A data evidence management system
By classifying and storing trade secret data through a data storage and management system and combining it with blockchain technology, the problem of being unable to trace trade secret data after leakage has been solved, thus achieving data preservation and traceability and improving the efficiency and credibility of data protection.
Patent Information
- Application Number
- CN202610379678.8
- Authority / Receiving Office
- CN · China
- Patent Type
- Applications(China)
- Current Assignee / Owner
- Filing Date
- 2026-03-26
- Publication Date
- 2026-06-23
AI Technical Summary
In existing technologies, it is impossible to trace and locate the source of the leak after trade secret data is leaked, which makes it impossible to effectively protect trade secret data assets.
This paper provides a data storage and management system, including a commercial cryptography think tank module, a commercial cryptography audit module, and a storage record module. By storing classified cryptographic data and combining blockchain technology and notarization, it achieves data preservation and traceability.
It enables the solidification of trade secret data, facilitates subsequent tracing and tracking, clearly identifies the data owner, locates the source of data leakage, reduces the difficulty of evidence examination, and increases the acceptance rate of electronic data as the basis for conviction.
Smart Images
Figure CN122263167A_ABST
Abstract
Description
Technical Field
[0001] This invention relates to the field of data security technology, and more specifically to a data evidence storage management system. Background Technology
[0002] In today's era of big data, data has become an important asset for enterprises and is playing an increasingly crucial role. Trade secret data assets are the core assets of enterprises. Currently, the protection of trade secret data assets still adopts the traditional model, and it is impossible to trace and locate the source of the leak after the trade secret data is leaked. Summary of the Invention
[0003] The purpose of this invention is to provide a data storage and management system that solves the problem of being unable to trace trade secret data after it has been leaked by storing classified confidential data.
[0004] To achieve the above objectives, the present invention provides the following technical solution:
[0005] This invention provides a data storage and management system, including: a commercial cryptography think tank module and a commercial cryptography audit module;
[0006] The proprietary knowledge database module is used to display categorized confidential data folders and a first evidence storage button. When the first evidence storage button is clicked, the system will automatically store the categorized confidential data.
[0007] The commercial secret audit module is used to display a target file search box. The system queries and displays the ownership information of the target file based on the information entered in the target file search box.
[0008] Preferably, the system further includes an evidence storage module for recording and storing the evidence information.
[0009] Preferably, when the first evidence preservation button is clicked, an automatic evidence preservation settings interface is displayed, which is used to set the inspection parameters for automatic evidence preservation.
[0010] Preferably, the commercial cryptography database module is also used to display a data search field input box for cryptographic points, a batch certificate storage button, and a batch removal button;
[0011] The system queries and displays the query results based on the information entered in the data search field input box. When the batch storage button is clicked, the system will perform batch storage of the selected query results; when the batch removal button is clicked, the system will perform batch removal of the selected query results.
[0012] Preferably, the system interface also displays a legal and regulatory search input box, and the system queries and displays legal-related search results based on the information entered in the legal and regulatory search input box.
[0013] Preferably, the system further includes a commercial security management module, which is used to display multiple management modules categorized and a third evidence storage button. When the third evidence storage button is clicked, the system stores the uploaded files in the multiple management modules as evidence.
[0014] Preferably, the commercial secret audit module is further configured to display a second evidence storage button, and when the second evidence storage button is clicked, the system stores the target file as evidence.
[0015] Preferably, the commercial secret audit module is also used to display employee information and a storage history button that owns the target file. When the storage history button is clicked, the system will display the historical files stored by the system when the second storage button was clicked.
[0016] Preferably, the ownership information of the target file includes multiple target file owner nodes. When any target file owner node is clicked, the system will display all the operation information of the target file owner on the target file.
[0017] Preferably, the evidence storage record module is further configured to display an import evidence storage file query button. When the import evidence storage file query button is clicked, the system will display an upload evidence storage file interface. When the confirm button on the upload evidence storage file interface is clicked, the system will display evidence storage records related to the uploaded evidence storage file.
[0018] Preferably, the system further includes a commercial security module for displaying an upload evidence button and a fourth evidence storage button;
[0019] The upload evidence button is used to upload evidence files. When the fourth evidence storage button is clicked, the system will store the uploaded evidence files as evidence.
