Physical infrastructure node continuous data uplink and traceability method and system

Abstract

The invention belongs to the technical field of data security and block chains, and discloses a physical infrastructure node continuous data chaining and traceability method and system, and the method comprises the steps: generating a unique asymmetric key pair for each node; continuously collecting physical sensing data and generating a unique data identifier; performing digital signature on the current physical sensing data to form a continuous signature chain; storing the original physical perception data, the corresponding digital signature and the continuous signature chain in an off-chain service platform database; uploading the data identifier, the digital signature and the hash value of the original physical sensing data to a block chain network based on a dynamic anchoring strategy; and comparing the calculated hash value with the hash value of the corresponding original physical sensing data in the block chain network, and backtracking the continuous signature chain. According to the invention, a safe, efficient and traceable complete data guarantee scheme can be provided for a decentralized physical infrastructure network.

Description

Technical Field

[0001] This invention relates to the fields of data security and blockchain technology, and in particular to a method and system for continuous on-chain data recording and traceability of physical infrastructure nodes. Background Technology

[0002] With the rapid development of the Internet of Things (IoT), industrial equipment, and decentralized physical infrastructure networks, a large number of distributed physical nodes continuously generate data with business and regulatory value. Existing blockchain-based evidence storage solutions typically achieve immutability by directly writing data or its digests into the blockchain, but in practical applications, they still have the following shortcomings:

[0003] (1) Lack of trustworthy data source: Most solutions only focus on the immutability on the chain, without effectively authenticating the data collection source, which may result in the blockchain permanently storing tampered or forged data.

[0004] (2) The continuity of time series data is difficult to verify: Existing solutions mostly sign or hash the evidence for a single data item, which makes it difficult to prove the order relationship and integrity between data, and cannot meet the requirements for reliable verification of continuous data.

[0005] (3) Real-time on-chain dependence and high cost: The fixed time or fixed quantity triggering on-chain method is difficult to adapt to offline operation of equipment or high-frequency data scenarios, increasing the on-chain load and usage cost.

[0006] (4) Lack of cross-validation mechanism in multi-node environment: In a decentralized environment, single node anomalies or private key leaks are difficult to detect in a timely manner, and there is a risk of single point of fraud.

[0007] Therefore, there is an urgent need for a technical solution that can achieve source credibility, continuous off-chain evidence retention, tamper-proof on-chain evidence storage, and full-chain traceability. Summary of the Invention

[0008] This invention provides a method and system for continuous data uploading and traceability of physical infrastructure nodes to solve the problems mentioned above in the prior art.

[0009] According to a first aspect of the present invention, a method for continuous data uploading and traceability of physical infrastructure nodes is provided.

[0010] In one embodiment, the method for continuous data uploading and traceability of physical infrastructure nodes includes:

[0011] Node initialization: During the deployment phase of decentralized physical infrastructure nodes, a unique asymmetric key pair is generated for each node;

[0012] Data collection and identifier generation: Physical sensing data is continuously collected through nodes, and a unique data identifier is generated for each piece of physical sensing data to identify the correspondence between the physical sensing data in off-chain evidence storage and on-chain evidence storage;

[0013] Construction of a continuous signature chain: Based on the collection time sequence, each node uses its own private key and the signature of the previous physical sensing data to digitally sign the current physical sensing data, forming a continuous signature chain with cryptographic association between the previous and subsequent signatures.

[0014] Off-chain evidence retention: The collected raw physical sensing data, corresponding digital signatures and continuous signature chains are stored in the off-chain business platform database to realize off-chain data evidence retention, query and verification;

[0015] On-chain evidence storage: Based on a dynamic anchoring strategy, the data identifier, digital signature, and hash value of the original physical sensing data are uploaded to the blockchain network, and an immutable on-chain evidence storage is generated after the signature is verified.

[0016] Data verification and traceability: Users obtain raw physical sensing data from the off-chain business platform database and calculate the hash value. The calculated hash value is compared with the corresponding hash value of the raw physical sensing data in the blockchain network, and the continuous signature chain is traced back to verify the authenticity, integrity and time sequence of the data.

[0017] In one embodiment, the asymmetric key includes a node private key and a node public key. The node private key is stored in a secure encryption module or trusted execution environment built into the node, and the node public key is registered to the blockchain network for subsequent on-chain signature verification.

[0018] In one embodiment, the physical sensing data includes environmental status data, equipment operating parameters, spatial location and trajectory data, and resource measurement data.

[0019] In one embodiment, the signature relationship of the continuous signature chain is as follows:

[0020]

[0021] In the formula, This is the signature result corresponding to the nth physical sensing data. This is a function that executes a digital signature algorithm on the input data (·) using the node's private key SK, where SK is the node's private key. For the nth piece of physical sensing data collected... For data concatenation operators, For hash functions, This is the signature result corresponding to the (n-1)th piece of physical sensing data.

[0022] In one embodiment, the off-chain business platform database supports offline node operation, breakpoint resume transmission, and data retransmission mechanisms.

[0023] Among them, when the decentralized physical infrastructure node is offline, the continuously collected physical sensing data, the corresponding data identifier and the signature chain status are cached locally on the node, and the last successfully verified data identifier is recorded.

