CN119202959B - A method and system for opening inspection and testing data based on data classification and grading - Google Patents
A method and system for opening inspection and testing data based on data classification and grading Download PDFInfo
- Publication number
- CN119202959B CN119202959B CN202411746160.0A CN202411746160A CN119202959B CN 119202959 B CN119202959 B CN 119202959B CN 202411746160 A CN202411746160 A CN 202411746160A CN 119202959 B CN119202959 B CN 119202959B
- Authority
- CN
- China
- Prior art keywords
- data
- index
- laboratory data
- laboratory
- composite
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Active
Links
Classifications
-
- G—PHYSICS
- G06—COMPUTING OR CALCULATING; COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F18/00—Pattern recognition
- G06F18/20—Analysing
- G06F18/24—Classification techniques
- G06F18/243—Classification techniques relating to the number of classes
- G06F18/2431—Multiple classes
-
- Y—GENERAL TAGGING OF NEW TECHNOLOGICAL DEVELOPMENTS; GENERAL TAGGING OF CROSS-SECTIONAL TECHNOLOGIES SPANNING OVER SEVERAL SECTIONS OF THE IPC; TECHNICAL SUBJECTS COVERED BY FORMER USPC CROSS-REFERENCE ART COLLECTIONS [XRACs] AND DIGESTS
- Y02—TECHNOLOGIES OR APPLICATIONS FOR MITIGATION OR ADAPTATION AGAINST CLIMATE CHANGE
- Y02A—TECHNOLOGIES FOR ADAPTATION TO CLIMATE CHANGE
- Y02A90/00—Technologies having an indirect contribution to adaptation to climate change
- Y02A90/10—Information and communication technologies [ICT] supporting adaptation to climate change, e.g. for weather forecasting or climate simulation
Landscapes
- Engineering & Computer Science (AREA)
- Data Mining & Analysis (AREA)
- Theoretical Computer Science (AREA)
- Computer Vision & Pattern Recognition (AREA)
- Bioinformatics & Cheminformatics (AREA)
- Bioinformatics & Computational Biology (AREA)
- Artificial Intelligence (AREA)
- Evolutionary Biology (AREA)
- Evolutionary Computation (AREA)
- Physics & Mathematics (AREA)
- General Engineering & Computer Science (AREA)
- General Physics & Mathematics (AREA)
- Life Sciences & Earth Sciences (AREA)
- Information Retrieval, Db Structures And Fs Structures Therefor (AREA)
Abstract
Description
技术领域Technical Field
本发明涉及检验检测数据开放技术领域,尤其涉及一种基于数据分类分级的检验检测数据开放方法及系统。The present invention relates to the technical field of inspection and testing data opening, and in particular to an inspection and testing data opening method and system based on data classification and grading.
背景技术Background Art
基于数据分类分级的检验检测数据开放方法是一种旨在平衡数据共享需求与信息安全保护之间关系的技术手段。通过依据其性质如敏感度、重要性对数据进行分类,并根据不同类别设定相应的安全级别,从而为各类数据制定出合理的开放策略。这种方法不仅能够促进数据资源的高效利用,还能有效防止数据泄露等安全事件的发生。The inspection and testing data opening method based on data classification and grading is a technical means to balance the relationship between data sharing needs and information security protection. By classifying data according to its properties such as sensitivity and importance, and setting corresponding security levels according to different categories, a reasonable opening strategy can be formulated for each type of data. This method can not only promote the efficient use of data resources, but also effectively prevent the occurrence of security incidents such as data leakage.
在实验室环境中,基于数据分类分级的数据开放方法得到了广泛的应用。实验室通常会处理大量的实验数据,这些数据既包含了公共可用的信息,也涉及到了高度敏感的研究成果和个人隐私信息。因此,如何在保证数据安全的前提下,最大化地发挥数据的价值,成为实验室面临的重要课题之一。In laboratory environments, data openness methods based on data classification and grading have been widely used. Laboratories usually deal with a large amount of experimental data, which includes both publicly available information and highly sensitive research results and personal privacy information. Therefore, how to maximize the value of data while ensuring data security has become one of the important issues facing laboratories.
目前,许多实验室已经采用了数据分类分级的方法来管理和开放数据。例如,对于一些低敏感度的基础科研数据,实验室可能会选择将其完全公开,以便于学术交流和资源共享;而对于涉及商业秘密或者个人隐私的数据,则会被严格控制访问权限,仅限于授权人员或机构查看。At present, many laboratories have adopted a data classification and grading method to manage and open data. For example, for some low-sensitivity basic scientific research data, the laboratory may choose to make it fully public to facilitate academic exchanges and resource sharing; while for data involving commercial secrets or personal privacy, access rights will be strictly controlled and only authorized personnel or institutions will be allowed to view it.
此外,为了更好地实现数据分类分级管理,实验室还引入了多种技术支持,如数据加密、访问控制、审计跟踪等,以确保数据的安全性和完整性。同时,实验室也会定期对数据管理系统进行维护更新,以适应不断变化的数据安全需求。In addition, in order to better implement data classification and grading management, the laboratory has also introduced a variety of technical supports, such as data encryption, access control, audit tracking, etc., to ensure the security and integrity of the data. At the same time, the laboratory will also regularly maintain and update the data management system to adapt to the ever-changing data security needs.
尽管基于数据分类分级的检验检测数据开放方法在实验室中取得了显著成效,但在实际应用中仍面临一个主要问题:Although the inspection and testing data opening method based on data classification and grading has achieved remarkable results in laboratories, it still faces a major problem in practical application:
不同的实验室需根据自身的研究方向、数据类型和安全需求制定不同的数据分类标准,例如,一些实验室可能将涉及个人隐私的数据归类为最高敏感级别,而另一些实验室则认为这类数据只需中等程度的保护。这种差异导致了在不同实验室之间进行数据交换时,难以找到共同的分类标准,进而影响了数据的互操作性和共享效率;Different laboratories need to develop different data classification standards based on their own research directions, data types, and security requirements. For example, some laboratories may classify data involving personal privacy as the most sensitive level, while other laboratories believe that such data only requires a medium level of protection. This difference makes it difficult to find a common classification standard when exchanging data between different laboratories, which in turn affects the interoperability and sharing efficiency of data.
