Highway toll collection data storage method based on distributed bookkeeping system

Abstract

The invention provides a highway toll collection data storage method based on a distributed bookkeeping system, and relates to the technical field of financial data processing, and the method comprises the following steps: obtaining highway toll collection data information, sending the highway toll collection data information to the distributed bookkeeping system for uplink, and carrying out the encryption processing through the distributed bookkeeping system; and storing the encrypted highway toll data information returned by the distributed bookkeeping system into a highway toll data storage server provided by a service provider. According to the information type condition, the secondary encryption is established, the data content is protected by using the symmetric encryption, and then the symmetric key is protected by using the asymmetric encryption, so that the security of the highway toll data is improved. Symmetrical encryption is used for double protection of sensitive information to ensure the safety of data content, in addition, based on a symmetrical encryption algorithm, the requirement for computing resources is low, a symmetrical key can be dynamically generated during data transmission each time, and the risk of long-term storage and key management is reduced.

Description

Technical Field

[0001] The present invention relates to the technical field of financial data processing, and in particular to a method for storing highway toll data based on a distributed accounting system. Background Art

[0002] At present, there are three main ways for car owners to obtain ETC toll invoices for highways: 1. The vehicle pays the fee through the manual toll lane and the toll invoice is issued on the spot; 2. A toll collection invoice is issued when the ETC card is recharged; 3. The ETC electronic tag is bound to the car owner, and a toll invoice is issued to the car owner upon the car owner's request. If an invoice has been issued when the recharge is made, the corresponding amount should be deducted. The Ministry of Transport has begun to actively carry out related promotion work and vigorously promote the application of ETC charging on highways.

[0003] At present, a huge amount of toll data is generated during the operation of highways. This data is a very valuable data asset for both traffic management departments and highway operating companies. However, highway toll data is usually stored in a centralized manner at present, and the highway toll data is stored on a unified server. Once the server used to store highway toll data is attacked or fails, it may lead to the loss of highway toll data, affecting the security of highway toll data.

[0004] Therefore, it is necessary to provide a new highway toll data storage method based on a distributed accounting system to solve the above technical problems. Summary of the invention

[0005] In order to solve the technical problem that highway toll data is easily lost and affects the security of highway toll data, the present invention provides a highway toll data storage method based on a distributed accounting system.

[0006] The highway toll data storage method based on the distributed accounting system provided by the present invention includes the following steps: Obtain highway toll data information and send it to the distributed accounting system for on-chain storage, which will encrypt it; The encrypted highway toll data information returned by the distributed accounting system is stored in a highway toll data storage server provided by the service provider; The distributed accounting system encryption process includes the following steps: Key setting: the key generation center establishes a public key based on the highway toll data information, and sends a registration application to the private key generator based on the public key to generate the corresponding toll station private key; First-level encryption: Hash calculation is performed on the highway toll data information to obtain a hash value of fixed length. The hash value of the highway toll data is digitally signed using the toll station's private key to generate a digital signature. Secondary encryption uses symmetric encryption to protect data content based on the information type conditions of highway toll data information, and then uses asymmetric encryption to protect the symmetric key.

[0007] Furthermore, the storage method also includes a data collection, which packages adjacent toll stations into a block to form a chain structure, and aggregates multiple highway toll data information that have been hashed and digitally signed and retains them on a highway toll data storage server provided by a service provider.

[0008] Furthermore, according to the consensus mechanism of the alliance chain network, the collection main chain in the chain structure is divided into multiple toll station side chains, and backup nodes are created on each of the multiple toll station side chains.

[0009] Furthermore, decrypting the highway toll data information includes the following steps: the toll station reads the encrypted highway toll data information in the highway toll data storage server according to the private key, generates a proxy conversion key and a re-encrypted ciphertext, uses the private key to asymmetrically decrypt the encrypted symmetric key to obtain the symmetric key, and then uses the symmetric key to decrypt the encrypted sensitive information to restore the sensitive information.

[0010] Furthermore, the highway toll data information includes vehicle information, travel time, and toll.

[0011] Furthermore, the information type conditions of the highway toll data information include vehicle sensitive information and toll sensitive information.

[0012] Further, when a toll station is deregistered, the corresponding toll station private key is revoked from the highway toll data storage server provided by the service provider.

[0013] Furthermore, the validity period of the public key is specified when the public key is established. When the public key has expired, any operation using the public key is refused.

