CN115942262B - Short message service system with data security mechanism and method thereof - Google Patents

Abstract

The invention discloses a short message service system with a data security mechanism and a method thereof, which relate to the technical field of short message service and aim to solve the security problem of short message data. The short message service system with the data security mechanism and the method thereof provided by the invention determine the single maximum aggregate data volume of each aggregation node, receive the second data sent by the risk data receiving terminal by utilizing the shared data transmission channel, effectively improve the security of the data after the risk data is screened, label the first abnormal data and the second abnormal data as final effective abnormal data, and ensure the definition and accuracy of the final effective abnormal data, thereby providing basis for realizing the judgment and decision of the numerical value of the data, being convenient for the self-judgment of the data, ensuring the security of the data to the greatest extent by a plurality of encryption matrixes, improving the security mechanism of the whole data and enabling the service port of the short message to be more excellent in use.

Description

A short message service system with data security mechanism and method thereof

Technical Field

The present invention relates to the technical field of short message services, and in particular to a short message service system with a data security mechanism and a method thereof.

Background Art

SMS service is the earliest short message service and also the most popular short message service.

The Chinese patent with publication number CN114599032A discloses a method and device for SMS transmission based on salt value encryption. The method includes: the SMS service end uses the effective salt value to encrypt the SMS to be sent, and the effective salt value information includes the effective salt value and the salt value identifier. The method mainly solves the problem that the SMS service end uses the effective salt value to encrypt the SMS to be sent. Since the salt value has a validity period, once the salt value exceeds the validity period, it will become invalid and can no longer be used for encryption, thereby increasing the security of information encryption and increasing the difficulty of capturing the sensitive information of the customer during the link transmission process. Moreover, due to the existence of a timed refresh mechanism of the salt value, once the information is not decrypted in time, decryption becomes very difficult, thereby protecting the security of the customer's privacy data. Although the above problem is a problem of data encryption, there are still the following problems in actual operation:

1. When receiving SMS data, there is no effective assessment of the traffic changes during data transmission. Excessive traffic can easily cause traffic explosion during transmission. When data is transmitted, historical successful data is not used to parse the existing data. At the same time, abnormal data in the data is not promptly checked for risks, resulting in reduced data integrity and security.

2. After receiving the abnormal data, there is no comparison of the abnormal data, which increases the redundancy of the abnormal data. At the same time, there is no timely judgment on the abnormal data, which reduces the accuracy of the data.

3. Abnormal data and valid data are not distinguished, resulting in the abnormal data being encrypted at the same time during encryption, resulting in an excessive amount of storage after encryption.

Summary of the invention

The purpose of the present invention is to provide a short message service system and method with a data security mechanism, determine the single maximum aggregated data volume of each aggregation node, use the shared data transmission channel to receive the second data sent by the risk data receiving terminal, and effectively improve the security of the data after the risk data is screened out. The first abnormal data and the second abnormal data are marked as the final effective abnormal data to ensure the clarity and accuracy of the effective abnormal data finally obtained, thereby providing a basis for determining and making decisions on the numerical value of the data, facilitating the self-judgment of the data, and multiple encryption matrices can protect the security of the data to the greatest extent. At the same time, the overall data security mechanism is also improved, so that the service port of the short message can be used better, and the problems in the prior art can be solved.

To achieve the above object, the present invention provides the following technical solutions:

A short message service method with a data security mechanism, the method comprising the following steps:

S1: SMS data collection: collect SMS data information through the gateway port and store the collected SMS data independently;

S2: Data cache extraction: cache the independently stored SMS data information and extract the risk data in the cache data;

S3: Risk data reading and calculation: the extracted risk data is read, and the difference between abnormal data and data within the normal range is calculated;

S4: Differential data reading: Read and analyze the sequence data after differential calculation, and perform effective data integration on the analyzed data;

S5: Valid data encryption: Encrypt valid data and start the encrypted data first.

Preferably, the SMS data collection further includes:

Information data collection system for:

Obtain the traffic changes of the network layer of each data receiving terminal when transmitting data;

Evaluate the importance of each network layer based on the traffic changes of each data receiving terminal's network layer when transmitting data;

Count the target network layers where the importance of each data receiving terminal is greater than or equal to a preset threshold;

Get the historical transmission success data of each data receiving terminal.

Preferably, the risk data reading after the collection is completed further includes:

Abnormal data analysis unit, used to:

According to the historical transmission success data of each data receiving terminal obtained in the information data collection system;

Parsing the historical successful transmission data to determine its integrity and security, and evaluating the threat risk index and vulnerability risk index of the data receiving terminal based on the integrity and security;

Calculate the security index of the data receiving terminal using a preset risk assessment system according to the working intensity of the target network layer of each data receiving terminal and the threat risk index and vulnerability risk index of the data receiving terminal;

Screen out safe data receiving terminals and risky data receiving terminals according to the security index of each data receiving terminal;

receiving first data sent by the security data receiving terminal;

Acquiring configuration information and network information of the risk data receiving terminal;

Constructing a shared data transmission channel for a risk data receiving terminal according to the network information;

Acquire multiple aggregation nodes in the shared data transmission channel, and determine a single maximum aggregation data volume of each aggregation node;

Determine the target second data with the largest data volume among the second data of the risk data receiving terminal;

Calculating a target data transmission efficiency of the shared data transmission channel according to the target second data and a maximum aggregated data volume of data of each aggregation node in the shared data transmission channel;

The data transmission efficiency of the shared data transmission channel is set to the target data transmission efficiency. After the setting is completed, the shared data transmission channel is used to receive the second data sent by the risk data receiving terminal.

