Secure and credible circulation method and device for characteristic agricultural data and medium

Abstract

The invention discloses a safe and credible circulation method and device for characteristic agricultural data and a medium, belongs to the technical field of data safety and agricultural informatization, and aims to solve the problems that the safety risk is high, comprehensive and effective safety guarantee means are lacked and the utilization efficiency is high in the utilization process of the existing characteristic agricultural data circulation. And safe and credible data circulation under multiple links is difficult to realize. The method comprises the following steps: performing multi-dimensional data security management and control on characteristic agricultural data under a related data storage management security policy, a data privacy security policy, a data access control policy and a data disaster recovery policy to obtain a multi-dimensional security prevention and control policy group for the characteristic agricultural data; performing data preprocessing on the characteristic agricultural data under a multivariate data protection mechanism to generate a multivariate security fusion strategy group for the characteristic agricultural data; and performing global management and control processing on the characteristic agricultural data in a data circulation process, and generating a safe and credible circulation strategy for the characteristic agricultural data.

Description

Technical Field

[0001] This application relates to the fields of data security and agricultural information technology, and in particular to a method, device and medium for the secure and reliable circulation of specialized agricultural data. Background Technology

[0002] In the development of specialty agriculture, the circulation and utilization of data are of great significance for improving agricultural production efficiency and promoting industrial integration. However, the current lack of a secure and reliable circulation environment for specialty agricultural data means that data faces numerous risks such as leakage, tampering, or misuse during transmission, management, sharing, and utilization. This seriously hinders the secure and reliable circulation of production, processing, and sales data, as well as public data, across different stages and sectors, which is detrimental to the further development of specialty agriculture. While some data security measures exist in the current technology, they are mostly single strategies or technologies, which are insufficient to comprehensively address the security issues of the entire life cycle of specialized agricultural data and fail to create a safe and reliable data circulation and utilization environment, resulting in high risks in the data circulation and utilization process. Summary of the Invention

[0003] This application provides a method, device, and medium for the secure and reliable circulation of specialty agricultural data, which addresses the following technical problems: existing specialty agricultural data circulation faces high security risks during utilization and lacks comprehensive and effective security measures, making it difficult to achieve secure and reliable data circulation across multiple stages.

[0004] The embodiments of this application adopt the following technical solutions: On one hand, embodiments of this application provide a method for the secure and reliable circulation of specialty agricultural data, including: performing multi-dimensional data security management on the specialty agricultural data under relevant data storage management security strategies, data privacy security strategies, data access control strategies, and data disaster recovery strategies to obtain a multi-dimensional security prevention and control strategy group for the specialty agricultural data; performing data preprocessing on the specialty agricultural data under a multi-dimensional data protection mechanism to generate a multi-dimensional security fusion strategy group for the specialty agricultural data; and performing full-domain management and control processing on the specialty agricultural data during the data circulation process through the multi-dimensional security prevention and control strategy group and the multi-dimensional security fusion strategy group to generate a secure and reliable circulation strategy for the specialty agricultural data.

[0005] This application's embodiments establish a multi-dimensional security strategy, standardizing aspects such as data storage, privacy, access control, and disaster recovery. It also integrates diverse security technologies, covering all stages of the data lifecycle to comprehensively address risks such as leakage, tampering, or misuse during data transmission, management, sharing, and utilization, thus ensuring the security of specialty agricultural data. Furthermore, it creates a secure and reliable data circulation environment, breaking down barriers to data flow between different stages and fields. This enables secure and reliable cross-stage and cross-field circulation of production, processing, sales, and public data, promoting the effective utilization of specialty agricultural data and the integrated development of the industry. Moreover, while ensuring data security, the application reduces security audit obstacles during data circulation through reasonable security strategies and efficient security technologies, improving data circulation efficiency and providing strong support for the development of specialty agriculture.

[0006] In one feasible implementation, multi-dimensional data security management is implemented for specialty agricultural data under various strategies, including data storage management security, data privacy security, data access control, and data disaster recovery. Specifically, this includes: classifying the specialty agricultural data according to time-series requirements to obtain specialty agricultural data with high real-time requirements and specialty agricultural data with low real-time requirements; if the specialty agricultural data is in a high real-time requirement state, performing data backup processing based on hourly incremental backups combined with daily full backups to determine a first data backup method; if the specialty agricultural data is in a low real-time requirement state, performing data backup processing based on daily incremental backups combined with weekly full backups to determine a second data backup method; real-time health monitoring of the hardware environment used to store the specialty agricultural data to obtain hardware detection information; and generating the data storage management security strategy based on the first data backup method, the second data backup method, and the hardware detection information.

