyzes environmental monitoring data during the wastewater treatment process, and then transmits the analysis results to the main database, providing a reference for the company's production scheduling and environmental monitoring.

[0066] Based on the above embodiments, determining the target data backup link from the backup transmission communication links according to the dynamic weight coefficient of the backup transmission communication links includes: Based on the dynamic weight coefficients, the total weights corresponding to the backup transmission communication links are calculated. Traverse the backup transmission communication links and calculate the sum of the traversed link weights corresponding to the traversed backup transmission communication links; If the sum of the weights of the traversed links is greater than or equal to a preset random number, the backup transmission communication link selected as the traversal object is used as the target data backup link, wherein the preset random number is obtained based on the sum of the weights.

[0067] In this application, the backup transmission communication link is a set of links that can be selected for data transmission and backup. Each link in the set has a unique identifier, such as a link ID and a corresponding weight. The weight represents the priority or probability of the link being selected. The higher the weight, the higher the probability of being selected.

[0068] In this application, the weight data is first initialized: a data structure, such as a dictionary or hash table, is created to store the ID and corresponding weight of each link. For example, the data structure can be represented as: {"link1": 5, "link2": 2, "link3": 3, ...}, where "link1", "link2", "link3", etc., are the link IDs, and 5, 2, 3, etc., are the corresponding weights. Each backup transmission communication link is assigned a dynamic weight coefficient, which reflects the link's priority or the probability of being selected. The dynamic weight coefficient is not fixed; it is dynamically adjusted based on the link's real-time status information (such as link bandwidth, latency, packet loss rate, load, etc.).

[0069] For example, suppose there are three backup transmission communication links in a complex industrial production network, labeled Link A, Link B, and Link C. Initially, based on link performance evaluation, the dynamic weight coefficient of Link A is set to 4, Link B to 3, and Link C to 3. To calculate the sum of the weights for all backup transmission communication links, simply add the weight coefficients of these three links, i.e., 4 + 3 + 3 = 10. By calculating the sum of the weights, we can understand the overall priority distribution of the entire set of backup transmission communication links, and subsequently generate random numbers based on this to select links.

[0070] After determining the total weights, it is necessary to traverse the backup transmission links to identify the final selected target data backup link. The traversal process involves checking each link sequentially in a certain order (e.g., the link number order).

[0071] During the traversal, the sum of the weights of the traversed links corresponding to the backup transmission communication links that have been traversed is calculated simultaneously. Specifically, a variable (such as current_sum) is initialized to 0 to record the sum of the weights of the traversed links. Then, starting from the first backup transmission communication link, its weight coefficient is added to current_sum. Next, the next link is checked, and its weight coefficient is similarly added to current_sum, and so on.

[0072] Using the above example, assume the traversal is performed in the order of link A, link B, and link C. Initially, current_sum = 0. When traversing to link A, current_sum = 0 + 4 = 4; then traversing to link B, current_sum = 4 + 3 = 7; finally traversing to link C, current_sum = 7 + 3 = 10. In this way, the accumulated weights during the traversal can be tracked in real time, providing a basis for subsequent determination of whether to select a link.

[0073] The preset random number is generated by a random number generator, and its value ranges between 1 and the calculated sum of weights. For example, in the above embodiment, the sum of weights is 10, so the preset random number can be any integer between 1 and 10, such as 7.

[0074] Furthermore, during the process of traversing the backup transmission communication links and calculating the sum of the weights of the traversed links, the sum of the weights of the traversed links is compared with a preset random number. When the sum of the weights of the traversed links is greater than or equal to the preset random number, the backup transmission communication link selected as the traversal object is used as the target data backup link. Continuing with the above embodiment, the preset random number is 7. During the traversal process, when link A is traversed, current_sum = 4, which is less than 7, so the traversal continues; when link B is traversed, current_sum = 4 + 3 = 7, at which point current_sum is equal to the preset random number 7, so link B is used as the target data backup link.

