CN118709166A - A document information security management system based on full-cycle management - Google Patents

Abstract

The present invention discloses a document information security management system based on full-cycle management, which relates to the technical field of information security management. The system includes a document server, a cloud server, a unified password verification server, a unified identity authentication server and several terminals; the document server performs encrypted document information interaction with the terminal through the system intranet, and performs identity authentication before information interaction; the document server performs encrypted document information interaction with the cloud server through the system intranet, and the document information created on the terminal, the re-edited document information and the document information before deletion will be uploaded to the cloud server through the document server for storage; the document server performs encrypted document information interaction with the Internet platform through VPN, and performs identity authentication before information interaction. The present invention not only realizes the clarification of security responsibilities and management rights according to identity authentication, but also ensures the security of document information.

Description

A document information security management system based on full-cycle management

Technical Field

The present invention relates to the technical field of information security management, and in particular to a document information security management system based on full-cycle management.

Background Art

As the digital transformation of the power industry deepens, the operation, management, and service of power companies are increasingly dependent on information systems and digital documents, and the information security challenges faced by companies are also increasing. The information systems of power companies are becoming increasingly large and complex, providing opportunities for security issues such as hacker attacks, virus infections, and data leaks. At the same time, the information security of the power industry is not only related to the interests of the companies themselves, but also closely related to social stability.

Due to the large scale of information systems in power companies, there are security risks in the creation, storage, access, sharing and destruction of documents. Therefore, the document management of power companies adopts encrypted transmission to control and real-time cloud storage to protect document information. Although the use of encrypted transmission to control document information can ensure the security of document transmission, due to the large number of employees in power companies, some of them lack professional information security knowledge and skills. In the case of unclear security responsibilities and management authority, it is easy to make it difficult to implement information security work.

Summary of the invention

Aiming at the problem that the current document information management system in the prior art is not clear about security responsibilities and management rights, which easily leads to the difficulty in implementing information security work, the present invention provides a document information security management system based on full-cycle management, which can interact with data based on identity authentication and encryption authentication, and timely discover problems based on the security responsibilities and management rights clearly defined under identity authentication, thereby ensuring the security of document information. The specific technical solution is as follows:

A document information security management system based on full-cycle management, including a document server, a cloud server, a unified password verification server, a unified identity authentication server and several terminals;

The document server exchanges encrypted document information with the terminal through the system intranet, and performs identity authentication before information exchange; the document server exchanges encrypted document information with the cloud server through the system intranet, and the document information created on the terminal, the re-edited document information, and the document information before deletion will be uploaded to the cloud server for storage through the document server; the document server exchanges encrypted document information with the Internet platform through VPN, and performs identity authentication before information exchange;

The document server sends the received identity authentication information to the unified identity authentication server for verification, and the unified identity authentication server feeds back the identity authentication result to the corresponding terminal or the Internet platform through the document server;

The document server transmits the encrypted document information sent/received to the unified password verification server for decryption, and the unified password verification server feeds back the decrypted document information to the document information receiving end.

Preferably, the identity authentication information includes user identity authentication information and account identity authentication information.

Preferably, the document server sends the received identity authentication information to the unified identity authentication server for verification, and the unified identity authentication server feeds back the identity authentication result to the terminal via the document server, including:

When a user logs in using an account and password, the terminal applies for a public key from the unified identity authentication server through the document server; after the unified identity authentication server generates a key pair, it returns the public key to the terminal through the document server;

The terminal encrypts the account password using the public key, and decrypts the password to the unified identity authentication server through the document server to obtain the password plain text; the unified identity authentication server returns the password plain text to the document server for verification, and the document server returns the login result to the terminal;

When a user logs in using an account and password, the terminal sends an AD user account authentication request to the unified identity authentication server through the document server; the unified identity authentication server performs AM verification on the AD user account and sends the AD user account authentication result to the document server; the document server returns the login result to the terminal.

Preferably, the document server sends the received identity authentication information to the unified identity authentication server for verification, and the unified identity authentication server feeds back the identity authentication result to the Internet platform via the document server, including:

The Internet platform sends an account synchronization request to the document server; the document server transmits the account information to the unified identity authentication server; the unified identity authentication server calculates the MAC code and returns the calculated MAC value to the document server; the document server sends the account information and the MAC value to the unified identity authentication server for authentication; the unified identity authentication server returns the authentication result to the document server, and the document server feeds back the authentication result to the Internet platform.

