A method and device for sharing safety accident investigation data

Abstract

The application discloses a kind of sharing method and device of safety accident investigation data, applied to target blockchain, user completes registration in target blockchain;Safety accident investigation original data is encrypted to obtain safety accident investigation original data ciphertext, and is stored in target blockchain, and based on safety accident investigation original data ciphertext, it can be shared data directory is generated, when receiving the access request of target user to target safety accident investigation original data, the target data owner of safety accident investigation original data is determined;Identity authentication is carried out to target user, in the case where verification passes, target data owner's first private key is based on accident investigation original data ciphertext is decrypted, and target safety accident investigation original data is sent to target user.The above-mentioned sharing process based on safety accident investigation data is realized based on blockchain, information extraction is convenient, since blockchain is inalterable and can be traced back, tampering or deleting safety accident investigation data is avoided.

Description

TECHNICAL FIELD

[0001] The present application relates to the technical field of blockchains, and in particular to a method and device for sharing safety accident investigation data. BACKGROUND

[0002] With the advent of the big data era, the degree of informatization is deepening, and data has gradually become an important resource. Data loss, forgery or malicious tampering and other security problems are increasingly frequent and serious.

[0003] Taking safety production as an example, in safety production activities, safety accidents will inevitably occur. Traditional safety accident investigation mainly relies on post-facto evidence. The main problems of post-facto evidence in the prior art are as follows: first, paper evidence such as work tickets is dominant, but paper materials have the problems of difficult storage, inconvenient extraction of effective information, and second, the evidence is stored in a centralized manner, but the centralized storage manner is easy to be tampered with or deleted, and the related units or individuals have the motive to tamper with the data to evade post responsibility, which may cause the investigation results to deviate from the facts. SUMMARY

[0004] Therefore, the present application provides a method and device for sharing safety accident investigation data to solve the problems in the prior art that post-facto evidence mainly relies on paper evidence such as work tickets, but paper materials have the problems of difficult storage and inconvenient extraction of effective information, and second, the evidence is stored in a centralized manner, but the centralized storage manner is easy to be tampered with or deleted, and the related units or individuals have the motive to tamper with the data to evade post responsibility, which may cause the investigation results to deviate from the facts. The specific scheme is as follows:

[0005] A method for sharing safety accident investigation data is applied to a target blockchain, and the method comprises:

[0006] A user completes registration in the target blockchain;

[0007] Safety accident investigation original data is encrypted to obtain safety accident investigation original data ciphertext, the safety accident investigation original data ciphertext is stored in the target blockchain, and a shareable data directory is generated based on the safety accident investigation original data ciphertext, wherein the shareable data directory comprises a data name, a data owner and a data introduction;

[0008] When receiving an access request of a target user to target safety accident investigation original data, a target data owner of the target safety accident investigation original data is determined;

[0009] The target user is authenticated, and in the case of passing the authentication, the safety accident investigation original data ciphertext is decrypted based on a first private key of the target data owner, and the target safety accident investigation original data is sent to the target user.

[0010] Optionally, the method further comprises:

[0011] generating a second public key and a second private key matched with the user based on an improved ElGamal encryption algorithm;

[0012] sending the second public key and user information to the target blockchain, so that the target blockchain encrypts the second public key based on the first private key to generate a digital signature;

[0013] returning the digital signature to the user.

[0014] Optionally, the method further comprises encrypting the safety accident investigation original data to obtain safety accident investigation original data ciphertext, storing the safety accident investigation original data ciphertext in the target blockchain, and generating a shareable data directory based on the safety accident investigation original data ciphertext.

[0015] obtaining the safety accident investigation original data based on image solidification technology and OCR technology;

[0016] encrypting the safety accident investigation original data to obtain safety accident investigation original data ciphertext;

[0017] broadcasting the safety accident investigation original data ciphertext, initiating consensus, and based on a data collector, the safety accident investigation original data is summarized to form a shareable data directory, and a storage address is written into the target blockchain.