[0075] This application uses a weighted random selection method, where links with higher weights are more likely to be selected. Because the total weight reflects the overall weight of all links, and a preset random number is generated within this range, links with higher weights have a greater chance of reaching or exceeding the preset random number when traversing link weights, thus being selected. This ensures that when selecting target data backup links, both the real-time status of the links (reflected by dynamic weight coefficients) and a degree of randomness are considered, improving the reliability and flexibility of data transmission and backup. For example, in real-time data monitoring scenarios of industrial internet platforms, this method can select the most suitable link for data backup, ensuring the secure storage and transmission of data.

[0076] Based on the above embodiments, the method further includes: Obtain the link status information of the backup transmission communication link; Based on the link status information, the dynamic weight coefficient of the backup transmission communication link is updated to obtain the updated dynamic weight coefficient. The step of determining the target data backup link from the backup transmission communication links based on the dynamic weight coefficient of the backup transmission communication links includes: The target data backup link is determined from the backup transmission communication links based on the updated dynamic weight coefficients.

[0077] In this application, backup transmission communication links in the complex network environment of the Industrial Internet play a crucial role in data transmission and backup. To ensure efficient and reliable data transmission, it is necessary to monitor the status of each backup transmission communication link in real time.

[0078] Link status information includes several key metrics, such as: Link quality encompasses signal strength, bit error rate, and other parameters. In industrial production scenarios, a decline in link quality can lead to data transmission errors or loss, impacting the normal operation of the production process. For example, in a link used to transmit real-time monitoring data from a production line, if the signal strength weakens and the bit error rate increases, the transmitted monitoring images may experience stuttering, blurring, or other issues, failing to accurately reflect the actual situation on the production floor.

[0079] Load status: This refers to the amount of data being transmitted and the data flow being processed by the link. Excessive load can slow down the link's transmission speed or even cause congestion, affecting timely data transmission. For example, in a large industrial park network, if a backup communication link simultaneously handles data transmission tasks from multiple production workshops, its load may increase dramatically, leading to data transmission delays.

[0080] Bandwidth: Bandwidth determines the amount of data a link can transmit per unit of time. In the Industrial Internet, different types of data have different bandwidth requirements. For example, transmitting high-definition video surveillance data requires high bandwidth, while some simple sensor data has lower bandwidth requirements. If the actual available bandwidth of the link cannot meet the data transmission needs, a transmission bottleneck will occur.

[0081] Specialized network monitoring tools or sensors can be used to obtain real-time link status information, providing an accurate basis for subsequent weight adjustments.

[0082] Dynamic weighting coefficients reflect the priority or probability of selection of backup transmission links. This application adjusts the dynamic weighting coefficients according to certain rules based on the obtained link status information. If the link quality indicators (such as decreased signal strength or increased bit error rate) of a backup transmission link deteriorate, it indicates a decrease in the reliability of data transmission through that link. To reduce data transmission risks, the dynamic weighting coefficient of this link needs to be reduced. For example, in a transmission link, if the bit error rate increases from 0.1% to 1%, the weighting coefficient of that link can be reduced from 5 to 3, decreasing its probability of being selected.

[0083] When a backup transmission link has a low load, it means it has more resources to handle data transmission tasks, enabling faster and more stable data transmission. Therefore, the dynamic weight coefficient of this link can be appropriately increased to improve its likelihood of being selected.

[0084] This application, by updating the dynamic weight coefficient in real time based on link status information, ensures that the weight coefficient always reflects the actual status of the link, providing a more reasonable basis for the selection of subsequent target data backup links.

[0085] Furthermore, whenever data backup is required and a transmission link is selected, a link is dynamically and randomly chosen as the target data backup link based on real-time updated weight data. This fully utilizes the real-time status information of the link, improves the reliability and efficiency of data backup, and ensures data security in the Industrial Internet.

[0086] Based on the above embodiments, the method further includes: Obtain the average data value and the expected cached data volume corresponding to the production data generated in the production process; The total cache capacity of the target transmission buffer is determined based on the average data value and the expected amount of cached data.