[0024] Once the node regains its online connection, it will upload the physical sensing data cached during the offline period and the corresponding signature chain status to the off-chain business platform database in sequence according to the data identifier or time order.

[0025] The off-chain business platform database performs integrity verification on the retransmitted data based on the hash association relationship between adjacent signatures in the continuous signature chain. After the verification is passed, the retransmission is completed and the certificate is retained to ensure the integrity and consistency of continuous time series data.

[0026] In one embodiment, the process of uploading the data identifier, digital signature, and hash value of the original physical sensing data to the blockchain network based on a dynamic anchoring strategy, and generating an immutable on-chain notarization after signature verification, includes:

[0027] Based on the state information of the continuous signature chain, the anchoring trigger conditions are calculated in real time in the off-chain business platform database or decentralized physical infrastructure nodes.

[0028] When any anchoring trigger condition is met, the corresponding signature node is selected from the continuous signature chain as the anchor point, and anchoring digest information is generated.

[0029] Upload the data identifier, digital signature, and hash value of the original physical sensing data corresponding to the anchor digest information to the blockchain network;

[0030] Blockchain nodes verify the uploaded data using their registered public keys. Once the verification is successful, an immutable on-chain anchored certificate is generated, thus enabling trusted uploading of continuous data to the blockchain without altering the integrity of the continuous signature chain.

[0031] In one embodiment, the anchoring triggering conditions include continuously collecting data to a preset data quantity threshold, continuously collecting data for a time span of a preset time window, and an abnormal signature state appearing in the continuous signature chain, data interruption, or integrity verification failure.

[0032] In one embodiment, selecting a corresponding signature node from the continuous signature chain as an anchor point and generating anchor digest information includes:

[0033] Based on the moment of triggering anchoring, the most representative data point is selected from the continuous signature chain as the anchor point, and a structured anchoring summary information is generated based on the anchor point to achieve efficient on-chain evidence storage and complete off-chain verification.

[0034] The anchor summary information includes the anchor point identifier, anchor point integrity proof, and time-series chain context proof. The time-series chain context proof includes the chain segment start summary and the anchor point preceding link proof.

[0035] In one embodiment, during the process of off-chain proof or on-chain proof, at least one other decentralized physical infrastructure node is introduced to cross-sign or confirm the phased results of the current continuous signature chain, so as to form cross-node cross proof.

[0036] According to a second aspect of the present invention, a system for continuous data uploading and traceability of physical infrastructure nodes is provided.

[0037] In one embodiment, the continuous data uploading and traceability system for physical infrastructure nodes includes:

[0038] The node initialization module is used to generate a unique asymmetric key pair for each node during the deployment phase of decentralized physical infrastructure nodes.

[0039] The data acquisition and identification generation module is used to continuously collect physical sensing data through nodes and generate a unique data identifier for each piece of physical sensing data to identify the correspondence between the physical sensing data in off-chain evidence storage and on-chain evidence storage.

[0040] The continuous signature chain construction module is used to digitally sign the current physical sensing data by using the node's own private key and the signature of the previous physical sensing data according to the collection time sequence, forming a continuous signature chain with cryptographic association between the previous and subsequent signatures.

[0041] The off-chain evidence retention module is used to store the collected raw physical sensing data, corresponding digital signatures and continuous signature chains in the off-chain business platform database to realize off-chain data evidence retention, query and verification.

[0042] The on-chain evidence storage module is used to upload data identifiers, digital signatures, and hash values ​​of original physical sensing data to the blockchain network based on a dynamic anchoring strategy, and generate tamper-proof on-chain evidence storage after the signature is verified.

[0043] The data verification and traceability module is used by users to obtain raw physical sensing data from the off-chain business platform database and calculate the hash value. The calculated hash value is compared with the corresponding hash value of the raw physical sensing data in the blockchain network, and the continuous signature chain is traced back to verify the authenticity, integrity and time sequence of the data.

[0044] According to a third aspect of the present invention, a computer device is provided.

[0045] In some embodiments, the computer device includes a memory and a processor, the memory storing a computer program, and the processor executing the computer program to implement the steps of the method described above.

[0046] According to a fourth aspect of the present invention, a computer-readable storage medium is provided.

[0047] In one embodiment, a computer program is stored on the computer-readable storage medium, which, when executed by a processor, implements the steps of the above method.

[0048] The technical solutions provided by the embodiments of the present invention may include the following beneficial effects:

[0049] 1) Achieving trusted authentication and continuous integrity assurance of data generation source: This invention performs source signature on continuously collected data on the decentralized physical infrastructure node side, and constructs a continuous signature chain by hashing adjacent data signatures, thereby establishing a verifiable time sequence relationship and integrity proof at the data generation stage, which can effectively prevent data forgery, insertion or tampering, and improve the source trustworthiness of continuous data.

[0050] 2) Construct a low-cost, trusted evidence storage mechanism that combines off-chain evidence retention with on-chain evidence storage: This invention completely preserves the original data and continuous signature chain on the off-chain business platform, and only uploads the data identifier, signature and hash value corresponding to the key anchor point to the blockchain network. Under the premise of ensuring data verifiability and non-repudiation, it significantly reduces the amount of data stored on the chain and the computational load, thereby reducing the cost of using the blockchain and improving the overall processing efficiency.