Preferably, the document server transmits the encrypted document information sent/received to the unified password verification server for decryption, and the unified password verification server feeds back the decrypted document information to the document information receiving end, including:

When the document server sends the encrypted document information to the terminal, the encrypted document information includes the encrypted key; the terminal sends the encrypted key to the unified password verification server through the document server for decryption; the unified password verification server returns the decrypted key to the document server, the document server verifies the key and then feeds it back to the terminal, and the terminal receives the decrypted document information;

When the document server receives the encrypted document information from the terminal, the encrypted document information contains an encrypted key; the document server sends the encrypted key to the unified password verification server for decryption; the unified password verification server returns the decrypted key to the document server, and the document server receives and stores the decrypted document information.

Preferably, the document server performs encrypted document information interaction with the Internet platform via VPN, including:

The document server transmits the encrypted internal document information to the Internet platform via VPN;

The document server receives the encrypted external document information from the Internet platform through the VPN and stores it.

Preferably, the document server transmits the encrypted document information sent/received to the unified password verification server for decryption, and the unified password verification server feeds back the decrypted document information to the document information receiving end, including:

When the document server sends the encrypted internal document information to the Internet platform, the encrypted internal document information contains the encrypted key; the Internet platform sends the encrypted key to the unified password verification server through the document server for decryption; the unified password verification server returns the decrypted key to the document server, the document server verifies the key and then feeds it back to the Internet platform, and the Internet platform receives the decrypted internal document information;

When the document server receives encrypted external document information from the Internet platform, the encrypted external document information contains an encrypted key; the document server sends the encrypted key to the unified password verification server for decryption; the unified password verification server returns the decrypted key to the document server, and the document server receives and stores the decrypted external document information.

Preferably, the document server exchanges encrypted document information with the cloud server through the system intranet, and the document information created on the terminal, the re-edited document information, and the document information before deletion are uploaded to the cloud server through the document server for storage, including:

A DMS is configured in the document server, and cloud storage of the cloud server is set in the DMS; the document storage location on the terminal is set to a preset folder on the document server, and when document information is created, edited or deleted on the terminal, the creation, editing or deletion of document information on the terminal will be automatically synchronized to the preset folder of the document server, and the DMS automatically uploads the preset folder to the cloud server.

Preferably, the document server includes a central document server and several document servers of different levels; the document servers of different levels are divided into first-level document servers to N-level document servers according to the administrative district level; the central server is connected to the cloud server and the first-level document server respectively; the first-level document server to the N-level document server are connected in sequence.

Compared with the prior art, the present invention has the following beneficial effects:

The document information security management system based on full-cycle management of the present invention performs identity authentication before the document server interacts with the terminal and the Internet platform to perform encrypted document information, and then transmits the encrypted document information; the document server sends the received identity authentication information to the unified identity authentication server for verification, and the unified identity authentication server feeds back the identity authentication result to the corresponding terminal or the Internet platform through the document server; the document server sends/receives the encrypted document information to the unified password verification server for decryption, and the unified password verification server feeds back the decrypted document information to the document information receiving end. The present invention cooperates with the unified password verification server to execute security measures such as encryption and verification of document information, realizes encrypted document transmission, and also performs identity authentication of the sender and the receiver before document transmission interaction, and cooperates with the unified identity authentication server to execute security measures for identity authentication. Not only does it realize the clarification of security responsibilities and management authority based on identity authentication, but it also ensures the security of document information.

BRIEF DESCRIPTION OF THE DRAWINGS

In order to more clearly illustrate the specific embodiments of the present invention or the technical solutions in the prior art, the following briefly introduces the drawings required for the specific embodiments or the description of the prior art. In all the drawings, similar elements or parts are generally identified by similar reference numerals. In the drawings, the elements or parts are not necessarily drawn according to the actual scale.

FIG1 is a schematic diagram of a document information security management principle based on full-cycle management of the present invention;

FIG. 2 is a schematic diagram of another embodiment of a document information security management system based on full-cycle management according to the present invention.