[0007] In one feasible implementation, multi-dimensional data security management is implemented for specialty agricultural data under various strategies, including data storage management security, data privacy security, data access control, and data disaster recovery. This includes: obtaining authorization and consent information from the data provider during the data collection phase; configuring a dedicated data transmission channel during the data transmission phase; performing tiered data protection processing on personal privacy data and trade secret data within the specialty agricultural data to obtain a tiered data protection strategy; obtaining the data privacy security strategy based on the authorization and consent information, the dedicated data transmission channel, and the execution method of the tiered data protection strategy; classifying access permissions within the specialty agricultural data according to user needs to obtain access permission levels; wherein the access permissions include at least: general query permissions, data editing permissions, and administrator permissions; configuring corresponding access request approval nodes based on the access permission levels; and obtaining the data access control strategy based on the access permission levels and the execution method of the corresponding access request approval nodes.

[0008] In one feasible implementation, multi-dimensional data security management is applied to specialty agricultural data under various security strategies, including data storage management, data privacy, data access control, and data disaster recovery. This results in a multi-dimensional security control strategy set for the specialty agricultural data. Specifically, this includes: performing data recovery processing on emergency response anomalies in the specialty agricultural data based on a preset data disaster recovery plan, involving both local and off-site backups, to obtain the data disaster recovery strategy for the specialty agricultural data; and combining the data storage management security strategy, the data privacy, the data access control, and the data disaster recovery strategy to obtain the multi-dimensional security control strategy set for the specialty agricultural data.

[0009] In one feasible implementation, the special agricultural data undergoes data preprocessing under a multi-faceted data protection mechanism, specifically including: using blockchain technology to process the transmission information of the special agricultural data in the transmission state onto the blockchain, constructing a transmission and storage ledger for the special agricultural data, and obtaining a blockchain protection strategy; using a federated learning mechanism to directly analyze and process the special agricultural data of the data users without obtaining the original special agricultural data, obtaining a privacy computing strategy; and creating a unique distributed identity identifier for each data subject in the special agricultural data, obtaining a distributed identity identifier strategy.

[0010] In one feasible implementation, the characteristic agricultural data undergoes data preprocessing under a multi-faceted data protection mechanism, specifically including: using a symmetric encryption algorithm to perform confidential storage processing on the characteristic agricultural data in the data storage stage, and using an asymmetric encryption algorithm to perform encrypted transmission processing on the characteristic agricultural data in the data transmission stage, thus obtaining a data encryption strategy; embedding preset watermark information into the characteristic agricultural data, thus obtaining a data watermark strategy; wherein, the watermark information includes at least: data owner, generation time, and authorized usage scope; and performing sandbox isolation operation on newly accessed characteristic agricultural data, thus obtaining a data sandbox strategy.

[0011] In one feasible implementation, the characteristic agricultural data undergoes data preprocessing under a multi-faceted data protection mechanism to generate a multi-faceted security fusion strategy group for the characteristic agricultural data. Specifically, this includes: performing data normalization processing on the characteristic agricultural data under confidentiality processing using a preset commercial cryptographic algorithm to obtain a commercial cryptographic strategy; wherein the confidentiality processing state includes at least: data encryption / decryption, identity authentication, and digital signature; performing multi-type desensitization processing on sensitive data in the characteristic agricultural data to obtain a data desensitization strategy; wherein the multi-type desensitization processing includes at least: range replacement, partial obfuscation, and data offset; and obtaining the multi-faceted security fusion strategy group based on a combined execution method of the blockchain protection strategy, the privacy computing strategy, the distributed identity identification strategy, the data encryption strategy, the data watermarking strategy, the data sandbox strategy, the commercial cryptographic strategy, and the data desensitization strategy.

[0012] In one feasible implementation, the multi-dimensional security control strategy group and the multi-dimensional security fusion strategy group are used to perform full-domain control processing on the specialty agricultural data during the data circulation process, generating a secure and reliable circulation strategy for the specialty agricultural data. Specifically, this includes: using the multi-dimensional security control strategy group to perform data compliance checks and policy requirement compliance checks on the specialty agricultural data in the pre-circulation stage; and using the multi-dimensional security fusion strategy group to perform pre-circulation processing on the specialty agricultural data in the pre-circulation stage to obtain a pre-circulation control strategy; and using the multi-dimensional security control strategy group and the multi-dimensional security fusion strategy group... The system employs a data flow control group to monitor the compliance of agricultural data transmission during the data flow process. Based on an anomaly response triggering mechanism, it monitors the data transmission of the agricultural data and generates a data flow control strategy. Through the multi-dimensional security control strategy group and the multi-dimensional security fusion strategy group, it manages the authorized use of agricultural data by data recipients and users during the data flow completion phase, resulting in a data flow completion control strategy. Based on the combined execution of the pre-flow control strategy, the in-flow control strategy, and the data flow completion control strategy, a secure and reliable flow strategy for the agricultural data is determined.

[0013] Secondly, embodiments of this application also provide a secure and reliable circulation device for specialty agricultural data, the device comprising: at least one processor; and a memory communicatively connected to the at least one processor; wherein the memory stores instructions executable by the at least one processor to enable the at least one processor to execute a secure and reliable circulation method for specialty agricultural data as described in any of the above embodiments.