Preferably, the calculation of the difference between the abnormal data and the data within the normal range value also includes:

Difference calculation module for:

After obtaining the risk data, the risk data is converted into specific values, and then the difference between the risk data and the data values within the normal range is calculated;

A judgment module, used for obtaining the numerical sequence of the data difference calculation, performing periodicity detection on the numerical sequence, and judging whether the numerical sequence is a periodic sequence;

an analysis module, configured to, after determining that the numerical sequence is a periodic sequence, divide the numerical sequence according to the periodicity to obtain a plurality of identical first subsequences, determine whether all the numerical values in the first subsequence are greater than a preset numerical value, if so, extract a first abnormal numerical value in the first subsequence that is greater than the preset numerical value, determine the adjacent time intervals between the first abnormal numerical values, and determine whether the time intervals are within a preset time interval range, if so, use the first abnormal numerical value and the time interval as first abnormal data, otherwise, determine that the first abnormal numerical value is invalid;

The data integration module is used to periodically mark the first abnormal data to obtain first valid abnormal data, non-periodically mark the second abnormal data to obtain second valid abnormal data, and independently store the first valid abnormal data and the second valid abnormal data as final valid abnormal data, and do not send their data to the next reading module.

Preferably, the analysis module further includes:

The analysis module is further used to, after determining that the numerical sequence is a non-periodic sequence, perform a clustering operation on the numerical sequence using a one-dimensional clustering method to obtain multiple segmentation points, and use the multiple segmentation points to divide the numerical sequence to obtain multiple groups of different second subsequences, obtain a third subsequence with a value greater than a preset value from the second subsequence, and determine the abnormal time interval of the third subsequence based on the position of the third subsequence in the numerical sequence, and obtain a fourth subsequence whose abnormal time interval of an adjacent third subsequence is within the preset time interval range, and use the fourth subsequence and the abnormal time interval as second abnormal data.

Preferably, the valid data reading and encryption further includes:

Valid data reading module, used for:

Based on the first valid abnormal data and the second valid abnormal data in the data integration module as the final valid abnormal data, the data is checked as a benchmark, and the other data after the check is taken as the valid data;

Data decoding and encryption module, used for:

Decoding the valid data, taking the decoded data as the original data and dividing it into segments to be encrypted of a preset length, and establishing an encryption sequence based on the segments to be encrypted;

According to the number of the segments to be encrypted, the encryption sequence is used as the first column of the matrix to establish a first encryption matrix;

adjusting a first position of each to-be-encrypted segment on a corresponding row of the first encryption matrix based on a preset interference factor, and performing a first encryption on the segment after the adjustment is completed;

Based on the number of interferences, a corresponding interference password is obtained from a preset password set, and a random number is rolled using an encrypted dice;

marking a second position in each row of the first encryption matrix that is separated from the first position by a random number;

Inputting the interference password into the second position in sequence for second encryption to establish a second encryption matrix;

When a first number of blank positions in the second encryption matrix is greater than a second number of non-blank positions, determining that the current encryption level is insufficient;

The outermost positions of the second matrix are removed in sequence to generate a plurality of sub-encryption matrices;

Calculate the encryption rank of each sub-encryption matrix respectively, and generate a rank password based on all the encryption ranks;

Inputting the rank password into the second encryption matrix for third encryption to obtain a third encryption matrix;

Based on the specification of the third encryption matrix, randomly generate a homogeneous matrix;

Marking the remaining blank positions on the third encrypted matrix, and superimposing the marked third encrypted matrix with the isotype matrix to obtain a superposition number generated by the marked positions;

Input the superposition number into the remaining blank positions to obtain a fully encrypted matrix;

The data corresponding to each position in the first encryption matrix is extracted to obtain encrypted data.

Preferably, caching the data includes:

A data retrieval module is used to obtain independently stored SMS data information, extract key information fragments of the SMS data information, and determine the information type of the SMS data information based on the target semantics of the key information fragments;

A cache space determination module, used to determine a target cache space corresponding to the SMS data information based on the information type, extract capacity information of the target cache space, and determine a first remaining available space capacity of the target cache space based on the capacity information;

The cache space determination module is used to obtain the data length of the SMS data information, and when the first remaining available space capacity is greater than the data length, cluster the SMS data information to obtain a set of sub-data types corresponding to the SMS data information, and set a type identifier for each sub-data type;

a cache space division module, for dividing the target cache space into first blocks based on the type identifier, and adding block identifiers to the divided sub-target cache spaces, and at the same time, performing a second division on each sub-target cache space to obtain a first storage entry and a second storage entry corresponding to each sub-target cache space, wherein the block identifier corresponds to the type identifier;

A data cache module, used to extract the target content of the SMS data information corresponding to each sub-data type based on the type identifier, and cache the type identifier and the target content to the first storage entry and the second storage entry respectively;

The data update module is used to monitor the reading operation of the SMS data information in real time, and when the reading of the SMS data information is detected, determine the real-time reading amount of the SMS data information based on the reading process, and determine the data tail of the remaining SMS data information in the target cache space based on the reading amount;

The space update module is used to move the preset cursor to the tail of the SMS data information in the target cache space, determine the second remaining available space capacity of the target cache space based on the movement result, and indicate the second remaining available space capacity of the target cache space based on the preset cursor.

