Audit data encryption transmission method and system based on dynamic permission management

Abstract

The present application relates to the technical field of data security and security audit, in particular to an audit data encryption transmission method and system based on dynamic permission management; the method calculates instant risk quantitative score by collecting user risk factors, data sensitivity level and context threat index in real time, and determines the security level; the core is to generate encryption strategy and compensatory control set according to the security level; when the security level is critical, the system dynamically calculates the minimum privilege key window, and sets the life cycle of the session key based on the window; combined with the operation context, the unforgeable traceable certificate is generated through the hash chain algorithm; the present application overcomes the defects of static strategy, and realizes fine dynamic security protection.

Description

Technical Field

[0001] This invention relates to the field of data security and security auditing technology, specifically to a method and system for encrypted transmission of audit data based on dynamic access control. Background Technology

[0002] In current environments where highly sensitive data such as audit data is accessed, traditional secure transmission methods mainly rely on static access control and fixed encryption strategies. This approach has serious flaws when facing high-risk access, such as broken window auditing. It cannot dynamically adjust the strength of security controls based on real-time risks, such as changes in users, data, and environment. This results in overly coarse-grained permissions, a lack of fine-grained access timeliness control, and difficulty in conducting strong and undeniable audit traceability after high-risk operations occur. Therefore, how to dynamically adjust encryption strategies and access timeliness based on real-time risks and achieve tamper-proof traceability of high-risk operations has become an urgent technical problem to be solved. Summary of the Invention

[0003] To address the aforementioned technical problems, this invention provides a method and system for encrypted transmission of audit data based on dynamic access control. Specifically, the technical solution of this invention is as follows:

[0004] The method for encrypting audit data transmission based on dynamic access control includes:

[0005] S1, collect the context parameters of the access request. The context parameters include: user risk factor, data sensitivity level and context threat index;

[0006] S2, based on context parameters, is weighted through an instant risk quantification model to determine the instant risk quantification score;

[0007] S3 combines the real-time risk quantification score with preset low-risk thresholds and preset high-risk thresholds, and determines the security level by mapping the security level to the control strategy.

[0008] S4, based on the security level, matches and generates encryption policies and compensatory control sets;

[0009] S5, in response to a security level of criticality, combines the instantaneous risk quantification score and the high-risk threshold, and calculates the effective window of the dynamic key through the minimum privileged key window;

[0010] S6, Generate a session key according to the encryption strategy; wherein, in response to the security level being critical, the lifecycle of the session key is set to the dynamic key validity window;

[0011] S7, use the session key to encrypt the plaintext data to obtain the ciphertext data;

[0012] S8, use the preset receiver public key to perform asymmetric encryption on the session key to generate an encrypted session key;

[0013] S9, based on the compensatory control set, triggers compensatory control;

[0014] S10, Generate security metadata containing security levels;

[0015] S11: Combine the ciphertext data with the encrypted session key and secure metadata to construct an encrypted transmission packet and send it to the recipient;

[0016] S12, capture the operational context, which includes an instant risk quantification score and security level;

[0017] S13. Using a hash chain algorithm, combining the operation context with the hash value of the previous log credential, an immutable traceability credential is generated.

[0018] Preferred, real-time risk quantification models include:

[0019] Based on user risk factors, data sensitivity levels, and contextual threat indices, an instant risk quantification score is calculated using a linear weighted model.

[0020] Preferably, the determination of the security level includes:

[0021] If the real-time risk quantification score is less than or equal to the low-risk threshold, the safety level is determined to be the normal level.

[0022] If the real-time risk quantification score is greater than the low-risk threshold and less than or equal to the high-risk threshold, the safety level is determined to be at the attention level.

[0023] If the real-time risk quantification score is greater than the high-risk threshold, the safety level is determined to be critical.

[0024] Preferably, the compensatory control set includes at least one of triggering an alarm and starting session recording.

[0025] Preferred least privileged key window calculation includes:

[0026] Based on the instant risk quantification score, high risk threshold, preset maximum baseline window, and preset risk decay coefficient, the effective window of the dynamic key is calculated through an exponential decay model.

[0027] Preferably, an immutable traceability credential is generated by using a hash chain algorithm, combining the operation context with the hash value of the previously obtained log credential, including:

[0028] The operation context is concatenated with the hash value of the previous log credential to obtain the concatenation result;

[0029] The concatenation results are processed by an anti-collision hash function to generate an immutable traceable certificate.

[0030] An audit data encryption transmission system based on dynamic access control includes:

[0031] The context collection module is used to collect context parameters of access requests. Context parameters include: user risk factor, data sensitivity level, and context threat index.

[0032] The dynamic encryption module includes:

[0033] The risk quantification unit is used to determine the real-time risk quantification score by weighting the parameters based on the real-time risk quantification model.

