Industrial control equipment data chain method based on blockchain

Abstract

The present invention relates to the field of industrial control equipment data transmission, and specifically to a blockchain-based industrial control equipment data chain method, which greatly improves the security of industrial control equipment business data during transmission. The technical solution includes: registering the on-chain identity information of the industrial control equipment on the blockchain edge device management platform, and saving the identity information and key obtained by registration to the industrial control equipment end; judging the size of the data to be chained, if the data size does not exceed the set threshold, using the obtained key and identity information to sign and format the industrial control equipment data and identity information small data to be chained; chaining the data after packaging; if it exceeds the set threshold, the data to be chained is distributedly stored, and the address and hash result of the distributed storage are signed and formatted through the obtained key and identity information, and then chained. The present invention is suitable for industrial control equipment data chaining.

Description

Technical Field

[0001] The present invention relates to the field of industrial control equipment data transmission, and in particular to a method for uploading industrial control equipment data to a blockchain based method. Background Art

[0002] The existing industrial control equipment system mainly collects and displays data through the business system, and the industrial control data is directly sent to the business system through the http interface or socket interface. This poses a great security problem, such as data being tampered by a third party during transmission and a third party intercepting the data and impersonating the user. Summary of the invention

[0003] The purpose of the present invention is to provide a blockchain-based industrial control equipment data chain method, which greatly improves the security of industrial control equipment business data during transmission.

[0004] The present invention adopts the following technical solutions to achieve the above-mentioned purpose, and the method for uploading industrial control equipment data to the blockchain based on blockchain includes:

[0005] Step 1: Register the on-chain identity information of the industrial control equipment on the blockchain edge device management platform, and save the identity information and key obtained through registration to the industrial control equipment end;

[0006] Step 2: Determine the size of the data to be uploaded. If the data size does not exceed the set threshold, proceed to step 3; otherwise, proceed to step 4. The uploaded data includes industrial control equipment data and identity information data.

[0007] Step 3: Use the obtained key and identity information to sign and format the industrial control equipment data and identity information small data that need to be uploaded to the chain; after packaging, proceed to step 5;

[0008] Step 4: Distribute and store the data to be uploaded to the blockchain, and sign and format the distributed storage address and hash result using the obtained key and identity information;

[0009] Step 5: Upload the packaged data to the blockchain;

[0010] Step 6: Verify the signature based on the identity information and key in the on-chain information of the industrial control device. If the verification is successful, return the hash on the chain to the industrial control device.

[0011] Furthermore, in step 1, the key includes a private key and a public key that correspond to each other.

[0012] Furthermore, in step 3, the specific method of signing and formatting the industrial control equipment data and identity information small data that need to be uploaded to the chain includes:

[0013] Use the obtained private key and identity information to sign and format the industrial control equipment data and identity information small data that need to be uploaded to the chain.

[0014] Furthermore, in step 4, the specific method of signing and formatting the distributed storage address and hash result using the obtained key and identity information includes:

[0015] The distributed storage address and hash result are signed and formatted using the obtained private key and identity information.

[0016] Furthermore, in step 6, the specific method for verifying the signature includes: verifying the signature according to the identity information and public key of the on-chain information of the industrial control equipment.

[0017] Furthermore, in step 3 or step 4, the specific method of signing includes:

[0018] Step 301: Obtain the information summary of the data to be uploaded to the chain through the sha256 algorithm to obtain a 256-bit information summary;

[0019] Step 302: Fill the 256-bit summary information to 2048 bits according to the RSA2048 algorithm;

[0020] Step 303: encrypt the padded summary with the public key using the RSA2048 algorithm to obtain a 2048-bit encryption result, and encode the 2048-bit encryption result using Base64.

[0021] Furthermore, in step 5, the specific method of uploading the packaged data to the chain includes:

[0022] Step 501: Add a unique ID on the chain to the original industrial control data, and perform a hash operation on the unique ID, identity information, key information, and an AES 128-bit key interference item randomly generated by the industrial control device to obtain a first field;

[0023] Step 502: Fill the AES128-bit key randomly generated by the industrial control device to 2048 bits, and then use the key filled by the device corresponding to the on-chain ID to encrypt the on-chain data to obtain the second field;

[0024] Step 503: Use the AES key to perform AES-CBC encryption encoding on the original data that the industrial control device needs to upload to the chain to obtain the third field;

[0025] Step 504: Pack the first field, the second field, and the third field as on-chain data and then upload them to the chain.