[0014] Thirdly, embodiments of this application also provide a non-volatile computer storage medium, which is a non-volatile computer-readable storage medium storing at least one program. Each program includes instructions, which, when executed by a terminal, cause the terminal to execute a secure and reliable method for the circulation of characteristic agricultural data as described in any of the above embodiments.

[0015] This application provides a secure and reliable method, device, and medium for the transmission of specialized agricultural data. Compared with existing technologies, the embodiments of this application have the following beneficial technical effects: 1. Comprehensive Data Security: By formulating multi-dimensional security strategies, we standardize various aspects such as data storage, privacy, access control, and disaster recovery. At the same time, we integrate diverse security technologies to cover all stages of the data lifecycle, comprehensively addressing risks such as leakage, tampering, or misuse of data during transmission, management, sharing, and utilization, and ensuring the security of specialized agricultural data. 2. Achieving secure and reliable data circulation: A secure and reliable data circulation environment has been created, breaking down barriers to data circulation between different links and fields. This has enabled secure and reliable circulation of production, processing, sales data, and public data across links and fields, promoting the effective utilization of specialty agricultural data and the integrated development of the industry. 3. Improve data circulation efficiency: Under the premise of ensuring data security, reasonable security strategies and efficient security technologies have reduced security audit obstacles in the data circulation process, improved the efficiency of data circulation, and provided strong support for the development of specialty agriculture. Attached Figure Description

[0016] To more clearly illustrate the technical solutions in the embodiments of this application or the prior art, the drawings used in the description of the embodiments or the prior art will be briefly introduced below. Obviously, the drawings described below are only some embodiments recorded in this application. For those skilled in the art, other drawings can be obtained based on these drawings without creative effort. In the drawings: Figure 1 A flowchart illustrating a secure and reliable method for the transmission of specialized agricultural data, as provided in this application embodiment; Figure 2 This is a schematic diagram of the structure of a secure and reliable data transmission device for specialized agricultural data, provided in an embodiment of this application. Detailed Implementation

[0017] To enable those skilled in the art to better understand the technical solutions in this application, the technical solutions in the embodiments of this application will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only some embodiments of this application, and not all embodiments. Based on the embodiments of this specification, all other embodiments obtained by those skilled in the art without creative effort should fall within the scope of protection of this application.

[0018] It should be noted that this application provides a secure and reliable circulation system for specialty agricultural data. The system includes a strategy formulation module, a technology integration module, and a data circulation module. These modules work together to form an organic whole, comprehensively ensuring the secure and reliable circulation of specialty agricultural data.

[0019] (1) Strategy formulation module: This module is the basic framework builder for ensuring the security of specialty agricultural data. It formulates multi-dimensional security strategies through a rigorous strategy generation mechanism.

[0020] (2) Technology integration module: This module is the core of technical support for realizing the security of characteristic agricultural data. It integrates diversified security technologies through an advanced technology integration mechanism, and the technologies cooperate with each other to form a comprehensive security protection network.

[0021] (3) Data circulation module: This module is the key execution part for realizing the cross-link and cross-domain circulation of characteristic agricultural data. It is closely connected with the strategy formulation module and the technology integration module through data interface and control instructions.

[0022] This application provides a method for the secure and reliable transmission of specialized agricultural data, such as... Figure 1 As shown, the method for secure and reliable circulation of specialty agricultural data specifically includes steps S101-S103: S101. Conduct multi-dimensional data security management and control on specialty agricultural data under relevant data storage management security strategies, data privacy security strategies, data access control strategies, and data disaster recovery strategies, to obtain a multi-dimensional security prevention and control strategy group for specialty agricultural data.

[0023] Specifically, the specialty agricultural data needs to be categorized according to relevant time-series requirements to obtain specialty agricultural data under high real-time requirements and those under low real-time requirements. If the specialty agricultural data is in a high real-time requirement state, it undergoes a backup process based on hourly incremental backups combined with daily full backups to determine the first data backup method. If the specialty agricultural data is in a low real-time requirement state, it undergoes a backup process based on daily incremental backups combined with weekly full backups to determine the second data backup method. Next, the hardware environment used to store the specialty agricultural data undergoes real-time health monitoring to obtain hardware detection information. Finally, based on the first and second data backup methods and the hardware detection information, a data storage management security policy is generated.

[0024] As a feasible implementation method, the data storage management security strategy not only specifies the hardware environment requirements for storing specialty agricultural data, such as server performance parameters, temperature and humidity control ranges for the computer room, and fire and theft prevention levels, but also clarifies the data backup frequency. For production data with high real-time requirements, an hourly incremental backup combined with a daily full backup is adopted; for non-real-time data such as processing and sales data, a daily incremental backup combined with a weekly full backup is adopted. Simultaneously, strict security management standards are established for storage media, including regularly checking the health status of storage media and thoroughly erasing data from obsolete storage media.