DETAILED DESCRIPTION

The following will be combined with the drawings in the embodiments of the present invention to clearly and completely describe the technical solutions in the embodiments of the present invention. Obviously, the described embodiments are part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

It should be understood that when used in this specification and the appended claims, the terms "include" and "comprises" indicate the presence of described features, integers, steps, operations, elements and/or components, but do not exclude the presence or addition of one or more other features, integers, steps, operations, elements, components and/or combinations thereof.

It should also be understood that the terms used in the present specification are only for the purpose of describing specific embodiments and are not intended to limit the present invention. As used in the present specification and the appended claims, the singular forms "a", "an" and "the" are intended to include plural forms unless the context clearly indicates otherwise.

It should be further understood that the term "and/or" used in the present description and the appended claims refers to any and all possible combinations of one or more of the associated listed items, and includes these combinations.

Please refer to Figures 1 and 2 for the following embodiments.

The embodiment of the present application provides a document information security management system based on full-cycle management, including a document server, a cloud server, a unified password verification server, a unified identity authentication server and several terminals;

The document server exchanges encrypted document information with the terminal through the system intranet, and performs identity authentication before information exchange; the document server exchanges encrypted document information with the cloud server through the system intranet, and the document information created on the terminal, the re-edited document information, and the document information before deletion will be uploaded to the cloud server for storage through the document server; the document server exchanges encrypted document information with the Internet platform through VPN, and performs identity authentication before information exchange;

The document server sends the received identity authentication information to the unified identity authentication server for verification, and the unified identity authentication server feeds back the identity authentication result to the corresponding terminal or the Internet platform through the document server;

The document server transmits the encrypted document information sent/received to the unified password verification server for decryption, and the unified password verification server feeds back the decrypted document information to the document information receiving end.

In this embodiment, the terminal is an intelligent device that has the functions of document creation, editing, and deletion, as well as document information transmission and reception, such as desktop computers, platform computers, and mobile phones; of course, it can also be some other intelligent devices that can realize document editing and creation and data interaction. The document server has a strong storage capacity and can store a large amount of document data. It can encrypt and securely control the stored data to ensure the security and confidentiality of the data. At the same time, it also provides data storage and processing capabilities for the cloud server. The cloud server supports convenient data backup functions. Even if hardware failures occur, the data is still safe, and it can protect data integrity and continuous protection. At the same time, the cloud server can virtualize multiple independent server parts, has excellent security and stability, and is more difficult to be attacked by hackers, further ensuring the data security of the document information management system.

In this embodiment, the document server exchanges encrypted document information with the Internet platform through a VPN (virtual private network) to achieve encrypted transmission and ensure data security. The VPN establishes an encrypted tunnel between the client and server of the Internet platform, so that when accessing network resources, the transmitted data is transmitted through this encrypted tunnel. This encrypted transmission method can effectively prevent data from being intercepted, stolen or tampered during transmission, ensuring the confidentiality and integrity of the data.

In this embodiment, the document server exchanges encrypted document information with the terminal and the cloud server through the system intranet, which can ensure the security of document transmission. The encrypted document information exchange through the system intranet can ensure the security of the document during transmission. The document is encrypted and protected during the transmission process, and even if it is intercepted, it cannot be illegally accessed and viewed. The use of encryption technology can ensure the confidentiality of the document and avoid the risk of data leakage. The document server can establish a "departmental and level-based" confidentiality mechanism within the enterprise according to the actual needs of the enterprise, and prevent irrelevant personnel from viewing important documents by setting different security levels and access rights. Encrypted document information exchange through the system intranet can accelerate the transmission and processing speed of data and improve the efficiency of data management. At the same time, the system can also provide intelligent backup and recovery functions to ensure the security and availability of data.

The document information security management system based on full-cycle management of the present invention performs identity authentication before the document server interacts with the terminal and the Internet platform to perform encrypted document information, and then transmits the encrypted document information. The security measures of the processes such as encryption and verification of document information are executed by a unified password verification server, and encrypted document transmission is realized. The identity authentication of the sender and the receiver is also performed before the document transmission interaction, and the security measures of identity authentication are executed by a unified identity authentication server. Not only the security responsibility and management authority are clarified according to identity authentication, but also the security of document information is guaranteed.

