Industrial control system traceability and safety management system based on block chain

Abstract

The invention discloses an industrial control system traceability and security management system based on a block chain in the technical field of block chains, and the system comprises the following modules: a block chain module which is used for the communication and intercommunication of system data, and employs a layered block chain structure; the node verification module is used for node access limitation judgment, a node verification mechanism based on user reputation and contribution degree is adopted, and the reputation score range of nodes is 1-100; the anti-cheating module is used for requiring the node to complete secondary verification code verification when the node tries to carry out abnormal behavior or verification, and carrying out deep data analysis on the user identity; the privacy module is used for protecting data privacy and only authorizing a user to access and view related information; the method is scientific and reasonable, reputation scoring is performed on each node through a node verification mechanism based on user reputation and contribution degree in the node verification module, and personalized verification is performed according to different scoring intervals to improve the node verification mechanism.

Description

Technical Field

[0001] The present invention belongs to the field of blockchain technology, and specifically is an industrial control system traceability and security management system based on blockchain. Background Art

[0002] With the widespread application of industrial control systems, how to ensure the data security and traceability of the system has become an important issue. Traditional industrial control system traceability and security management methods often rely on centralized data storage and verification mechanisms, which have many limitations, such as data being easily tampered with and system security being limited by centralized nodes. In order to solve these problems, the industrial control system traceability and security management system based on blockchain technology came into being.

[0003] Blockchain technology, with its decentralized, tamper-proof, transparent and traceable characteristics, provides a new solution for the data security and traceability of industrial control systems. Through distributed ledger technology, blockchain can store all the data of industrial control systems in multiple nodes to ensure the integrity and credibility of the data. At the same time, using cryptography and consensus algorithms, blockchain can ensure the security and consistency of data during transmission and storage.

[0004] In a blockchain network, nodes are responsible for verifying and recording transaction data. Without an effective node verification mechanism, malicious nodes may publish false or tampered data, thereby undermining the authenticity and credibility of the data. Systems without a node verification mechanism are vulnerable to intrusion and tampering by attackers. Attackers can affect the normal operation of the system by controlling some nodes or forging a large amount of invalid data, or even cause the system to crash. Blockchain systems that lack a node verification mechanism will not be able to establish an effective trust mechanism. Users cannot confirm whether the data in the system is authentic and trustworthy, which will lead to a trust crisis in the system and a decline in usage.

[0005] Since there is no effective node verification mechanism in the traditional blockchain-based industrial control system traceability and safety management system, the system will face a series of security risks. Therefore, it is necessary to propose a blockchain-based industrial control system traceability and safety management system. Summary of the invention

[0006] In order to solve the above-mentioned problem of lack of node verification mechanism, the purpose of the present invention is to provide an industrial control system traceability and safety management system based on blockchain, which performs reputation scoring on each node through a node verification mechanism based on user reputation and contribution in the node verification module, and improves the node verification mechanism by performing personalized verification according to different scoring intervals.

[0007] In order to achieve the above purpose, the technical solution of the present invention is as follows: a blockchain-based industrial control system traceability and safety management system, which includes the following modules:

[0008] The blockchain module is used for the communication of system data and adopts a layered blockchain structure, including a main chain and three sub-chains;

[0009] The node verification module is used to determine the node access restriction. It adopts a node verification mechanism based on user reputation and contribution. The node reputation score ranges from 1 to 100, and automatically generates four differentiated security verification processes, including access denial for scores below 60, face verification for scores between 60 and 80, phone verification for scores between 80 and 90, and verification code verification for scores between 90 and 100.

[0010] The anti-cheating module is used to require the node to complete a secondary verification code verification when the node attempts to perform abnormal behavior or verification, and conduct in-depth data analysis on its user identity;

[0011] Privacy module, used to protect data privacy, so that only authorized users can access and view relevant information;

[0012] Smart contract module, used for writing, deploying and executing smart contracts.