[0020] Preferably, the system further includes a homepage module for displaying information on the number of times evidence has been stored and an evidence storage calendar module;
[0021] When any time button in the evidence storage calendar module is clicked, the system will display the evidence storage history information for that day.
[0022] Compared with the prior art, the beneficial effects of the present invention are: to preserve and solidify classified confidential data, which facilitates subsequent tracing and tracking; in addition, by displaying the ownership information of the target file, the data owner can be clearly traced and the source of data leakage can be located. Attached Figure Description
[0023] To more clearly illustrate the technical solutions in the embodiments of this application, the drawings used in the embodiments will be briefly introduced below. Obviously, the drawings described below are only some embodiments of this application. For those skilled in the art, other drawings can be obtained based on these drawings without creative effort.
[0024] Figure 1 This is the interface of the commercial secrets think tank module of the data storage and management system of this invention;
[0025] Figure 2 This is the automatic evidence storage settings interface of the data evidence storage management system of the present invention;
[0026] Figure 3 This is the interface of the confidentiality audit module of the data storage management system of this invention;
[0027] Figure 4 This is the interface of the confidentiality audit module of the data storage management system of this invention;
[0028] Figure 5 This is the interface of the commercial secret management module of the data storage and management system of this invention;
[0029] Figure 6 This is the interface where the commercial security module of the data storage and management system of this invention is located;
[0030] Figure 7 This is the interface of the evidence storage record module in the data evidence storage management system of this invention;
[0031] Figure 8 This is the interface where the homepage module of the data storage and management system of this invention is located;
[0032] Figure 9 This is a schematic diagram of the data storage and management system module of the present invention;
[0033] Figure 10 This is a schematic diagram illustrating the evidence preservation principle of the present invention;
[0034] Figure 11 This is a schematic diagram of another evidence preservation principle of the present invention.
[0035] In the diagram: 1. Commercial Secrets Think Tank Module; 2. Commercial Secrets Audit Module; 3. Evidence Preservation Record Module; 4. Secret Data Folder; 5. First Evidence Preservation Button; 6. Automatic Evidence Preservation Settings Interface; 7. Secret Data Search Field Input Box; 8. Batch Evidence Preservation Button; 9. Batch Removal Button; 10. Target File Search Box; 11. Second Evidence Preservation Button; 12. Evidence Preservation History Button; 13. Commercial Secrets Management Module; 14. Management Module; 15. Third Evidence Preservation Button; 16. Upload Evidence Button; 17. Fourth Evidence Preservation Button; 18. Evidence Preservation Search Field Input Box; 19. Homepage Module; 20. Evidence Preservation Calendar Module; 21. Start Guide Module; 22. Settings Button; 23. Import Evidence Preservation File Query Button; 24. Commercial Secrets Preservation Module Detailed Implementation
[0036] The technical solutions of various embodiments of the present invention will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only some embodiments of the present invention, not all embodiments, and the embodiments of the present invention can be combined with each other. Based on the embodiments of the present invention, all other embodiments obtained by those skilled in the art without creative effort are within the scope of protection of the present invention.
[0037] like Figures 1-9 As shown, an embodiment of the present invention provides a data storage and management system, including: a commercial secrets think tank module 1 and a commercial secrets audit module 2.
[0038] like Figure 1 As shown, when the Business Secrets Think Tank Module 1 is clicked, the interface displays the classified secret data folder 4 and the first evidence storage button 5. In this embodiment, the category of the secret data folder 4 displayed on the interface can be preset, or the system can automatically identify and classify the data according to the AI model.
[0039] When the first evidence storage button 5 is clicked, the system will automatically store the classified key data. Specifically, when the first evidence storage button 5 is clicked, the automatic evidence storage settings interface 6 is displayed (e.g., ...). Figure 2 As shown, the system is used to set the inspection parameters for automatic evidence storage, such as the inspection cycle (once a week) and inspection time (Friday). Once the first evidence storage button 5 is clicked and the parameters are set for the first time, the system will automatically update the key data and automatically store the evidence according to the set parameters. Of course, if the target data cannot be found in the key data folder 4, you can click the "Add Key Data" button on the interface to manually add the key data.