[0025] Furthermore, during the data collection phase of specialized agricultural data, authorization and consent information from the data provider is obtained. Then, during the data transmission phase, a dedicated data transmission channel is configured. It is also necessary to implement tiered data protection processing for personal privacy data and trade secret data within the specialized agricultural data, resulting in a tiered data protection strategy. Based on the authorization and consent information, the dedicated data transmission channel, and the implementation method of the tiered data protection strategy, a data privacy and security strategy is derived.

[0026] As a feasible implementation method, in the data privacy and security strategy, during the data collection stage of specialty agriculture, the purpose of data collection, scope of use, and retention period should be clearly communicated to the data provider, and their authorization and consent should be obtained. During data use, data should be used strictly within the authorized scope, and unauthorized use is prohibited. During data transmission, dedicated transmission channel security standards should be established to prevent data theft during transmission. Furthermore, different protection rules should be formulated for personal privacy data (such as farmers' identity information and contact details) and trade secret data (such as companies' sales strategies and cost data).

[0027] Furthermore, based on user needs, access permissions for the specialty agricultural data are categorized into different levels. These access permissions include at least: general query permissions, data editing permissions, and administrator permissions. Then, based on these access permission levels, corresponding access request approval nodes are configured. Finally, based on the access permission levels and the execution methods of the corresponding access request approval nodes, a data access control policy is derived.

[0028] As a feasible implementation method, the data access control strategy can also divide access permissions for specialty agricultural data into multiple levels based on user roles and needs, such as general query permissions, data editing permissions, and administrator permissions. Different permission levels correspond to different data operation scopes. General query permissions only allow viewing of some non-sensitive data, data editing permissions allow modification of specific data, and administrator permissions allow management of the entire data system. Simultaneously, a strict access approval process is established. When users need to access data beyond their authorized scope, they must submit an application, which must be approved by the relevant personnel before temporary access is granted, and the access process is recorded in detail. Furthermore, based on the pre-set data disaster recovery plan, data recovery processing is performed on the emergency response anomaly data in the specialty agricultural data, involving local backup and off-site backup, to obtain a data disaster recovery strategy for specialty agricultural data.

[0029] As a feasible implementation method, the data disaster recovery strategy also includes a comprehensive disaster recovery plan for specialized agricultural data. This plan clarifies the emergency response procedures for unexpected events such as natural disasters, system failures, and cyberattacks, including the composition and responsibilities of the emergency response team, and the steps and time requirements for data recovery. Regarding the storage location of data backups, a combination of local and off-site backups is adopted. Local backups are used for rapid recovery, while off-site backups are used to address situations where local storage facilities suffer severe damage. Furthermore, regular recovery tests are conducted on the data backups to ensure the validity and recoverability of the backup data. Furthermore, by combining data storage management security strategies, data privacy security strategies, data access control strategies, and data disaster recovery strategies, a multi-dimensional security control strategy group for specialty agricultural data is obtained.

[0030] S102. Perform data preprocessing on specialty agricultural data under a multi-dimensional data protection mechanism to generate a multi-dimensional security fusion strategy group for specialty agricultural data.

[0031] Specifically, it is also necessary to use blockchain technology to process the transmission information of the specialty agricultural data in the transmission state on the blockchain, construct a ledger for the transmission and storage of specialty agricultural data, and obtain blockchain protection strategies.

[0032] In one embodiment, its decentralized, immutable, and traceable characteristics can be leveraged to construct a ledger for the transmission and storage of specialized agricultural data. When data is transferred between different entities, each data transfer is recorded on the blockchain, forming an immutable block. All participating nodes collectively maintain this ledger, ensuring data integrity and authenticity, and preventing data tampering.

[0033] Furthermore, through a federated learning mechanism, the distinctive agricultural data of the data users can be directly analyzed and processed without obtaining the original distinctive agricultural data, thus obtaining a privacy computing strategy.

[0034] In one embodiment, technologies such as federated learning and secure multi-party computation can be employed to enable users of specialized agricultural data to analyze and compute the data without accessing the original data. For example, multiple agricultural enterprises can jointly analyze market trends through privacy-preserving computation without sharing their individual original sales data, thus realizing the value of the data while protecting data privacy. Furthermore, a unique distributed identity is created for each data subject in the specialty agricultural data, resulting in a distributed identity strategy.

[0035] In one embodiment, a unique distributed identity can be created for each specific agricultural data subject (such as farmers, agricultural enterprises, government departments, etc.). This identity is associated with the subject's real identity information, but the real identity information is not disclosed during transmission and use over the network. When users access the data system, they are authenticated through a distributed identity authentication mechanism to ensure the authenticity and reliability of the visitor's identity and prevent unauthorized users from impersonating legitimate users to access the data.