[0013] Furthermore, the main chain in the blockchain module is responsible for processing key tasks, storage and verification of core data. The three sub-chains include the first sub-chain, the second sub-chain and the third sub-chain, and their respective tasks are: data storage, transaction processing, and smart contract execution.

[0014] Furthermore, the node verification module is equipped with a multi-level security login unit, which divides the login process into three levels: basic login, deep login and dynamic login. Basic login uses a password, deep login uses biometrics, which includes fingerprint recognition and voiceprint recognition. Dynamic verification is combined with behavioral analysis, which includes login time, login location, device type, multiple login failures in a short period of time, and frequent changes of login devices.

[0015] Furthermore, the node verification module collects reputation information from multiple dimensions such as user behavior, transaction records, and community feedback, and evaluates the reputation score of the node based on the comprehensive scoring and ranking of this information, specifically: user behavior accounts for 30% of the weight, transaction records account for 40% of the weight, and community feedback accounts for 30% of the weight.

[0016] Furthermore, the anti-fraud module monitors and analyzes transaction behaviors in real time, automatically detecting abnormal transactions and analyzing their behavior patterns.

[0017] Furthermore, the anti-cheating module automatically adjusts the transaction verification strategy according to the type of security threat, which includes fraudulent behavior, internal threat and external threat. The transaction verification strategy includes transaction frequency, transaction amount and transaction object. When high-risk behavior is detected, which includes a large number of transactions in a short period of time, abnormal geographical location and use of proxy VPN, the system automatically adds one or more additional verification steps or increases the verification requirements.

[0018] Furthermore, the privacy module uses the zero-knowledge proof method in cryptography.

[0019] Furthermore, the smart contract module is written in Solidity language, deployed and executed in the system, supporting automated and decentralized management and control of industrial control systems.

[0020] Furthermore, the system provides API interfaces and standard data formats.

[0021] Furthermore, the system includes a user interface and a visualization tool, through which the system can be interacted with to view and manage transaction data, node status and security logs.

[0022] The principles and beneficial effects of the basic solution are:

[0023] 1. The blockchain module in the present invention adopts a hierarchical blockchain structure. The main chain handles key tasks and the storage and verification of core data to ensure the security and reliability of data; the sub-chains are responsible for specific functions such as data storage, transaction processing, and smart contract execution, respectively, to improve the flexibility and scalability of the system. The hierarchical blockchain structure enables the system to process different types of data and tasks more efficiently, improving the operating efficiency and stability of the system.

[0024] 2. The node verification module in the present invention makes access restriction judgments based on the reputation and contribution of the node. By collecting multi-dimensional information such as the node's user behavior, transaction records, and community feedback, the node's reputation level is evaluated, and a differentiated security verification process is implemented based on the scoring results. After the node verification is completed, a multi-level security login is performed. This method can effectively prevent the intrusion of malicious nodes and improve the security of the system. Through the node verification mechanism, anti-cheating module and privacy protection technology, the intrusion of malicious nodes, the occurrence of abnormal behavior and the risk of data leakage can be effectively prevented, significantly improving the security of the system.

[0025] 3. The use of the user interface and visualization tools in the present invention allows users to easily view and manage transaction data, node status and security logs, thereby improving user experience.

[0026] 4. The present invention supports API interface and standard data format, so that the system can be integrated and customized with other systems to meet the different needs of users.

[0027] 5. The introduction of the smart contract module in the present invention makes the management and control of the industrial control system more automated and intelligent, improving the intelligence level of the system and the efficiency of industrial production. BRIEF DESCRIPTION OF THE DRAWINGS

[0028] Figure 1 This is a schematic diagram of a blockchain-based industrial control system traceability and safety management system in an embodiment of the present invention. DETAILED DESCRIPTION

[0029] The following is further described in detail through specific implementation methods:

[0030] The embodiment is basically as shown in the attached Figure 1 As shown: The industrial control system traceability and safety management system based on blockchain, the system includes the following modules:

[0031] The blockchain module is used for the communication and interoperability of system data. It adopts a layered blockchain structure, including a main chain and three sub-chains. The main chain is responsible for processing key tasks, storage and verification of core data. The three sub-chains include the first sub-chain, the second sub-chain and the third sub-chain, and their respective tasks are: data storage, transaction processing, and smart contract execution.