[0040] In one embodiment, the system further includes a certificate recording module 3, which is used to record and save the certificated information.
[0041] In addition, in one embodiment, the commercial secret database module 1 is also used to display the secret data search field input box 7, the batch evidence storage button 8, and the batch removal button 9.
[0042] For example, the key data search field input box 7 includes, but is not limited to: personnel input box, department input box, evidence storage status input box, file input box, etc. The system queries and displays the query results based on the information entered in the key data search field input box 7. Each query result may also include a "Details" button. Clicking the "Details" button allows you to view the detailed information of the result.
[0043] When the batch evidence storage button 8 is clicked, the system will perform batch evidence storage on the selected query results; when the batch removal button 9 is clicked, the system will perform batch removal on the selected query results.
[0044] In one embodiment, the system interface also displays a legal and regulatory search input box. The system queries and displays legally relevant search results based on the information entered in the input box. For example, entering the keyword "trade secret" in the legal and regulatory search input box will display relevant laws and regulations; entering "Anti-Unfair Competition Law" will display relevant laws and regulations, thereby enhancing users' awareness of legal compliance and risk management.
[0045] like Figure 3 As shown, the page containing the Commercial Secrets Audit Module 2 displays the target file search box 10. The system queries and displays the ownership information of the target file based on the information entered in the target file search box 10.
[0046] For example, if you enter the keyword "precision parts" in the target file search box 10, the search box will display multiple target files related to "precision parts" (such as target file 1, target file 2, etc.). The system will query and display the ownership information of the selected target file (target file 1). The ownership information includes the creator node information of the target file and the owner node information of one or more target files. The creator node information includes the creator's name and may also include the IP address of the creator's client. The owner node information includes the owner's name and may also include the IP address of the owner's client.
[0047] In one embodiment, an arrow exists between the creator node and the owner node to indicate the chronological order of ownership of the target file. For example, if creator A created target file 1 first, and owner B subsequently acquired target file 1, then the creator A node points to the owner B node. Additionally, the creator A node displays the creator A's name and the IP address of the creator A's client, and similarly, the owner B node displays the owner B's name and the IP address of the owner B's client.
[0048] In another embodiment, there is an arrow between the creator node and the owner node to indicate the flow relationship of the target file. For example, if creator A creates target file 1 and sends target file 1 to receiver B, the interface will display the creator A node and the receiver B node. There is a file flow arrow between the creator A node and the receiver B node, and the arrow direction is from the creator A node to the receiver B node.
[0049] In one embodiment, the commercial secret audit module 2 is also used to display a second evidence storage button 11. When the second evidence storage button 11 is clicked, the system stores the target file as evidence.
[0050] In one embodiment, the commercial secret audit module 2 page also displays employee information that owns the target file and a storage history button 12. When the storage history button 12 is clicked, the system will display the historical files stored by the system when the second storage button 11 was clicked.
[0051] For example, still using the above embodiment as an example, when the keyword "precision parts" is entered into the target file search box 10, the search box will display multiple target files related to "precision parts" (such as target file 1, target file 2, etc.). The system queries and displays the employee information of the owner of target file 1 based on one of the selected target files (such as target file 1) (such as owner A's name and owner A's department, owner B's name and owner B's department). When the second evidence preservation button 11 is clicked, the system will preserve target file 1. Similarly, if the system queries and displays the employee information of the owner of target file 2 based on one of the selected target files (such as target file 2), when the second evidence preservation button 11 is clicked, the system will preserve target file 2. When the evidence preservation history button 12 is clicked, the system will display the historical files (such as target file 1 and target file 2) that were preserved when the second evidence preservation button 11 was clicked.
[0052] In one embodiment, when any target file owner node is clicked, the system will display all operation information of the target file owner on the target file.
[0053] like Figure 4 As shown, for example, taking the above embodiment as an example, the system queries and displays the ownership information of one of the selected target files (such as target file 1). The ownership information includes owner node A, owner node B, owner node C, etc. When owner node A is clicked, the system will display all the operation information of owner A on target file 1, such as when owner A created target file 1, when owner A previewed target file 1, and the client system version number information of the operation, etc.