[0051] 3) Supports continuous data traceability and post-event verification under offline operating conditions: Through the collaborative design of off-chain evidence retention, breakpoint resume transmission and dynamic anchoring mechanism, this invention enables decentralized physical infrastructure nodes to continuously collect and retain data even when offline or under unstable network conditions. After the connection is restored, the data is retransmitted and verified, and post-event independent verification is achieved by combining the on-chain anchoring results. It is applicable to various decentralized physical infrastructure and continuous data collection application scenarios.

[0052] It should be understood that the above general description and the following detailed description are exemplary and explanatory only, and are not intended to limit the invention. Attached Figure Description

[0053] The accompanying drawings, which are incorporated in and form part of this specification, illustrate embodiments consistent with the invention and, together with the description, serve to explain the principles of the invention.

[0054] Figure 1 This is a flowchart illustrating a method for continuous data uploading and traceability of physical infrastructure nodes according to an exemplary embodiment;

[0055] Figure 2 This is a structural block diagram illustrating a system for continuous data uploading and traceability of physical infrastructure nodes, according to an exemplary embodiment.

[0056] Figure 3 This is a schematic diagram of the structure of a computer device according to an exemplary embodiment. Detailed Implementation

[0057] The following description and accompanying drawings fully illustrate specific embodiments described herein to enable those skilled in the art to practice them. Some portions and features of certain embodiments may be included in or replace portions and features of other embodiments. The scope of the embodiments herein includes the entire scope of the claims and all available equivalents thereof. The various embodiments described herein are presented in a progressive manner, with each embodiment focusing on its differences from other embodiments; similar or identical parts between embodiments can be referred to interchangeably.

[0058] The modules in the apparatus or system of this application can be implemented entirely or partially through software, hardware, or a combination thereof. These modules can be embedded in or independent of the processor in a computer device in hardware form, or stored in the memory of a computer device in software form, so that the processor can call and execute the operations corresponding to each module.

[0059] Where there is no conflict, the embodiments and features in the embodiments of the present invention can be combined with each other.

[0060] Figure 1 This paper illustrates an embodiment of a method for continuous data uploading and traceability of physical infrastructure nodes according to the present invention.

[0061] In this optional embodiment, the method for continuous data uploading and traceability of physical infrastructure nodes includes:

[0062] Step 101, Node Initialization: During the deployment phase of the decentralized physical infrastructure nodes, a unique asymmetric key pair is generated for each node;

[0063] Step 102, Data Collection and Identifier Generation: Physical sensing data is continuously collected through nodes, and a unique data identifier is generated for each piece of physical sensing data to identify the correspondence between the physical sensing data in off-chain evidence storage and on-chain evidence storage.

[0064] Step 103: Construction of a continuous signature chain: According to the collection time sequence, each node uses its own private key and the signature of the previous physical sensing data to digitally sign the current physical sensing data, forming a continuous signature chain with cryptographic association between the previous and subsequent signatures.

[0065] Step 104, Off-chain Evidence Retention: The collected raw physical sensing data, corresponding digital signatures, and continuous signature chains are stored in the off-chain business platform database to realize off-chain data evidence retention, query, and verification.

[0066] Step 105, On-chain Evidence Storage: Based on the dynamic anchoring strategy, the data identifier, digital signature, and hash value of the original physical sensing data are uploaded to the blockchain network, and an immutable on-chain evidence storage is generated after the signature verification is passed.

[0067] Step 106, Data Verification and Traceability: The user obtains the original physical sensing data from the off-chain business platform database and calculates the hash value. The calculated hash value is compared with the corresponding hash value of the original physical sensing data in the blockchain network, and the continuous signature chain is traced back to verify the authenticity, integrity and time sequence of the data.

[0068] In this optional embodiment, the asymmetric key includes a node private key and a node public key. The node private key is stored in the node's built-in security encryption module or trusted execution environment, and the node public key is registered to the blockchain network for subsequent on-chain signature verification.

[0069] In this optional embodiment, the physical sensing data includes environmental status data, equipment operating parameters, spatial location and trajectory data, and resource measurement data.

[0070] In this optional embodiment, the signature relationship of the continuous signature chain is as follows:

[0071]

[0072] In the formula, This is the signature result corresponding to the nth physical sensing data. This is a function that uses the node's private key SK to execute a digital signature algorithm on the input data (·), and its output is the digital signature result. SK is the node's private key. For the nth piece of physical sensing data collected... This is a data concatenation operator whose function is to join the data strings on its left and right sides in sequence into a complete data sequence. For hash functions, This is the signature result corresponding to the (n-1)th piece of physical sensing data.

[0073] In this optional embodiment, the off-chain business platform database supports offline node operation, breakpoint resume transmission, and data retransmission mechanisms;

[0074] Among them, when the decentralized physical infrastructure node is offline, the continuously collected physical sensing data, the corresponding data identifier and the signature chain status are cached locally on the node, and the last successfully verified data identifier is recorded.

[0075] Once the node regains its online connection, it will upload the physical sensing data cached during the offline period and the corresponding signature chain status to the off-chain business platform database in sequence according to the data identifier or time order.

[0076] The off-chain business platform database performs integrity verification on the retransmitted data based on the hash association relationship between adjacent signatures in the continuous signature chain. After the verification is passed, the retransmission is completed and the certificate is retained to ensure the integrity and consistency of continuous time series data.