[0018] Optionally, the method further comprises:

[0019] obtaining a second public key of the target data owner and a target digital signature of the target user;

[0020] decrypting the target digital signature based on the second public key to obtain a target second public key;

[0021] verifying the identity of the target user based on the target second public key.

[0022] Optionally, the method further comprises:

[0023] decrypting the safety accident investigation original data ciphertext based on the first private key to obtain safety accident investigation original data;

[0024] Before sending to the target user, a target second public key and a target second private key of the target user are acquired, and the security incident investigation original data is encrypted based on the target second public key;

[0025] After receiving, the security incident investigation original data encrypted based on the target second public key is decrypted based on the target second private key.

[0026] A security incident investigation data sharing device applied to a target blockchain, the device comprising:

[0027] A registration module for a user to complete registration in the target blockchain;

[0028] A storage and generation module for encrypting security incident investigation original data to obtain security incident investigation original data ciphertext, storing the security incident investigation original data ciphertext in the target blockchain, and generating sharable data directory based on the security incident investigation original data ciphertext, wherein the sharable data directory comprises data name, data owner and data introduction;

[0029] A determination module for determining a target data owner of target security incident investigation original data when receiving an access request of a target user to target security incident investigation original data;

[0030] A decryption and sending module for authenticating the target user, decrypting the security incident investigation original data ciphertext based on a first private key of the target data owner, and sending target security incident investigation original data to the target user if the authentication is passed.

[0031] The above device, optionally, the registration module comprises:

[0032] A generation unit for generating a second public key and a second private key matched with the user based on an improved ElGamal encryption algorithm;

[0033] A sending unit for sending the second public key and user information to the target blockchain, so that the target blockchain encrypts the second public key based on a first private key to generate a digital signature;

[0034] A return unit for returning the digital signature to the user.

[0035] The above device, optionally, the storage and generation module comprises:

[0036] A first acquisition unit for acquiring the security incident investigation original data based on image solidification technology and OCR technology;

[0037] An encryption unit is configured to encrypt the security incident investigation original data to obtain security incident investigation original data ciphertext;

[0038] A generation and storage unit is configured to broadcast the security incident investigation original data ciphertext, initiate consensus, aggregate the security incident investigation original data based on a data collector to form a shareable data directory, and write a storage address into the target blockchain.

[0039] The device described above, optionally, the decryption and sending module comprises:

[0040] A second acquisition unit is configured to acquire a second public key of the target data owner and a target digital signature of the target user;

[0041] A first decryption unit is configured to decrypt the target digital signature based on the second public key to obtain a target second public key;

[0042] A verification unit is configured to verify the identity of the target user based on the target second public key.

[0043] The device described above, optionally, the decryption and sending module comprises:

[0044] A second decryption unit is configured to decrypt the security incident investigation original data ciphertext based on the first private key to obtain security incident investigation original data;

[0045] An acquisition and encryption unit is configured to acquire a target second public key and a target second private key of the target user before sending to the target user, and encrypt the security incident investigation original data based on the target second public key;

[0046] A third decryption unit is configured to decrypt the security incident investigation original data encrypted based on the target second public key based on the target second private key after receiving completion.

[0047] Compared with the prior art, the present application has the following advantages:

[0048] The application discloses a kind of sharing method and device of safety accident investigation data, applied to target blockchain, comprising: user completes registration in target blockchain;Safety accident investigation original data is encrypted to obtain safety accident investigation original data ciphertext, and store in target blockchain, and based on safety accident investigation original data ciphertext, generate sharable data directory, when receiving the access request of target user to target safety accident investigation original data, determine the target data owner of safety accident investigation original data;Identity authentication is carried out to target user, in the case where verification passes, target data owner's first private key is based on accident investigation original data ciphertext to be decrypted, and target safety accident investigation original data is sent to target user.The above-mentioned sharing process based on safety accident investigation data is realized based on blockchain, information extraction is convenient, since blockchain is inalterable and traceable, tampering or deleting safety accident investigation data is avoided. BRIEF DESCRIPTION OF DRAWINGS

[0049] In order to more clearly illustrate the technical solutions in the embodiments of the present application or the prior art, the following will briefly introduce the drawings needed to be used in the embodiments or prior art description. Obviously, the drawings in the following description only constitute some embodiments of the present application, and for those skilled in the art, other drawings can also be obtained from these drawings without creative labor.