即使在同一实验室内部,不同项目组或研究人员也易因为各自的业务需求而采用不同的数据分类标准。例如,某个项目组将某种类型的实验数据视为高度敏感,而另一个项目组则认为这种数据的敏感度较低。这种内部差异易导致数据管理上的混乱,影响数据的一致性和可靠性。Even within the same laboratory, different project teams or researchers may adopt different data classification standards due to their respective business needs. For example, one project team may consider a certain type of experimental data to be highly sensitive, while another project team may consider such data to be less sensitive. Such internal differences may easily lead to confusion in data management and affect the consistency and reliability of data.
因此,现有技术急需一种基于数据分类分级的检验检测数据开放方法及系统的技术方案。Therefore, the prior art urgently needs a technical solution for an inspection and testing data opening method and system based on data classification and grading.
发明内容Summary of the invention
为了解决上述技术问题,本发明提供了一种基于数据分类分级的检验检测数据开放方法,具体包括以下步骤:In order to solve the above technical problems, the present invention provides a method for opening inspection and testing data based on data classification and grading, which specifically includes the following steps:
步骤S1、对实验室数据执行分析,并依据分析结果得到实验室数据的综合得分,依据综合得分对实验室数据执行分类;Step S1, analyzing the laboratory data, obtaining a comprehensive score of the laboratory data according to the analysis result, and classifying the laboratory data according to the comprehensive score;
步骤S1a、获取每个实验室数据的敏感度指数、重要性指数及合规性指数;Step S1a, obtaining the sensitivity index, importance index and compliance index of each laboratory data;
步骤S1b、基于每个实验室数据的敏感度指数、重要性指数及合规性指数,得到每个实验室数据的复合指数,所述复合指数包括第一复合指数、第二复合指数、第三复合指数及综合复合指数;Step S1b, based on the sensitivity index, importance index and compliance index of each laboratory data, obtaining a composite index of each laboratory data, wherein the composite index includes a first composite index, a second composite index, a third composite index and a comprehensive composite index;
步骤S1b1、获取敏感度指数与重要性指数的乘积,并基于乘积与合规性指数的比值,得到每个实验室数据的第一复合指数;Step S1b1, obtain the product of the sensitivity index and the importance index, and based on the ratio of the product to the compliance index, obtain the first composite index of each laboratory data ;
步骤S1b2、获取重要性指数与合规性指数的乘积,并基于乘积与敏感度指数的比值,得到每个实验室数据的第二复合指数;Step S1b2: Obtain the product of the importance index and the compliance index, and obtain the second composite index of each laboratory data based on the ratio of the product to the sensitivity index. ;
步骤S1b3、获取敏感度指数与合规性指数的乘积,并基于乘积与重要性指数的比值,得到每个实验室数据的第三复合指数;Step S1b3: Obtain the product of the sensitivity index and the compliance index, and based on the ratio of the product to the importance index, obtain the third composite index of each laboratory data. ;
步骤S1b4、依据每个实验室数据的第一复合指数、第二复合指数及第三复合指数,得到每个实验室数据的综合复合指数;Step S1b4, obtaining a comprehensive composite index of each laboratory data according to the first composite index, the second composite index and the third composite index of each laboratory data;
其中,得到每个实验室数据的综合复合指数的计算公式为:Among them, the calculation formula for the comprehensive composite index of each laboratory data is:
; ;
其中,代表第i个实验室数据的综合复合指数;代表第i个实验室数据的第一复合指数;代表第i个实验室数据的第二复合指数;代表第i个实验室数据的第三复合指数;代表第i个实验室数据的敏感度指数;代表第i个实验室数据的重要性指数;代表第i个实验室数据的合规性指数;in, Represents the comprehensive composite index of the i-th laboratory data; Represents the first composite index of the i-th laboratory data ; Represents the second composite index of the i-th laboratory data ; Represents the third composite index of the i-th laboratory data ; represents the sensitivity index of the i-th laboratory data; Represents the importance index of the i-th laboratory data; represents the compliance index of the i-th laboratory data;
步骤S1c、依据每个实验室数据的综合复合指数,对每个实验室数据计算权重;Step S1c, calculating the weight of each laboratory data according to the comprehensive composite index of each laboratory data;
步骤S1c1、获取每个实验室数据的综合复合指数之和;Step S1c1, obtaining the sum of the comprehensive composite index of each laboratory data;
步骤S1c2、依据每个实验室数据的综合复合指数之和、每个实验室数据的综合复合指数,得到每个实验室数据的权重;Step S1c2, obtaining the weight of each laboratory data according to the sum of the comprehensive composite index of each laboratory data and the comprehensive composite index of each laboratory data;
其中,得到每个实验室数据的权重的计算公式为:The calculation formula for obtaining the weight of each laboratory data is:
; ;
其中,代表第i个实验室数据的权重;代表第i个实验室数据的综合复合指数;n代表实验室数据的总数;in, represents the weight of the i-th laboratory data; represents the comprehensive composite index of the i-th laboratory data; n represents the total number of laboratory data;
步骤S1d、根据每个实验室数据的敏感度指数、重要性指数、合规性指数、第一复合指数、第二复合指数、第三复合指数、综合复合指数及权重,得到每个实验室数据综合得分;Step S1d, obtaining a comprehensive score for each laboratory data according to the sensitivity index, importance index, compliance index, first composite index, second composite index, third composite index, comprehensive composite index and weight of each laboratory data;
步骤S1d1、根据每个实验室数据的敏感度指数、重要性指数及法律合规性指数,得到每个实验室数据的基础得分;Step S1d1, obtaining a basic score for each laboratory data according to the sensitivity index, importance index and legal compliance index of each laboratory data;