[0026] Furthermore, in step 4, the specific method of performing distributed storage includes: performing ipfs distributed storage, and signing and formatting the address and hash result of the ipfs distributed storage through the obtained key and identity information.

[0027] The present invention registers the on-chain identity information of industrial control equipment on the blockchain edge device management platform, and saves the identity information and key obtained from the registration to the industrial control equipment end; the data that needs to be uploaded to the chain will be signed, and the data will be differentiated into industrial control equipment data and identity information small data, the signature result and the data will be packaged, and then the data will be uploaded to the chain. In the specific signing process, the obtained summary information is filled in to increase the summary information content; when uploading to the chain, the three relevant fields are obtained respectively, and the data is packaged and uploaded to the chain; the security of the industrial control equipment business data in transmission is greatly improved. BRIEF DESCRIPTION OF THE DRAWINGS

[0028] Figure 1 This is a flow chart of the method for uploading industrial control equipment data to the blockchain based on the present invention. DETAILED DESCRIPTION

[0029] The present invention provides a method for uploading industrial control equipment data to a blockchain based on blockchain, comprising:

[0030] Step 1: Register the on-chain identity information of the industrial control equipment on the blockchain edge device management platform, and save the identity information and key obtained through registration to the industrial control equipment end;

[0031] Step 2: Determine the size of the data to be uploaded. If the data size does not exceed the set threshold, proceed to step 3; otherwise, proceed to step 4. The uploaded data includes industrial control equipment data and identity information data.

[0032] Step 3: Use the obtained key and identity information to sign and format the industrial control equipment data and identity information small data that need to be uploaded to the chain; after packaging, proceed to step 5;

[0033] Step 4: Distribute and store the data to be uploaded to the blockchain, and sign and format the distributed storage address and hash result using the obtained key and identity information;

[0034] Step 5: Upload the packaged data to the blockchain;

[0035] Step 6: Verify the signature based on the identity information and key in the on-chain information of the industrial control device. If the verification is successful, return the hash on the chain to the industrial control device.

[0036] In step 1, the key includes a private key and a public key that correspond to each other.

[0037] In step 3, the specific method of signing and formatting the industrial control equipment data and identity information small data that need to be uploaded to the chain includes:

[0038] Use the obtained private key and identity information to sign and format the industrial control equipment data and identity information small data that need to be uploaded to the chain.

[0039] In step 4, the specific method of signing and formatting the distributed storage address and hash result using the obtained key and identity information includes:

[0040] The distributed storage address and hash result are signed and formatted using the obtained private key and identity information.

[0041] In step 6, the specific method of verifying the signature includes: verifying the signature according to the identity information and public key of the on-chain information of the industrial control equipment.

[0042] In step 3 or step 4, the specific method of signing includes:

[0043] Step 301: Obtain the information summary of the data to be uploaded to the chain through the sha256 algorithm to obtain a 256-bit information summary;

[0044] Step 302: Fill the 256-bit summary information to 2048 bits according to the RSA2048 algorithm;

[0045] Step 303: encrypt the padded summary with the public key using the RSA2048 algorithm to obtain a 2048-bit encryption result, and encode the 2048-bit encryption result using Base64.

[0046] In step 5, the specific method of uploading the packaged data to the chain includes:

[0047] Step 501: Add a unique ID on the chain to the original industrial control data, and perform a hash operation on the unique ID, identity information, key information, and the AES 128-bit key interference item randomly generated by the industrial control device to obtain the first field; the key interference item is used to verify the field key and the industrial control device identity information. The ID and key hash of each device are unchanged, and the hash will keep changing after adding the random AES;

[0048] Step 502: Fill the AES128-bit key randomly generated by the industrial control device to 2048 bits, and then use the key filled by the device corresponding to the on-chain ID to encrypt the on-chain data to obtain the second field;

[0049] Step 503: Use the AES key to perform AES-CBC encryption encoding on the original data that the industrial control device needs to upload to the chain to obtain the third field;

[0050] Step 504: Pack the first field, the second field, and the third field as on-chain data and then upload them to the chain.