[0054] like Figure 5 As shown, in one embodiment, the system further includes a commercial security management module 13. The interface of the commercial security management module 13 displays multiple management modules 14 categorized and a third evidence storage button 15. When the third evidence storage button 15 is clicked, the system stores the files uploaded in the multiple management modules 14 as evidence.
[0055] For example, the commercial security management module 13 interface displays multiple categorized management modules 14: physical protection management module, internal policy management module, external protocol management module, data encryption management module, and access restriction management module. Each module displays an upload file button. For example, clicking the upload file button on the internal policy management module allows users to upload files related to internal policy management. When the third evidence preservation button 15 is clicked, the system preserves the uploaded files (such as files related to internal policy management) from multiple management modules.
[0056] In one embodiment, a push button for all employees is also displayed on the interface of the commercial security management module 13. When the push button for all employees is clicked, the system will push the files uploaded in multiple management modules to all employees via email.
[0057] like Figure 6 As shown, in one embodiment, the system further includes a commercial security preservation module 24, used to display an upload evidence button 16 and a fourth evidence preservation button 17. The upload evidence button 16 is used to upload evidence files, such as evidence files of the right holder's profit loss, licensing fees, and commercial value when the upload evidence button 16 is clicked. When the fourth evidence preservation button 17 is clicked, the system will preserve the uploaded evidence files.
[0058] In one embodiment, the commercial security preservation module 24 interface also displays the evidence storage history of the evidence documents.
[0059] In one embodiment, the trade secret preservation module 24 interface also displays prompts and explanations of evidence for the preservation of trade secrets, such as explanations of evidence of profit loss, licensing fees, and commercial value of the right holder.
[0060] like Figure 7 As shown, on the interface of the evidence storage record module 3, multiple evidence storage retrieval field input boxes 18 are displayed, such as employee name input box, secret data input box, evidence storage document input box, etc. The system queries and displays the query results based on the information entered in the input boxes. Each query result displays a custody letter viewing button. When the custody letter viewing button is clicked, the electronic custody letter electronic certificate issued by the Internet Notary Office is displayed.
[0061] In one embodiment, the evidence storage record module 3 is also used to display the import evidence storage file query button 23. When the import evidence storage file query button 23 is clicked, the system will display the upload evidence storage file interface. When the confirm button on the upload evidence storage file interface is clicked, the system will display the evidence storage records related to the uploaded evidence storage file.
[0062] like Figure 8 As shown, in one embodiment, the system further includes a homepage module 19 for displaying information on the number of evidence storage events and an evidence storage calendar module 20. When any time button in the evidence storage calendar module 20 is clicked, the system will display the evidence storage history information for that day.
[0063] In one embodiment, the homepage module 19 interface also displays a start guide module 21, which displays multiple setting item buttons 22. When any setting item button 22 is clicked, the system displays the setting item guide setting page. For example, the start guide module 21 displays a button to set department and employee information. After clicking the button, the system displays the setting interface for department and employee information.
[0064] like Figure 10 As shown, one of the evidence preservation principles of this invention is as follows: when the above-mentioned evidence preservation buttons are clicked, the system calculates the HASH value of each file to be preserved, concatenates the calculated HASH value of each file into a text file, and performs blockchain evidence preservation and notarization on the text file.
[0065] For example, if there are documents 1, 2, and 3 that need to be documented:
[0066] Step S1001: The system calculates the HASH value of each file to be stored, and obtains HASH value 1, HASH value 2 and HASH value 3 respectively;
[0067] Step S1002: Concatenate HASH value 1, HASH value 2, and HASH value 3 according to a predetermined format (JSON list) and encapsulate them into a text file (e.g., text file A). Then, perform blockchain notarization and notarization on the text file (text file A) to obtain a notarization custody letter for the text file (text file A), solidify the notarization timestamp, and ensure that the content of the file cannot be tampered with.
[0068] Step S1003: When a trade secret is leaked, enter the target file search box 10 according to the leaked content to quickly locate the relevant secret file (e.g., file 1) and download the secret file (file 1).