其中,得到每个实验室数据的基础得分的计算公式为:The calculation formula for obtaining the basic score of each laboratory data is:
; ;
其中,代表第i个实验室数据的基础得分;代表第i个实验室数据的敏感度指数;代表第i个实验室数据的重要性指数;代表第i个实验室数据的合规性指数;in, represents the basic score of the ith laboratory data; represents the sensitivity index of the i-th laboratory data; Represents the importance index of the i-th laboratory data; represents the compliance index of the i-th laboratory data;
步骤S1d2、根据每个实验室数据的第一复合指数、第二复合指数及第三复合指数,得到每个实验室数据的复合得分;Step S1d2, obtaining a composite score of each laboratory data according to the first composite index, the second composite index and the third composite index of each laboratory data;
其中,得到每个实验室数据的复合得分的计算公式为:The calculation formula for obtaining the composite score of each laboratory data is:
; ;
其中,代表第i个实验室数据的复合得分;代表第i个实验室数据的第一复合指数;代表第i个实验室数据的第二复合指数;代表第i个实验室数据的第三复合指数;代表第i个实验室数据的敏感度指数;代表第i个实验室数据的重要性指数;代表第i个实验室数据的合规性指数;in, represents the composite score of the ith laboratory data; Represents the first composite index of the i-th laboratory data ; Represents the second composite index of the i-th laboratory data ; Represents the third composite index of the i-th laboratory data ; represents the sensitivity index of the i-th laboratory data; Represents the importance index of the i-th laboratory data; represents the compliance index of the i-th laboratory data;
步骤S1d3、结合每个实验室数据的基础得分、复合得分及权重,得到每个实验室数据的综合得分;Step S1d3, combining the basic score, composite score and weight of each laboratory data to obtain a comprehensive score for each laboratory data;
其中,得到每个实验室数据的综合得分的计算公式为:The calculation formula for obtaining the comprehensive score of each laboratory data is:
; ;
其中,代表第i个实验室数据的综合得分;代表第i个实验室数据的权重;代表第i个实验室数据的基础得分;代表第i个实验室数据的复合得分;in, represents the comprehensive score of the i-th laboratory data; represents the weight of the i-th laboratory data; represents the basic score of the ith laboratory data; represents the composite score of the ith laboratory data;
步骤S1e、对综合得分设定至少两个阈值,并依据阈值对每个实验室数据执行分类;Step S1e, setting at least two thresholds for the comprehensive score, and classifying each laboratory data according to the thresholds;
步骤S2、基于分类结果,对实验室数据执行分级处理;Step S2: Based on the classification results, perform classification processing on the laboratory data;
步骤S3、根据实验室数据的分类及分级结果,制定数据开放决策。Step S3: Make data opening decisions based on the classification and grading results of laboratory data.
一种基于数据分类分级的检验检测数据开放系统,执行如上述的一种基于数据分类分级的检验检测数据开放方法,包括如下模块:A system for opening inspection and testing data based on data classification and grading, which implements the above-mentioned method for opening inspection and testing data based on data classification and grading, includes the following modules:
数据分析及分类模块:用于对实验室数据执行分析,并依据分析结果得到实验室数据的综合得分,依据综合得分对实验室数据执行分类;Data analysis and classification module: used to analyze laboratory data, obtain a comprehensive score of the laboratory data based on the analysis results, and classify the laboratory data based on the comprehensive score;
数据分级模块:与所述数据分析及分类模块连接,用于基于分类结果,对实验室数据执行分级处理;Data classification module: connected to the data analysis and classification module, used to perform classification processing on the laboratory data based on the classification results;
决策制定模块:与所述数据分级模块连接,用于根据实验室数据的分类及分级结果,制定数据开放决策。Decision-making module: connected to the data classification module, used to make data opening decisions based on the classification and classification results of laboratory data.
本发明实施例具有以下技术效果:The embodiments of the present invention have the following technical effects:
本发明旨在通过多维度的分析和综合评估,解决不同实验室或项目组之间数据分类标准不统一的问题,提高数据的互操作性和共享效率,具体地,通过对初始实验室数据执行一系列基于数据驱动的分析方式,以得到实验室数据的分类指标,即综合得分,依据统一的综合得分的分类筛选方式,能够有效解决分类标准不统一的问题,更进一步地,为了使综合得分的获取过程更具备高度科学性及准确性,通过对实验室数据的敏感度、重要性及合规性执行分析,以获取各项复合指数,并在以各项复合指数为基础的前提下,得到更为标准、准确且科学的综合得分,从而能够有效提高数据分类标准的精度。The present invention aims to solve the problem of inconsistent data classification standards between different laboratories or project groups through multi-dimensional analysis and comprehensive evaluation, and to improve data interoperability and sharing efficiency. Specifically, by performing a series of data-driven analysis methods on the initial laboratory data, the classification index of the laboratory data, that is, the comprehensive score, is obtained. The classification and screening method based on the unified comprehensive score can effectively solve the problem of inconsistent classification standards. Furthermore, in order to make the process of obtaining the comprehensive score more scientific and accurate, the sensitivity, importance and compliance of the laboratory data are analyzed to obtain various composite indexes, and on the premise of the composite indexes, a more standardized, accurate and scientific comprehensive score is obtained, thereby effectively improving the accuracy of the data classification standard.