Specifically, the identity authentication information includes user identity authentication information and account identity authentication information.

It should be noted that the user identity authentication information includes account password authentication and AD account authentication; the AD account is a preset group account authority identifier. Group member accounts that pass the AD account authentication can share the same decrypted document information.

Preferably, in a preferred embodiment of the present application, the document server sends the received identity authentication information to the unified identity authentication server for verification, and the unified identity authentication server feeds back the identity authentication result to the terminal through the document server, including:

When a user logs in using an account and password, the terminal applies for an SM2 public key from the unified identity authentication server through the document server; the unified identity authentication server generates an SM2 key and returns the SM2 public key to the terminal through the document server; the terminal encrypts the account and password using the SM2 public key, and decrypts the key to the unified identity authentication server through the document server to obtain a plain text password; the unified identity authentication server returns the plain text password to the document server for verification, and the document server returns the login result to the terminal;

In this embodiment, SM2 public key encryption is used to ensure that the account password is not stolen or tampered with during transmission. The user only needs to enter the account password once at the terminal, and the subsequent encryption, decryption and verification processes are automatically completed by the system without user participation. By verifying the account password through a unified identity authentication server, user information and access rights can be centrally managed, reducing security risks caused by multiple passwords.

When a user logs in using an account and password, the terminal sends an AD user account authentication to the unified identity authentication server through the document server; the unified identity authentication server performs AM verification on the AD user account and sends the AD user account authentication result to the document server; the document server returns the login result to the terminal.

In this embodiment, the user enters an AD user account (usually a user name) and password on a terminal (such as a computer, mobile phone, etc.) and attempts to log in. The terminal uses the AD user account and password entered by the user as authentication credentials and sends them to the document server through the system intranet. After receiving the authentication request from the terminal, the document server forwards the authentication request containing the AD user account and password to the unified identity authentication server. After receiving the authentication request from the document server, the unified identity authentication server uses the identity authentication mechanism of AD (Active Directory) to perform AM (Authentication Manager) verification. If the AM verification is successful, the unified identity authentication server will generate a successful authentication response and send it to the document server through the system intranet. If the AM verification fails, the unified identity authentication server will generate an authentication failure response and contain corresponding error information or prompts, which will also be sent to the document server. After receiving the authentication result sent by the unified identity authentication server, the document server performs corresponding processing according to the result. The entire process exchanges encrypted document information through the system intranet, ensuring the security of user accounts and passwords, while also providing flexible access control and detailed permission management. This authentication mechanism based on a unified identity authentication server can simplify the user access process, improve security, and reduce management costs.

Preferably, in a preferred embodiment of the present application, the document server sends the received identity authentication information to the unified identity authentication server for verification, and the unified identity authentication server feeds back the identity authentication result to the Internet platform through the document server, including:

The Internet platform sends an account synchronization request to the document server; the document server transmits the account information to the unified identity authentication server; the unified identity authentication server calculates the MAC code and returns the calculated MAC value to the document server; the document server sends the account information and the MAC value to the unified identity authentication server for authentication; the unified identity authentication server returns the authentication result to the document server, and the document server feeds back the authentication result to the Internet platform.

In the scenario where the document server is interconnected with the Internet platform and accounts are synchronized, when the account starts to establish a connection, the use of keys for verification can not only confirm the identities of the communicating parties, but also prevent the intervention of malicious third parties. During the interconnection transmission of keys, calling a unified identity authentication server for encryption can achieve data confidentiality protection. Encryption can ensure that the key will not be stolen or intercepted by unauthorized third parties during the transmission process. It also mainly implements authentication and identity verification. The key itself is also used in the authentication and identity verification process. By encrypting the transmission of keys, it can ensure that only servers with the correct keys can communicate with each other, thereby preventing unauthorized servers from accessing the network.

