基于商用密码的水利重要数据点面结合安全保护方法

为保障数字孪生流域建设过程中的重要数据安全，针对破解海量高精度数据汇集面临的数据窃取、泄露、损毁等问题隐患开展研究，提出网络安全基础—数据分类分级—数据安全防护的数字孪生流域数据安全总体防护方案。针对数据安全传输、存储、使用中的安全薄弱点，提出全面通用防护和应用内加密相结合的点面结合加密保护方法，利用商用密码技术对数据进行机密性、完整性、可用性保护。本研究方法已在全国水利一张图等重要系统中得到应用，可实现数据安全保护和便捷高效应用平衡，广泛适用于数字孪生流域建设中的水利重要数据全生命周期保护。

A combining point and surface security protection method of water conservancy important data based on commercial cryptography

To ensure the security of important data during the construction of digital twin river basins, this paper mainly focuses on the research on the hidden risks of data theft, leakage, and damage faced by cracking massive high-precision data aggregation. It proposes a comprehensive protection plan for data security in digital twin river basin based on network security foundation - data classification and grading - data security protection. In response to the security vulnerabilities in data transmission, storage, and usage, it puts forward an encryption protection method combining transparent data encryption and application-level encryption, using commercial cryptographic techniques to protect data confidentiality, integrity, and availability. This research method has been applied in important systems such as the National Water Resources Unified Geographic Information Platform, achieving a balance between data security protection and convenient and efficient application, and can be widely applicable in the entire life cycle protection of crucial water resources data in digital twin river basin construction.