System resource tamper-proofing method based on block chain and national secret digital fingerprint technology

Abstract

The invention relates to a system resource tamper-proofing method based on a blockchain and a national password digital fingerprint technology, and belongs to the technical field of system encryption.The method comprises the following steps: step a, resource fingerprint chaining and source file safety backup: step a1, file fingerprint chaining; a2, digital fingerprint sampling is carried out on system resources; a3, encrypting the digital fingerprint by using the national cryptographic certificate of the target system; a4, submitting the encrypted digital fingerprint to a blockchain platform;a5, the source file is safely backed up and stored; b, dynamically monitoring the fingerprint of the resource file: b1, performing fingerprint sampling on the target system resource file to obtain the fingerprint of the target system resource file; b2, obtaining a fingerprint on a source file chain of the target system resource file; b3, comparing the fingerprint of the resource file of the target system with the fingerprint on the source file chain, and if not, giving an alarm; if yes, executing the step c; and c, forcibly restoring the resource file. The safety factor of the system is improved.

Description

technical field [0001] The invention relates to a software system resource management and control method based on a block chain and a national secret algorithm, and belongs to the technical field of system encryption. Background technique [0002] For the software system after it is officially launched, there is a serious problem of malicious components or resources entering the production system caused by illegal deployment of human factors. Under the license management and control mode, there are still hackers who artificially replace components to bypass the license management and control mechanism, which brings serious commercial infringement value damage to software suppliers. For WEB systems, the biggest risk is external malicious attacks, tampering with the content of sensitive parts of the webpage, and causing serious damage to politics, economy, society, etc. [0003] The traditional anti-tampering mechanism of resources is based on the mainstream open source diges...

AI Technical Summary

Problems solved by technology

[0004] The disadvantages of the above traditional approach: 1. The MD5 algorithm has a low safety factor and is easy to be attacked; 2. The MD5 value stored in the file or database is easy to be stolen or tampered with; 3. For the original resource file stored in a certain location, it is also Because the location of the file is easy to be stolen and exposed, it leads to the problem of artificially replacing and modifying the original resource file, which cannot ensure the uniqueness and credibility of the original resource; 4. The traditional method generally only monitors the tampering of a specific resource, and rarely There is a monitoring mechanism for illegal deletion and illegal addition of resources in the overall system; 5. Traditional methods can only perform localized monitoring of a single system, and cannot form large-scale remote monitoring. The scope of application is small, and repeated investment by customers is large

Images