[0050] Figure 1 A safety accident investigation data sharing method flow chart disclosed by the embodiments of the present application;

[0051] Figure 2 An accident investigation data flow chart disclosed by the embodiments of the present application;

[0052] Figure 3 A safety accident investigation data sharing device structure block diagram disclosed by the embodiments of the present application. DETAILED DESCRIPTION

[0053] The technical solutions in the embodiments of the present application will be described clearly and completely in the following with reference to the drawings in the embodiments of the present application. Obviously, the described embodiments only constitute some embodiments of the present application, not all embodiments. Based on the embodiments in the present application, all other embodiments obtained by those skilled in the art without creative labor are within the scope of protection of the present application.

[0054] The above description of disclosed embodiments enables one of ordinary skill in the art to make or use the application. Various modifications to these embodiments will be readily apparent to those skilled in the art, and the generic principles defined herein can be applied to other embodiments without departing from the spirit or scope of the application. Thus, the present application is not intended to be limited to the embodiments shown herein but is to be accorded the widest scope consistent with the principles and novel features disclosed herein.

[0055] The application discloses a kind of sharing method and device of safety accident investigation data, it is applied to the sharing process of safety accident investigation data, in prior art, safety accident investigation mainly relies on this paper evidence of work ticket, but paper material also exists and is difficult to save, effective information is not extracted easily, and traditional centralized storage mode is easily tampered or deleted, relevant unit or individual exists tampering data motive for evading post responsibility, possibly lead to investigation result deviates from fact. To solve the data security and data storage problem in safety accident investigation, using the characteristics of tamper-proof and traceable of blockchain technology, after digital work ticket and scene evidence data collection are chained and stored, realize the whole process of safety operation penetration type supervision, effectively plug regulatory loopholes, ensure that accident investigation has a clue. Historical information is stored in the form of blocks linked in sequence using smart contract, to ensure the security and authenticity of historical information. Therefore, the method is applied to target blockchain, wherein,

[0056] Blockchain refers to a chain type data structure that sequentially connects data blocks in time sequence, and ensures non-tamperability and non-falsification by means of cryptography.

[0057] Further, blockchain provides a credit establishment paradigm that is decentralized and does not require trust accumulation. Distributed ledger, encryption and authorization, consensus mechanism and smart contract are four major technological innovations of blockchain.

[0058] Distributed ledger refers to a method different from traditional database technology for digitally storing records of ownership. Distributed ledger stores the same ledger copy among different nodes in a peer-to-peer network, removes the central administrator role or central data storage link, and each transaction in the ledger is realized by a consensus process to be credible and unchangeable.

[0059] Node refers to a server or system or personal computer that saves a copy of the blockchain ledger. Different permissions can be applied according to actual needs, so as to play different roles in the block generation process, such as sending transactions and verifying transactions.

[0060] The consensus mechanism refers to a process in which a node with consensus authority identifies and verifies transaction information among participants without mutual recognition and trust relationship. Only the transaction passing the consensus can be written into a block and stored in the blockchain.

[0061] The blockchain is composed of distributed network nodes, and the recording and storage process of data is completed by network nodes together, instead of a single fixed node. The block data has the characteristics of distributed storage, effectively avoiding the disadvantages of traditional single node control and private malicious tampering.

[0062] When the data in the blockchain is transmitted and received, the key pair matching form is adopted, which can prevent the data from being intercepted and leaked, maliciously cropped, etc. At the same time, data authorization access operation is provided to ensure controllable and safe data.

[0063] The consensus mechanism is the core technology of the blockchain. The nodes participating in the consensus process have the same transaction data and voting right for the data. Combined with the chain structure of the data hash pointer and the non-fixed time block data generation process, the data on the blockchain has very high attack resistance, realizing the data tamper-proof.