[0087] In this application, the production operations in the Industrial Internet environment continuously generate various types of production data, covering multiple aspects such as equipment operating status, production process parameters, and product quality inspection results. To rationally plan the capacity of the transmission buffer, it is first necessary to obtain two key parameters closely related to the production operations: the average data value and the expected amount of buffered data.

[0088] Specifically, the data average is an estimated average of individual data items generated in the production process. Because production data is diverse, the size of different types of data can vary greatly. For example, on an automated production line, temperature data collected by equipment sensors may be measured in bytes, with a single temperature data item possibly only a few bytes; while high-definition image data generated during product quality inspection may be measured in MB or even GB.

[0089] In this application, the following method can be used to accurately estimate the average value of the data: Sampling statistics: A certain number of sample data are randomly selected from the data generated by production operations, and the average value of these sample data is calculated. For example, in one hour of production, 1000 data items are randomly selected, their total value is calculated, and then divided by 1000 to obtain the average value.

[0090] Estimation based on data type: Weighted estimation is performed based on the proportion of different data types in production operations and their approximate size range. For example, if temperature data accounts for 30% of the total data volume, with an average of 5 bytes per temperature data item; image data accounts for 10% of the total data volume, with an average of 5MB per image (equivalent to 5120KB); and other data types account for 60% of the total data volume, with an average of 1KB per data item, then the average data value = 30% × 5 + 10% × 5120 + 60% × 1 = 514.1KB (this is just an example; actual calculations require consistent units).

[0091] The estimated cached data volume is the amount of production data that needs to be cached within a certain period of time based on business needs. It needs to take into account multiple factors, such as the periodicity of production business, the frequency of data generation, and the latency requirements for data processing and transmission.

[0092] If the production process has a clear cyclical pattern, such as a daily peak production period during which more data is generated than at other times, then the expected amount of cached data can be estimated based on the data generation during the peak period. For example, if the daily peak production period is 4 hours long and generates 10,000 data items per hour, then the expected amount of data to be cached during the peak period is 4 × 10,000 = 40,000 data items.

[0093] Different types of production data are generated at different frequencies. Some data may be generated continuously in real time, such as equipment operating status data; others may be generated at certain time intervals, such as quality inspection data performed once per hour. Based on the data generation frequency, the total amount of data generated within a certain period can be estimated, thus obtaining the expected amount of cached data. For example, if the equipment generates 10 status data items per second, and the expected caching time is 10 minutes (600 seconds), then the expected amount of cached data is 10 × 600 = 6000 data items.

[0094] If there are strict latency requirements for processing and transmitting production data, it may be necessary to cache more data to ensure that no data is lost during processing and transmission. For example, if data must be processed within 1 second of its generation, and the total latency for data processing and transmission may reach 0.5 seconds, then it may be necessary to cache data generated within 0.5 seconds, calculating the expected amount of cached data based on the data generation frequency.

[0095] Furthermore, after obtaining the average data value and the expected amount of buffered data, the total buffer capacity of the target transmission buffer can be determined according to a given formula. The formula is: Total cache capacity = (size of a single data item × expected amount of cached data) × (1 + cache overhead rate); The size of a single data item, or average data value, reflects the average space occupied by each production data item. The estimated cached data volume represents the amount of production data that needs to be cached within a certain period based on business requirements, thus determining the amount of data the caching system needs to store.

[0096] Cache overhead rate is an empirical value or a factor determined based on the actual situation of the system. The caching system itself consumes certain resources during operation, such as cache management structures and indexes. At the same time, to cope with unexpected situations or ensure data reliability, a certain amount of redundancy space needs to be reserved. The cache overhead rate is used to take these factors into account, and is usually a positive number less than 1. For example, if the cache overhead rate is 0.2, it means that the resources and redundancy space occupied by the caching system itself account for 20% of the total cache capacity. This application, through the above calculations, determines the total buffer capacity of the target transmission buffer rack to ensure that it can meet the caching requirements of production operations for production data. Simultaneously, considering the overhead and redundancy of the caching system itself, it improves the stability and reliability of the system. In practical applications of the Industrial Internet, rationally determining the total buffer capacity of the transmission buffer rack is of great significance for ensuring the timely transmission and processing of production data and avoiding data loss and system failures.

