System resource anti-tampering method based on block chain and national secret digital fingerprint technology

Abstract

The invention relates to a system resource anti-tampering method based on block chain and national secret digital fingerprint technology, which belongs to the technical field of system encryption. It includes the following steps: step a: resource fingerprint upload and source file security backup: step a1: file fingerprint upload; step a2: digital fingerprint sampling of system resources; step a3: use target system national secret certificate to encrypt digital fingerprint ; Step a4: Submit the encrypted digital fingerprint to the block chain platform; Step a5: Safe backup storage of the source file; Step b: Dynamic monitoring of resource file fingerprints: Step b1: Perform fingerprint sampling on the target system resource file to obtain the target system Resource file fingerprint; step b2: obtain the fingerprint on the source file chain of the target system resource file; step b3: compare the fingerprint on the target system resource file fingerprint and the fingerprint on the source file chain, if they do not match, give an alarm; if they meet the forced restoration strategy, then perform step c; Step c: Resource files are forced to restore. The invention improves the safety factor of the system.

Description

technical field [0001] The invention relates to a software system resource management and control method based on a block chain and a national secret algorithm, and belongs to the technical field of system encryption. Background technique [0002] For the software system after it is officially launched, there is a serious problem of malicious components or resources entering the production system caused by illegal deployment of human factors. Under the license management and control mode, there are still hackers who artificially replace components to bypass the license management and control mechanism, which brings serious commercial infringement value damage to software suppliers. For WEB systems, the biggest risk is external malicious attacks, tampering with the content of sensitive parts of the webpage, and causing serious damage to politics, economy, society, etc. [0003] The traditional anti-tampering mechanism of resources is based on the mainstream open source diges...

AI Technical Summary

Problems solved by technology

[0004] The disadvantages of the above traditional approach: 1. The MD5 algorithm has a low safety factor and is easy to be attacked; 2. The MD5 value stored in the file or database is easy to be stolen or tampered with; 3. For the original resource file stored in a certain location, it is also Because the location of the file is easy to be stolen and exposed, it leads to the problem of artificially replacing and modifying the original resource file, which cannot ensure the uniqueness and credibility of the original resource; 4. The traditional method generally only monitors the tampering of a specific resource, and rarely There is a monitoring mechanism for illegal deletion and illegal addition of resources in the overall system; 5. Traditional methods can only perform localized monitoring of a single system, and cannot form large-scale remote monitoring. The scope of application is small, and repeated investment by customers is large

Images