[0064] The smart contract is essentially an executable code, also known as "on-chain code" in Hyperledger. The smart contract uses the attack resistance and tamper-proof of the block data to realize the automaticity and non-repudiation of the code execution process. The smart contract expands the blockchain from a data storage technology to a trusted technology of data and program execution, which is a new way of program execution.

[0065] In the safety production activities, safety accidents will inevitably occur. The traditional safety accident investigation mainly relies on post-facto evidence, and paper evidence such as work tickets is mostly used, but paper materials have the disadvantages of difficult to save, inconvenient to extract effective information, and easy to tamper after the fact.

[0066] Therefore, by using the natural advantages of decentralization and tamper-proof of the blockchain, an accident investigation data sharing model is established with the smart contract and blockchain-related technologies as the core, which effectively plugs the regulatory loopholes and ensures that the accident investigation has a basis.

[0067] Further, the meanings of the symbols used in the method execution process are shown in Table 1:

[0068] Table 1: Main symbols and meanings

[0069]

[0070]

[0071] The execution flow of the method is as shown in Figure 1 The method comprises the steps of:

[0072] S101, a user completes registration in the target blockchain;

[0073] In the embodiment of the application, the user is at least one, and the user refers to a user having a data sharing demand, and the user needs to register an account on an accident investigation data sharing platform (target blockchain).

[0074] The registration step is:

[0075] 1) The user initiates a registration application, and the system generates a pair of public and private keys (second public key and second private key) for the user by using an improved ElGamal encryption algorithm: the user randomly selects a sufficiently large prime number b, and then selects an integer a, which is a primitive root of b, and 1 k a x

[0076] b, y as the second public key of the user, and x as the second private key. The algorithm reduces the number of iterations by performing 2 k binary conversion on the index x, thereby improving the running speed.

[0077] 2) The user submits the second public key and private information to the system for auditing, and after the auditing is passed, the system encrypts the second public key by using the first private key in a separate pair of public and private keys (first public key and first private key), forms a digital signature, and returns the digital signature to the user;

[0078] 3) The user creates an account by using the second public key and the digital signature. When sharing data, other users can verify the authenticity of the digital signature by using the first public key of the system, so as to determine the identity of the user.

[0079] S102, encrypting the original data of the safety accident investigation to obtain original data ciphertext of the safety accident investigation, storing the original data ciphertext of the safety accident investigation in the target blockchain, and generating a shareable data directory based on the original data ciphertext of the safety accident investigation, wherein the shareable data directory comprises a data name, a data owner, and a data introduction;

[0080] ​In the embodiment of the present application, the original data of the safety accident investigation is acquired, if the original data of the safety accident investigation is electronic data, it is directly encrypted, if the original data of the safety accident investigation is paper data, the original data of the safety accident investigation is acquired based on image solidification technology and optical character recognition technology (OCR), wherein the optical character recognition technology uses an electronic device to determine the true shape of the scanned data by detecting the brightness of the scanned data, then a character recognition method is used to analyze and translate the detected shape, and the corresponding database is called to obtain computer text and layout information available for user editing. Further, the image solidification retains the paper work ticket, and the OCR technology identifies the core information (responsible team, accident type, operation time, approval personnel, etc.) in the work ticket as an abstract.

[0081] The original data of the safety accident investigation is encrypted in a grouped manner, m < log2 b. A user randomly selects an integer r, 1 < r < b and gcd(r, b) = 1, calculates C1 = a r mod b, C2 = (my r ) mod b, (C1, C2) constitutes a ciphertext pair, and the size of the ciphertext is twice that of the plaintext. When the data volume is large, the converted data content is stored in the form of a hash, and the ciphertext of the original data of the safety accident investigation is still saved locally, taking into account efficiency and privacy.

[0082] After the encryption operation is completed, the ciphertext of the original data of the safety accident investigation is broadcasted, preferably, the ciphertext of the original data of the safety accident investigation exists in the form of a data packet, and consensus is initiated. After multi-party consensus, the ciphertext of the original data of the safety accident investigation is stored in an off-chain database, and the storage address is written into a blockchain.