附图说明BRIEF DESCRIPTION OF THE DRAWINGS
为了更清楚地说明本发明具体实施方式或现有技术中的技术方案,下面将对具体实施方式或现有技术描述中所需要使用的附图作简单地介绍,显而易见地,下面描述中的附图是本发明的一些实施方式,对于本领域普通技术人员来讲,在不付出创造性劳动的前提下,还可以根据这些附图获得其它的附图。In order to more clearly illustrate the specific implementation methods of the present invention or the technical solutions in the prior art, the drawings required for use in the specific implementation methods or the description of the prior art will be briefly introduced below. Obviously, the drawings described below are some implementation methods of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying creative work.
图1是本发明实施例提供的一种基于数据分类分级的检验检测数据开放方法的流程图;FIG1 is a flow chart of a method for opening inspection and testing data based on data classification and grading provided by an embodiment of the present invention;
图2是本发明实施例提供的一种基于数据分类分级的检验检测数据开放系统的框架图。FIG2 is a framework diagram of an inspection and testing data opening system based on data classification and grading provided in an embodiment of the present invention.
具体实施方式DETAILED DESCRIPTION
为使本发明的目的、技术方案和优点更加清楚,下面将对本发明的技术方案进行清楚、完整的描述。显然,所描述的实施例仅是本发明一部分实施例,而不是全部的实施例。基于本发明中的实施例,本领域普通技术人员在没有做出创造性劳动的前提下所得到的所有其它实施例,都属于本发明所保护的范围。In order to make the purpose, technical solution and advantages of the present invention clearer, the technical solution of the present invention will be described clearly and completely below. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work belong to the scope of protection of the present invention.
实施例一:如图1所示,本发明提供了的一种基于数据分类分级的检验检测数据开放方法,包括如下步骤:Embodiment 1: As shown in FIG1 , the present invention provides a method for opening inspection and testing data based on data classification and grading, comprising the following steps:
步骤S1、对实验室数据执行分析,并依据分析结果得到实验室数据的综合得分,依据综合得分对实验室数据执行分类。Step S1, analyzing the laboratory data, obtaining a comprehensive score of the laboratory data according to the analysis result, and classifying the laboratory data according to the comprehensive score.
步骤S1a、获取每个实验室数据的敏感度指数、重要性指数及合规性指数。Step S1a, obtaining the sensitivity index, importance index and compliance index of each laboratory data.
从实验室数据库中提取所有需要分析的数据集,包括但不限于文本数据、数值数据、图像数据等。建立一个包含常见敏感信息的关键词库,通过关键词匹配技术,识别每个实验室数据中的敏感信息,如个人姓名、身份证号、电话号码、电子邮件地址等,根据识别到的敏感信息数量和类型,计算相应的评分,再将所有识别到的敏感信息的评分相加,得到每个实验室数据的敏感度指数。Extract all data sets that need to be analyzed from the laboratory database, including but not limited to text data, numerical data, image data, etc. Establish a keyword library containing common sensitive information, and use keyword matching technology to identify sensitive information in each laboratory data, such as personal name, ID number, telephone number, email address, etc. Calculate the corresponding score based on the number and type of sensitive information identified, and then add up the scores of all identified sensitive information to obtain the sensitivity index of each laboratory data.
需要分析的数据集,还包括但不限于实验结果、研究论文、项目报告等,随后统计每个实验室数据在相关文献中的引用次数,若引用次数越多,则重要性越高,并通过领域专家评估数据在科研项目中的关键性,若关键性越高的数据,则重要性越高,再根据文献引用次数和项目关键性,对每个实验室数据计算相应的评分,最后将上述评分结合,以得到每个实验室数据的重要性指数。The data sets that need to be analyzed also include but are not limited to experimental results, research papers, project reports, etc. The number of citations of each laboratory data in relevant literature is then counted. The more citations, the higher the importance. The data is evaluated by field experts for its criticality in scientific research projects. The more critical the data, the higher its importance. Based on the number of literature citations and the criticality of the project, the corresponding score is calculated for each laboratory data. Finally, the above scores are combined to obtain the importance index of each laboratory data.
需要分析的数据集,还包括但不限于个人数据、商业数据、科研数据等,接着检查每个实验室数据是否符合实验室内部的数据管理决策和标准,并通过第三方机构对数据的合规性进行认证,获得合规性评分,再根据内部审查和第三方认证的结果,对每个实验室数据计算相应的评分,最后将上述评分结合,以得到每个实验室数据的合规性指数。The data sets that need to be analyzed also include but are not limited to personal data, business data, scientific research data, etc. Then, check whether each laboratory data complies with the data management decisions and standards within the laboratory, and certify the compliance of the data through a third-party organization to obtain a compliance score. Then, based on the results of internal review and third-party certification, calculate the corresponding score for each laboratory data. Finally, combine the above scores to obtain the compliance index of each laboratory data.
其中,上述的合规性指数、重要性指数、敏感度指数均通过现有技术得到,本实施例不在详细赘述。Among them, the above-mentioned compliance index, importance index, and sensitivity index are all obtained through existing technologies, and this embodiment will not be described in detail.
步骤S1b、基于每个实验室数据的敏感度指数、重要性指数及合规性指数,得到每个实验室数据的复合指数,所述复合指数包括第一复合指数、第二复合指数、第三复合指数及综合复合指数。Step S1b, based on the sensitivity index, importance index and compliance index of each laboratory data, a composite index of each laboratory data is obtained, wherein the composite index includes a first composite index, a second composite index, a third composite index and a comprehensive composite index.
步骤S1b1、获取敏感度指数与重要性指数的乘积,并基于乘积与合规性指数的比值,得到每个实验室数据的第一复合指数。Step S1b1, obtain the product of the sensitivity index and the importance index, and based on the ratio of the product to the compliance index, obtain the first composite index of each laboratory data .