[0077] In this optional embodiment, the step of uploading the data identifier, digital signature, and hash value of the original physical sensing data to the blockchain network based on the dynamic anchoring strategy, and generating an immutable on-chain notarization after signature verification, includes:

[0078] Based on the state information of the continuous signature chain, the anchoring trigger conditions are calculated in real time in the off-chain business platform database or decentralized physical infrastructure nodes.

[0079] When any anchoring trigger condition is met, the corresponding signature node is selected from the continuous signature chain as the anchor point, and anchoring digest information is generated.

[0080] Upload the data identifier, digital signature, and hash value of the original physical sensing data corresponding to the anchor digest information to the blockchain network;

[0081] Blockchain nodes verify the uploaded data using their registered public keys. Once the verification is successful, an immutable on-chain anchored certificate is generated, thus enabling trusted uploading of continuous data to the blockchain without altering the integrity of the continuous signature chain.

[0082] In this optional embodiment, the anchoring triggering conditions include continuously collecting data to a preset data quantity threshold, continuously collecting data for a time span of a preset time window, and an abnormal signature state appearing in the continuous signature chain, data interruption, or integrity verification failure.

[0083] In this optional embodiment, selecting the corresponding signature node from the continuous signature chain as the anchor point and generating anchor digest information includes:

[0084] Based on the moment of triggering anchoring, the most representative data point is selected from the continuous signature chain as the anchor point, and a structured anchoring summary information is generated based on the anchor point to achieve efficient on-chain evidence storage and complete off-chain verification.

[0085] The anchor summary information includes the anchor point identifier, anchor point integrity proof, and time-series chain context proof. The time-series chain context proof includes the chain segment start summary and the anchor point preceding link proof.

[0086] In this optional embodiment, during the process of off-chain evidence retention or on-chain evidence storage, at least one other decentralized physical infrastructure node is introduced to cross-sign or confirm the phased results of the current continuous signature chain, so as to form cross-node cross-proof.

[0087] Figure 2 This paper illustrates an embodiment of a physical infrastructure node continuous data uploading and traceability system according to the present invention.

[0088] In this optional embodiment, the continuous data uploading and traceability system for physical infrastructure nodes includes:

[0089] The node initialization module 201 is used to generate a unique asymmetric key pair for each node during the deployment phase of the decentralized physical infrastructure nodes.

[0090] The data acquisition and identification generation module 202 is used to continuously acquire physical sensing data through nodes and generate a unique data identifier for each piece of physical sensing data to identify the correspondence between the physical sensing data in off-chain evidence storage and on-chain evidence storage.

[0091] The continuous signature chain construction module 203 is used to digitally sign the current physical sensing data by using the node's own private key and the signature of the previous physical sensing data according to the collection time sequence, so as to form a continuous signature chain with cryptographic association between the previous and subsequent signatures.

[0092] The off-chain evidence retention module 204 is used to store the collected raw physical sensing data, the corresponding digital signature and the continuous signature chain in the off-chain business platform database to realize off-chain data evidence retention, query and verification.

[0093] The on-chain evidence storage module 205 is used to upload the data identifier, digital signature and hash value of the original physical sensing data to the blockchain network based on the dynamic anchoring strategy, and generate an immutable on-chain evidence storage after the signature is verified.

[0094] The data verification and traceability module 206 is used by users to obtain raw physical sensing data from the off-chain business platform database and calculate the hash value. The calculated hash value is compared with the corresponding hash value of the raw physical sensing data in the blockchain network, and the continuous signature chain is traced back to verify the authenticity, integrity and time sequence of the data.

[0095] To facilitate understanding of the above technical solutions of the present invention, the following further explains the above technical solutions of the present invention from the perspective of architecture and principle, as follows:

[0096] This invention proposes a method for continuous on-chain and traceable data storage of decentralized physical infrastructure nodes based on off-chain evidence retention. By constructing a continuous signature chain on the node side and combining off-chain evidence retention and on-chain evidence storage mechanisms, it achieves reliable protection of data throughout the entire process from generation, storage to verification.

[0097] A method for continuous on-chain and traceable data upload of decentralized physical infrastructure nodes based on off-chain evidence retention includes the following steps:

[0098] Step 1, Node Initialization: During the deployment phase of the decentralized physical infrastructure nodes, a unique asymmetric key pair is generated for each node. The node's private key is securely stored in the node's built-in security encryption module or trusted execution environment, while the node's public key is registered with the blockchain network for subsequent on-chain signature verification.

[0099] Among them, the asymmetric key algorithm is RSA, ECC, SM2, or an asymmetric encryption algorithm with the same security level.

[0100] Step 2, Data Acquisition and Identifier Generation: Nodes continuously collect physical world data and generate a unique Data ID for each piece of collected data, which is used to identify the correspondence between the data in off-chain evidence storage and on-chain evidence storage.