[0032] The node verification module is used to determine node access restrictions. It adopts a node verification mechanism based on user reputation and contribution. The node reputation score ranges from 1 to 100. It collects reputation information from multiple dimensions such as user behavior, transaction records, and community feedback, and evaluates the node's reputation level based on the comprehensive score or ranking of this information. Specifically, user behavior accounts for 30% of the weight, transaction records account for 40% of the weight, and community feedback accounts for 30% of the weight. Four differentiated security verification processes are then automatically generated. The security verification process includes access denial below 60 points, face verification between 60 and 80 points, telephone verification between 80 and 90 points, and verification code verification between 90 and 100 points.

[0033] The node verification module is equipped with a multi-level security login unit, which divides the login process into three levels: basic login, deep login and dynamic login. Basic login uses a password, deep login uses biometrics, which includes fingerprint recognition and voiceprint recognition. Dynamic verification is combined with behavioral analysis, which includes login time, login location, device type, multiple login failures in a short period of time, and frequent changes of login devices.

[0034] The anti-cheating module is used to require the node to complete a secondary verification code verification when the node attempts to perform abnormal behavior or verification, and conduct in-depth data analysis on its user identity. Then, according to the type of security threat, the types of security threats include fraud, internal threats and external threats, the transaction verification strategy is automatically adjusted. The transaction verification strategy includes transaction frequency, transaction amount and transaction object. When high-risk behavior is detected, high-risk behavior includes a large number of transactions in a short period of time, abnormal geographical location and use of proxy VPN, the system automatically adds additional verification steps or increases one or more of the verification requirements, monitors and analyzes transaction behavior in real time, automatically detects abnormal transactions and analyzes their behavior patterns to ensure the fairness and accuracy of verification.

[0035] The privacy module is used to protect data privacy. The privacy module uses the zero-knowledge proof method in cryptography to ensure that only authorized users can access and view relevant information.

[0036] The smart contract module is used for the writing, deployment and execution of smart contracts. It is written in Solidity language and deployed and executed directly in the system, supporting automated and decentralized industrial control system management and control.

[0037] The system provides API interfaces and standard data formats to achieve cross-platform data sharing and collaborative management, and supports interoperability and integration with other industrial control systems or information platforms. The system includes an intuitive and easy-to-use user interface and visualization tools, through which users can interact with the system, view and manage transaction data, node status, security logs and other information, to achieve comprehensive control and management of the system.

[0038] The specific implementation process is as follows:

[0039] A large automobile manufacturer has a highly automated production line, including raw material procurement, parts production, vehicle assembly and final sales. In order to ensure the safety, traceability and management efficiency of the production line, the automobile manufacturer decided to adopt a blockchain-based industrial control system traceability and safety management system.

[0040] Main chain: responsible for handling key tasks, such as issuing production line control instructions, storing and verifying core data, etc. The main chain is deployed in the manufacturer's core data center to ensure data security and reliability.

[0041] The first subchain is used to store real-time data on the production line, including equipment status, production progress, and product quality inspection. These data are crucial for monitoring and management of the production line.

[0042] Second sub-chain: responsible for processing transaction data related to the supply chain, including raw material purchase orders, parts transaction records, and sales contracts. Manufacturers can track the source of raw materials and the flow of parts to ensure the transparency and traceability of the supply chain.

[0043] The third subchain: used for the execution of smart contracts, including equipment maintenance plans, quality control standards, and production agreements. The automated execution of smart contracts reduces the possibility of human intervention and errors, and improves the stability and efficiency of the production line.

[0044] Manufacturers assign a reputation score to each node involved in production line and supply chain management. The score is based on the node's historical user behavior, including compliance with production protocols and timely response to maintenance requests, transaction records, including transaction amounts and transaction frequency, and community feedback, including evaluations and complaints from other nodes. The score is finally derived through a comprehensive evaluation of the three.