[0034] The strategy determination unit is used to combine the real-time risk quantification score with preset low-risk thresholds and preset high-risk thresholds, and determine the security level by mapping the security level to the control strategy.

[0035] The policy generation unit is used to match and generate encryption policies and compensatory control sets based on security levels;

[0036] The window calculation unit is used to calculate the effective window of the dynamic key in response to a critical security level, combining the instantaneous risk quantification score and the high-risk threshold, through the least privileged key window calculation.

[0037] The key generation unit is used to generate a session key according to the encryption strategy; wherein, in response to the security level being critical, the lifecycle of the session key is set to a dynamic key validity window;

[0038] The data encryption unit is used to encrypt plaintext data using a session key to obtain ciphertext data;

[0039] The key encapsulation unit is used to perform asymmetric encryption on the session key using a preset receiver public key to generate an encrypted session key;

[0040] The control transmission module includes:

[0041] The control execution unit is used to trigger compensatory control based on the compensatory control set;

[0042] Metadata generation unit, used to generate security metadata containing security levels;

[0043] A packet transmission unit is used to combine ciphertext data with an encrypted session key and secure metadata to construct an encrypted transmission packet and send it to the recipient.

[0044] The audit documentation module includes:

[0045] The context capture unit is used to capture the operational context, which includes an instant risk quantification score and security level.

[0046] The credential generation unit is used to generate an immutable traceable credential by using a hash chain algorithm, combining the operation context with the hash value of the previous log credential.

[0047] Compared with the prior art, the present invention has the following beneficial effects:

[0048] 1. This invention achieves dynamic risk assessment of access requests by collecting multi-dimensional parameters such as user risk, data sensitivity level, and contextual threat index in real time, and by using an instant risk quantification model for weighted processing. This overcomes the shortcomings of traditional static strategies that cannot detect real-time threats, and can match differentiated encryption strategies and control sets according to accurate risk scores, thus achieving refined dynamic security protection.

[0049] 2. This invention innovatively introduces the least privileged key window calculation for high-risk critical level access, and dynamically calculates a session key lifecycle that is precisely related to the risk level through an exponential decay model. This achieves automated control that the higher the risk, the shorter the authorized access time, which greatly reduces the risk exposure time window of high-risk operations and solves the security risks caused by traditional fixed authorization time.

[0050] 3. This invention uses a hash chain algorithm to concatenate the operation context, which contains key decision-making criteria such as real-time risk quantification scores and security levels, with the hash value of the previous log credential, generating an immutable traceability credential. This ensures that the audit logs of high-risk operations have extremely strong integrity and non-repudiation, solving the problems of weak traceability and susceptibility to tampering in traditional auditing.

[0051] 4. This invention constructs a closed-loop management system from risk perception, strategy generation, dynamic encryption, timeliness control to compensation control; this system can work collaboratively, while performing high-strength encrypted transmission, it can initiate additional monitoring and auditing measures, and solidify decision-making basis with tamper-proof logs, which significantly improves the overall security, dynamic adaptability and post-event traceability of highly sensitive information such as audit data transmission. Attached Figure Description

[0052] The present invention will be further explained below with reference to the accompanying drawings and embodiments:

[0053] Figure 1 This is a flowchart of the method of the present invention.

[0054] Figure 2 This is a structural diagram of the system of the present invention. Detailed Implementation

[0055] To make the objectives, technical solutions, and advantages of this invention clearer, the invention will be further described in detail below with reference to specific embodiments.

[0056] Example 1:

[0057] Please see Figure 1 An audit data encryption transmission method based on dynamic access control includes:

[0058] S1, collect the context parameters of the access request. The context parameters include: user risk factor, data sensitivity level and context threat index;

[0059] S2, based on context parameters, is weighted through an instant risk quantification model to determine the instant risk quantification score;

[0060] S3 combines the real-time risk quantification score with preset low-risk thresholds and preset high-risk thresholds, and determines the security level by mapping the security level to the control strategy.

[0061] S4, based on the security level, matches and generates encryption policies and compensatory control sets;

[0062] S5, in response to a security level of criticality, combines the instantaneous risk quantification score and the high-risk threshold, and calculates the effective window of the dynamic key through the minimum privileged key window;

[0063] S6, Generate a session key according to the encryption strategy; wherein, in response to the security level being critical, the lifecycle of the session key is set to the dynamic key validity window;

[0064] S7, use the session key to encrypt the plaintext data to obtain the ciphertext data;

[0065] S8, use the preset receiver public key to perform asymmetric encryption on the session key to generate an encrypted session key;

[0066] S9, based on the compensatory control set, triggers compensatory control;

[0067] S10, Generate security metadata containing security levels;

[0068] S11: Combine the ciphertext data with the encrypted session key and secure metadata to construct an encrypted transmission packet and send it to the recipient;

[0069] S12, capture the operational context, which includes an instant risk quantification score and security level;

[0070] S13. Using a hash chain algorithm, combining the operation context with the hash value of the previous log credential, an immutable traceability credential is generated.