[0097] Based on the above embodiments, the step of performing a data integrity verification operation based on the first hash value and the second hash value to obtain a data security verification result includes: Determine whether the first hash value is equal to the second hash value; If the first hash value is equal to the second hash value, the data security verification result is determined to be free from malicious tampering. If the first hash value is not equal to the second hash value, the data security verification result is determined to be maliciously tampered with.

[0098] In this application, data faces the risk of being tampered with during transmission and storage. To ensure the integrity and security of the data, a hash algorithm is used to generate hash values ​​for verification.

[0099] Specifically, determine whether the first hash value is equal to the second hash value. If the first hash value and the second hash value are the same, output the logical value 1; if the first hash value and the second hash value are not the same, output the logical value 0.

[0100] When the result of judging the first hash value and the second hash value (i.e., the output logical value) is equal to the comparison threshold 1, it means that the first hash value and the second hash value are the same. Due to the deterministic nature of the hash algorithm, the same hash value indicates that the corresponding data is consistent in both stages (initial state and target state) and has not changed. Therefore, it can be determined that the data security verification result indicates no malicious tampering.

[0101] If the result of comparing the first hash value and the second hash value (the output logical value) is not equal to the comparison threshold of 1, i.e., the output logical value is 0, this indicates that the first hash value and the second hash value are different. According to the characteristics of hash algorithms, different hash values ​​mean that the corresponding data has changed.

[0102] In the security system of the Industrial Internet, any inconsistency in data during transmission or storage is considered malicious tampering. This is because, under normal circumstances, without external interference, data calculated using the same hash algorithm should have the same hash value. Any inconsistency strongly suggests that a malicious attacker has modified the data in an attempt to compromise its integrity.

[0103] This application uses this method to determine the first hash value and the second hash value, and compares them with a comparison threshold. This can effectively detect whether data in the Industrial Internet has been maliciously tampered with, and ensure the security and integrity of the data.

[0104] Figure 2 The overall process diagram of the data security protection method for industrial internet platforms provided in this application can be referred to. Figure 2 As shown, in this application, various types of production data are received, which may come from different production stages and equipment.

[0105] Next, the production data is assessed for sensitivity: A sensitivity evaluation is performed on the received production data. If the data is determined to be highly sensitive (e.g., involving core trade secrets, key production process parameters, etc.), it enters the highly sensitive data processing flow. Asymmetric encryption algorithms (such as RSA, ECC, etc.) are used to encrypt the highly sensitive data. The encrypted data is stored in the first transmission buffer, a storage area used to buffer data and ensure that the data can be stably and orderly transmitted to the storage database (i.e., the main database) through the first transmission communication link.

[0106] If the data is not highly sensitive, it is then determined whether it is moderately sensitive: If the data is not highly sensitive, the system further determines whether it is moderately sensitive (e.g., general production and operation data, equipment maintenance records, etc.). If it is moderately sensitive, it is encrypted using a symmetric encryption algorithm (such as AES, DES, etc.). The encrypted moderately sensitive data is stored in a second transmission buffer and transmitted to the storage database through the corresponding communication link.

[0107] If the data is not moderately sensitive, irreversible encryption is used: If the data is neither highly sensitive nor moderately sensitive (e.g., some publicly available statistical data, environmental monitoring data, etc.), then an irreversible encryption algorithm (such as MD5, SHA-1, etc.) is used for encryption. The encrypted data is stored in a third transmission buffer and transmitted to the storage database through the corresponding communication link.