Preferably, in a preferred embodiment of the present application, the document server transmits the encrypted document information sent/received to the unified password verification server for decryption, and the unified password verification server feeds back the decrypted document information to the document information receiving end, including:

When the document server sends the encrypted document information to the terminal, the encrypted document information includes the encrypted key; the terminal sends the encrypted key to the unified password verification server through the document server for decryption; the unified password verification server returns the decrypted key to the document server, the document server verifies the key and then feeds it back to the terminal, and the terminal receives the decrypted document information;

When the document server receives the encrypted document information from the terminal, the encrypted document information contains an encrypted key; the document server sends the encrypted key to the unified password verification server for decryption; the unified password verification server returns the decrypted key to the document server, and the document server receives and stores the decrypted document information.

In this embodiment, the document server sends encrypted document information to the terminal, including the encrypted document content and the encrypted key, ensuring the security of the document information when it is transmitted to the terminal. Only the terminal with the correct key can decrypt and access the document content. The document server receives the encrypted document information from the terminal, including the encrypted document content and the encrypted key, ensuring the security of the document information when it is stored on the document server. Only the document server and the unified password verification server with the corresponding decryption capability can access the plain text content of the document. This helps prevent unauthorized access and data leakage.

Preferably, in a preferred embodiment of the present application, the document server performs encrypted document information interaction with the Internet platform via VPN, including:

The document server transmits the encrypted internal document information to the Internet platform via VPN;

The document server receives the encrypted external document information from the Internet platform through the VPN and stores it.

The document server transmits the encrypted document information sent/received to the unified password verification server for decryption, and the unified password verification server feeds back the decrypted document information to the document information receiving end, including:

When the document server sends the encrypted internal document information to the Internet platform, the encrypted internal document information contains the encrypted key; the Internet platform sends the encrypted key to the unified password verification server through the document server for decryption; the unified password verification server returns the decrypted key to the document server, the document server verifies the key and then feeds it back to the Internet platform, and the Internet platform receives the decrypted internal document information;

When the document server receives encrypted external document information from the Internet platform, the encrypted external document information contains an encrypted key; the document server sends the encrypted key to the unified password verification server for decryption; the unified password verification server returns the decrypted key to the document server, and the document server receives and stores the decrypted external document information.

In this embodiment, the document server sends encrypted internal document information to the Internet platform. This encrypted information contains the encrypted content of the document and the encrypted key, ensuring the security of the internal document information when it is sent to the Internet platform, preventing unauthorized access and data leakage. Only the Internet platform verified by the unified password verification server can access and use this internal document information; the Internet platform sends encrypted external document information to the document server. This encrypted information contains the encrypted content of the document and the encrypted key, ensuring the security of the external document information when it is transmitted from the Internet platform to the document server. Through the verification and decryption process of the unified password verification server, the document server can safely receive, store and further process this external document information, preventing potential security risks and data leakage.

Preferably, in a preferred embodiment of the present application, the document server interacts with the cloud server via the system intranet to perform encrypted document information, and the document information created on the terminal, the re-edited document information, and the document information before deletion are uploaded to the cloud server via the document server for storage, including:

A DMS is installed and configured in the document server, and the cloud storage of the cloud server is configured in the DMS; the document storage location on the terminal is set to a preset folder on the document server. When document information is created, edited or deleted on the terminal, the document information created, edited or deleted on the terminal will be automatically synchronized to the preset folder of the document server, and the DMS automatically uploads the preset folder to the cloud server.

In this embodiment, the DMS (document management system) allows organizations to store information in a protected digital document pool, which eliminates the problems caused by relying on paper documents, such as document loss, time-consuming file search, and insufficient storage space. In the scenario of document synchronization, this means that when a document is created, edited, or deleted on the terminal, these changes will be automatically saved to a preset folder on the document server. When document information is created, edited, or deleted on the terminal, these changes will be automatically synchronized to the preset folder on the document server, ensuring the real-time and consistency of the document on all devices. Automatic synchronization reduces the need for manual intervention, improves work efficiency, and reduces the risk of data inconsistency due to human error. DMS automatically uploads documents in preset folders to the cloud server, realizing cloud backup and storage of documents. Cloud storage further improves the security and reliability of data, and data can be restored from the cloud even if the local device fails or data is lost.

Preferably, in a preferred embodiment of the present application, the document server includes a central document server and several document servers of different levels; the document servers of different levels are divided into first-level document servers to N-level document servers according to the administrative district level; the central server is connected to the cloud server and the first-level document server respectively; the first-level document server to the N-level document server are connected in sequence.