[0071] This embodiment provides a method for encrypted transmission of audit data based on dynamic access control. This method is a complete and self-consistent technical loop, including the following steps:

[0072] S1, Collect context parameters of the access request; this step provides necessary, multi-dimensional, real-time input data for subsequent risk assessment; context parameters refer to heterogeneous datasets characterizing the features of the current access request, specifically including:

[0073] User risk factors This refers to a standardized numerical value used to quantify potential risks associated with a specific user; its function is to characterize threats at the user level; it is derived from user roles and historical behavioral patterns obtained through an identity authentication system, and then parsed and normalized to [a specific value]. Ranges; for example, using a pre-defined mapping table to map high-risk administrators, regular users, visitors, and other roles to ranges. Specific values ​​are obtained. ;

[0074] Data Sensitivity Level This refers to a standardized numerical value used to quantify the importance or confidentiality of requested data; its function is to characterize the risk exposure of the data dimension; its source is the sensitivity level of the requested data obtained through a data asset management platform, which is then parsed and normalized to a specific value. Ranges; for example, a pre-defined mapping table can be used to map core secret, internal sensitive, and public levels to ranges respectively. Specific values ​​are obtained. ;

[0075] Contextual Threat Index This refers to a standardized numerical value used to quantify the real-time security status of the access environment; its function is to characterize threats at the environmental level; it is derived from real-time monitoring of access time, location, system status, etc., by a situational awareness system, and then parsing and normalizing this data. Range; for example, the situational awareness system calculates a comprehensive threat score based on multiple factors such as whether the currently accessing IP is on a blacklist and whether the access time is outside of working hours. This system obtains this score and divides it by 100 to get... ;

[0076] S2, based on context parameters, uses an instant risk quantification model to perform weighted processing to determine the instant risk quantification score; this step aggregates the multidimensional heterogeneous parameters collected in S1 into a unified, quantifiable risk measure.

[0077] To aggregate abstract access contexts into a unified risk metric, this embodiment employs an instant risk quantification model to calculate an instant risk quantification score. ;

[0078] The calculation method of this model is as follows: ;

[0079] in, The real-time risk quantification score is a dimensionless value calculated using this formula, and its range is constrained within a certain range. Within the range; The user risk factor is a dimensionless numerical value that takes values ​​within a range. The identity authentication system in S1 provides and normalizes the information; The data sensitivity level is a dimensionless numerical value, and its value lies within the range [insert range here]. Internally, it is supplied and normalized by the data asset management platform in S1; The contextual threat index is a dimensionless numerical value that takes values ​​within a certain range. Internally, it is supplied and normalized by the situational awareness system in S1; These are preset static weight coefficients, which are dimensionless values. They are derived from historical security incident datasets through machine learning methods such as logistic regression for model training and optimization, or are pre-set according to security policies, and satisfy the following conditions: ;

[0080] To further illustrate, the training process of this logistic regression model may include: Step 1, extracting N access records from historical audit logs as the training set; Step 2, defining the target variable. ,in This indicates that the access was marked as a security incident. This indicates normal access; Step 3, extract and... Corresponding original features; Step 4, train the logistic regression model Step 5: Normalize the fitted model coefficients to ensure they meet the following conditions. Thus obtain The value;

[0081] To further clarify, this formula is based on the conventional idea in risk management that risk equals the weighted sum of factors. It innovatively designs a linear weighted model, which solves the problem of integrating heterogeneous risk factors from different sources and dimensions into an executable and comparable unified measure.

[0082] This model was acquired via S1. As real-time input, and combined with preset weights Calculate the current risk score immediately. Output of this step It is The value within the range provides a core and accurate decision-making basis for the dynamic strategy determination in subsequent S3;

[0083] S3, combining the real-time risk quantification score with preset low-risk and high-risk thresholds, determines the safety level through a mapping between safety level and control strategy; this step uses the continuous risk score calculated in S2. Mapped to several discrete, manageable security levels to trigger control strategies of varying strengths;

[0084] In this embodiment, two key thresholds need to be preset:

[0085] Preset low-risk threshold This refers to a threshold value used to distinguish between routine and high-risk levels; its function is to define a baseline for acceptable risk; it is derived from real-time risk quantification scores based on historical visits. Perform statistical distribution analysis on historical datasets; for example, all historical datasets can be analyzed. Score sorting, using the 80th percentile value as... Alternatively, it can be combined with business security baseline settings, for example, it can be set to 0.4, and meet the following requirements. ;

[0086] Preset high-risk threshold This refers to a threshold value used to distinguish between risks at the level of concern and those at the critical level; its function is to identify broken window scenarios that require immediate and strong intervention; its source is based on historical data. The statistical distribution of scores, for example, taking the 98th percentile value as... Alternatively, it can be combined with business security baseline settings, for example, it can be set to 0.8, and meet the following requirements. ;