[0051] In step 4, the specific method of performing distributed storage includes: performing ipfs distributed storage, and signing and formatting the address and hash result of the ipfs distributed storage through the obtained key and identity information.

[0052] The flowchart of the method for uploading industrial control equipment data to the blockchain based on the present invention is as follows: Figure 1 ,include:

[0053] S1. Register the device on the chain and obtain the identity information and key. Specifically, the industrial control equipment registers the identity information on the chain on the blockchain edge device management platform, and saves the identity information and key obtained by registration to the industrial control equipment end;

[0054] S2. Judge the data on the chain; specifically: if the data size does not exceed the set threshold, enter S3, otherwise enter S4;

[0055] S3. The industrial control equipment uses the obtained secret key and identity information to sign the small data that needs to be uploaded to the chain and package it in small data format;

[0056] S4. If the data to be uploaded is too large, the large data will be stored in ipfs, and the ipfs address and hash result will be signed and packaged in large data format;

[0057] The specific signing method includes: first, use sha256 to summarize the data to be uploaded to the chain to obtain 256-bit summary bit information, then fill the 256-bit summary information to 2048 bits according to rsa2048, then perform private key encryption operation through rsa2048 to obtain a 2048-bit encryption result, and finally encode the 2048-bit encryption result information through Base64.

[0058] S5, upload the data to the chain; specifically: the first step is to add a unique ID on the chain to the original industrial control data, ID + identity + key information hash, and the random AES 128bit key interference item of the industrial control device to form field 1 after hashing. The second step is to use the random number of the industrial control device to generate a 128bit random AES key, fill the key to 2048bit, and the industrial control device uses the public key of the device corresponding to the chain ID to encrypt the data and add it to the chain field 2. Use the AES key in field 2 to perform AES-CBC encryption encoding on the original data that the industrial control device needs to upload to the chain to generate field 3. Finally, fields 1 to 3 are packaged as on-chain data.

[0059] S6. Verify the data on the chain.

[0060] In summary, the present invention greatly improves the security of industrial control equipment business data during transmission.

Claims

1. A blockchain-based industrial control equipment data chain method, characterized in that: include: Step 1: Register the on-chain identity information of the industrial control equipment on the blockchain edge device management platform, and save the identity information and key obtained through registration to the industrial control equipment end; the key includes a private key and a public key corresponding to each other; Step 2: Determine the size of the data to be uploaded. If the data size does not exceed the set threshold, proceed to step 3; otherwise, proceed to step 4. The uploaded data includes industrial control equipment data and identity information small data. Step 3: Use the obtained private key and identity information to sign and format the industrial control equipment data and identity information small data that need to be uploaded to the chain; After packaging, proceed to step 5; The specific signing method includes: Step 301: Obtain the information summary of the data to be uploaded to the chain through the sha256 algorithm to obtain a 256-bit information summary; Step 302: Fill the 256-bit summary information to 2048 bits according to the RSA2048 algorithm; Step 303: encrypt the padded digest using the public key through the RSA2048 algorithm to obtain a 2048-bit encryption result, and encode the 2048-bit encryption result through Base64; Step 4: Distribute and store the data to be uploaded to the blockchain, and sign and format the distributed storage address and hash result using the obtained private key and identity information; Step 5: Upload the packaged data to the chain. The specific method of uploading the packaged data to the chain includes: Step 501: Add a unique ID on the chain to the industrial control device data, and perform a hash operation on the unique ID, identity information, key information, and AES128bit key interference item randomly generated by the industrial control device to obtain a first field; Step 502: Fill the AES128-bit key randomly generated by the industrial control device to 2048 bits, and then use the key filled by the device corresponding to the ID on the chain to encrypt the data on the chain to obtain the second field; Step 503: Use the AES key to perform AES-CBC encryption encoding on the industrial control device data that needs to be uploaded to the chain, to obtain a third field; Step 504: Pack the first field, the second field, and the third field into on-chain data, and then upload them to the chain; Step 6: Verify the signature based on the identity information and key in the on-chain information of the industrial control device. If the verification is successful, return the hash on the chain to the industrial control device.

2. The method for uploading industrial control equipment data to a blockchain based on claim 1 is characterized in that: In step 4, the specific method of performing distributed storage includes: performing ipfs distributed storage, and signing and formatting the address and hash result of the ipfs distributed storage through the obtained key and identity information.

Images