值得说明的是,第一复合指数综合考虑了数据的敏感度和重要性,同时考虑了合规性的约束。敏感度和重要性越高,数据的价值越大,但合规性越低,数据的风险也越大;通过敏感度和重要性的乘积,能够更全面地评估数据的价值,同时通过除以合规性指数,能够有效控制数据的风险,确保数据在开放和共享过程中符合法律法规的要求,并且能够在数据价值和风险之间找到平衡点,避免过度重视某一方面而忽视其他方面。It is worth noting that the first composite index takes into account the sensitivity and importance of data, as well as the constraints of compliance. The higher the sensitivity and importance, the greater the value of the data, but the lower the compliance, the greater the risk of the data; by multiplying the sensitivity and importance, the value of the data can be more comprehensively assessed, and by dividing it by the compliance index, the risk of the data can be effectively controlled to ensure that the data complies with the requirements of laws and regulations during the process of opening and sharing, and to find a balance between the value and risk of the data, avoiding over-emphasis on one aspect and neglecting other aspects.
步骤S1b2、获取重要性指数与合规性指数的乘积,并基于乘积与敏感度指数的比值,得到每个实验室数据的第二复合指数。Step S1b2: Obtain the product of the importance index and the compliance index, and obtain the second composite index of each laboratory data based on the ratio of the product to the sensitivity index. .
值得说明的是,第二复合指数综合考虑了数据的重要性和合规性,同时考虑了敏感度的约束。重要性和合规性越高,数据的可信度和可靠性越高,但敏感度越高,数据的风险也越大;通过重要性和合规性的乘积,能够更准确地评估数据的可靠性和可信度,同时通过除以敏感度指数,能够有效控制数据的风险,确保数据在开放和共享过程中不会泄露敏感信息,并且能够在数据的可靠性和风险之间找到平衡点,避免过度重视某一方面而忽视其他方面。It is worth noting that the second composite index takes into account the importance and compliance of data, while also taking into account the constraints of sensitivity. The higher the importance and compliance, the higher the credibility and reliability of the data, but the higher the sensitivity, the greater the risk of the data; by multiplying the importance and compliance, the reliability and credibility of the data can be more accurately assessed, and by dividing by the sensitivity index, the risk of the data can be effectively controlled to ensure that sensitive information will not be leaked during the process of opening and sharing the data, and to find a balance between the reliability and risk of the data, avoiding over-emphasis on one aspect and neglecting other aspects.
步骤S1b3、获取敏感度指数与合规性指数的乘积,并基于乘积与重要性指数的比值,得到每个实验室数据的第三复合指数。Step S1b3: Obtain the product of the sensitivity index and the compliance index, and based on the ratio of the product to the importance index, obtain the third composite index of each laboratory data. .
值得说明的是,第三复合指数综合考虑了数据的敏感度和合规性,同时考虑了重要性的约束。敏感度和合规性越高,数据的安全性越高,但重要性越高,数据的价值也越大;通过敏感度和合规性的乘积,能够更全面地评估数据的安全性,同时通过除以重要性指数,能够有效控制数据的价值,确保数据在开放和共享过程中不会过度暴露重要信息,并且能够在数据的安全性和价值之间找到平衡点,避免过度重视某一方面而忽视其他方面。It is worth noting that the third composite index takes into account the sensitivity and compliance of data, while also taking into account the constraints of importance. The higher the sensitivity and compliance, the higher the security of the data, but the higher the importance, the greater the value of the data; by multiplying the sensitivity and compliance, the security of the data can be more comprehensively evaluated, and by dividing by the importance index, the value of the data can be effectively controlled to ensure that important information is not overly exposed during the opening and sharing of the data, and to find a balance between the security and value of the data, avoiding over-emphasis on one aspect and neglecting other aspects.
步骤S1b4、依据每个实验室数据的第一复合指数、第二复合指数及第三复合指数,得到每个实验室数据的综合复合指数。Step S1b4, obtaining a comprehensive composite index of each laboratory data according to the first composite index, the second composite index and the third composite index of each laboratory data.
值得说明的是,综合复合指数综合考虑了数据的敏感度、重要性和合规性,通过立方根运算,确保了各个复合指数的权重相对均衡,反映了数据的综合价值和风险;通过综合三个复合指数,能够更全面地评估数据的整体特性,同时立方根运算确保了各个复合指数的权重相对均衡,避免了某一指数对结果的过度影响,并且综合复合指数为数据分类和分级提供了科学依据,有助于制定合理的数据开放决策,确保数据的安全和合理利用。其中,得到每个实验室数据的综合复合指数的计算公式为:It is worth noting that the comprehensive composite index takes into account the sensitivity, importance and compliance of the data. Through the cube root operation, it ensures that the weights of each composite index are relatively balanced, reflecting the comprehensive value and risk of the data. By combining the three composite indexes, the overall characteristics of the data can be evaluated more comprehensively. At the same time, the cube root operation ensures that the weights of each composite index are relatively balanced, avoiding the excessive influence of a certain index on the results. The comprehensive composite index provides a scientific basis for data classification and grading, which helps to make reasonable data opening decisions and ensure the security and rational use of data. Among them , the calculation formula for the comprehensive composite index of each laboratory data is:
; ;
其中,代表第i个实验室数据的综合复合指数;代表第i个实验室数据的第一复合指数;代表第i个实验室数据的第二复合指数;代表第i个实验室数据的第三复合指数;代表第i个实验室数据的敏感度指数;代表第i个实验室数据的重要性指数;代表第i个实验室数据的合规性指数。in, Represents the comprehensive composite index of the i-th laboratory data; Represents the first composite index of the i-th laboratory data ; The second composite index representing the i-th laboratory data ; The third composite index representing the i-th laboratory data ; represents the sensitivity index of the i-th laboratory data; Represents the importance index of the i-th laboratory data; Represents the compliance index of the i-th laboratory data.