[0087] Security level This refers to the discretized classification result of the current access risk, and its function is to directly trigger the corresponding policy set; its judgment logic is as follows:

[0088] like Then determine the security level. That is, the standard level;

[0089] like Then determine the security level. That is, the level of attention;

[0090] like Then determine the security level. That is, the critical level;

[0091] S4, based on the security level, matches and generates encryption strategies and compensatory control sets; this step is based on the security level determined in S3. It matches and activates corresponding technical control measures from a pre-set strategy library;

[0092] Encryption strategy This refers to the level of security. A selected set of encryption specifications; its purpose is to ensure that the strength of data encryption matches the risk level; its source is a pre-defined policy library, such as... It may correspond to AES-128, and That is, the critical level corresponds to high-intensity algorithms such as AES-256;

[0093] Compensatory control set This refers to the level of security. A selected set of additional security measures; their purpose is to provide additional monitoring, alerting, or blocking capabilities as compensatory controls for data access when high-risk access occurs; their source is a pre-defined policy library, such as... It may be empty, and May include real-time alerts. This may include instant alerts and the ability to start screen recording of the session;

[0094] S5, responding to a critical security level, combines the immediate risk quantification score and high-risk threshold, and calculates the effective window of the dynamic key using the minimum privileged key window; this step targets the highest risk level determined in S3. In other words, the critical level dynamically calculates an extremely short access time that is precisely related to the level of risk in order to achieve the principle of least privilege.

[0095] Only In this embodiment, the least privileged key window calculation is initiated to solve for the dynamic key effective window. ;

[0096] The calculation model is as follows: ;

[0097] in, The effective window for the dynamic key, in seconds, is calculated using this formula and is used to set the lifespan of the session key in S6. The maximum baseline window, in seconds, is the maximum allowed duration for a window-breaking operation. It is derived from analyzing the historical average time of similar audit tasks and adding a safety margin, and is preset according to business needs. The risk attenuation coefficient is a dimensionless value and These are preset tuning parameters, derived from security policy settings. For example, when it's required that the window time be halved for every 0.1 increase in risk, this requirement can be used to inversely determine the optimal parameters. Values ​​used to control Follow The rate at which growth decreases; The instantaneous risk quantification score is dimensionless and derived from the calculation result of Formula 1 in S2. The high-risk threshold is dimensionless and comes from a preset value in S3.

[0098] This formula draws inspiration from the exponential decay model in physics and innovatively applies it to describe business scenarios where the allowed access time rapidly decreases as the risk score increases; this solves the problem of excessively long permissions in traditional static authorization durations in high-risk broken window scenarios;

[0099] The design logic of this formula ensures that: when risk... Just reached the high-risk threshold When the exponent term is 0, ;when Greater than hour, ; and with The larger, It will decrease exponentially; in this way, the present invention achieves refined and dynamic least privilege control with a shorter authorization window for higher risks, which greatly reduces the risk exposure time of critical level operations;

[0100] S6. Generate a session key according to the encryption strategy; this step generates a one-time, temporary symmetric key for this data transmission.

[0101] Session key This refers to a one-time key used for symmetric encryption; its function is to encrypt the plaintext data of this request; its source is the encryption strategy determined according to S4. For example, AES-256 is dynamically generated by the key management system for this session;

[0102] The key feature of this step is that, in response to a critical security level, the session key's lifespan is set to a dynamic key validity window; lifespan refers to... The time during which the system remains valid and usable for decryption; in this embodiment, if S3 determines... That is, the critical level. The lifecycle is strictly set to the value calculated by S5. ;like Then the system's default session duration can be used;

[0103] S7, encrypt the plaintext data using the session key to obtain ciphertext data; this step converts the original sensitive data into a confidential form; plaintext data This refers to the raw audit data requested by the user; the system uses the session key generated by S6. ,pass Specified standard symmetric encryption algorithm right Encryption is performed to obtain ciphertext data. ;

[0104] S8, use the preset receiver's public key to perform asymmetric encryption on the session key to generate an encrypted session key; this step protects... The security inherent in the transmission process, namely digital envelope technology, ensures that only a legitimate recipient can decrypt the message. ;Preset receiver public key This refers to the asymmetric encryption public key used by the data recipient, such as an auditor's client; the system uses... For S6 generated Perform asymmetric encryption such as RSA to generate an encrypted session key. ;

[0105] S9, based on the compensatory control set, trigger compensatory control; this step executes the additional safety measures matched in S4; the system executes the compensatory control set matched in S4. It automatically activates corresponding actions, such as sending an alarm to the security administrator and starting screen recording for the current session;