Preferably, in S1, the SMS data information is collected through the gateway port, including:

Determine the total number of data packets collected by the SMS data information based on the gateway port, perform integrity check on the SMS data information, and calculate the integrity index of the SMS data information received by the gateway port based on the check result;

;

in, Indicates the complete index of the SMS data information received by the gateway port; Indicates the number of data packets that failed the integrity check; Indicates the total number of data packets;

Map the SMS data information corresponding to the data packet that has passed the integrity check to the storage space of the gateway port, and calculate the security index of the gateway port for receiving the SMS data information based on the mapping result;

;

in, Indicates the security index of the gateway port receiving SMS data information; Represents the data mapping uniformity factor; Indicates the probability of no data loss when SMS data information is mapped; Indicates the current mapping length of SMS data information in the storage space; Indicates the minimum length of storage space; Indicates the maximum length of the storage space; represents the logarithm with base 2;

Based on the integrity index of the SMS data information received by the gateway port and the security index of the SMS data information received by the gateway port, the quality of the SMS data information collected by the gateway port is evaluated and an evaluation score is obtained;

Compare the evaluation score with the set threshold to determine whether the SMS data information collected by the gateway port is qualified;

When the evaluation score is equal to or greater than the set score, it is determined that the SMS data information collected by the gateway port is qualified;

Otherwise, it is determined that the SMS data information collected by the gateway port is unqualified and an alarm operation is performed.

Compared with the prior art, the present invention has the following beneficial effects:

1. The present invention provides a short message service system and method with a data security mechanism. The importance of each network layer is evaluated according to the traffic change situation, and the traffic change is paid attention to in time, so as to avoid the traffic explosion caused by excessive traffic. Then, the collected short message data is analyzed with the historical data of successful transmission to determine its integrity and security. Then, the threat risk index and vulnerability risk index of the data are evaluated according to the integrity and security. The security index of the data receiving terminal is calculated by using a preset risk assessment system. The safe data receiving terminal and the risk data receiving terminal are screened out according to the security index. According to the safe data receiving terminal and the risk data receiving terminal, multiple aggregation nodes in the shared data transmission channel are obtained, and the single maximum aggregation data volume of each aggregation node is determined. The second data sent by the risk data receiving terminal is received by using the shared data transmission channel. After the risk data is screened out, the security of the data can be effectively improved.

2. The present invention provides a short message service system and method with a data security mechanism. Different methods are used to analyze periodic sequences and non-periodic sequences to ensure the focus and efficiency of sequence analysis. The periodic sequence is divided into the same first subsequence for numerical judgment and time interval. While ensuring that the numerical value meets the abnormal requirement, the time interval is also judged. If the time interval exceeds the preset time interval, it means that the time between two first abnormal values is long and cannot be used as valid abnormal data. The first abnormal value and time interval are used as the first abnormal data to reduce the redundancy of the abnormal data and ensure the accuracy of the obtained first abnormal data. For the non-periodic sequence, the numerical sequence is first clustered by a one-dimensional clustering method to obtain multiple segmentation points, so that the division of the segmentation points is more accurate and objective. After the non-periodic sequence is divided, the numerical value and the abnormal time interval are judged in the same way, and the second abnormal data are finally obtained to ensure the accuracy of the obtained second abnormal data. Finally, the first abnormal data and the second abnormal data are marked as the final effective abnormal data to ensure the clarity and accuracy of the final effective abnormal data, thereby providing a basis for determining and making decisions on the numerical value of the data and facilitating the self-judgment of the data.

3. The present invention provides a short message service system and method with a data security mechanism, which excludes abnormal data in all data, so as to obtain valid data, first decode the valid data, use the decoded data as the original data and divide it into segments to be encrypted with a preset length, and use the encryption sequence as the first column of the matrix according to the number of segments to be encrypted, establish a first encryption matrix, input the interference password into the second position in sequence for the second encryption, establish a second encryption matrix, input the rank password into the second encryption matrix for the third encryption, obtain the third encryption matrix, and superimpose the marked third encryption matrix with the same type matrix to obtain the superposition number generated by the marked position; input the superposition number into the remaining blank position to obtain a full encryption matrix, extract the data corresponding to each position in the full encryption matrix, and obtain the encrypted data. Multiple encryption matrices can protect the security of data to the greatest extent, and also improve the overall data security mechanism, so that the service port of the short message can be used better.

4. The present invention provides a short message service system and method with a data security mechanism. By analyzing the short message data information, the information type of the short message data information can be accurately and effectively confirmed, so as to facilitate the determination of the target cache space for caching the short message data information. Secondly, by clustering the short message data information, and classifying the different data types contained in the short message data information according to the clustering results, and dividing the target cache space according to the classification results, it is convenient to store different types of data in corresponding storage areas. At the same time, each sub-target storage space is divided again to ensure the cache effect and cache accuracy of each type of data content and type identifier. Finally, different types of data are cached in the corresponding sub-target cache space, and the reading operation of the short message data information is monitored in real time. After the reading operation, the remaining available space capacity of the target cache space is determined in real time, and indicated by a preset cursor pointing, thereby ensuring the cache effect of the short message data information and improving the security factor of the short message data information.