[0083] Further, the ciphertext of the original data of the safety accident investigation is stored off-chain in the form of a data collector, the data collector realizes the collection of data information in a certain area (for example, a certain province), forms a shareable data directory, including data name, data owner, data introduction, etc.

[0084] S103, when receiving an access request of a target user to target original data of a safety accident investigation, determining a target data owner of the target original data of the safety accident investigation;

[0085] In this embodiment of the invention, nodes control whether to publicly disclose or encrypt the raw data from security incident investigations to maintain the stable operation of the smart grid. The sharing of raw security incident investigation data between nodes is accomplished by executing internal smart contracts. Smart contracts, using computer languages ​​to replace legal clauses, constrain the behavior of data access users. These constraints are automatically executed on each node using relevant computer languages, as detailed in the specific process below. Figure 2 As shown in the diagram, combined with the accident investigation data flow diagram, in a wireless network environment, an accident investigation data block accident investigation data access request is generated, the access authorization smart contract processes the accident investigation data, and the accident investigation is uploaded to the smart contract in the accident investigation data aggregator. The accident investigation controller in the smart contract stores the relevant data in the accident investigation data record pool.

[0086] When smart contracts share incident investigation data, the process involves a series of actions, including verifying the visitor's identity, setting access constraints, and decrypting and outputting the data using a private key. Simultaneously, consensus mechanisms are used to streamline the data sharing access request, smart contract execution, and shared data transmission processes, thereby accelerating the data sharing capabilities of nodes.

[0087] In this embodiment of the invention, when the target user (target node) N s When a request is made to retrieve shared data, the system sends the request to the data aggregator (BS). i Find the owner of the original data for the target safety incident investigation, i.e., the data owner node N. m BS i If the requested raw data for the target safety incident investigation is not found in the self-maintained data catalog, the request is forwarded to another data aggregator. If the relevant information is found, the access request is forwarded to the data owner node N. m .

[0088] S104. Verify the identity of the target user. If the verification is successful, decrypt the encrypted original data of the security incident investigation based on the first private key of the target data owner, and send the target security incident investigation original data to the target user.

[0089] In this embodiment of the invention, the target data owner node N m Upon receiving the access request, for the target user N s The identity verification process is as follows: Obtain the target data owner node N. m The second public key and the target user N starget digital signature, decrypts the target digital signature based on the second public key, obtains a target second public key, and authenticates the target user Ns based on the target second public key.

[0090] If the target data owner node N m agrees to the access requirement (content, scope, time limit, number of times, etc.), that is, consensus is reached, and consensus is reached with the target user Ns, the node Nmformulates access constraints (such as the sharing scope, time limit, and number of times of accident investigation data), and then the smart contract decrypts the ciphertext of the original accident investigation data based on the private key provided by the node Nm, and outputs the corresponding result according to the constraints, and outputs the data to the node N s before, encrypts the accident investigation data using the first public key provided by Ns, N s decrypts it through its own first private key. The specific process is as follows:

[0091] 1) Data sharing access request

[0092] The node N s initiates a data access request, and the system automatically sends the request randomly to any accident investigation data collector BS i .

[0093] The BS i searches the data directory maintained by itself, and if the requested data information cannot be queried, the request is transferred to other data collectors. If the relevant information can be queried, the request is transferred to the data owner node N m . That is, the node N s sends an accident investigation data sharing request Request to the node N m , which contains specific information such as the access time, purpose, and number of times of the required accident investigation data, and timestamp is the access time.

[0094] (1) The node N m verifies the authenticity of the digital signature of the node N s through the second public key of the system, thereby determining the identity of the node N s . After completing the verification of the identity of the node N s , the node N m , if agrees to the data access request, further formulates constraints Constrainsts (such as the number of times, scope, and time limit of sharing accident investigation data), authorizes access, and sends the constraints and the corresponding private key SKPID km of the access data block to the accident investigation data collector BS j , completes the sharing of the accident investigation data request. Otherwise, the query request is rejected.