步骤S1c、依据每个实验室数据的综合复合指数,对每个实验室数据计算权重;Step S1c, calculating the weight of each laboratory data according to the comprehensive composite index of each laboratory data;
步骤S1c1、获取每个实验室数据的综合复合指数之和。Step S1c1, obtaining the sum of the comprehensive composite index of each laboratory data.
步骤S1c2、依据每个实验室数据的综合复合指数之和、每个实验室数据的综合复合指数,得到每个实验室数据的权重。Step S1c2: Obtain the weight of each laboratory data according to the sum of the comprehensive composite index of each laboratory data and the comprehensive composite index of each laboratory data.
其中,得到每个实验室数据的权重的计算公式为:The calculation formula for obtaining the weight of each laboratory data is:
; ;
其中,代表第i个实验室数据的权重;代表第i个实验室数据的综合复合指数;n代表实验室数据的总数。in, represents the weight of the i-th laboratory data; represents the comprehensive composite index of the i-th laboratory data; n represents the total number of laboratory data.
步骤S1d、根据每个实验室数据的敏感度指数、重要性指数、合规性指数、第一复合指数、第二复合指数、第三复合指数、综合复合指数及权重,得到每个实验室数据综合得分;Step S1d, obtaining a comprehensive score for each laboratory data according to the sensitivity index, importance index, compliance index, first composite index, second composite index, third composite index, comprehensive composite index and weight of each laboratory data;
步骤S1d1、根据每个实验室数据的敏感度指数、重要性指数及法律合规性指数,得到每个实验室数据的基础得分;Step S1d1, obtaining a basic score for each laboratory data according to the sensitivity index, importance index and legal compliance index of each laboratory data;
其中,得到每个实验室数据的基础得分的计算公式为:The calculation formula for obtaining the basic score of each laboratory data is:
; ;
其中,代表第i个实验室数据的基础得分;代表第i个实验室数据的敏感度指数;代表第i个实验室数据的重要性指数;代表第i个实验室数据的合规性指数。in, represents the basic score of the ith laboratory data; represents the sensitivity index of the i-th laboratory data; Represents the importance index of the i-th laboratory data; Represents the compliance index of the i-th laboratory data.
步骤S1d2、根据每个实验室数据的第一复合指数、第二复合指数及第三复合指数,得到每个实验室数据的复合得分。Step S1d2: Obtain a composite score for each laboratory data according to the first composite index, the second composite index and the third composite index of each laboratory data.
其中,得到每个实验室数据的复合得分的计算公式为:The calculation formula for obtaining the composite score of each laboratory data is:
; ;
其中,代表第i个实验室数据的复合得分;代表第i个实验室数据的第一复合指数;代表第i个实验室数据的第二复合指数;代表第i个实验室数据的第三复合指数;代表第i个实验室数据的敏感度指数;代表第i个实验室数据的重要性指数;代表第i个实验室数据的合规性指数;in, represents the composite score of the ith laboratory data; Represents the first composite index of the i-th laboratory data ; Represents the second composite index of the i-th laboratory data ; Represents the third composite index of the i-th laboratory data ; represents the sensitivity index of the i-th laboratory data; Represents the importance index of the i-th laboratory data; represents the compliance index of the i-th laboratory data;
步骤S1d3、结合每个实验室数据的基础得分、复合得分及权重,得到每个实验室数据的综合得分。Step S1d3: Combine the basic score, composite score and weight of each laboratory data to obtain a comprehensive score for each laboratory data.
值得说明的是,关于步骤S1d1至步骤S1d3中,先获取基础得分,再获取复合得分,最后获取综合得分的方式,不仅能够全面评估数据的特性,还能在数据的价值和风险之间找到平衡点,为数据的分类、分级和开放决策提供科学依据;具体地,通过敏感度指数、重要性指数和合规性指数的对数值相加,能够全面评估数据的基本特性,通过第一复合指数、第二复合指数和第三复合指数的平方和的平方根,能够综合评估数据的复杂特性,再结合基础得分和复合得分及权重,能够全面评估数据的综合特性,确保评估的全面性和准确性,以及评估结果的公平性和合理性;It is worth noting that, in step S1d1 to step S1d3, the method of first obtaining the basic score, then obtaining the composite score, and finally obtaining the comprehensive score can not only comprehensively evaluate the characteristics of the data, but also find a balance between the value and risk of the data, and provide a scientific basis for the classification, grading and open decision-making of the data; specifically, by adding the logarithmic values of the sensitivity index, the importance index and the compliance index, the basic characteristics of the data can be comprehensively evaluated, and by the square root of the sum of the squares of the first composite index, the second composite index and the third composite index, the complex characteristics of the data can be comprehensively evaluated, and then combined with the basic score, the composite score and the weight, the comprehensive characteristics of the data can be comprehensively evaluated, ensuring the comprehensiveness and accuracy of the evaluation, as well as the fairness and rationality of the evaluation results;
其中,得到每个实验室数据的综合得分的计算公式为:The calculation formula for obtaining the comprehensive score of each laboratory data is:
; ;
其中,代表第i个实验室数据的综合得分;代表第i个实验室数据的权重;代表第i个实验室数据的基础得分;代表第i个实验室数据的复合得分。in, represents the comprehensive score of the i-th laboratory data; represents the weight of the i-th laboratory data; represents the basic score of the ith laboratory data; Represents the composite score of the ith laboratory data.