[0069] Step S1004: Calculate the HASH value of the dense dot file (file 1), assuming the value is A;
[0070] Step S1005: Retrieve text file A through the aforementioned evidence storage letter, and open text file A;
[0071] Step S1006: Locate the position of the JSON string in text file A that has the same name as file 1, and obtain the HASH value corresponding to that position. Let's assume that the value is B.
[0072] Step S1007: Compare screenshots of value A and value B as electronic evidence. If value A and value B are the same, it means that the leaked content comes from file 1. At the same time, by entering the name of file 1 in the target file search box 10, you can view the personnel who own file 1 on the interface of the commercial secret audit module, which makes it easier to locate the source of the leak.
[0073] The above-mentioned evidence preservation methods achieve the following technical effects:
[0074] 1. By using the strategy of "fingerprint collection into file", all key point files are condensed into a lightweight file to be stored. No matter how many key point files are at the bottom layer, only this one file needs to be stored and notarized on the blockchain, changing "batch storage" to "single storage", and the cost decreases exponentially.
[0075] 2. The on-chain document to be stored only contains the hash value of the encrypted file. The hash value has one-way irreversibility and cannot be used to deduce the original file content. Even if the content of the document to be stored is made public, the substantive content of the trade secret remains safe, truly achieving "only verifying authenticity, not disclosing content".
[0076] 3. By encapsulating the files, confidential documents from the same batch and case are logically bundled into a single entity. The file to be stored serves as a "catalog index" or "seal" for this batch of evidence. Once needed, simply opening this single file allows access to view the fingerprints of all related files, significantly improving management efficiency.
[0077] 4. Combining technical evidence preservation with national notarization reduces the difficulty of cross-examining evidence and greatly increases the acceptance rate of electronic data as the basis for judgment.
[0078] like Figure 11 As shown, another principle of evidence preservation in this invention is:
[0079] Step S1101: Adaptive Sharding and Metadata Injection
[0080] When the above-mentioned evidence preservation buttons are clicked, the system performs logical slicing on each file to be preserved (such as file 1, file 2, file 3), generates a data block sequence {d1, d2, ..., dn}, and takes the archiving environment factor (including server UUID, hardware random number and high-precision timestamp T) as a random salt value and injects it into each data block.
[0081] Step S1102: Construct a multi-level feature Merkle tree
[0082] For each data block with an injected salt value, calculate the underlying hash, which serves as a leaf node. Construct a Merkle tree using a recursive hashing approach until a unique root hash value, Root_Hash, is generated.
[0083] Step S1103: Cross-period spatiotemporal anchoring calculation
[0084] Retrieve the feature fingerprint H from the previous evidence storage period prev Using chaotic encryption functions or weighted hash algorithms, the current Root_Hash and H are... prev and the current physical environment characteristics Signature env (For example: hardware characteristics, network parameters, and other environmental characteristics) are fused together to calculate and generate the final evidence storage characteristic value H. final :
[0085] H final =Hash(Root_Hash⊕H prev ⊕Signature env )
[0086] Step S1104: Asynchronous bidirectional evidence storage
[0087] H final The data is encapsulated and written into a text file (e.g., text file A). The text file (text file A) is then stored and notarized on the blockchain to obtain a certificate of storage for the text file (text file A). At the same time, the system internally retains the hash values of all non-leaf nodes of the Merkle tree as path indexes for subsequent local integrity proofs.
[0088] Step S1105: Processing the leaked documents
[0089] When a file is leaked, the target file search box 10 is entered based on the leaked content to quickly locate the relevant sensitive file (e.g., file 1), download the sensitive file (file 1), and calculate the HASH value of the sensitive file (file 1), assuming that the value is A.
[0090] Step S1106: Cascade Operation
[0091] Retrieve text file A using the aforementioned evidence preservation letter, open text file A, locate the Merkle tree in text file A, and perform concatenation operations on the hash values of nodes adjacent to the preserved key point file (file 1) along the Merkle tree path to obtain value B. The specific operation method is not limited to this.
[0092] Step S1107: Local verification
[0093] Compare screenshots of values A and B as electronic evidence. If values A and B are the same, it means that the leaked content originated from file 1. At the same time, by entering the name of file 1 in the target file search box 10, you can view the personnel who own file 1 on the interface of the commercial secret audit module, which makes it easier to locate the source of the leak.