[0101] In this invention, "physical world data" refers to data automatically collected by physical entities through devices such as sensors, meters, and controllers in the Internet of Things, the Industrial Internet, and decentralized physical infrastructure networks, reflecting the state, events, or processes of the objective physical world. This data possesses time-series characteristics, definite source, and machine readability; its value lies in its direct or indirect measurement of the physical world. Typical physical world data includes, but is not limited to:

[0102] 1) Environmental condition data: such as temperature, humidity, air pressure, light intensity, noise, and air quality index (AQI);

[0103] 2) Equipment operating parameters: such as voltage, current, power, speed, pressure, vibration frequency, and equipment on / off status;

[0104] 3) Spatial location and trajectory data: such as GNSS (Global Navigation Satellite System) coordinates, displacement, velocity, and acceleration;

[0105] 4) Resource metering data: such as real-time consumption of water, electricity and gas, and physical quantity of warehouse inventory.

[0106] These data differ from business data, transaction records, or media content that are manually entered or generated by the system. Their core characteristic is that their generation directly depends on the interaction and measurement of physical entities.

[0107] Step 3: Constructing a continuous signature chain: Nodes digitally sign the currently collected data using their private keys according to the data collection time sequence, and use the signature digest corresponding to the previous data as an input parameter to participate in the signature calculation of the current data, thereby constructing a continuous signature chain to ensure the time sequence and integrity of the data.

[0108] The consecutive signature chains satisfy the following signature relationship:

[0109]

[0110] In the formula, This is the signature result corresponding to the nth physical sensing data. This is a function that uses the node's private key SK to execute a digital signature algorithm on the input data (·), and its output is the digital signature result. SK is the node's private key. For the nth piece of physical sensing data collected... This is a data concatenation operator whose function is to join the data strings on its left and right sides in sequence into a complete data sequence. For hash functions, For the signature result corresponding to the (n-1)th physical sensing data, the formula is... That is, the previous signature ( The hash value (or digest) of the data is used as a key input to the current data. The signatures are jointly signed, thus cryptographically ensuring a strict temporal and integrity association between the data, forming an irreversible signature chain.

[0111] In constructing the signature of the first piece of data Previously, an initial signature value needed to be generated. As the starting point of the chain, The generation of [database name] should ensure its uniqueness and prevent replay attacks. Preferred generation methods include, but are not limited to:

[0112] 1) Generation based on node identity: This involves generating unique identifiers for each node (such as the node's public key (PK) registered on the blockchain). node The device's unique identifier (Device ID) is hashed and then signed using the node's private key. That is: Sign0 = Sign SK (H(PK node Device ID), this method will It is strongly bound to the node's identity.

[0113] 2) Random number and timestamp generation: During node initialization, a high-quality random number (Nonce) is generated and combined with a precise initialization timestamp (Timestamp). init Then, sign it using the node's private key. That is: Sign0 = Sign SK (H(Nonce Timestamp init This method provides better forward safety.

[0114] 3) Preset Fixed Value: In extremely simplified scenarios, a fixed value that is publicly available across the entire network can be agreed upon (such as the hash value H("GENESIS") of the string "GENESIS") as... However, this method has low security and is generally not recommended for use in production environments.

[0115] Regardless of the method used The generated values ​​or generation methods must be publicly verifiable. Preferably, the values ​​or methods used for generation... Input parameters (such as PK) node (Nonce, etc.) or It is registered on the blockchain during the node initialization phase so that any validator has a credible starting point for verification when tracing back the continuous signature chain.

[0116] Step 4: Off-chain evidence storage: The collected raw data, corresponding digital signatures, and the continuous signature chain are stored in the off-chain business platform database to realize off-chain data evidence storage, query, and verification.

[0117] Among them, the off-chain business platform database supports offline node operation, breakpoint resumption, and data retransmission mechanisms, including:

[0118] When a decentralized physical infrastructure node is offline, the continuously collected data, corresponding data identifiers, and signature chain status are cached locally on the node, and the last successfully authenticated data identifier is recorded.

[0119] Once the node regains its online connection, it uploads the data cached during the offline period and the corresponding signature chain status to the off-chain business platform database in sequence according to data identifier or time order.

[0120] The off-chain business platform database performs integrity verification on the retransmitted data based on the hash association relationship between adjacent signatures in the continuous signature chain. After the verification is passed, the retransmission is completed and the certificate is retained to ensure the integrity and consistency of continuous time series data.

[0121] Step 5, On-chain Evidence Storage: Based on the dynamic anchoring strategy, the data identifiers, digital signatures, and original data hash values ​​corresponding to at least some of the key data in the continuous signature chain are uploaded to the blockchain network. The blockchain nodes verify the uploaded data based on the registered node public keys. After the verification is successful, an immutable on-chain evidence storage is generated.

[0122] The on-chain evidence storage adopts a dynamic anchoring strategy, including:

[0123] 1) Calculate anchoring trigger conditions in real time based on the state information of the continuous signature chain in off-chain business platforms or decentralized physical infrastructure nodes;

[0124] The anchoring trigger condition includes at least one of the following:

[0125] a) Continuous data collection reaches a preset data quantity threshold;

[0126] b) The time span for continuous data collection reaches the preset time window;

[0127] c) An abnormal signature state, data interruption, or integrity verification failure occurs in the continuous signature chain;

[0128] 2) When any anchoring trigger condition is met, select the corresponding signature node from the continuous signature chain as the anchor point and generate anchoring digest information;

[0129] Specifically, the method for generating anchor digest information is as follows: based on the moment when anchoring is triggered, select the most representative data point from the continuous signature chain (denoted as the k-th data point, whose data is Data). k The signature is Sign k This serves as the anchor point for this operation. Subsequently, a structured anchor digest is generated, containing at least the following elements to achieve efficient on-chain notarization and complete off-chain verification:

[0130] a) Anchor point identifier: A unique Data ID corresponding to the anchor point data. k .