[0036] Furthermore, by using symmetric encryption algorithms, the specialty agricultural data in the data storage stage is stored confidentially, and the specialty agricultural data in the data transmission stage is transmitted encrypted using asymmetric encryption algorithms, thus obtaining a data encryption strategy.

[0037] In one embodiment, in the storage of specialty agricultural data, a symmetric encryption algorithm is used to encrypt and store the data, and only users with the decryption key can decrypt and view the data; in the transmission of specialty agricultural data, an asymmetric encryption algorithm is used to encrypt the transmitted data, the sender uses the receiver's public key to encrypt the data, and the receiver uses its own private key to decrypt it, ensuring that even if the data is intercepted during transmission, it cannot be decrypted and read.

[0038] Furthermore, pre-defined watermark information is embedded into the specialized agricultural data to obtain a data watermarking strategy. This watermark information includes at least: the data owner, the generation time, and the authorized scope of use.

[0039] In one embodiment, invisible watermark information can be embedded in the specialty agricultural data. This watermark information includes the data owner, generation time, and authorized usage scope. When data is illegally disseminated or misused, the watermark information can be extracted to trace the data's source and dissemination path, providing a basis for data rights protection.

[0040] Furthermore, the newly integrated specialty agricultural data is isolated in a sandbox to obtain a data sandbox strategy.

[0041] In one embodiment, a secure and isolated environment can also be provided for testing and using newly integrated specialty agricultural data, confining data operations within a sandbox and isolating them from the external real-world environment. When performing new application testing, data analysis model verification, or other operations on the data, these are first conducted within the sandbox to prevent damage to the original data or data leakage during the process.

[0042] Furthermore, by using a pre-defined commercial cryptographic algorithm, the specialized agricultural data currently under confidential processing is standardized to obtain a commercial cryptographic strategy. This confidential processing includes at least: data encryption / decryption, identity authentication, and digital signature.

[0043] In one embodiment, nationally certified commercial cryptographic algorithms can be used for encryption and decryption of specialty agricultural data, identity authentication, digital signatures, and other processes to ensure the security and compliance of the data encryption and decryption process, and to comply with relevant national cryptographic management regulations. Furthermore, sensitive data in the specialty agricultural data undergoes multiple types of desensitization processing to obtain data desensitization strategies. These multiple types of desensitization processing include at least: range replacement, partial occlusion, and data offsetting.

[0044] In one embodiment, sensitive data that needs to be shared and made public is processed using various desensitization methods, such as range replacement for numerical data (replacing specific sales amounts with a range of amounts), partial masking for character data (replacing the middle few digits of the ID number with *), and offset processing for date data (shifting the specific date forward or backward by a certain number of days), so that the desensitized data does not leak sensitive information while maintaining a certain degree of usability and can be used in scenarios such as data analysis and statistics.

[0045] Furthermore, based on the combined execution of blockchain protection strategies, privacy computing strategies, distributed identity identification strategies, data encryption strategies, data watermarking strategies, data sandbox strategies, commercial cryptography strategies, and data desensitization strategies, a multi-faceted security fusion strategy group is obtained.

[0046] S103. Through the multi-dimensional security control strategy group and the multi-dimensional security integration strategy group, the whole-domain control and processing of characteristic agricultural data in the data circulation process is carried out, and a secure and reliable circulation strategy for characteristic agricultural data is generated.

[0047] Specifically, through a multi-dimensional security control strategy group, data compliance checks and policy requirements-based compliance checks are conducted on the characteristic agricultural data in the data circulation stage. Through a multi-dimensional security integration strategy group, the characteristic agricultural data in the data circulation stage is preprocessed before data circulation, resulting in a data circulation pre-control strategy.

[0048] As a feasible implementation method, before data circulation, the data circulation module calls the security policy formulated by the policy formulation module to perform compliance checks on the data to be circulated, and determines whether the data storage, privacy protection, access control and other aspects meet the policy requirements; at the same time, it activates the security technology integrated by the technology integration module to preprocess the data, such as encryption, de-identification and other operations.

[0049] Furthermore, through a multi-dimensional security control strategy group and a multi-dimensional security integration strategy group, compliance transmission monitoring is conducted on specialty agricultural data in the data circulation process. Based on the abnormal response triggering mechanism, data transmission monitoring of specialty agricultural data is carried out, and control strategies for data circulation are generated.

[0050] As a feasible implementation method, during data flow, the data transmission status is monitored in real time. Based on security policies and technologies, the data is ensured to be transmitted through the prescribed transmission channels and methods, preventing unauthorized interception or tampering. If any anomalies are detected, such as data transmission paths deviating from the preset channels or abnormal changes in data content, an emergency response mechanism is immediately triggered to suspend data transmission and notify relevant personnel for handling.

[0051] Furthermore, through a multi-dimensional security control strategy group and a multi-dimensional security integration strategy group, the authorized use control of characteristic agricultural data in the data circulation completion stage is carried out on the relevant data recipients and data users to obtain the data circulation completion control strategy.