[0106] S10, Generate security metadata containing security levels; This step creates a data packet containing key decision information for this transmission, used for receiver verification and server-side auditing; Security metadata This refers to the structured information describing the context of this encrypted transmission; it includes the security level determined by S3. In this embodiment, It can also include the calculations from S5. if Information such as timestamps;

[0107] S11: Combining the ciphertext data with the encrypted session key and secure metadata, an encrypted transmission packet is constructed and sent to the recipient; this step combines all encrypted data and metadata into a single unit and sends it securely; encrypted transmission packet This refers to the data packet that is ultimately sent to the receiver; it consists of ciphertext data generated by S7. The encrypted session key generated by S8 and the security metadata generated by S10 Combining, that is ;

[0108] S12, capture the operation context, which includes the immediate risk quantification score and security level; this step, on the server side, prepares the raw data for generating the immutable log in S13; operation context. This refers to the complete recording of key decisions and data throughout the entire process from S1 to S11; Includes the real-time risk quantification score calculated by S2. and the security level determined by S3 In this embodiment, It may also include: timestamps ,window like Control set and data hash wait;

[0109] S13, using a hash chain algorithm, combining the operation context with the hash value of the previously obtained log credential, generates an immutable traceable credential; this step will use the data captured in S12... It is solidified in a tamper-proof manner to achieve strong compliance traceability for high-risk operations, especially broken windows;

[0110] To ensure the integrity and immutability of audit logs, this embodiment uses a hash chain algorithm to generate immutable traceability credentials. ;

[0111] The algorithm model is as follows: ;

[0112] in, The hash value of the nth traceability credential is a fixed-length bit sequence, calculated by this formula, and stored in the tamper-proof log database. The pre-defined collision-resistant hash function, such as SHA-256, is a standard cryptographic function publicly disclosed in this field; The context log entry for the current operation is a bit sequence captured in real time by S12, containing... Key parameters; This is a concatenation operation for bit sequences; The previous one, i.e., the first one The hash value of a log credential is a bit sequence, obtained by reading the hash value of the previous record from the tamper-proof log database;

[0113] This formula is a standard hash chain construction method in security logs and blockchain technology; its innovation lies in containing... and Etc. dynamic decision results Included in the chain;

[0114] This formula is a recursive definition; the... voucher The computation depends not only on the current operating context. It also depends on the hash value of the previous log credential. This iterative dependency forms a chain, and any access to historical logs... (in Any alteration of () will lead to The change caused all subsequent hash value verifications to fail; this ensured that the hash value contained... and Audit logs for key decision parameters are highly tamper-proof and traceable;

[0115] The method provided in this invention quantifies access risks in real time through S1 to S2, and dynamically maps the risks to encryption strength and key validity, especially critical levels, through S3 to S5. Then, encrypted transmission and compensation control are performed through S6 to S11, and risk decision-making basis is included through S12 to S13. The context is solidified into an immutable hash chain credential; this method solves the problems of traditional static permission management in the face of high-risk access such as broken window audits, which cannot dynamically tighten permissions, lack fine-grained timeliness control, and are difficult to conduct strong traceability; it significantly improves the security, dynamic adaptability and non-repudiation of highly sensitive data such as audit data transmission.

[0116] Example 2:

[0117] Real-time risk quantification models include:

[0118] Based on user risk factors, data sensitivity levels, and contextual threat indices, an instant risk quantification score is calculated using a linear weighted model.

[0119] This embodiment, based on embodiment 1, specifies the real-time risk quantification model in S2; as in the implementation of S2, this model is specifically a linear weighted model, i.e. It is based on user risk factors collected by S1. Data sensitivity level and contextual threat index Through their respective weights By performing weighted summation, an instantaneous risk quantification score is obtained. ;

[0120] A linear weighted model is adopted, providing a risk fusion method that is computationally simple, easy to implement, and highly interpretable; by adjusting the weights... Security policy administrators can adjust the settings according to different business scenarios, such as in highly data-sensitive systems, by increasing the security policy level. This allows for flexible adjustment of the contribution of different risk factors, enhancing the business adaptability and optimization flexibility of the risk model.

[0121] Example 3:

[0122] Determining the security level includes:

[0123] If the real-time risk quantification score is less than or equal to the low-risk threshold, the safety level is determined to be the normal level.

[0124] If the real-time risk quantification score is greater than the low-risk threshold and less than or equal to the high-risk threshold, the safety level is determined to be at the attention level.

[0125] If the real-time risk quantification score is greater than the high-risk threshold, the safety level is determined to be critical.