In this embodiment, by distributing document servers according to administrative district levels (provincial, municipal, etc.), there is a central document server and several document servers of different levels divided according to administrative district levels. The design of this hierarchical architecture realizes centralized management, efficient distribution and access control based on administrative levels of documents. As the core of the entire document management system, the central document server is responsible for storing, managing and maintaining all key and important document information. The central document server is directly connected to the cloud server, which can easily back up documents to the cloud to ensure the security and recoverability of data. The central document server is also directly connected to the first-level document server, which is responsible for distributing documents to the next-level server or collecting and summarizing data from the next-level server. At the same time, according to the level of the administrative district, the document server is divided into the first level to the Nth level. This division helps to achieve hierarchical management and access control of documents. Each level of document server is responsible for the storage, management and access control of documents within its jurisdiction. For example, the provincial document server is responsible for managing provincial documents, the municipal document server is responsible for managing municipal documents, and so on. This hierarchical architecture of document servers based on administrative level division helps to achieve centralized management, efficient distribution and permission-based access control of documents, realizing a secure, reliable and scalable document information management system.

Those of ordinary skill in the art will appreciate that the units of each example described in conjunction with the embodiments disclosed herein can be implemented in electronic hardware, computer software, or a combination of the two. In order to clearly illustrate the interchangeability of hardware and software, the composition of each example has been generally described in terms of function in the above description. Whether these functions are performed in hardware or software depends on the specific application and design constraints of the technical solution. Professional and technical personnel can use different methods to implement the described functions for each specific application, but such implementation should not be considered to be beyond the scope of the present invention.

In the embodiments provided by the present invention, it should be understood that the division of units is only a logical function division, and there may be other division methods in actual implementation, for example, multiple units can be combined into one unit, one unit can be split into multiple units, or some features can be ignored, etc.

In addition, each functional unit in each embodiment of the present invention may be integrated into one processing unit, or each unit may exist physically separately, or two or more units may be integrated into one unit. The above-mentioned integrated unit may be implemented in the form of hardware or in the form of software functional units.

If the integrated unit is implemented in the form of a software functional unit and sold or used as an independent product, it can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of the present invention, in essence, or the part that contributes to the prior art, or all or part of the technical solution can be embodied in the form of a software product, which is stored in a storage medium and includes several instructions for a computer device (which can be a personal computer, a server or a network device, etc.) to perform all or part of the steps of the method described in each embodiment of the present invention. The aforementioned storage medium includes: U disk, read-only memory (ROM, Read-0nlyMemory), random access memory (RAM, RandomAccessMemory), mobile hard disk, magnetic disk or optical disk, etc., which can store program code.

Finally, it should be noted that the above embodiments are only used to illustrate the technical solutions of the present invention, rather than to limit it. Although the present invention has been described in detail with reference to the aforementioned embodiments, those skilled in the art should understand that they can still modify the technical solutions described in the aforementioned embodiments, or replace some or all of the technical features therein by equivalents. These modifications or replacements do not make the essence of the corresponding technical solutions deviate from the scope of the technical solutions of the embodiments of the present invention, and they should all be included in the scope of the claims and specification of the present invention.

Claims (9)