[0052] As a feasible implementation method, after the data arrives at its destination, the data circulation module will manage the receipt and use of the data according to the security policy to ensure that the recipient uses the data within the authorized scope. At the same time, it will use security technologies to supervise the data usage process, such as tracking the use of data through data watermarks and verifying the legitimacy of the recipient's identity through distributed identity authentication.

[0053] Furthermore, based on the combined implementation of pre-circulation control strategies, in-circulation control strategies, and post-circulation control strategies, a secure and reliable circulation strategy for specialty agricultural data is determined.

[0054] As a feasible implementation method, the secure and reliable flow of production, processing, sales data and public data can be achieved through the collaborative work of the above three modules (data circulation module, technology integration module, and strategy formulation module) in various links of the agricultural industry chain (such as planting and breeding data in the production link, processing technology data in the processing link, and market demand data in the sales link) and in different fields (such as agricultural production field, agricultural product processing field, agricultural product sales field, and government public service field). In addition, embodiments of this application also provide a secure and reliable data transfer device for specialized agricultural data, such as... Figure 2 As shown, the 200-unit secure and reliable data transmission equipment for specialty agriculture specifically includes: At least one processor 201; and a memory 202 communicatively connected to the at least one processor 201; wherein the memory 202 stores instructions executable by the at least one processor 201 to enable the at least one processor 201 to execute: Multi-dimensional data security management is carried out on specialty agricultural data under relevant data storage management security strategies, data privacy security strategies, data access control strategies, and data disaster recovery strategies, resulting in a multi-dimensional security prevention and control strategy group for specialty agricultural data; Data preprocessing is performed on specialty agricultural data under a multi-dimensional data protection mechanism to generate a multi-dimensional security fusion strategy group for specialty agricultural data. Through a multi-dimensional security control strategy group and a multi-dimensional security integration strategy group, comprehensive control and processing of specialty agricultural data is carried out during the data circulation process, generating a secure and reliable circulation strategy for specialty agricultural data.

[0055] This application's embodiments establish a multi-dimensional security strategy, standardizing aspects such as data storage, privacy, access control, and disaster recovery. It also integrates diverse security technologies, covering all stages of the data lifecycle to comprehensively address risks such as leakage, tampering, or misuse during data transmission, management, sharing, and utilization, thus ensuring the security of specialty agricultural data. Furthermore, it creates a secure and reliable data circulation environment, breaking down barriers to data flow between different stages and fields. This enables secure and reliable cross-stage and cross-field circulation of production, processing, sales, and public data, promoting the effective utilization of specialty agricultural data and the integrated development of the industry. Moreover, while ensuring data security, the application reduces security audit obstacles during data circulation through reasonable security strategies and efficient security technologies, improving data circulation efficiency and providing strong support for the development of specialty agriculture.

[0056] The various embodiments in this application are described in a progressive manner. Similar or identical parts between embodiments can be referred to mutually. Each embodiment focuses on describing the differences from other embodiments. In particular, the device and medium embodiments are basically similar to the method embodiments, so the description is relatively simple; relevant parts can be referred to the description of the method embodiments.

[0057] The devices and media provided in this application are one-to-one with the methods. Therefore, the devices and media also have similar beneficial technical effects as their corresponding methods. Since the beneficial technical effects of the methods have been described in detail above, the beneficial technical effects of the devices and media will not be repeated here.

[0058] Those skilled in the art will understand that embodiments of this application can be provided as methods, systems, or computer program products. Therefore, this application can take the form of a completely hardware embodiment, a completely software embodiment, or an embodiment combining software and hardware aspects. Furthermore, this application can take the form of a computer program product embodied on one or more computer-usable storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) containing computer-usable program code.

[0059] This application is described with reference to flowchart illustrations and / or block diagrams of methods, apparatus (systems), and computer program products according to embodiments of this application. It will be understood that each block of the flowchart illustrations and / or block diagrams, and combinations of blocks in the flowchart illustrations and / or block diagrams, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, special-purpose computer, embedded processor, or other programmable data processing apparatus to produce a machine, such that the instructions, which execute via the processor of the computer or other programmable data processing apparatus, generate instructions for implementing the flowchart... Figure 1 One or more processes and / or boxes Figure 1 A device that provides the functions specified in one or more boxes.

[0060] These computer program instructions may also be stored in a computer-readable storage medium that can direct a computer or other programmable data processing device to function in a particular manner, such that the instructions stored in the computer-readable storage medium produce an article of manufacture including instruction means, which are implemented in a process Figure 1 One or more processes and / or boxes Figure 1 The function specified in one or more boxes.

[0061] These computer program instructions may also be loaded onto a computer or other programmable data processing equipment to cause a series of operational steps to be performed on the computer or other programmable equipment to produce a computer-implemented process, thereby providing instructions that execute on the computer or other programmable equipment for implementing the process. Figure 1 One or more processes and / or boxes Figure 1 The steps of the function specified in one or more boxes.