步骤S1e、对综合得分设定至少两个阈值,并依据阈值对每个实验室数据执行分类;Step S1e, setting at least two thresholds for the comprehensive score, and classifying each laboratory data according to the thresholds;
示例性地,对综合得分设定至少两个阈值,包括但不限于第一阈值、第二阈值及第三阈值,并利用第一阈值、第二阈值及第三阈值执行实验室数据的分类筛选;具体地,将综合得分小于第一阈值的实验室数据归为第一类;将综合得分大于等于第一阈值且小于第二阈值数据归为第二类;最后再将综合得分大于等于第三阈值的数据归为第三类。Exemplarily, at least two thresholds are set for the comprehensive score, including but not limited to a first threshold, a second threshold and a third threshold, and the first threshold, the second threshold and the third threshold are used to perform classification and screening of laboratory data; specifically, laboratory data with a comprehensive score less than the first threshold are classified into the first category; data with a comprehensive score greater than or equal to the first threshold and less than the second threshold are classified into the second category; finally, data with a comprehensive score greater than or equal to the third threshold are classified into the third category.
步骤S2、基于分类结果,对实验室数据执行分级处理。Step S2: Based on the classification results, perform classification processing on the laboratory data.
依据分类结果,对上述三类数据执行分级处理,分级时,可设定安全级别,其中第一类数据则可分为公开级;第二类数据可分为内部使用级;第三类数据可分为机密级。Based on the classification results, the above three types of data are graded and the security level can be set during the classification. The first type of data can be divided into public level; the second type of data can be divided into internal use level; and the third type of data can be divided into confidential level.
步骤S3、根据实验室数据的分类及分级结果,制定数据开放决策。Step S3: Make data opening decisions based on the classification and grading results of laboratory data.
最后依据上述分类及分级的结果,制定对应的数据开放决策,优选地,对于公开级数据的开放决策可以是:公开发布,无需审核,并提供数据下载链接,允许自由下载和使用;对于内部使用级数据的开放决策可以是:内部共享,需要经过简单的审核流程,并提供数据查询接口,限制下载次数,同时记录访问日志,确保数据的可追溯性;对于机密级数据的开放决策可以是:严格控制访问权限,需要高级别审批,并提供受限的数据查询服务,禁止下载,同时定期审计访问记录,确保数据的安全性。Finally, according to the results of the above classification and grading, make corresponding data opening decisions. Preferably, the opening decision for public-level data can be: public release without review, and provide data download links to allow free download and use; the opening decision for internal-use data can be: internal sharing, which requires a simple review process, and provides a data query interface, limits the number of downloads, and records access logs to ensure data traceability; the opening decision for confidential data can be: strict control of access rights, requiring high-level approval, and providing restricted data query services, prohibiting downloads, and regularly auditing access records to ensure data security.
实施例二:如图2所示,本发明还提出一种基于数据分类分级的检验检测数据开放系统,执行如上述的一种基于数据分类分级的检验检测数据开放方法,包括如下模块:Embodiment 2: As shown in FIG. 2 , the present invention further proposes a system for opening inspection and testing data based on data classification and grading, which executes the above-mentioned method for opening inspection and testing data based on data classification and grading, and includes the following modules:
数据分析及分类模块:用于对实验室数据执行分析,并依据分析结果得到实验室数据的综合得分,依据综合得分对实验室数据执行分类;Data analysis and classification module: used to analyze laboratory data, obtain a comprehensive score of the laboratory data based on the analysis results, and classify the laboratory data based on the comprehensive score;
数据分级模块:与所述数据分析及分类模块连接,用于基于分类结果,对实验室数据执行分级处理;Data classification module: connected to the data analysis and classification module, used to perform classification processing on the laboratory data based on the classification results;
决策制定模块:与所述数据分级模块连接,用于根据实验室数据的分类及分级结果,制定数据开放决策。Decision-making module: connected to the data classification module, used to make data opening decisions based on the classification and classification results of laboratory data.
需要说明的是,本发明所用术语仅为了描述特定实施例,而非限制本申请范围。如本发明说明书中所示,除非上下文明确提示例外情形,“一”、“一个”、“一种”和/或“该”等词并非特指单数,也可包括复数。术语“包括”、“包含”或者其任何其它变体意在涵盖非排他性的包含,从而使得包括一系列要素的过程、方法或者设备不仅包括那些要素,而且还包括没有明确列出的其它要素,或者是还包括为这种过程、方法或者设备所固有的要素。在没有更多限制的情况下,由语句“包括一个……”限定的要素,并不排除在包括所述要素的过程、方法或者设备中还存在另外的相同要素。It should be noted that the terms used in the present invention are only for describing specific embodiments, rather than limiting the scope of the present application. As shown in the present specification, unless the context clearly indicates an exception, the words "one", "a", "a kind of" and/or "the" do not specifically refer to the singular, but may also include the plural. The terms "include", "comprise" or any other variant thereof are intended to cover non-exclusive inclusion, so that the process, method or device including a series of elements includes not only those elements, but also includes other elements not explicitly listed, or also includes elements inherent to such process, method or device. In the absence of more restrictions, the elements defined by the sentence "include one..." do not exclude the presence of other identical elements in the process, method or device including the elements.
还需说明的是,术语“中心”、“上”、“下”、“左”、“右”、“竖直”、“水平”、“内”、“外”等指示的方位或位置关系为基于附图所示的方位或位置关系,仅是为了便于描述本发明和简化描述,而不是指示或暗示所指的装置或元件必须具有特定的方位、以特定的方位构造和操作,因此不能理解为对本发明的限制。除非另有明确的规定和限定,术语“安装”、“相连”、“连接”等应做广义理解,例如,可以是固定连接,也可以是可拆卸连接,或一体地连接;可以是机械连接,也可以是电连接;可以是直接相连,也可以通过中间媒介间接相连,可以是两个元件内部的连通。对于本领域的普通技术人员而言,可以具体情况理解上述术语在本发明中的具体含义。It should also be noted that the terms "center", "up", "down", "left", "right", "vertical", "horizontal", "inside", "outside", etc., indicating the orientation or positional relationship, are based on the orientation or positional relationship shown in the drawings, and are only for the convenience of describing the present invention and simplifying the description, rather than indicating or implying that the device or element referred to must have a specific orientation, be constructed and operated in a specific orientation, and therefore cannot be understood as a limitation on the present invention. Unless otherwise clearly specified and limited, the terms "installed", "connected", "connected", etc. should be understood in a broad sense, for example, it can be a fixed connection, a detachable connection, or an integral connection; it can be a mechanical connection or an electrical connection; it can be a direct connection, or it can be an indirect connection through an intermediate medium, or it can be a connection between the two elements. For those of ordinary skill in the art, the specific meanings of the above terms in the present invention can be understood according to specific circumstances.