[0126] This embodiment, based on embodiment 1, specifies the logic for determining the security level in S3; as in the implementation of S3, this determination logic is based on With two thresholds and Comparison:

[0127] If the risk quantification score is immediate Less than or equal to the low-risk threshold If so, the security level is determined to be the standard level. ;

[0128] If the risk quantification score is immediate Greater than the low risk threshold And less than or equal to the high-risk threshold If so, the security level is determined to be at the "concern" level. ;

[0129] If the risk quantification score is immediate Greater than the high-risk threshold If so, the security level is determined to be critical. ;

[0130] By setting and Two thresholds will determine the continuous risk scores. The system is clearly divided into three discrete security levels: normal, attention, and critical. This hierarchical mapping mechanism simplifies the complexity of policy management, allowing the system to match control policies of different intensities, such as in S4, to different risk ranges. This achieves hierarchical and differentiated risk response, avoiding one-size-fits-all approaches that result in either excessive or insufficient protection.

[0131] Example 4:

[0132] The compensatory control set includes at least one of triggering an alarm and starting session recording.

[0133] This embodiment, based on embodiment 1, provides an exemplary description of the specific content of the compensatory control set generated in S4 and executed in S9; compensatory control set This includes at least one of: triggering an alarm and starting session recording; for example, being determined as a level of concern in S3. or critical level hour, The matching strategy is to send an alert to the security manager immediately and / or to start full screen recording of the current user's session, especially data access and operation behavior;

[0134] By defining specific compensation control measures such as alarms and screen recording, high-risk access, especially... It provides real-time, additional security monitoring and deterrence capabilities; triggering alarms enables immediate response to security incidents, and starting session recording provides strong video evidence for post-event auditing and tracing. The combination of these two methods significantly enhances the ability to intervene in high-risk operations in real time and to hold those responsible accountable afterward.

[0135] Example 5:

[0136] Least privileged key window calculation includes:

[0137] Based on the instant risk quantification score, high risk threshold, preset maximum baseline window, and preset risk decay coefficient, the effective window of the dynamic key is calculated through an exponential decay model.

[0138] This embodiment, based on embodiment 1, specifies the model used for calculating the least privileged key window in S5; as in the implementation of S5, this calculation specifically adopts an exponential decay model, i.e. The model is based on S2's instantaneous risk quantification score. S3 high risk threshold Preset maximum reference window and the preset risk attenuation coefficient The effective window of the dynamic key is calculated. ;

[0139] An exponential decay model was employed to implement a nonlinear window contraction mechanism that is highly sensitive to risk growth. Compared to linear or other simple decreasing functions, exponential decay can ensure that the window contraction mechanism is effective even with increasing risk. Just exceeded the threshold At that time, window The changes were relatively gradual and close. And when risk When significantly increased, the window It will shrink drastically; this model characteristic perfectly matches the security needs of higher risk, lower tolerance, and faster permission contraction, realizing fine-grained and automated control over the timeliness of broken window permissions.

[0140] Example 6:

[0141] Using a hash chain algorithm, combined with the operation context and the hash value of the previous log credential, an immutable traceable credential is generated, including:

[0142] The operation context is concatenated with the hash value of the previous log credential to obtain the concatenation result;

[0143] The concatenation results are processed by an anti-collision hash function to generate an immutable traceable certificate.

[0144] This embodiment, based on embodiment 1, specifies the step of generating a certificate using a hash chain algorithm in S13; as in the implementation of S13, the algorithm... Specifically, it includes:

[0145] The operation context captured by S12 Hash value of the previous log credential obtained By concatenating the bits, a combined bit sequence is obtained. That is, the result of the chain concatenation;

[0146] Using a pre-defined anti-collision hash function For example, when SHA-256 processes this concatenation result, its output is the latest tamper-proof traceability credential. ;

[0147] The construction mechanism of a hash chain is clarified through the two specific steps of chaining and hashing; the previous hash value is... As the current hash calculation One of the inputs establishes an unbreakable cryptographic link between log entries; this design ensures that any access to historical logs is secure. Even minor changes can be amplified in a chain reaction, leading to... And all subsequent hash value verifications failed, thus achieving extremely high log anti-tampering capability with extremely low computational cost.

[0148] Example 7:

[0149] Please see Figure 2 An audit data encryption transmission system based on dynamic access control includes:

[0150] The context collection module is used to collect context parameters of access requests. Context parameters include: user risk factor, data sensitivity level, and context threat index.

[0151] The dynamic encryption module includes:

[0152] The risk quantification unit is used to determine the real-time risk quantification score by weighting the parameters based on the real-time risk quantification model.

[0153] The strategy determination unit is used to combine the real-time risk quantification score with preset low-risk thresholds and preset high-risk thresholds, and determine the security level by mapping the security level to the control strategy.

[0154] The policy generation unit is used to match and generate encryption policies and compensatory control sets based on security levels;

[0155] The window calculation unit is used to calculate the effective window of the dynamic key in response to a critical security level, combining the instantaneous risk quantification score and the high-risk threshold, through the least privileged key window calculation.