[0131] b) Anchor point integrity proof: Hash value of anchor point data (Data) k ), and the complete digital signature (Sign) of that data point. k On-chain nodes can verify the Sign using their registered node public keys. k The effectiveness.

[0132] c) Sequential chain context proof: The necessary information to associate this anchor point back to the continuous signature chain, including at least:

[0133] c1) Segment Start Summary: The starting signature of the consecutive signature chain segment covered by this anchoring. start The hash value of Sign (Hash(Sign)) start This Sign start It is usually the signature of the previous anchor point, or the initialization signature. .

[0134] c2) Anchor Preorder Link Proof: Optional, to improve verification efficiency, a concise Merkel path or a list of adjacent signature hashes can be included to prove Sign. k In cryptography, it is indeed determined by Hash(Sign) start Chain generation derived from ).

[0135] The most representative data point selection rule is to directly select the last data point (chain head) of the continuous signature chain at the trigger anchor point, as this point cryptographically contains information about all preceding data. Alternatively, selection can be based on the type of trigger anchor: for example, if triggered by the expiration of a time window, the last data point within that window is selected; if triggered by a quantity threshold, the last point in the batch of data is selected. To further improve tamper-proof robustness, a pseudo-random function based on the chain segment's start digest can be used to select a data point within the chain segment as the anchor point.

[0136] The anchor summary information generated in the above manner not only proves the authenticity and integrity of the anchor point data itself, but also places it in an immutable continuous time series through "time-series chain context proof", thus achieving the effect of proving the chain with points.

[0137] 3) Upload the data identifier, digital signature and hash value corresponding to the anchor digest information to the blockchain network to form on-chain anchor evidence, thereby achieving trusted on-chain uploading of continuous data without changing the integrity of the continuous signature chain.

[0138] Furthermore, during the off-chain or on-chain evidence storage process, at least one other decentralized physical infrastructure node is introduced to cross-sign or confirm the interim results of the continuous signature chain, thereby forming cross-node cross-proof and creating a "supervision chain" with multi-node consensus. The implementation of this mechanism is as follows:

[0139] a) Establishing a supervisory relationship: In a decentralized physical infrastructure network, each data acquisition node (called the master node) is dynamically assigned or can choose at least one other physical node as a supervisory node. Supervisory relationships can be determined based on geographical proximity, network topology, or a random algorithm.

[0140] b) Phased Proof Generation: While constructing its local continuous signature chain, the master node sends a phased signature chain digest to its supervisor node upon reaching a predetermined cross-proof trigger point (e.g., after every N signatures generated, or whenever the dynamic anchoring condition is met). The digest contains at least the latest signature. Data ID, the starting and ending identifiers of this phase. start With Data ID end .

[0141] c) Supervisory Node Verification and Signature: After receiving the digest, the supervisory node performs an efficient chain-like continuity verification. It requests complete information (including Data) of the first and last data points within this phase from the master node or off-chain platform. start Sign start Data end Sign end ). Verify Sign start With Sign end Does it cryptographically conform to a continuous signature chain relationship (i.e., can it be derived from a known hash chain relationship)? Additionally, can the Sign be verified using the master node's public key? end The authenticity of the digest itself. After successful verification, the supervisory node uses its own private key to sign the phase digest, generating a cross-proof signature, and returns it to the master node.

[0142] d) Storage and On-Chain Anchoring of Proofs: The master node binds the cross-proof signature returned by the supervisory node with the corresponding anchor digest information for that stage, and stores them together in the off-chain database. During on-chain proof storage, not only is the master node's anchor information uploaded, but the hash values ​​of one or more cross-proof signatures corresponding to that anchor are also uploaded to the blockchain. This allows any subsequent validator to obtain these cross-proof signatures off-chain and verify them by querying the registered public key of the supervisory node on the blockchain.

[0143] Through the above mechanism, even if a single master node's private key is leaked and it attempts to forge historical data, it must obtain the collusion of all its supervisory nodes (i.e., the supervisory nodes are also required to sign the forged data digest), which significantly increases the cost and difficulty of malicious collusion. At the same time, since the supervisory nodes only need to perform lightweight verification and signing at key anchor points, their computational and communication overhead is controllable.

[0144] Step Six: Data Verification and Traceability: Users or third parties obtain the original data from the off-chain business platform database and calculate the hash value, compare it with the corresponding data hash value in the blockchain, and simultaneously trace back the continuous signature chain to verify the authenticity, integrity, and time sequence of the data.

[0145] Furthermore, to achieve the above objectives, the present invention also adopts the following technical solution: a decentralized physical infrastructure node continuous data uploading and traceability system based on off-chain evidence retention, comprising: at least one decentralized physical infrastructure node (equivalent to a node initialization module, a data collection and identification generation module, and a continuous signature chain construction module), used to collect physical world data and generate data identifiers; the node has a built-in security encryption module or trusted execution environment for storing the node's private key and constructing a continuous signature chain; an off-chain business platform database (equivalent to an off-chain evidence retention module, a data verification and traceability module), used to store original data, digital signatures, and continuous signature chains, realizing off-chain evidence retention, querying, and verification; and a blockchain network (equivalent to an on-chain evidence storage module), used to store data identifiers, digital signatures, and data hash values, and to verify the uploaded data based on the node's public key, generating tamper-proof on-chain evidence storage.