[0108] Furthermore, based on the production data already stored in the storage database, a first hash value is obtained. The first hash value is a unique identifier calculated based on the master data (i.e., the encrypted production data stored in the master database) using a specific hash algorithm (such as SHA-256).

[0109] Simultaneously, to obtain the second hash value, it is necessary to retrieve the second transmission communication link data from the backup database. The backup database is used to back up the data in the main database to prevent data loss. In this application, multiple backup databases exist to ensure high availability and reliability of the data. After retrieving relevant data from these backup databases, the second hash value is calculated based on the backup data (i.e., data copies stored in the backup databases) using the same hash algorithm.

[0110] Then, the first hash value and the second hash value are compared. If they are equal, it means that the master data and the backup data are consistent in content, and the logical value 1 is output; if they are not equal, it means that there may be inconsistencies in the data, and the logical value 0 is output.

[0111] Furthermore, the output logical value is compared with a comparison threshold of 1, a preset standard value used to determine data integrity. If the logical value is 1, meaning the first hash value and the second hash value are equal, it indicates that the data has not been maliciously tampered with during transmission and storage, and data integrity is guaranteed. If the logical value is not 1 (i.e., 0), it indicates that the first hash value and the second hash value are not equal, and the data may have been maliciously tampered with during transmission or storage. This will be considered a case of malicious tampering, requiring appropriate measures to be taken.

[0112] This application implements secure encrypted transmission and integrity verification of production data, ensuring the security and reliability of data in the industrial internet environment.

[0113] The data security protection device provided in the embodiments of this application is described below. The data security protection device described below can be referred to in correspondence with the data security protection method described above.

[0114] Figure 3 A schematic diagram of the data security protection device provided in this application is shown below. Figure 3 As shown, this application provides a data security protection device, including a data sensitivity level confirmation module 301, a first transmission communication module 302, a backup link determination module 303, and a second transmission communication module 304. The data sensitivity level confirmation module 301 is used to determine the target encryption method and target transmission buffer of the production data based on the data sensitivity level corresponding to the production data. The first transmission communication module 302 is used to store encrypted data as master data in a master database based on the target transmission buffer, wherein the encrypted data is obtained by encrypting the production data based on the target encryption method. The backup link determination module 303 is used to determine a target data backup link from the backup transmission communication links based on the dynamic weight coefficient of the backup transmission communication link, wherein the dynamic weight coefficient is constructed based on the link status information of the backup transmission communication link. The second transmission communication module 304 is used to store the encrypted data as backup data in a corresponding backup database based on the target data backup link.

[0115] The data security protection device provided in this application determines the target encryption method and transmission buffer based on the sensitivity level of the production data, encrypts the production data and stores it in the main database, selects the target data backup link based on the dynamic weight coefficient of the backup transmission communication link, and stores the encrypted data as backup data in the backup database with the help of encryption and reasonable link selection, thereby avoiding data tampering and improving the security of data transmission.

[0116] Figure 4 A schematic diagram of the structure of the electronic device provided in this application, such as... Figure 4As shown, the electronic device may include: a processor 401, a communications interface 402, a memory 403, and a communication bus 404, wherein the processor 401, communications interface 402, and memory 403 communicate with each other via the communication bus 404. The processor 401 can call logical instructions in the memory 403 to execute a data security protection method. This method includes: determining a target encryption method and a target transmission buffer for the production data based on the data sensitivity level corresponding to the production data; storing the encrypted data as primary data in a primary database based on the target transmission buffer, wherein the encrypted data is obtained by encrypting the production data based on the target encryption method; determining a target data backup link from the backup transmission communication links based on the dynamic weight coefficient of the backup transmission communication links, wherein the dynamic weight coefficient is constructed based on the link status information of the backup transmission communication links; and storing the encrypted data as backup data in a corresponding backup database based on the target data backup link.