5. The present invention provides a text message service system and method with a data security mechanism. By calculating the integrity index of the text message data information received by the gateway port and the security index of the text message data information received by the gateway port, it is effectively measured whether the text message data information collected by the gateway port is qualified, and then the quality of the collected text message data information is timely grasped.

BRIEF DESCRIPTION OF THE DRAWINGS

FIG1 is a schematic diagram of the overall method flow of the present invention;

FIG. 2 is a schematic diagram of the overall system of the present invention.

DETAILED DESCRIPTION

The following will be combined with the drawings in the embodiments of the present invention to clearly and completely describe the technical solutions in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

In order to solve the problem in the prior art that when receiving SMS data, the traffic change during data transmission is not effectively evaluated, and excessive traffic easily causes traffic explosion during transmission. When data is transmitted, the existing data is not analyzed using historical successful data, and the abnormal data in the data is not promptly checked for risks, thereby reducing the integrity and security of the data, please refer to Figures 1 and 2. This embodiment provides the following technical solutions:

A short message service method with a data security mechanism, the method comprising the following steps:

S1: SMS data collection: collect SMS data information through the gateway port and store the collected SMS data independently;

S2: Data cache extraction: cache the independently stored SMS data information and extract the risk data in the cache data;

S3: Risk data reading and calculation: the extracted risk data is read, and the difference between abnormal data and data within the normal range is calculated;

S4: Differential data reading: Read and analyze the sequence data after differential calculation, and perform effective data integration on the analyzed data;

S5: Valid data encryption: Encrypt valid data and start the encrypted data first.

The SMS data collection also includes: an information data collection system, which is used to: obtain the traffic changes of the network layer of each data receiving terminal when transmitting data; evaluate the importance of each network layer based on the traffic changes of the network layer of each data receiving terminal when transmitting data; count the target network layers whose importance of each data receiving terminal is greater than or equal to a preset threshold; and obtain the historical transmission success data of each data receiving terminal.

The risk data reading after the collection also includes: an abnormal data analysis unit, which is used to: according to the historical transmission success data of each data receiving terminal obtained in the information data collection system; analyze the historical transmission success data to determine its integrity and security, and evaluate the threat risk index and vulnerability risk index of the data receiving terminal according to the integrity and security; calculate the security index of the data receiving terminal according to the working intensity of the target network layer of each data receiving terminal and the threat risk index and vulnerability risk index of the data receiving terminal using a preset risk assessment system; screen out safe data receiving terminals and risky data receiving terminals according to the security index of each data receiving terminal; receive the first data sent by the safe data receiving terminal; Acquire the configuration information and network information of the risk data receiving terminal; construct a shared data transmission channel of the risk data receiving terminal according to the network information; acquire multiple aggregation nodes in the shared data transmission channel, and determine the single maximum aggregated data volume of each aggregation node; determine the target second data with the largest data volume among the second data of the risk data receiving terminal; calculate the target data transmission efficiency of the shared data transmission channel according to the target second data and the maximum aggregated data volume of the data of each aggregation node in the shared data transmission channel; set the data transmission efficiency of the shared data transmission channel to the target data transmission efficiency. After the setting is completed, use the shared data transmission channel to receive the second data sent by the risk data receiving terminal.

Specifically, the transmitted SMS data information is first collected through the gateway port, and the traffic changes of the network layer of each data receiving terminal during data transmission are obtained during the collection. Then, the importance of each network layer is evaluated according to the traffic changes. Timely attention to traffic changes can avoid traffic explosions caused by excessive traffic. The collected SMS data is then analyzed with the historical data of successful transmission, and its integrity and security are determined. Then, the threat risk index and vulnerability risk index of the data are evaluated based on the integrity and security. The security index of the data receiving terminal is calculated using a preset risk assessment system, and safe data receiving terminals and risky data receiving terminals are screened out based on the security index. Based on the safe data receiving terminals and risky data receiving terminals, multiple aggregation nodes in the shared data transmission channel are obtained, and the single maximum aggregated data volume of each aggregation node is determined. The shared data transmission channel is used to receive the second data sent by the risky data receiving terminal. After the risky data is screened out, the security of the data can be effectively improved.

In order to solve the problem in the prior art that after receiving abnormal data, the abnormal data is not compared, thereby increasing the redundancy of the abnormal data, and failing to make a timely judgment on the abnormal data, thereby reducing the accuracy of the data, please refer to FIG. 1 and FIG. 2 , this embodiment provides the following technical solutions:

The calculation of the difference between the abnormal data and the data within the normal range also includes: a difference calculation module, which is used to: after obtaining the risk data, convert the risk data into a specific numerical value, and then perform a difference calculation between the risk data and the data value within the normal range; a judgment module, which is used to obtain the numerical sequence of the data difference calculation, perform periodic detection on the numerical sequence, and judge whether the numerical sequence is a periodic sequence; an analysis module, which is used to divide the numerical sequence according to the period to obtain multiple groups of identical first subsequences after determining that the numerical sequence is a periodic sequence, and judge whether all the numerical values in the first subsequence are greater than a preset numerical value. If so, extract the first abnormal numerical value in the first subsequence that is greater than the preset numerical value, and determine the adjacent time intervals between the first abnormal numerical values, and judge whether the time interval is within the preset time interval range. If so, use the first abnormal numerical value and the time interval as the first abnormal data, otherwise, determine that the first abnormal numerical value is invalid; the analysis module , and is also used for, after determining that the numerical sequence is a non-periodic sequence, using a one-dimensional clustering method to perform a clustering operation on the numerical sequence to obtain multiple segmentation points, and using the multiple segmentation points to divide the numerical sequence to obtain multiple groups of different second subsequences, obtaining a third subsequence with a value greater than a preset value from the second subsequence, and determining the abnormal time interval of the third subsequence based on the position of the third subsequence in the numerical sequence, and obtaining a fourth subsequence whose abnormal time interval of the adjacent third subsequence is within the preset time interval range, and using the fourth subsequence and the abnormal time interval as second abnormal data; a data integration module, used for periodically marking the first abnormal data to obtain first valid abnormal data, non-periodically marking the second abnormal data to obtain second valid abnormal data, and independently storing the first valid abnormal data and the second valid abnormal data as final valid abnormal data, and not sending their data to the next reading module.

Specifically, firstly, the periodicity of the numerical sequence is judged, and different methods are used to analyze the periodic sequence and the non-periodic sequence to ensure the focus and efficiency of the sequence analysis. The periodic sequence is divided into the same first subsequence for numerical judgment and time interval. While ensuring that the numerical value meets the abnormal requirement, the time interval is also judged. If the time interval exceeds the preset time interval, it means that the time between two first abnormal values is long and cannot be used as valid abnormal data. The first abnormal value and time interval are used as the first abnormal data to reduce the redundancy of the abnormal data and ensure the accuracy of the obtained first abnormal data. For the non-periodic sequence, the numerical sequence is first clustered by a one-dimensional clustering method to obtain multiple segmentation points, so that the division of the segmentation points is more accurate and objective. After the non-periodic sequence is divided, the numerical value and the abnormal time interval are judged in the same way, and the second abnormal data are finally obtained to ensure the accuracy of the obtained second abnormal data. Finally, the first abnormal data and the second abnormal data are marked as the final effective abnormal data to ensure the clarity and accuracy of the final effective abnormal data, thereby providing a basis for determining and making decisions on the numerical value of the data and facilitating the self-judgment of the data.

In order to solve the problem in the prior art that abnormal data and valid data are not distinguished, resulting in the abnormal data being encrypted at the same time during encryption, resulting in an excessive amount of encrypted storage, please refer to Figures 1 and 2, this embodiment provides the following technical solutions:

The effective data reading and encryption also includes: an effective data reading module, which is used to: perform data screening based on the first effective abnormal data and the second effective abnormal data in the data integration module as the final effective abnormal data, and take other data after screening as effective data; a data decoding and encryption module, which is used to: decode the effective data, and use the decoded data as the original data and divide it into segments to be encrypted of a preset length, and establish an encryption sequence based on the segments to be encrypted; according to the number of segments to be encrypted, use the encryption sequence as the first column of the matrix to establish a first encryption matrix; adjust the first position of each segment to be encrypted on the corresponding row of the first encryption matrix based on a preset interference factor, and perform a first encryption on it after the adjustment is completed; obtain the corresponding interference password in the preset password set based on the number of interferences, and use the encryption dice to roll a random number; mark the random number separated from the first position in each row of the first encryption matrix. the second position of the encryption matrix; inputting the interference password into the second position in turn for second encryption to establish a second encryption matrix; when the first number of blank positions in the second encryption matrix is greater than the second number of non-blank positions, determining that the current encryption level is insufficient; removing the outermost positions of the second matrix in turn to generate a number of sub-encryption matrices; calculating the encryption rank of each sub-encryption matrix respectively, and generating a rank password based on all encryption ranks; inputting the rank password into the second encryption matrix for third encryption to obtain a third encryption matrix; based on the specifications of the third encryption matrix, randomly generating a homogeneous matrix; marking the remaining blank positions on the third encryption matrix, and superimposing the marked third encryption matrix with the homogeneous matrix to obtain the superposition number generated by the marked position; inputting the superposition number into the remaining blank positions to obtain a full encryption matrix; extracting the data corresponding to each position in the full encryption matrix to obtain encrypted data.

Specifically, the abnormal data is first used as a benchmark, and then the abnormal data in all the data is excluded, so that valid data can be obtained, the valid data is first decoded, and the decoded data is used as the original data and divided into segments to be encrypted with a preset length. According to the number of segments to be encrypted, the encryption sequence is used as the first column of the matrix to establish a first encryption matrix, and the interference password is input into the second position in sequence for the second encryption to establish a second encryption matrix, and the rank password is input into the second encryption matrix for the third encryption to obtain the third encryption matrix, and the marked third encryption matrix is superimposed with the same type matrix to obtain the superposition number generated by the marked position; the superposition number is input into the remaining blank position to obtain a full encryption matrix, and the data corresponding to each position in the full encryption matrix is extracted to obtain encrypted data. Multiple encryption matrices can protect the security of data to the greatest extent, and also improve the overall data security mechanism, so that the service port of SMS can be used better.