[0146] Specifically, the system supports batch uploading, parallel signature verification, or cross-node cross-proofing mechanisms to reduce on-chain processing load and improve overall evidence storage efficiency.

[0147] This invention achieves end-to-end trusted assurance from data collection to on-chain evidence storage through a collaborative design of source signature, continuous signature chain, off-chain evidence retention, dynamic anchoring, and cross-node cross-proof. While ensuring the authenticity, integrity, time sequence, and traceability of data, it improves system efficiency and security, providing a secure, efficient, and scalable complete data trusted on-chain solution for decentralized physical infrastructure networks.

[0148] Continuous signature chain: via The chained signature structure connects discrete data points into a chain with strict temporal and integrity constraints. Effectively transforming the proof of data temporal order from a reliance on "external timestamps" into a self-verifying mechanism inherent in cryptographic signature relationships represents a significant technological improvement.

[0149] Dynamic anchoring strategy: Instead of using fixed-interval on-chain updates, it designs triggering conditions based on multiple dimensions such as quantity, time, and abnormal states. It can flexibly balance "timeliness of on-chain updates" and "on-chain costs," and can proactively send on-chain alerts when potential problems are detected (such as integrity verification failures), enhancing the system's security and usability.

[0150] Off-chain / on-chain collaborative architecture: It clarifies the division of labor of "full off-chain evidence retention and on-chain summary anchoring", and systematically solves the feasibility problem of uploading massive amounts of continuous data to the chain.

[0151] In one embodiment, a computer device is provided, which may be a server, and its internal structure diagram may be as follows: Figure 3As shown, the computer device includes a processor, memory, and a network interface connected via a system bus. The processor provides computing and control capabilities. The memory includes a non-volatile storage medium and internal memory. The non-volatile storage medium stores an operating system, computer programs, and a database. The internal memory provides an environment for the operation of the operating system and computer programs in the non-volatile storage medium. The database stores static and dynamic information data. The network interface communicates with external terminals via a network connection. When the computer program is executed by the processor, it implements the steps in the above method embodiments.

[0152] Those skilled in the art will understand that Figure 3 The structure shown is merely a block diagram of a portion of the structure related to the present invention and does not constitute a limitation on the computer device to which the present invention is applied. A specific computer device may include more or fewer components than those shown in the figure, or combine certain components, or have different component arrangements.

[0153] In addition, the present invention also provides a computer device, including a memory and a processor, wherein the memory stores a computer program, and the processor executes the computer program to implement the steps in the above method embodiments.

[0154] In addition, the present invention also provides a computer-readable storage medium having a computer program stored thereon, which, when executed by a processor, implements the steps in the above method embodiments.

[0155] Those skilled in the art will understand that all or part of the processes in the methods of the above embodiments can be implemented by a computer program instructing related hardware. The computer program can be stored in a non-volatile computer-readable storage medium, and when executed, it can include the processes of the embodiments of the methods described above. Any references to memory, storage, databases, or other media used in the embodiments provided by this invention can include at least one of non-volatile and volatile memory. Non-volatile memory can include read-only memory (ROM), magnetic tape, floppy disk, flash memory, or optical storage, etc. Volatile memory can include random access memory (RAM) or external cache memory. By way of illustration and not limitation, RAM can be in various forms, such as static random access memory (SRAM) or dynamic random access memory (DRAM), etc.

[0156] This invention is not limited to the structures described above and shown in the accompanying drawings, and various modifications and changes can be made without departing from its scope. The scope of this invention is limited only by the appended claims.

Claims

1. A method for continuous data uploading and traceability of physical infrastructure nodes, characterized in that, include: Node initialization: During the deployment phase of decentralized physical infrastructure nodes, a unique asymmetric key pair is generated for each node; Data collection and identifier generation: Physical sensing data is continuously collected through nodes, and a unique data identifier is generated for each piece of physical sensing data to identify the correspondence between the physical sensing data in off-chain evidence storage and on-chain evidence storage; Construction of a continuous signature chain: Based on the collection time sequence, each node uses its own private key and the signature of the previous physical sensing data to digitally sign the current physical sensing data, forming a continuous signature chain with cryptographic association between the previous and subsequent signatures. Off-chain evidence retention: The collected raw physical sensing data, corresponding digital signatures and continuous signature chains are stored in the off-chain business platform database to realize off-chain data evidence retention, query and verification; On-chain evidence storage: Based on a dynamic anchoring strategy, the data identifier, digital signature, and hash value of the original physical sensing data are uploaded to the blockchain network, and an immutable on-chain evidence storage is generated after the signature is verified. Data verification and traceability: Users obtain raw physical sensing data from the off-chain business platform database and calculate the hash value. The calculated hash value is compared with the corresponding hash value of the raw physical sensing data in the blockchain network, and the continuous signature chain is traced back to verify the authenticity, integrity and time sequence of the data.