[0045] Based on the reputation score of the node, the system automatically generates different security verification processes. For example, nodes with a reputation score below 60 will be denied access to the system; nodes with a score between 60 and 80 will require face verification; nodes with a score between 80 and 90 will require phone verification; and nodes with a score between 90 and 100 will only require verification code verification. After the node verification is completed, the multi-level security login unit allows the user to enter his or her username and password on the login interface. After receiving the credentials entered by the user, the node verification module compares them with the password stored in the database. If the password is correct, it will enter the deep login level; if the password is incorrect, the account will be locked or the node verification will be repeated according to the number of errors.

[0046] At the deep login level, the system prompts the user to select a biometric method for verification. Common biometric methods include fingerprint recognition and voiceprint recognition. The user selects a biometric method based on personal preference or system requirements. The user follows the system prompts to perform biometric operations, which include placing a finger for fingerprint scanning or speaking a preset sentence for voiceprint recognition. The system compares the collected biometric information with the stored template. If the biometric verification passes, it enters the dynamic login level; if not, it returns to the node verification.

[0047] At the dynamic login level, the system starts the behavior analysis mechanism to collect and analyze the user's login behavior data in real time. The behavior data collected by the system includes login time, login location, device type, multiple failed login attempts in a short period of time, and frequent changes of login devices. The system evaluates the user's login behavior based on the collected behavior data. The evaluation results will be used for the node's reputation score and secondary verification of the anti-cheating module.

[0048] If all verification steps are passed, the user successfully logs into the system; after more than three login failures, the node verification module locks the node and notifies the administrator.

[0049] The system monitors and analyzes transaction behaviors in real time and automatically detects abnormal transactions, such as rapid transfer of large amounts of funds, frequent changes in transaction objects, etc. When abnormal behavior is detected, the system requires the relevant nodes to complete secondary verification code verification and initiates in-depth data analysis to conduct a comprehensive review of the node's user identity, historical transaction records, etc.

[0050] If the results of in-depth data analysis show that the node has fraudulent behavior or security threats, the system will automatically take corresponding measures, such as freezing the node account, adding verification steps, or blacklisting the node. Manufacturers use zero-knowledge proof methods to protect sensitive data on production lines and supply chains. Only authorized users can access and view relevant information, such as equipment status, production progress, transaction records, etc. This ensures the security of data during transmission and storage.

[0051] Manufacturers use the Solidity language to write smart contracts, including equipment maintenance plans, quality control standards, production agreements, etc. These smart contracts are deployed and executed directly in the system without human intervention. When the equipment reaches the scheduled maintenance cycle, the smart contract will automatically trigger the maintenance plan and notify the relevant personnel to execute it. This reduces the possibility of human errors and delays and improves the stability and efficiency of the production line.

[0052] Manufacturers provide intuitive and easy-to-use user interfaces and visualization tools to facilitate users to view and manage transaction data, node status, security logs and other information. Users can use these tools to monitor the operation status of the production line in real time, view transaction records, and manage node permissions. The system also provides API interfaces and standard data formats to support interoperability and integration with other industrial control systems or information platforms. This enables manufacturers to easily integrate and collaboratively manage the system with other systems.

[0053] It should be noted that, in this article, relational terms such as first and second, etc. are only used to distinguish one entity or operation from another entity or operation, and do not necessarily require or imply any such actual relationship or order between these entities or operations. Moreover, the terms "include", "comprise" or any other variants thereof are intended to cover non-exclusive inclusion, so that a process, method, article or device including a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, method, article or device.