Specifically, data is cached, including:

A data retrieval module is used to obtain independently stored SMS data information, extract key information fragments of the SMS data information, and determine the information type of the SMS data information based on the target semantics of the key information fragments;

A cache space determination module, used to determine a target cache space corresponding to the SMS data information based on the information type, extract capacity information of the target cache space, and determine a first remaining available space capacity of the target cache space based on the capacity information;

The cache space determination module is used to obtain the data length of the SMS data information, and when the first remaining available space capacity is greater than the data length, cluster the SMS data information to obtain a set of sub-data types corresponding to the SMS data information, and set a type identifier for each sub-data type;

a cache space division module, for dividing the target cache space into first blocks based on the type identifier, and adding block identifiers to the divided sub-target cache spaces, and at the same time, performing a second division on each sub-target cache space to obtain a first storage entry and a second storage entry corresponding to each sub-target cache space, wherein the block identifier corresponds to the type identifier;

A data cache module, used to extract the target content of the SMS data information corresponding to each sub-data type based on the type identifier, and cache the type identifier and the target content to the first storage entry and the second storage entry respectively;

The data update module is used to monitor the reading operation of the SMS data information in real time, and when the reading of the SMS data information is detected, determine the real-time reading amount of the SMS data information based on the reading process, and determine the data tail of the remaining SMS data information in the target cache space based on the reading amount;

The space update module is used to move the preset cursor to the tail of the SMS data information in the target cache space, determine the second remaining available space capacity of the target cache space based on the movement result, and indicate the second remaining available space capacity of the target cache space based on the preset cursor.

In this embodiment, the key information segment may be a data segment that can represent the data content of the SMS data information.

In this embodiment, the target semantics may be the main content represented by the key information fragment, that is, the specific content expression representing the SMS data information.

In this embodiment, the target cache space may be a space suitable for caching SMS data information of the current type.

In this embodiment, the first remaining available space capacity may be the remaining storage space of the target cache space before storing the SMS data information.

In this embodiment, the data length of the SMS data information may be the amount of data bytes of the SMS data information, which is used to represent the required storage space of the SMS data information.

In this embodiment, the purpose of clustering the SMS data information is to classify the data of the same type, thereby achieving classification of data of different types of the SMS data information.

In this embodiment, the sub-data type set may be a data set of different data types obtained by classifying the SMS data information.

In this embodiment, the type identifier may be a marking tag used to mark different types of data.

In this embodiment, the first block division may be to divide the target cache space into corresponding storage areas according to the type of data to be stored.

In this embodiment, the sub-target cache space may be different storage areas obtained by dividing the target cache space.

In this embodiment, the block identifier may be a marking tag used to mark the storage types of different sub-target cache spaces, corresponding to the type identifier.

In this embodiment, the second division may be to divide each sub-target cache space into two parts, one for storing specific data content and the other for storing data identifiers.

In this embodiment, the first storage entry and the second storage entry may be storage areas obtained by dividing the sub-target cache space, and store the type identifier and the target content respectively.

In this embodiment, the target content may be the specific data value and content expression of the SMS data information corresponding to each sub-data type.

In this embodiment, the real-time read amount may be the amount of data read from the SMS data information cached in the target cache space.

In this embodiment, the data tail may be the last byte of the remaining SMS data information in the target cache space.

In this embodiment, the preset cursor pointing is set in advance and is used to indicate the current position of the SMS data information in the Mubao cache space.

In this embodiment, the second remaining available space capacity may be the remaining available storage capacity of the target cache space after partially reading the SMS data information in the target cache space.

The working principle and beneficial effects of the above technical solution are: by analyzing the SMS data information, the information type of the SMS data information can be accurately and effectively confirmed, so as to facilitate the determination of the target cache space for caching the SMS data information; secondly, by clustering the SMS data information, and classifying the different data types contained in the SMS data information according to the clustering results, and dividing the target cache space according to the classification results, it is convenient to store different types of data in corresponding storage areas; at the same time, each sub-target storage space is divided again to ensure the cache effect and cache accuracy of each type of data content and type identification; finally, different types of data are cached in the corresponding sub-target cache space, and the reading operation of the SMS data information is monitored in real time; after the reading operation, the remaining available space capacity of the target cache space is determined in real time, and indicated by a preset cursor pointing, thereby ensuring the cache effect of the SMS data information and improving the safety factor of the SMS data information.

Specifically, in S1, SMS data information is collected through the gateway port, including:

Determine the total number of data packets collected by the SMS data information based on the gateway port, perform integrity check on the SMS data information, and calculate the integrity index of the SMS data information received by the gateway port based on the check result;

;

in, Indicates the complete index of the SMS data information received by the gateway port; Indicates the number of data packets that failed the integrity check; Indicates the total number of data packets;

Map the SMS data information corresponding to the data packet that has passed the integrity check to the storage space of the gateway port, and calculate the security index of the gateway port for receiving the SMS data information based on the mapping result;

;

in, Indicates the security index of the gateway port receiving SMS data information; Represents the data mapping uniformity factor; Indicates the probability of no data loss when SMS data information is mapped; Indicates the current mapping length of SMS data information in the storage space; Indicates the minimum length of storage space; Indicates the maximum length of the storage space; represents the logarithm with base 2;

Based on the integrity index of the SMS data information received by the gateway port and the security index of the SMS data information received by the gateway port, the quality of the SMS data information collected by the gateway port is evaluated and an evaluation score is obtained;

Compare the evaluation score with the set threshold to determine whether the SMS data information collected by the gateway port is qualified;

When the evaluation score is equal to or greater than the set score, it is determined that the SMS data information collected by the gateway port is qualified;

Otherwise, it is determined that the SMS data information collected by the gateway port is unqualified and an alarm operation is performed.