2. The method for continuous data uploading and traceability of physical infrastructure nodes according to claim 1, characterized in that, The asymmetric key includes a node private key and a node public key. The node private key is stored in the node's built-in security encryption module or trusted execution environment, and the node public key is registered to the blockchain network for subsequent on-chain signature verification.

3. The method for continuous data uploading and traceability of physical infrastructure nodes according to claim 1, characterized in that, The physical sensing data includes environmental status data, equipment operating parameters, spatial location and trajectory data, and resource measurement data.

4. The method for continuous data uploading and traceability of physical infrastructure nodes according to claim 1, characterized in that, The signature relationship of the continuous signature chain is as follows: ； In the formula, This is the signature result corresponding to the nth physical sensing data. This is a function that performs a digital signature algorithm on the input data (·) using the node's private key SK, where SK is the node's private key. For the nth piece of physical sensing data collected... For data concatenation operators, For hash functions, This is the signature result corresponding to the (n-1)th piece of physical sensing data.

5. The method for continuous data uploading and traceability of physical infrastructure nodes according to claim 1, characterized in that, The off-chain business platform database supports offline node operation, breakpoint resume, and data retransmission mechanisms. Among them, when the decentralized physical infrastructure node is offline, the continuously collected physical sensing data, the corresponding data identifier and the signature chain status are cached locally on the node, and the last successfully verified data identifier is recorded. Once the node regains its online connection, it will upload the physical sensing data cached during the offline period and the corresponding signature chain status to the off-chain business platform database in sequence according to the data identifier or time order. The off-chain business platform database performs integrity verification on the retransmitted data based on the hash association relationship between adjacent signatures in the continuous signature chain. After the verification is passed, the retransmission is completed and the certificate is retained to ensure the integrity and consistency of continuous time series data.

6. The method for continuous data uploading and traceability of physical infrastructure nodes according to claim 1, characterized in that, The dynamic anchoring strategy involves uploading the data identifier, digital signature, and hash value of the original physical sensing data to the blockchain network, and generating an immutable on-chain notarization after signature verification. Based on the state information of the continuous signature chain, the anchoring trigger conditions are calculated in real time in the off-chain business platform database or decentralized physical infrastructure nodes. When any anchoring trigger condition is met, the corresponding signature node is selected from the continuous signature chain as the anchor point, and anchoring digest information is generated. Upload the data identifier, digital signature, and hash value of the original physical sensing data corresponding to the anchor digest information to the blockchain network; Blockchain nodes verify the uploaded data using their registered public keys. Once the verification is successful, an immutable on-chain anchored certificate is generated, thus enabling trusted uploading of continuous data to the blockchain without altering the integrity of the continuous signature chain.

7. The method for continuous data uploading and traceability of physical infrastructure nodes according to claim 6, characterized in that, The anchoring trigger conditions include continuously collecting data to reach a preset data quantity threshold, continuously collecting data for a time span reaching a preset time window, and abnormal signature status appearing in the continuous signature chain, data interruption, or integrity verification failure.

8. The method for continuous data uploading and traceability of physical infrastructure nodes according to claim 6, characterized in that, The step of selecting the corresponding signature node from the continuous signature chain as the anchor point and generating anchor digest information includes: Based on the moment of triggering anchoring, the most representative data point is selected from the continuous signature chain as the anchor point, and a structured anchoring summary information is generated based on the anchor point to achieve efficient on-chain evidence storage and complete off-chain verification. The anchor summary information includes the anchor point identifier, anchor point integrity proof, and time-series chain context proof. The time-series chain context proof includes the chain segment start summary and the anchor point preceding link proof.

9. The method for continuous data uploading and traceability of physical infrastructure nodes according to claim 1, characterized in that, During the process of off-chain evidence retention or on-chain evidence storage, at least one other decentralized physical infrastructure node is introduced to cross-sign or confirm the phased results of the current continuous signature chain, so as to form cross-node cross-proof.

10. A system for continuous data uploading and traceability of physical infrastructure nodes, characterized in that, include: The node initialization module is used to generate a unique asymmetric key pair for each node during the deployment phase of decentralized physical infrastructure nodes. The data acquisition and identification generation module is used to continuously collect physical sensing data through nodes and generate a unique data identifier for each piece of physical sensing data to identify the correspondence between the physical sensing data in off-chain evidence storage and on-chain evidence storage. The continuous signature chain construction module is used to digitally sign the current physical sensing data by using the node's own private key and the signature of the previous physical sensing data according to the collection time sequence, forming a continuous signature chain with cryptographic association between the previous and subsequent signatures. The off-chain evidence retention module is used to store the collected raw physical sensing data, corresponding digital signatures and continuous signature chains in the off-chain business platform database to realize off-chain data evidence retention, query and verification. The on-chain evidence storage module is used to upload data identifiers, digital signatures, and hash values ​​of original physical sensing data to the blockchain network based on a dynamic anchoring strategy, and generate tamper-proof on-chain evidence storage after the signature is verified. The data verification and traceability module is used by users to obtain raw physical sensing data from the off-chain business platform database and calculate the hash value. The calculated hash value is compared with the corresponding hash value of the raw physical sensing data in the blockchain network, and the continuous signature chain is traced back to verify the authenticity, integrity and time sequence of the data.

Images