[0117] Furthermore, the logical instructions in the aforementioned memory 403 can be implemented as software functional units and, when sold or used as independent products, can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of this application, in essence, or the part that contributes to the prior art, or a portion of the technical solution, can be embodied in the form of a software product. This computer software product is stored in a storage medium and includes several instructions to cause a computer device (which may be a personal computer, server, or network device, etc.) to execute all or part of the steps of the methods described in the various embodiments of this application. The aforementioned storage medium includes various media capable of storing program code, such as USB flash drives, portable hard drives, read-only memory (ROM), random access memory (RAM), magnetic disks, or optical disks.

[0118] On the other hand, this application also provides a computer program product, which includes a computer program stored on a non-transitory computer-readable storage medium. The computer program includes program instructions, and when the program instructions are executed by a computer, the computer can execute the data security protection method provided by the above methods. The method includes: determining a target encryption method and a target transmission buffer for the production data according to the data sensitivity level corresponding to the production data; storing the encrypted data as master data in a master database based on the target transmission buffer, wherein the encrypted data is obtained by encrypting the production data based on the target encryption method; determining a target data backup link from the backup transmission communication links according to the dynamic weight coefficient of the backup transmission communication links, wherein the dynamic weight coefficient is constructed based on the link state information of the backup transmission communication links; and storing the encrypted data as backup data in a corresponding backup database based on the target data backup link.

[0119] In another aspect, this application also provides a non-transitory computer-readable storage medium storing a computer program thereon. When executed by a processor, the computer program implements the data security protection method provided in the above embodiments. The method includes: determining a target encryption method and a target transmission buffer for the production data based on the data sensitivity level corresponding to the production data; storing encrypted data as master data in a master database based on the target transmission buffer, wherein the encrypted data is obtained by encrypting the production data based on the target encryption method; determining a target data backup link from the backup transmission communication links based on the dynamic weight coefficient of the backup transmission communication links, wherein the dynamic weight coefficient is constructed based on the link state information of the backup transmission communication links; and storing the encrypted data as backup data in a corresponding backup database based on the target data backup link.

[0120] The device embodiments described above are merely illustrative. The units described as separate components may or may not be physically separate. The components shown as units may or may not be physical units; that is, they may be located in one place or distributed across multiple network units. Some or all of the modules can be selected to achieve the purpose of this embodiment according to actual needs. Those skilled in the art can understand and implement this without any creative effort.

[0121] Through the above description of the embodiments, those skilled in the art can clearly understand that each embodiment can be implemented by means of software plus necessary general-purpose hardware platforms, and of course, it can also be implemented by hardware. Based on this understanding, the above technical solutions, in essence or the part that contributes to the prior art, can be embodied in the form of a software product. This computer software product can be stored in a computer-readable storage medium, such as ROM / RAM, magnetic disk, optical disk, etc., and includes several instructions to cause a computer device (which may be a personal computer, server, or network device, etc.) to execute the methods described in the various embodiments or some parts of the embodiments.

[0122] Finally, it should be noted that the above embodiments are only used to illustrate the technical solutions of this application, and are not intended to limit them. Although this application has been described in detail with reference to the foregoing embodiments, those skilled in the art should understand that modifications can still be made to the technical solutions described in the foregoing embodiments, or equivalent substitutions can be made to some of the technical features. Such modifications or substitutions do not cause the essence of the corresponding technical solutions to deviate from the spirit and scope of the technical solutions of the embodiments of this application.

Claims

1. A data security protection method, characterized in that, include: Based on the data sensitivity level corresponding to the production data, determine the target encryption method and target transmission buffer for the production data; Based on the target transmission buffer, encrypted data is stored as main data in the main database, wherein the encrypted data is obtained by encrypting the production data based on the target encryption method; The target data backup link is determined from the backup transmission communication links based on the dynamic weight coefficient of the backup transmission communication links, wherein the dynamic weight coefficient is constructed based on the link state information of the backup transmission communication links; Based on the target data backup link, the encrypted data is stored as backup data in the corresponding backup database.