In this embodiment, the maximum length and the minimum length of the storage space are set in advance, which is the range of the storage data volume of the storage space. When the current mapping length of the SMS data information in the storage space is less than the minimum length or greater than the maximum length, Take 1.

In this embodiment, the threshold value may be set in advance and is used as a standard to measure whether the SMS data information collected by the gateway port is qualified.

In this embodiment, the alarm operation may be one or more of light, sound, and vibration.

The working principle and beneficial effect of the above technical solution are: by calculating the integrity index of the SMS data information received by the gateway port and the security index of the SMS data information received by the gateway port, it is effectively measured whether the SMS data information collected by the gateway port is qualified, and then the quality of the collected SMS data information is grasped in time.

It should be noted that, in this article, relational terms such as first and second, etc. are only used to distinguish one entity or operation from another entity or operation, and do not necessarily require or imply any such actual relationship or order between these entities or operations. Moreover, the terms "include", "comprise" or any other variants thereof are intended to cover non-exclusive inclusion, so that a process, method, article or device including a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, method, article or device.

Although embodiments of the present invention have been shown and described, it will be appreciated by those skilled in the art that various changes, modifications, substitutions and variations may be made to the embodiments without departing from the principles and spirit of the present invention, and that the scope of the present invention is defined by the appended claims and their equivalents.

Claims (6)

1. A short message service method with a data security mechanism is characterized in that: the method comprises the following steps:

S1: and (3) short message data acquisition: collecting short message data information through a gateway port, and independently storing the collected short message data;

S2: data cache extraction: caching the independently stored short message data information, and extracting risk data in the cached data;

s3: risk data reading calculation: reading the extracted risk data, and performing differential calculation on the abnormal data and the data in the normal range value;

S4: differential data reading: reading and analyzing the sequence data with the difference calculated, and integrating the analyzed data into effective data;

s5: effective data encryption: encrypting the effective data, and starting the encrypted data with priority;

Wherein the short message data acquisition further comprises:

The information data acquisition system is used for:

acquiring the flow variation condition of a network layer of each data receiving terminal when transmitting data;

According to the flow variation condition of the network layer of each data receiving terminal when transmitting data, the importance of each network layer is estimated;

Counting the target network layers with importance degrees of each data receiving terminal being greater than or equal to a preset threshold value;

acquiring historical transmission success data of each data receiving terminal;

Wherein, gather risk data reading of accomplishing still includes:

an abnormal data analysis unit configured to:

According to the historical transmission success data of each data receiving terminal acquired in the information data acquisition system;

Analyzing the historical transmission success data to determine the integrity and the safety of the data, and evaluating threat risk indexes and vulnerability risk indexes of the data receiving terminal according to the integrity and the safety;

Calculating the security index of each data receiving terminal by using a preset risk assessment system according to the working intensity of the target network layer of the data receiving terminal, the threat risk index and the vulnerability risk index of the data receiving terminal;

screening out a safe data receiving terminal and a risk data receiving terminal according to the safety index of each data receiving terminal;

Receiving first data sent by the secure data receiving terminal;

Acquiring configuration information and network information of the risk data receiving terminal;

constructing a shared data transmission channel of the risk data receiving terminal according to the network information;

Acquiring a plurality of sink nodes in the shared data transmission channel, and determining a single maximum collected data volume of each sink node;

determining target second data with the largest data quantity in the second data of the risk data receiving terminal;

calculating the target data transmission efficiency of the shared data transmission channel according to the target second data and the data maximum collected data of each sink node in the shared data transmission channel;

Setting the data transmission efficiency of the shared data transmission channel as the target data transmission efficiency, and after the setting is finished, receiving second data sent by the risk data receiving terminal by utilizing the shared data transmission channel.

2. The method for serving short messages with data security mechanism of claim 1, wherein: the data difference calculation between the abnormal data and the normal range value further comprises:

The difference calculation module is used for:

after acquiring the risk data, converting the risk data into specific values, and then performing differential calculation on the data of the risk data and the data values in a normal range;

the judging module is used for acquiring the numerical value sequence calculated by the data difference, periodically detecting the numerical value sequence and judging whether the numerical value sequence is a periodic sequence or not;

the analysis module is used for dividing the numerical sequence according to the period to obtain a plurality of groups of identical first subsequences after determining that the numerical sequence is a period sequence, judging whether all numerical values in the first subsequences are larger than a preset numerical value, if so, extracting first abnormal numerical values larger than the preset numerical value in the first subsequences, determining adjacent time intervals between the first abnormal numerical values, judging whether the time intervals are in a preset time interval range, if so, taking the first abnormal numerical values and the time intervals as first abnormal data, and otherwise, determining that the first abnormal numerical values are invalid;

The data integration module is used for marking the first abnormal data periodically to obtain first effective abnormal data, marking the second abnormal data aperiodically to obtain second effective abnormal data, and independently storing the first effective abnormal data and the second effective abnormal data as final effective abnormal data without sending the data to the next reading module.

3. The method for serving short messages with data security mechanism according to claim 2, wherein: the analysis module further comprises:

The analysis module is further configured to perform a clustering operation on the numerical sequence by using a one-dimensional clustering method after determining that the numerical sequence is an aperiodic sequence, obtain a plurality of division points, divide the numerical sequence by using the plurality of division points, obtain a plurality of groups of different second subsequences, obtain a third subsequence having a value greater than a preset value from the second subsequences, determine an abnormal time interval of the third subsequence based on a position of the third subsequence in the numerical sequence, and obtain a fourth subsequence with an abnormal time interval of an adjacent third subsequence within the preset time interval range, and use the fourth subsequence and the abnormal time interval as second abnormal data.