[0062] In a typical configuration, a computing device includes one or more processors (CPU), input / output interfaces, network interfaces, and memory.

[0063] Memory may include non-persistent storage in computer-readable media, such as random access memory (RAM) and / or non-volatile memory, such as read-only memory (ROM) or flash RAM. Memory is an example of computer-readable media.

[0064] Computer-readable media includes both permanent and non-permanent, removable and non-removable media that can store information using any method or technology. Information can be computer-readable instructions, data structures, modules of programs, or other data. Examples of computer storage media include, but are not limited to, phase-change memory (PRAM), static random access memory (SRAM), dynamic random access memory (DRAM), other types of random access memory (RAM), read-only memory (ROM), electrically erasable programmable read-only memory (EEPROM), flash memory or other memory technologies, CD-ROM, digital versatile optical disc (DVD) or other optical storage, magnetic tape, magnetic disk storage or other magnetic storage devices, or any other non-transferable medium that can be used to store information accessible by a computing device. As defined herein, computer-readable media does not include transient computer-readable media, such as modulated data signals and carrier waves.

[0065] It should also be noted that the terms "comprising," "including," or any other variations thereof are intended to cover non-exclusive inclusion, such that a process, method, article, or apparatus that comprises a list of elements includes not only those elements but also other elements not expressly listed, or elements inherent to such a process, method, article, or apparatus. Without further limitation, an element defined by the phrase "comprising one..." does not exclude the presence of other identical elements in the process, method, article, or apparatus that includes said element.

[0066] The above description is merely an embodiment of this application and is not intended to limit the scope of this application. Various modifications and variations can be made to this application by those skilled in the art. Any modifications, equivalent substitutions, improvements, etc., made within the spirit and principles of this application should be included within the scope of this specification.

Claims

1. A secure and reliable method for the circulation of specialized agricultural data, characterized in that, The method includes: Multi-dimensional data security management is carried out on the special agricultural data under the relevant data storage management security strategy, data privacy security strategy, data access control strategy and data disaster recovery strategy, resulting in a multi-dimensional security prevention and control strategy group for the special agricultural data; The characteristic agricultural data is preprocessed under a multi-dimensional data protection mechanism to generate a multi-dimensional security fusion strategy group for the characteristic agricultural data. Through the multi-dimensional security control strategy group and the multi-dimensional security fusion strategy group, the special agricultural data is subjected to full-domain control and processing during the data circulation process, and a secure and reliable circulation strategy for the special agricultural data is generated.

2. The method for secure and reliable circulation of specialized agricultural data according to claim 1, characterized in that, Multi-dimensional data security management is implemented for specialty agricultural data, encompassing data storage management security strategies, data privacy security strategies, data access control strategies, and data disaster recovery strategies. Specifically, this includes: The characteristic agricultural data is classified according to relevant time-series requirements to obtain characteristic agricultural data under high real-time requirements and characteristic agricultural data under low real-time requirements. If the specialty agricultural data is in a high real-time state, then the specialty agricultural data is backed up based on hourly incremental backups combined with daily full backups to determine the first data backup method; If the special agricultural data is in a low real-time state, then the special agricultural data will be backed up based on daily incremental backups combined with weekly full backups to determine a second data backup method; Real-time health status monitoring is performed on the hardware environment used to store the aforementioned agricultural data to obtain hardware detection information; Based on the first data backup method, the second data backup method, and the hardware detection information, the data storage management security policy is generated.

3. The method for secure and reliable transmission of specialized agricultural data according to claim 2, characterized in that, Multi-dimensional data security management is implemented for specialty agricultural data, encompassing data storage management security strategies, data privacy security strategies, data access control strategies, and data disaster recovery strategies. This includes: In the data collection phase based on the aforementioned specialized agricultural data, authorization and consent information from the data provider is obtained; A dedicated data transmission channel is configured based on the data transmission process of the aforementioned specialized agricultural data. The personal privacy data and trade secret data in the aforementioned special agricultural data are subjected to graded data protection processing to obtain a graded data protection strategy. The data privacy and security strategy is derived based on the authorization and consent information, the dedicated data transmission channel, and the execution method of the tiered data protection strategy. Based on user needs, access permissions for the featured agricultural data are categorized into different levels to obtain access permission levels; wherein, the access permissions include at least: general query permissions, data editing permissions, and administrator permissions; Based on the access permission level, configure the corresponding access request approval node; The data access control policy is obtained based on the access permission level and the execution method of the corresponding access request approval node.