1. A document information security management system based on full-cycle management, characterized by comprising a document server, a cloud server, a unified password verification server, a unified identity authentication server and a number of terminals; The document server exchanges encrypted document information with the terminal through the system intranet, and performs identity authentication before information exchange; the document server exchanges encrypted document information with the cloud server through the system intranet, and the document information created on the terminal, the re-edited document information, and the document information before deletion will be uploaded to the cloud server for storage through the document server; the document server exchanges encrypted document information with the Internet platform through VPN, and performs identity authentication before information exchange; The document server sends the received identity authentication information to the unified identity authentication server for verification, and the unified identity authentication server feeds back the identity authentication result to the corresponding terminal or the Internet platform through the document server; The document server transmits the encrypted document information sent/received to the unified password verification server for decryption, and the unified password verification server feeds back the decrypted document information to the document information receiving end. 2. A document information security management system based on full-cycle management according to claim 1, characterized in that the identity authentication information includes user identity authentication information and account identity authentication information. 3. A document information security management system based on full-cycle management according to claim 2, characterized in that the document server sends the received identity authentication information to the unified identity authentication server for verification, and the unified identity authentication server feeds back the identity authentication result to the terminal through the document server, comprising: When a user logs in using an account and password, the terminal applies for a public key from the unified identity authentication server through the document server; after the unified identity authentication server generates a key pair, it returns the public key to the terminal through the document server; the terminal encrypts the account and password using the public key, and decrypts the password to the unified identity authentication server through the document server to obtain the plain text of the password; the unified identity authentication server returns the plain text of the password to the document server for verification, and the document server returns the login result to the terminal; When a user logs in using an account and password, the terminal sends an AD user account authentication request to the unified identity authentication server through the document server; the unified identity authentication server performs AM verification on the AD user account and sends the AD user account authentication result to the document server; the document server returns the login result to the terminal. 4. A document information security management system based on full-cycle management according to claim 2, characterized in that the document server sends the received identity authentication information to the unified identity authentication server for verification, and the unified identity authentication server feeds back the identity authentication result to the Internet platform through the document server, including: The Internet platform sends an account synchronization request to the document server; the document server transmits the account information to the unified identity authentication server; the unified identity authentication server calculates the MAC code and returns the calculated MAC value to the document server; the document server sends the account information and the MAC value to the unified identity authentication server for verification; the unified identity authentication server returns the authentication result to the document server, and the document server feeds back the authentication result to the Internet platform. 5. According to claim 1, a document information security management system based on full-cycle management is characterized in that the document server transmits the encrypted document information sent/received to the unified password verification server for decryption, and the unified password verification server feeds back the decrypted document information to the document information receiving end, including: When the document server sends the encrypted document information to the terminal, the encrypted document information includes the encrypted key; the terminal sends the encrypted key to the unified password verification server through the document server for decryption; the unified password verification server returns the decrypted key to the document server, the document server verifies the key and then feeds it back to the terminal, and the terminal receives the decrypted document information; When the document server receives the encrypted document information from the terminal, the encrypted document information contains an encrypted key; the document server sends the encrypted key to the unified password verification server for decryption; the unified password verification server returns the decrypted key to the document server, and the document server receives and stores the decrypted document information. 6. A document information security management system based on full-cycle management according to claim 1, characterized in that the document information interaction between the document server and the Internet platform through VPN includes: The document server transmits the encrypted internal document information to the Internet platform via VPN; The document server receives the encrypted external document information from the Internet platform through the VPN and stores it. 7. A document information security management system based on full-cycle management according to claim 6, characterized in that the document server transmits the encrypted document information sent/received to the unified password verification server for decryption, and the unified password verification server feeds back the decrypted document information to the document information receiving end, comprising: When the document server sends the encrypted internal document information to the Internet platform, the encrypted internal document information contains the encrypted key; the Internet platform sends the encrypted key to the unified password verification server through the document server for decryption; the unified password verification server returns the decrypted key to the document server, the document server verifies the key and then feeds it back to the Internet platform, and the Internet platform receives the decrypted internal document information; When the document server receives encrypted external document information from the Internet platform, the encrypted external document information contains an encrypted key; the document server sends the encrypted key to the unified password verification server for decryption; the unified password verification server returns the decrypted key to the document server, and the document server receives and stores the decrypted external document information. 8. A document information security management system based on full-cycle management according to claim 1, characterized in that the document server exchanges encrypted document information with the cloud server through the system intranet, and the document information created on the terminal, the re-edited document information and the document information before deletion are uploaded to the cloud server through the document server for storage, including: A DMS is configured in the document server, and cloud storage of the cloud server is set in the DMS; the document storage location on the terminal is set to a preset folder on the document server, and when document information is created, edited or deleted on the terminal, the creation, editing or deletion of document information on the terminal will be automatically synchronized to the preset folder of the document server, and the DMS automatically uploads the preset folder to the cloud server. 9. A document information security management system based on full-cycle management according to any one of claims 1-8, characterized in that the document server includes a central document server and several document servers of different levels; the document servers of different levels are divided into first-level document servers to N-th-level document servers according to the administrative district level; the central server is connected to the cloud server and the first-level document server respectively; the first-level document server to the N-th-level document server are connected in sequence.