[0156] The key generation unit is used to generate a session key according to the encryption strategy; wherein, in response to the security level being critical, the lifecycle of the session key is set to a dynamic key validity window;

[0157] The data encryption unit is used to encrypt plaintext data using a session key to obtain ciphertext data;

[0158] The key encapsulation unit is used to perform asymmetric encryption on the session key using a preset receiver public key to generate an encrypted session key;

[0159] The control transmission module includes:

[0160] The control execution unit is used to trigger compensatory control based on the compensatory control set;

[0161] Metadata generation unit, used to generate security metadata containing security levels;

[0162] A packet transmission unit is used to combine ciphertext data with an encrypted session key and secure metadata to construct an encrypted transmission packet and send it to the recipient.

[0163] The audit documentation module includes:

[0164] The context capture unit is used to capture the operational context, which includes an instant risk quantification score and security level.

[0165] The credential generation unit is used to generate an immutable traceable credential by using a hash chain algorithm, combining the operation context with the hash value of the previous log credential.

[0166] This embodiment provides an encrypted transmission system for audit data based on dynamic access control. This system is used to execute the methods of any one of embodiments 1-6 above. The system architecture at the hardware level can be implemented based on general-purpose servers, storage devices, and network devices, and its core functions are implemented by software modules running on a processor. The system includes:

[0167] The context acquisition module executes S1 to acquire context parameters of the access request. In this embodiment, this module communicates with the identity authentication system, data asset management platform, and situational awareness system via API interfaces to obtain user risk factors. Data sensitivity level and contextual threat index ;

[0168] For example, when an access request arrives, the context collection module can initiate an HTTP POST request to the internal risk assessment gateway. The request body can be in JSON format, as shown in the example below:

[0169] {"UserID": "user123", "DataID": "data-abc", "AccessIP": "192.168.1.100", "AccessTime": "2025-10-30T10:00:00Z"}; The risk assessment gateway then calls the above three external systems respectively to obtain the original risk data, and finally calculates the result according to the normalization mapping rules described in S1 of Example 1. Three located in the interval The value within;

[0170] The dynamic encryption module performs core decision-making and encryption operations from S2 to S8; it further includes a risk quantification unit, which performs S2 by weighting based on context parameters using an instant risk quantification model to determine an instant risk quantification score. In this embodiment, it implements Formula 1. The computational logic;

[0171] The strategy determination unit is used to execute S3 and to combine the real-time risk quantification score. Compared with the preset low-risk threshold and preset high-risk threshold Determine the security level In this embodiment, it implements the three-stage hierarchical logic of Embodiment 3.

[0172] The policy generation unit executes S4 for security level-based operations. Match and generate encryption strategies and compensatory control set ;

[0173] Windowed solution unit, used to execute S5, in response to a critical safety level. Combined with real-time risk quantification score With high risk threshold The effective window of the dynamic key is obtained by solving the problem. In this embodiment, it implements Formula 2. The computational logic;

[0174] The key generation unit is used to execute S6, which is used to determine the encryption strategy. Generate session key Furthermore, in response to a critical security level, The lifecycle is set to ;

[0175] The data encryption unit is used to execute S7 and to use the session key. plaintext data Encryption is performed to obtain ciphertext data. ;

[0176] The key encapsulation unit is used to execute S8, and is used to use a preset receiver public key. Session key Perform asymmetric encryption to generate an encrypted session key. ;

[0177] The control and transmission module is used to perform the control and transmission operations of S9 to S11; it further includes:

[0178] The control execution unit is used to execute S9, which is used to perform actions based on the compensatory control set. This triggers compensation controls such as alarms or screen recording;

[0179] The metadata generation unit is used to execute S10, which generates metadata containing security levels. Security metadata ;

[0180] Packet transmission unit, used to execute S11, for combining and and combined Build encrypted transmission packets And it is sent to the recipient through a secure network channel;

[0181] The audit voucher module is used to perform the audit record operations in S12 to S13; it further includes:

[0182] The context capture unit is used to execute S12 to capture the operation context. ,Should The operational context includes an instant risk quantification score. and security level ;

[0183] The voucher generation unit is used to execute S13, which uses a hash chain algorithm as described in Example 6, in conjunction with the operation context. Hash value of the previous log credential obtained Generate tamper-proof traceability certificates ;

[0184] The system provided in this embodiment of the invention, through the collaborative work of the above-mentioned modules and units, has a clear system architecture, a closed-loop function, and fully implements all the technical steps of Embodiment 1. It provides a set of audit data security transmission solutions that can dynamically adjust encryption strategies and access timeliness according to real-time risks and have strong traceability capabilities.

[0185] The above are merely preferred embodiments of the present invention and are not intended to limit the scope of protection of the present invention. Any modifications, equivalent substitutions, improvements, etc., made within the spirit and principles of the present invention should be included within the scope of protection of the present invention.