[0094] The above-mentioned evidence preservation methods achieve the following technical effects:
[0095] 1. Ultra-fast verification: Verify a single piece of data from trillions of data records, reducing the time complexity from O(N) to O(logN), achieving verification in seconds.
[0096] 2. Anti-counterfeiting and anti-deletion: Any deletion of historical archived data or replacement of the entire evidence package will cause the entire anchoring chain to break, and the system can detect this in real time.
[0097] 3. Storage optimization: Compared with full backup for evidence storage, the feature data submitted to the third party in this solution is extremely small (only 256 bits), which greatly reduces the cost of evidence storage.
[0098] 4. High credibility: Using physical attribute features (hardware ID, timestamp) as hash salt values in the evidence storage calculation results in higher credibility of the evidence storage feature values.
[0099] It should be noted that, in this document, relational terms such as "first" and "second" are used only to distinguish one entity or operation from another, and do not necessarily require or imply any such actual relationship or order between these entities or operations. Furthermore, the terms "comprising," "including," or any other variations thereof are intended to cover non-exclusive inclusion, such that a process, method, article, or apparatus that comprises a list of elements includes not only those elements but also other elements not expressly listed, or elements inherent to such process, method, article, or apparatus.
[0100] Although embodiments of the invention have been shown and described, it will be understood by those skilled in the art that various changes, modifications, substitutions and alterations can be made to these embodiments without departing from the principles and spirit of the invention, the scope of which is defined by the appended claims and their equivalents, and the description and accompanying drawings serve an explanatory purpose.
Claims
1. A data storage and management system, characterized in that, include: Commercial secrets think tank module, commercial secrets audit module; The proprietary knowledge database module is used to display categorized confidential data folders and a first evidence storage button. When the first evidence storage button is clicked, the system will automatically store the categorized confidential data. The commercial secret audit module is used to display a target file search box. The system queries and displays the ownership information of the target file based on the information entered in the target file search box.
2. The data evidence management system according to claim 1, characterized in that, When the first evidence preservation button is clicked, the automatic evidence preservation settings interface is displayed, which is used to set the inspection parameters for automatic evidence preservation.
3. The data evidence management system according to claim 1, characterized in that, The commercial cryptography database module is also used to display the cryptographic data search field input box, the batch certificate storage button, and the batch removal button; The system queries and displays the query results based on the information entered in the key data search field input box. When the batch evidence storage button is clicked, the system will perform batch evidence storage on the selected query results. When the "Remove in Batch" button is clicked, the system will remove the selected query results in batches.
4. The data evidence management system according to claim 1, characterized in that, The system interface also displays a legal and regulatory search input box. The system queries and displays legal-related search results based on the information entered in the legal and regulatory search input box.
5. The data evidence management system according to claim 1, characterized in that, The system also includes a commercial security management module, which displays multiple management modules categorized and a third evidence storage button. When the third evidence storage button is clicked, the system stores the uploaded files in the multiple management modules as evidence.
6. The data evidence management system according to claim 1, characterized in that, The commercial secret audit module is also used to display a second evidence storage button. When the second evidence storage button is clicked, the system will store the target file as evidence.
7. The data evidence management system according to claim 6, characterized in that, The commercial secret audit module is also used to display employee information and a storage history button that holds the target file. When the storage history button is clicked, the system will display the historical files stored by the system when the second storage button was clicked.
8. The data evidence management system according to claim 1, characterized in that, The ownership information of the target file includes multiple target file owner nodes. When any target file owner node is clicked, the system will display all the operation information of that target file owner on the target file.
9. The data evidence management system according to claim 1, characterized in that, The system also includes a commercial security module, which displays the upload evidence button and the fourth evidence storage button; The upload evidence button is used to upload evidence files. When the fourth evidence storage button is clicked, the system will store the uploaded evidence files as evidence.
10. The data evidence management system according to claim 1, characterized in that, The system also includes a homepage module for displaying information on the number of times evidence has been stored and an evidence storage calendar module; When any time button in the evidence storage calendar module is clicked, the system will display the evidence storage history information for that day.