2. The data security protection method according to claim 1, characterized in that, The method further includes: Determine the backup data to be queried in the backup database; Obtain a first hash value and a second hash value, wherein the first hash value represents the hash value of the master data corresponding to the backup data to be queried in the master database; and the second hash value represents the hash value of the backup data to be queried. Based on the first hash value and the second hash value, perform a data integrity verification operation to obtain a data security verification result.

3. The data security protection method according to claim 1, characterized in that, The step of determining the target encryption method and target transmission buffer for the production data based on the data sensitivity level corresponding to the production data includes: When the data sensitivity level is determined to be high-sensitivity, the target encryption method is asymmetric encryption, and the first transmission buffer in the main transmission communication link is used as the target transmission buffer. The main transmission communication link is used to transmit the encrypted data in the target transmission buffer to the main database; the first transmission buffer is used to store the high-sensitivity production data. When the data sensitivity level is determined to be medium sensitive data level, the target encryption method is symmetric encryption method, and the second transmission buffer in the main transmission communication link is used as the target transmission buffer, wherein the second transmission buffer is used to store the production data of the medium sensitive data level; When the data sensitivity level is determined to be low-sensitivity data level, the target encryption method is an irreversible encryption method, and the third transmission buffer in the main transmission communication link is used as the target transmission buffer, wherein the third transmission buffer is used to store the production data of the low-sensitivity data level.

4. The data security protection method according to claim 1, characterized in that, The step of determining the target data backup link from the backup transmission communication links based on the dynamic weight coefficient of the backup transmission communication links includes: Based on the dynamic weight coefficients, the total weights corresponding to the backup transmission communication links are calculated. Traverse the backup transmission communication links and calculate the sum of the traversed link weights corresponding to the traversed backup transmission communication links; If the sum of the weights of the traversed links is greater than or equal to a preset random number, the backup transmission communication link selected as the traversal object is used as the target data backup link, wherein the preset random number is obtained based on the sum of the weights.

5. The data security protection method according to claim 1, characterized in that, The method further includes: Obtain the link status information of the backup transmission communication link; Based on the link status information, the dynamic weight coefficient of the backup transmission communication link is updated to obtain the updated dynamic weight coefficient. The step of determining the target data backup link from the backup transmission communication links based on the dynamic weight coefficient of the backup transmission communication links includes: The target data backup link is determined from the backup transmission communication links based on the updated dynamic weight coefficients.

6. The data security protection method according to claim 1, characterized in that, The method further includes: Obtain the average data value and the expected cached data volume corresponding to the production data generated in the production process; The total cache capacity of the target transmission buffer is determined based on the average data value and the expected amount of cached data.

7. The data security protection method according to claim 2, characterized in that, The step of performing a data integrity verification operation based on the first hash value and the second hash value to obtain a data security verification result includes: Determine whether the first hash value is equal to the second hash value; If the first hash value is equal to the second hash value, the data security verification result is determined to be free from malicious tampering. If the first hash value is not equal to the second hash value, the data security verification result is determined to be maliciously tampered with.

8. A data security protection device, characterized in that, include: The data sensitivity level confirmation module is used to determine the target encryption method and target transmission buffer of the production data based on the data sensitivity level corresponding to the production data. The first transmission communication module is used to store encrypted data as master data in the master database based on the target transmission buffer, wherein the encrypted data is obtained by encrypting the production data based on the target encryption method; The backup link determination module is used to determine the target data backup link from the backup transmission communication links based on the dynamic weight coefficient of the backup transmission communication link, wherein the dynamic weight coefficient is constructed based on the link state information of the backup transmission communication link; The second transmission communication module is used to store the encrypted data as backup data in the corresponding backup database based on the target data backup link.

9. An electronic device comprising a processor and a memory storing a computer program, characterized in that, When the processor executes the computer program, it implements the steps of the data security protection method according to any one of claims 1 to 7.

10. A non-transitory computer-readable storage medium having a computer program stored thereon, characterized in that, When the computer program is executed by the processor, it implements the data security protection method as described in any one of claims 1 to 7.

Images