[0186] It should be noted that the above embodiments are only used to illustrate the technical solutions of the present invention and are not intended to limit it. Although the present invention has been described in detail with reference to preferred embodiments, those skilled in the art should understand that modifications or equivalent substitutions can be made to the technical solutions of the present invention without departing from the spirit and scope of the technical solutions of the present invention.

Claims

1. A method for encrypted transmission of audit data based on dynamic access control, characterized in that: include: S1, collect the context parameters of the access request. The context parameters include: user risk factor, data sensitivity level and context threat index; S2, based on context parameters, is weighted through an instant risk quantification model to determine the instant risk quantification score; S3 combines the real-time risk quantification score with preset low-risk thresholds and preset high-risk thresholds, and determines the security level by mapping the security level to the control strategy. S4, based on the security level, matches and generates encryption policies and compensatory control sets; S5, in response to a security level of criticality, combines the instantaneous risk quantification score and the high-risk threshold, and calculates the effective window of the dynamic key through the minimum privileged key window; S6, Generate a session key according to the encryption strategy; wherein, in response to the security level being critical, the lifecycle of the session key is set to the dynamic key validity window; S7, use the session key to encrypt the plaintext data to obtain the ciphertext data; S8, use the preset receiver public key to perform asymmetric encryption on the session key to generate an encrypted session key; S9, based on the compensatory control set, triggers compensatory control; S10, Generate security metadata containing security levels; S11: Combine the ciphertext data with the encrypted session key and secure metadata to construct an encrypted transmission packet and send it to the recipient; S12, capture the operational context, which includes an instant risk quantification score and security level; S13. Using a hash chain algorithm, combining the operation context with the hash value of the previous log credential, an immutable traceability credential is generated.

2. The method for encrypted transmission of audit data based on dynamic access control according to claim 1, characterized in that, Real-time risk quantification models include: Based on user risk factors, data sensitivity levels, and contextual threat indices, an instant risk quantification score is calculated using a linear weighted model.

3. The method for encrypted transmission of audit data based on dynamic access control according to claim 1, characterized in that, Determining the security level includes: If the real-time risk quantification score is less than or equal to the low-risk threshold, the safety level is determined to be the normal level. If the real-time risk quantification score is greater than the low-risk threshold and less than or equal to the high-risk threshold, the safety level is determined to be at the attention level. If the real-time risk quantification score is greater than the high-risk threshold, the safety level is determined to be critical.

4. The method for encrypted transmission of audit data based on dynamic access control according to claim 1, characterized in that, The compensatory control set includes at least one of triggering an alarm and starting session recording.

5. The method for encrypted transmission of audit data based on dynamic access control according to claim 1, characterized in that, Least privileged key window calculation includes: Based on the instant risk quantification score, high risk threshold, preset maximum baseline window, and preset risk decay coefficient, the effective window of the dynamic key is calculated through an exponential decay model.

6. The method for encrypted transmission of audit data based on dynamic access control according to claim 1, characterized in that, Using a hash chain algorithm, combined with the operation context and the hash value of the previous log credential, an immutable traceable credential is generated, including: The operation context is concatenated with the hash value of the previous log credential to obtain the concatenation result; The concatenation results are processed by an anti-collision hash function to generate an immutable traceable certificate.

7. An audit data encryption transmission system based on dynamic access control, comprising the audit data encryption transmission method based on dynamic access control as described in any one of claims 1-6, characterized in that, include: The context collection module is used to collect context parameters of access requests. Context parameters include: user risk factor, data sensitivity level, and context threat index. The dynamic encryption module includes: The risk quantification unit is used to determine the real-time risk quantification score by weighting the parameters based on the real-time risk quantification model. The strategy determination unit is used to combine the real-time risk quantification score with preset low-risk thresholds and preset high-risk thresholds, and determine the security level by mapping the security level to the control strategy. The policy generation unit is used to match and generate encryption policies and compensatory control sets based on security levels; The window calculation unit is used to calculate the effective window of the dynamic key in response to a critical security level, combining the instantaneous risk quantification score and the high-risk threshold, through the least privileged key window calculation. The key generation unit is used to generate a session key according to the encryption strategy; wherein, in response to the security level being critical, the lifecycle of the session key is set to a dynamic key validity window; The data encryption unit is used to encrypt plaintext data using a session key to obtain ciphertext data; The key encapsulation unit is used to perform asymmetric encryption on the session key using a preset receiver public key to generate an encrypted session key; The control transmission module includes: The control execution unit is used to trigger compensatory control based on the compensatory control set; Metadata generation unit, used to generate security metadata containing security levels; A packet transmission unit is used to combine ciphertext data with an encrypted session key and secure metadata to construct an encrypted transmission packet and send it to the recipient. The audit documentation module includes: The context capture unit is used to capture the operational context, which includes an instant risk quantification score and security level. The credential generation unit is used to generate an immutable traceable credential by using a hash chain algorithm, combining the operation context with the hash value of the previous log credential.

Images