4. The method for serving short messages with data security mechanism according to claim 2, wherein: the effective data reading and encrypting method further comprises the following steps:

The effective data reading module is used for:

based on the first effective abnormal data and the second effective abnormal data in the data integration module, performing data as a reference to check, and taking other checked data as effective data;

the data decoding and encrypting module is used for:

Decoding effective data, taking the decoded data as original data, dividing the original data into segments to be encrypted with preset lengths, and establishing an encryption sequence based on the segments to be encrypted;

According to the number of the segments to be encrypted, taking the encryption sequence as a first column of a matrix, and establishing a first encryption matrix;

Adjusting a first position of each segment to be encrypted on a corresponding row of the first encryption matrix based on a preset interference factor, and carrying out first encryption on the segment to be encrypted after adjustment;

acquiring a corresponding interference password in a preset password set based on the interference times, and rolling out a random number by using the encrypted dice;

Marking a second location in each row of the first encryption matrix that is separated from the first location by a random number;

Sequentially inputting the interference passwords to the second position for second encryption, and establishing a second encryption matrix;

Determining that the current encryption degree is insufficient when the first number of blank positions in the second encryption matrix is greater than the second number of non-blank positions;

sequentially removing the outermost peripheral position of the second encryption matrix to generate a plurality of sub-encryption matrices;

Respectively calculating the encryption rank of each sub encryption matrix, and generating a rank password based on all the encryption ranks;

inputting the rank password into the second encryption matrix for third encryption to obtain a third encryption matrix;

Randomly generating a homotype matrix based on the specification of the third encryption matrix;

marking the residual blank positions on the third encryption matrix, and superposing the marked third encryption matrix and the homotype matrix to obtain the superposition number generated by the marked positions;

inputting the superposition number to the residual blank position to obtain a full encryption matrix;

and extracting data corresponding to each position in the full encryption matrix to obtain encrypted data.

5. The method for serving short messages with a data security mechanism of claim 1, wherein buffering the data comprises:

The data calling module is used for acquiring the independently stored short message data information, extracting key information fragments of the short message data information and determining the information type of the short message data information based on the target semantics of the key information fragments;

The buffer space determining module is used for determining a target buffer space corresponding to the short message data information based on the information type, extracting capacity information of the target buffer space and determining a first residual available space capacity of the target buffer space based on the capacity information;

the buffer space determining module is used for acquiring the data length of the short message data information, clustering the short message data information when the first residual available space capacity is larger than the data length to obtain a sub-data type set corresponding to the short message data information, and setting a type identifier for each sub-data type;

The cache space dividing module is used for dividing the target cache space into a first block based on the type identifier, adding a block identifier to the divided sub-target cache space, and simultaneously, dividing each sub-target cache space into a second block to obtain a first storage item and a second storage item corresponding to each sub-target cache space, wherein the block identifier corresponds to the type identifier;

The data caching module is used for respectively extracting target contents of the short message data information corresponding to each sub-data type based on the type identifier, and respectively caching the type identifier and the target contents into a first storage item and a second storage item;

The data updating module is used for monitoring the reading operation of the short message data information in real time, determining the real-time reading quantity of the short message data information based on the reading process when the reading of the short message data information is detected, and determining the data tail of the residual short message data information in the target cache space based on the reading quantity;

And the space updating module is used for pointing a preset cursor to the tail part of the short message data information moved to the target cache space, determining the second residual available space capacity of the target cache space based on the movement result, and indicating the second residual available space capacity of the target cache space based on the preset cursor pointing.

6. The method for short message service with data security mechanism as claimed in claim 1, wherein in S1, the collecting the short message data information through the gateway port comprises:

determining the total number of data packets acquired by the short message data information based on the gateway port, carrying out integrity check on the short message data information, and calculating the integrity index of the short message data information received by the gateway port based on the check result;

Wherein, I _int represents the integrity index of the short message data information received by the gateway port; n _err represents the number of data packets that fail the integrity check; n _tot represents the total number of data packets;

mapping the short message data information corresponding to the data packet passing through the integrity check into a storage space of the gateway port, and calculating a security index of the gateway port for receiving the short message data information according to the mapping result;

S _h represents a security index of the gateway port for receiving the short message data information; omega represents a data mapping uniformity factor; delta represents the non-lost probability of the data when the short message data information is mapped; i _hash represents the current mapping length of the short message data information in the storage space; i _hash-min denotes the minimum length of the storage space; i _hash-max denotes the maximum length of the storage space; log ₂ (·) represents the base 2 logarithm;

based on the integrity index of the short message data information received by the gateway port and the safety index of the gateway port for receiving the short message data information, evaluating the quality of the short message data information acquired by the gateway port and obtaining an evaluation value;

comparing the evaluation value with a set threshold value, and judging whether the short message data information acquired by the gateway port is qualified or not;

when the evaluation score is equal to or greater than the set score, judging that the short message data information collected by the gateway port is qualified;

otherwise, judging that the short message data information acquired by the gateway port is unqualified, and carrying out alarm operation.