4. The method for secure and reliable transmission of specialized agricultural data according to claim 3, characterized in that, A multi-dimensional data security management system is implemented for specialty agricultural data, encompassing data storage management security strategies, data privacy security strategies, data access control strategies, and data disaster recovery strategies. This results in a multi-dimensional security control strategy group for the specialty agricultural data, specifically including: According to the preset data disaster recovery plan, data recovery processing is performed on the emergency response abnormal data in the special agricultural data, involving local backup and off-site backup, to obtain the data disaster recovery strategy for the special agricultural data. The data storage management security strategy, the data privacy security strategy, the data access control strategy, and the data disaster recovery strategy are combined to obtain the multi-dimensional security control strategy group for the special agricultural data.

5. The method for secure and reliable circulation of specialized agricultural data according to claim 1, characterized in that, Data preprocessing of the aforementioned specialty agricultural data under a multi-faceted data protection mechanism specifically includes: By using blockchain technology, the characteristic agricultural data in the transmission state is processed by uploading the transmission information to the blockchain, a transmission and storage ledger of the characteristic agricultural data is constructed, and a blockchain protection strategy is obtained. Through a federated learning mechanism, the special agricultural data of the data users can be directly analyzed and processed without obtaining the original special agricultural data, thus obtaining a privacy computing strategy. A unique distributed identity identifier is created for each data subject in the aforementioned specialty agricultural data, resulting in a distributed identity identifier strategy.

6. The method for secure and reliable circulation of specialized agricultural data according to claim 5, characterized in that, Data preprocessing of the aforementioned specialty agricultural data under a multi-faceted data protection mechanism specifically includes: By using symmetric encryption algorithms, the special agricultural data in the data storage stage is stored confidentially, and the special agricultural data in the data transmission stage is transmitted in encrypted form based on asymmetric encryption algorithms, thus obtaining a data encryption strategy. A data watermarking strategy is obtained by embedding preset watermark information into the featured agricultural data; wherein, the watermark information includes at least: data owner, generation time, and authorized usage scope; The newly added specialized agricultural data is isolated in a sandbox to obtain the data sandbox strategy.

7. A method for secure and reliable transmission of specialized agricultural data according to claim 6, characterized in that, The data on the specialty agriculture is preprocessed under a multi-dimensional data protection mechanism to generate a multi-dimensional security fusion strategy group for the specialty agriculture data, specifically including: The special agricultural data, which is under confidentiality processing, is normalized using a preset commercial cryptographic algorithm to obtain a commercial cryptographic strategy; wherein, the confidentiality processing includes at least: data encryption and decryption, identity authentication, and digital signature; Sensitive data in the featured agricultural data is subjected to multiple types of desensitization processing to obtain a data desensitization strategy; wherein, the multiple types of desensitization processing include at least: range replacement, partial occlusion, and data offset; The multi-security fusion strategy group is obtained by combining the blockchain protection strategy, the privacy computing strategy, the distributed identity identification strategy, the data encryption strategy, the data watermarking strategy, the data sandbox strategy, the commercial cryptography strategy, and the data desensitization strategy.

8. The method for secure and reliable circulation of specialized agricultural data according to claim 1, characterized in that, Through the multi-dimensional security control strategy group and the multi-dimensional security fusion strategy group, the characteristic agricultural data is subjected to full-domain control and processing during the data circulation process, generating a secure and reliable circulation strategy for the characteristic agricultural data, specifically including: Through the multi-dimensional security control strategy group, data compliance checks and policy requirement compliance checks are performed on the characteristic agricultural data in the data circulation stage. Through the multi-dimensional security fusion strategy group, the characteristic agricultural data in the data circulation stage is preprocessed before data circulation to obtain the data circulation control strategy. Through the multi-dimensional security control strategy group and the multi-dimensional security fusion strategy group, the compliance transmission monitoring of characteristic agricultural data in the data circulation process is carried out, and based on the abnormal response triggering mechanism, the data transmission monitoring of the characteristic agricultural data is carried out, and the data circulation control strategy is generated. Through the multi-dimensional security control strategy group and the multi-dimensional security fusion strategy group, the authorization and control of the use of characteristic agricultural data in the data circulation completion stage are carried out on the data recipients and data users to obtain the data circulation completion control strategy. Based on the combined execution of the data circulation pre-circulation control strategy, the data circulation in-circulation control strategy, and the data circulation completion control strategy, a secure and reliable circulation strategy for the special agricultural data is determined.

9. A secure and reliable method for the circulation of specialized agricultural data, characterized in that, The secure and reliable data transmission equipment for the specialized agricultural data includes: At least one processor; and, A memory communicatively connected to the at least one processor; wherein, The memory stores instructions executable by the at least one processor to enable the at least one processor to perform a secure and reliable method for the transfer of specialized agricultural data according to any one of claims 1-8.

10. A non-volatile computer storage medium, characterized in that, The storage medium is a non-volatile computer-readable storage medium that stores at least one program, each program including instructions that, when executed by a terminal, cause the terminal to perform a secure and reliable method for the transmission of specialized agricultural data according to any one of claims 1-8.

Images