[0014] Compared with the related art, the highway toll data storage method based on the distributed accounting system provided by the present invention has the following beneficial effects: 1. The present invention establishes two-level encryption according to information type conditions, uses symmetric encryption to protect data content, and then uses asymmetric encryption to protect symmetric keys. Symmetric encryption is used to double protect sensitive information to ensure the security of data content. In addition, based on the symmetric encryption algorithm, the requirements for computing resources are relatively low, and the symmetric key can be dynamically generated each time data is transmitted, reducing the risk of long-term storage and management of keys.

[0015] 2. The present invention packages adjacent toll stations into a block to form a chain structure, and collects multiple highway toll data information that have been hashed and digitally signed and retains them on a highway toll data storage server provided by a service provider. The data is stored on multiple nodes, reducing the risk of single point failure. Each block contains the hash value of the previous block to form an unalterable chain structure, which is convenient for rapid positioning and retrieval of data. A multi-signature mechanism can be used to ensure multiple verification of data, and all transaction data are open and transparent and can be viewed by any user with access rights.

[0016] 3. In the present invention, each toll station has a pair of public and private keys, which improves security. Even if the private key of a toll station is leaked, it will not affect the data of other toll stations. Data access to different toll stations can be controlled in a fine-grained manner. BRIEF DESCRIPTION OF THE DRAWINGS

[0017] Figure 1 A flowchart of a method for storing and encrypting highway toll data based on a distributed accounting system provided by the present invention; Figure 2 A flowchart of the decryption process of the expressway toll data information provided by the present invention; Figure 3 A structural block diagram of the highway toll data information, toll station and service provider provided by the present invention; Figure 4 A flowchart of revoking the corresponding toll station private key provided by the present invention; Figure 5 A flowchart of the process of rebuilding a public key provided by the present invention. DETAILED DESCRIPTION

[0018] The present invention will be further described below in conjunction with the accompanying drawings and implementation modes.

[0019] Please refer to Figure 1 , Figure 2 , Figure 3 , Figure 4 as well as Figure 5 ,in, Figure 1 A flowchart of a method for storing and encrypting highway toll data based on a distributed accounting system provided by the present invention; Figure 2 A flowchart of the decryption process of the expressway toll data information provided by the present invention; Figure 3 A structural block diagram of the highway toll data information, toll station and service provider provided by the present invention; Figure 4 A flowchart of revoking the corresponding toll station private key provided by the present invention; Figure 5 A flowchart of the process of rebuilding a public key provided by the present invention.

[0020] Example 1 In the specific implementation process, referring to Figure 1 and Figure 2 as shown, the highway toll data storage method based on the distributed ledger system includes the following steps: Obtain highway toll data information and send it to the distributed ledger system for blockchain entry, and the distributed ledger system performs encryption processing. The highway toll data information includes vehicle information (license plate number, owner's personal information), passing time, and toll (payment information); The encryption processing of the distributed ledger system includes the following steps: Key setting. The key generation center establishes a public key based on the highway toll data information and sends a registration application to the private key generator according to the public key to generate the corresponding toll station private key; First-level encryption. Perform a hash calculation on the highway toll data information to obtain a hash value of a fixed length, and use the private key of the toll station to digitally sign the hash value of the highway toll data to generate a digital signature; Second-level encryption. Use symmetric encryption to protect the data content according to the information type conditions of the highway toll data information, and then use asymmetric encryption to protect the symmetric key. The information type conditions of the highway toll data information include vehicle sensitive information and toll sensitive information; Store the encrypted highway toll data information returned by the distributed ledger system in the highway toll data storage server provided by the service provider; It should be noted that decrypting the highway toll data information includes the following steps: The toll station reads the encrypted highway toll data information in the highway toll data storage server according to the private key, generates a proxy conversion key and a re-encrypted ciphertext, uses the private key to perform asymmetric decryption on the encrypted symmetric key to obtain the symmetric key, and then uses the symmetric key to decrypt the encrypted sensitive information to restore the sensitive information.