最后应说明的是:以上各实施例仅用以说明本发明的技术方案,而非对其限制;尽管参照前述各实施例对本发明进行了详细的说明,本领域的普通技术人员应当理解:其依然可以对前述各实施例所记载的技术方案进行修改,或者对其中部分或者全部技术特征进行等同替换;而这些修改或者替换,并不使相应技术方案的本质脱离本发明各实施例技术方案。Finally, it should be noted that the above embodiments are only used to illustrate the technical solutions of the present invention, rather than to limit it. Although the present invention has been described in detail with reference to the aforementioned embodiments, those skilled in the art should understand that they can still modify the technical solutions described in the aforementioned embodiments, or replace some or all of the technical features therein by equivalents. However, these modifications or replacements do not deviate the essence of the corresponding technical solutions from the technical solutions of the embodiments of the present invention.
Claims (8)
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202411746160.0A CN119202959B (en) | 2024-12-02 | 2024-12-02 | A method and system for opening inspection and testing data based on data classification and grading |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202411746160.0A CN119202959B (en) | 2024-12-02 | 2024-12-02 | A method and system for opening inspection and testing data based on data classification and grading |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN119202959A CN119202959A (en) | 2024-12-27 |
| CN119202959B true CN119202959B (en) | 2025-02-07 |
Family
ID=94064766
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN202411746160.0A Active CN119202959B (en) | 2024-12-02 | 2024-12-02 | A method and system for opening inspection and testing data based on data classification and grading |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN119202959B (en) |
Citations (2)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN113935746A (en) * | 2021-09-18 | 2022-01-14 | 南方电网深圳数字电网研究院有限公司 | Data opening method and system based on data classification and classification |
| CN117633605A (en) * | 2024-01-25 | 2024-03-01 | 浙江鹏信信息科技股份有限公司 | Data security classification capability maturity assessment method, system and readable medium |
Family Cites Families (1)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| US9928144B2 (en) * | 2015-03-30 | 2018-03-27 | Commvault Systems, Inc. | Storage management of data using an open-archive architecture, including streamlined access to primary data originally stored on network-attached storage and archived to secondary storage |
-
2024
- 2024-12-02 CN CN202411746160.0A patent/CN119202959B/en active Active
Patent Citations (2)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN113935746A (en) * | 2021-09-18 | 2022-01-14 | 南方电网深圳数字电网研究院有限公司 | Data opening method and system based on data classification and classification |
| CN117633605A (en) * | 2024-01-25 | 2024-03-01 | 浙江鹏信信息科技股份有限公司 | Data security classification capability maturity assessment method, system and readable medium |
Also Published As
| Publication number | Publication date |
|---|---|
| CN119202959A (en) | 2024-12-27 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| KR101813840B1 (en) | System for performing audit task using risk evaluation analysis and method thereof | |
| Lin et al. | EXAM: a comprehensive environment for the analysis of access control policies | |
| Osborne et al. | The AI community building the future? A quantitative analysis of development activity on Hugging Face Hub | |
| CN118965441B (en) | A financial data privacy protection method and system based on large model | |
| CN115982012A (en) | A model and method for assessing the maturity of interface management capabilities | |
| CN117540965A (en) | A metadata-based data asset inventory method and system | |
| CN119202959B (en) | A method and system for opening inspection and testing data based on data classification and grading | |
| CN118939510A (en) | Computing service quality evaluation method, device, computer equipment and storage medium | |
| CN113157765A (en) | Intelligent port-oriented block chain data tracing system and method | |
| Chandra et al. | Cytologic diagnosis of “atypical” in serous fluid cytopathology. Approach of the International System for Reporting Serous Fluid Cytopathology | |
| CN111045984B (en) | Power grid laboratory file management system and method | |
| CN118394851A (en) | Data management and control method based on block chain | |
| Korman et al. | Technology management through architecture reference models: A smart metering case | |
| CN111078783A (en) | Data management visualization method based on supervision and protection | |
| Foalem et al. | Logging requirement for continuous auditing of responsible machine learning-based applications | |
| CN114997815A (en) | A kind of processing method of laboratory information management system | |
| CN114896629A (en) | Network information safety online monitoring and early warning management system based on big data analysis | |
| CN115640581A (en) | Data security risk assessment method, device, medium and electronic equipment | |
| Hakiem et al. | Whistleblowing System Deployment using the Information Technology Infrastructure Library Framework: Evidence from a Public University in Indonesia | |
| CN113222425A (en) | Evaluation system and method for qualification compliance management of inspection and detection mechanism | |
| CN119721992B (en) | Scientific and technological information and technology management system and method | |
| Ludwig | The Role of AI in Risk Management: Benefits, Challenges, and Adoption Strategies | |
| CN118840008A (en) | Urban industry development analysis method and system based on big data and evaluation indexes | |
| Jin et al. | Analysis of Executive Compensation of Listed Companies based on Android Dynamic Monitoring and Data Mining | |
| Laboutková | Identifying a Connection between Transparent Lobbying and Quality of Democracy |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| GR01 | Patent grant | ||
| GR01 | Patent grant |