[0054] The above is only an embodiment of the present invention. The common sense such as the known specific structure and characteristics in the scheme is not described in detail here. The ordinary technicians in the relevant field know all the common technical knowledge in the technical field of the invention before the application date or priority date, can obtain all the existing technologies in the field, and have the ability to apply the conventional experimental means before that date. The ordinary technicians in the relevant field can improve and implement this scheme in combination with their own abilities under the enlightenment given by this application. Some typical known structures or known methods should not become obstacles for ordinary technicians in the relevant field to implement this application. It should be pointed out that for those skilled in the art, without departing from the structure of the present invention, several deformations and improvements can be made, which should also be regarded as the protection scope of the present invention, which will not affect the effect of the implementation of the present invention and the practicality of the patent. The protection scope required by this application shall be based on the content of its claims, and the specific implementation methods and other records in the specification can be used to interpret the content of the claims.

Claims

1. The blockchain-based industrial control system traceability and safety management system is characterized by: Includes the following modules: The blockchain module is used for the communication of system data and adopts a layered blockchain structure, including a main chain and three sub-chains; The node verification module is used to determine the node access restriction. It adopts a node verification mechanism based on user reputation and contribution. The node reputation score ranges from 1 to 100, and automatically generates four differentiated security verification processes, including access denial for scores below 60, face verification for scores between 60 and 80, phone verification for scores between 80 and 90, and verification code verification for scores between 90 and 100. The anti-cheating module is used to require the node to complete a secondary verification code verification when the node attempts to perform abnormal behavior or verification, and conduct in-depth data analysis on its user identity; Privacy module, used to protect data privacy, so that only authorized users can access and view relevant information; Smart contract module, used for writing, deploying and executing smart contracts.

2. The blockchain-based industrial control system traceability and safety management system according to claim 1 is characterized by: The main chain in the blockchain module is responsible for processing key tasks, storage and verification of core data. The three sub-chains include the first sub-chain, the second sub-chain and the third sub-chain, and their respective tasks are: data storage, transaction processing and smart contract execution.

3. The blockchain-based industrial control system traceability and safety management system according to claim 2 is characterized by: The node verification module is equipped with a multi-level security login unit, which divides the login process into three levels: basic login, deep login and dynamic login. Basic login uses a password, deep login uses biometrics, which includes fingerprint recognition and voiceprint recognition. Dynamic verification is combined with behavioral analysis, which includes login time, login location, device type, multiple login failures in a short period of time, and frequent changes of login devices.

4. The blockchain-based industrial control system traceability and safety management system according to claim 3 is characterized by: The node verification module collects reputation information from multiple dimensions such as user behavior, transaction records, and community feedback, and evaluates the reputation score of the node based on the comprehensive score and ranking of this information. Specifically, user behavior accounts for 30% of the weight, transaction records account for 40% of the weight, and community feedback accounts for 30% of the weight.

5. The blockchain-based industrial control system traceability and safety management system according to claim 4 is characterized by: The anti-fraud module monitors and analyzes transaction behaviors in real time, automatically detects abnormal transactions and analyzes their behavior patterns.

6. The blockchain-based industrial control system traceability and safety management system according to claim 5 is characterized by: The anti-cheating module automatically adjusts the transaction verification strategy according to the type of security threat, which includes fraudulent behavior, internal threat and external threat. The transaction verification strategy includes transaction frequency, transaction amount and transaction object. When high-risk behavior is detected, which includes a large number of transactions in a short period of time, abnormal geographical location and use of proxy VPN, the system automatically adds additional verification steps or increases one or more of the verification requirements.

7. The blockchain-based industrial control system traceability and safety management system according to claim 6 is characterized by: The privacy module uses the zero-knowledge proof method in cryptography.

8. The blockchain-based industrial control system traceability and safety management system according to claim 7 is characterized by: The smart contract module is written in Solidity language, deployed and executed in the system, and supports automated and decentralized industrial control system management and control.

9. The blockchain-based industrial control system traceability and safety management system according to claim 8 is characterized by: The system provides API interface and standard data format.

10. The blockchain-based industrial control system traceability and safety management system according to claim 9 is characterized by: The system includes a user interface and a visualization tool, through which the user can interact with the system to view and manage transaction data, node status and security logs.

Images