[0021] The following uses a specific example to further explain the encryption and storage process of highway toll data, and specific numerical values and strings will be used to demonstrate each step of the operation: Suppose the highway toll data information D is as follows: License plate number: L = "粤B12345"; Passing time: T = "2024−11−06 23:19:00"; Toll: F = 50.00 yuan; Owner's name: N = "张三"; Payment information: P = "信用卡1234-5678-9012-3456"; Transaction ID: I = "TX1234567890"; Device ID: E = "DEV001"; A pair of 2048-bit RSA keys were generated based on the highway toll data: Public Key ; Private Key ; in, and is the index, is the modulus; Suppose the private key obtained after the toll station is registered is: ; First level encryption: Use the SHA-256 hash function to perform hash calculation on the highway toll data information D: ; Let the hash calculation result H=“d4e0f9a5b6c7d8e9f0a1b2c3d4e5f6a7b8c9d0e1f2a3b4c5d6e7f8a9b0c1d2e3”; Use the toll booth private key Digitally sign the hash value H: ; Assume the signature result is: S=“b8c9d0e1f2a3b4c5d6e7f8a9b0c1d2e3a4b5c6d7e8f9a0b1c2d3e4f5a6b7c8d9”; Secondary encryption: Generate a symmetric key. The generated 128-bit AES symmetric key is: ; Type Condition: Use AES-128 for sensitive information and metadata To perform symmetric encryption: Sensitive Information “Zhang San, credit card 1234-5678-9012-3456”; ; The encryption result is: ; Metadata "TX1234567890,DEV001"; ; The encryption result is: ; Use RSA asymmetric encryption to protect the symmetric key: Using Public Key Symmetric key To perform asymmetric encryption: ; The encryption result is: Then pack all the encrypted data into a data structure ; ; Will Sent to the service provider’s storage server; Decryption steps: The toll booth reads the encrypted data from the service provider’s storage server ; Generate proxy conversion keys using proxy re-encryption PRE technology And the encrypted symmetric key Re-encrypted to : ; Use the toll booth's private key Symmetric key for encryption Perform asymmetric decryption and recover the symmetric key : The decryption result is: ; Using the recovered symmetric key Encrypted sensitive information and metadata To decrypt: The decryption result is: “Zhang San, credit card 1234-5678-9012-3456”; "TX1234567890,DEV001"; Using Public Key Verify the digital signature S to ensure the integrity and authenticity of the data. If the verification result is successful, the data is complete and has not been tampered with; Decrypted sensitive information and metadata and other unencrypted basic information to form the original highway toll data D; ; Through the above steps, encryption and decryption can be performed and highway toll data information can be restored.

[0022] It should be noted that in this process, the public key The private key is kept by the key generation center. The toll station keeps the public key. The car owner can obtain the public key from the key generation center through the highway toll data information. .

[0023] Embodiment 2 In a specific implementation process, refer to Figure 3 As shown, the highway toll data storage method based on the distributed accounting system also includes data collection, which packages adjacent toll stations into a block to form a chain structure, and collects multiple highway toll data information that have been hashed and digitally signed and is retained by the highway toll data storage server provided by the service provider. The data is stored on multiple nodes, reducing the risk of single point failure. A multi-signature mechanism is used to ensure multiple verification of the data. All transaction data are open and transparent and can be viewed by any user with access rights.

[0024] Furthermore, according to the consensus mechanism of the alliance chain network, the collection main chain in the chain structure is divided into multiple toll station side chains, and backup nodes are created on multiple toll station side chains respectively. Each block contains the hash value of the previous block, forming an unalterable chain structure. Each block has a unique index and hash value, which is convenient for quick positioning and retrieval of data.

[0025] Embodiment 3 In a specific implementation process, in order to further ensure data security, refer to Figure 4 As shown, when a toll station is deregistered, the corresponding toll station private key is revoked from the highway toll data storage server provided by the service provider. The steps are as follows: The toll booth sends a deregistration request to the service provider, requesting the revocation of its private key; The service provider verifies the legitimacy of the request to ensure that it comes from a legitimate toll booth; The service provider verifies the digital signature in the request using the toll booth’s public key to ensure the integrity and authenticity of the request; The service provider confirms that the toll station ID in the request is consistent with the toll station information registered in the system; The service provider marks the toll booth's private key as revoked in the key management system; Delete the toll booth's private key from the key management system to ensure it cannot be used again; Service providers update data access permissions to ensure that deregistered toll booths cannot access stored toll data; The above steps can ensure data security and prevent unauthorized access.

[0026] Embodiment 4 In a specific implementation, in order to prevent the abuse of public keys, refer to Figure 5 As shown, the validity period of the public key is specified when the public key is established. Before using the public key for authentication or encryption operations, check whether the public key is within the validity period. If the public key has expired, refuse to use the public key for any operation. Verifying the validity period of the public key includes: reading the public key and validity period from a file, and checking whether the public key is within the validity period when verifying the digital signature and decrypting the symmetric key. If the public key has expired, refusing to use the public key for any operation.

[0027] When the public key expires, the following steps need to be taken to ensure system security and data integrity: Generate a new public and private key pair and re-register the new public key; Update the data access control system to ensure that the new public and private keys have the correct access permissions; Re-encrypt the data encrypted with the old public key using the new public key; Record the operation log of public key update.

[0028] The above steps can ensure the security of the system and the integrity of the data after the public key expires.

[0029] It should be noted that each toll station has a pair of public and private keys, which improves security. Even if the private key of a toll station is leaked, it will not affect the data of other toll stations. Data access to different toll stations can be controlled in a fine-grained manner.

[0030] Through the description of the above implementation methods, those skilled in the art can clearly understand that each implementation method can be implemented by means of software plus a general hardware platform, and of course, by hardware. Based on this understanding, the above technical solution is essentially or the part that contributes to the relevant technology can be embodied in the form of a software product, and the computer software product can be stored in a computer-readable storage medium, such as ROM / RAM, a disk, an optical disk, etc., including a number of instructions for a computer device (which can be a personal computer, a server, or a network device, etc.) to execute the methods described in each embodiment or some parts of the embodiments.

[0031] The above shows and describes the basic principles and main features of the present invention and the advantages of the present invention. For those skilled in the art, it is obvious that the present invention is not limited to the details of the above exemplary embodiments, and the present invention can be implemented in other specific forms without departing from the spirit or basic features of the present invention. Therefore, no matter from which point of view, the embodiments should be regarded as exemplary and non-restrictive. The scope of the present invention is defined by the attached claims rather than the above description, and it is intended that all changes falling within the meaning and scope of the equivalent elements of the claims are included in the present invention, and any figure mark in the claims should not be regarded as limiting the claims involved.

[0032] In addition, it should be understood that although the present specification is described according to implementation modes, not every implementation mode contains only one independent technical solution. This description of the specification is only for the sake of clarity. Those skilled in the art should regard the specification as a whole. The technical solutions in each embodiment may also be appropriately combined to form other implementation modes that can be understood by those skilled in the art.

Claims

1. A method for storing highway toll data based on a distributed accounting system, characterized in that: The storage method comprises the following steps: Obtain highway toll data information and send it to the distributed accounting system for on-chain storage, which will encrypt it; The encrypted highway toll data information returned by the distributed accounting system is stored in a highway toll data storage server provided by the service provider; The distributed accounting system encryption process includes the following steps: Key setting: the key generation center establishes a public key based on the highway toll data information, and sends a registration application to the private key generator based on the public key to generate the corresponding toll station private key; First-level encryption: Hash calculation is performed on the highway toll data information to obtain a hash value of fixed length. The hash value of the highway toll data is digitally signed using the toll station's private key to generate a digital signature. Secondary encryption uses symmetric encryption to protect data content based on the information type conditions of highway toll data information, and then uses asymmetric encryption to protect the symmetric key.

2. The method for storing highway toll data based on a distributed accounting system according to claim 1, characterized in that: The storage method also includes data collection, packaging adjacent toll stations into a block to form a chain structure, and aggregating multiple highway toll data information that have been hashed and digitally signed and retaining them in a highway toll data storage server provided by a service provider.

3. The method for storing highway toll data based on a distributed accounting system according to claim 2, characterized in that: According to the consensus mechanism of the alliance chain network, the collection main chain in the chain structure is divided into multiple toll station side chains, and backup nodes are created on each of the multiple toll station side chains.

4. The method for storing highway toll data based on a distributed accounting system according to claim 3 is characterized in that: Decrypting the highway toll data information includes the following steps: the toll station reads the encrypted highway toll data information in the highway toll data storage server according to the private key, generates a proxy conversion key and a re-encrypted ciphertext, uses the private key to asymmetrically decrypt the encrypted symmetric key to obtain the symmetric key, and then uses the symmetric key to decrypt the encrypted sensitive information to restore the sensitive information.

5. The method for storing highway toll data based on a distributed accounting system according to claim 4 is characterized in that: The highway toll data information includes vehicle information, travel time, and toll.

6. The method for storing highway toll data based on a distributed accounting system according to claim 5, characterized in that: The information type conditions of highway toll data information include vehicle sensitive information and toll sensitive information.

7. The method for storing highway toll data based on a distributed accounting system according to claim 6, characterized in that: When a toll station is deregistered, the corresponding toll station private key is revoked from the highway toll data storage server provided by the service provider.

8. The method for storing highway toll data based on a distributed accounting system according to claim 7, characterized in that: The validity period of the public key is specified when the public key is established. When the public key has expired, any operation using the public key is refused.

Images