[0095] Nm→Ns:Req=EPKNk(Request‖CertNs‖timestamp) (1)

[0096] Ns→BSi:Message=EPKBSi(Constraints‖SKPIDkm‖PKNs‖timestamp‖CertNm)(2)

[0097] (2)Smart contract execution

[0098] The system finds the encrypted data packet stored in the off-chain distributed database according to the storage index on the chain, calculates decrypts the same to obtain the safety accident investigation original data m, and uses the public key PKN of the access node s , and the accident investigation data result is output after asymmetric encryption of the accident investigation data allowed to be shared.

[0099] Before being sent to the target user, a target second public key and a target second private key of the target user are obtained, the safety accident investigation original data is encrypted based on the target second public key, and after the completion of the receiving, the safety accident investigation original data encrypted based on the target second public key is decrypted based on the target second private key.

[0100] The application discloses a kind of sharing methods of safety accident investigation data, applied to target blockchain, comprising: user completes registration in target blockchain;Safety accident investigation original data is encrypted to obtain safety accident investigation original data ciphertext, and it is stored in target blockchain, and based on safety accident investigation original data ciphertext, sharable data directory is generated, when receiving the access request of target user to target safety accident investigation original data, the target data owner of safety accident investigation original data is determined;Identity authentication is carried out to target user, in the case where authentication passes, target data owner's first private key is used to decrypt accident investigation original data ciphertext, and target safety accident investigation original data is sent to target user.The above-mentioned sharing process based on safety accident investigation data is realized based on blockchain, information extraction is convenient, since the tamper-proof and traceable of blockchain, tampering or deleting of safety accident investigation data is avoided.

[0101] In the embodiment of the present application, a method for sharing safety accident investigation data based on a blockchain is provided by means of a data sharing access request, smart contract-based execution and shared data sending, effectively solving the problem of easy tampering and deletion of data sharing in safety accident investigation. Accident investigation data is encrypted with different public keys, and nodes have the right to control and selectively disclose part of the data. Accident investigation data sharing is completed with the help of a smart contract. Data owners can construct a data sharing contract according to the contract template, instantiate the data sharing range, effective time and shared content, and build a data sharing contract. When the data accesser meets the requirements triggered in the smart contract, the contract can be automatically executed to realize data sharing. The owner of the investigation data can set the range, effective time, shared content and other constraints of data sharing, and specify the behavior of the data accesser in a computer language. When the trigger condition of the contract execution is met, the data accesser can obtain the data, or the number of data queries or calls of the accesser exceeds the access limit in the smart contract, and the contract will refuse the data access request of the user. The smart contract automatically executes the data access and sharing request, and performs data output and data sharing operations according to the defined constraints.

[0102] Further, for the above method, the sharing of safety can be controlled. Data sharing relies on the smart contract that is automatically triggered and executed to avoid traditional risks such as tampering and loss caused by human intervention, and to complete the complete and safe sharing of data. The algorithm is efficient and adaptive. When encrypting data, an improved ElGamal encryption algorithm is used. Due to the long exponent sequence of the traditional encryption algorithm, multiple iterations are performed in the calculation process, and the time consumption of power residue calculation is too much, which causes low algorithm running efficiency. The improved algorithm converts the exponent 2 k to binary, reduces the length of the exponent sequence, and thus reduces the number of iterations and improves the running speed.

[0103] Based on the above-mentioned method for sharing safety accident investigation data, an embodiment of the present application further provides a device for sharing safety accident investigation data, which is applied to a target blockchain. As shown in the structure block diagram of the device, Figure 3

[0104] The registration module 201, the storage and generation module 202, the determination module 203 and the decryption and sending module 204.

[0105] Among them,

[0106] The registration module 201 is configured to register the user in the target blockchain.

[0107] ​The storage and generation module 202 is configured to encrypt the safety accident investigation original data to obtain safety accident investigation original data ciphertext, store the safety accident investigation original data ciphertext in the target blockchain, and generate a shareable data directory based on the safety accident investigation original data ciphertext, wherein the shareable data directory comprises a data name, a data owner, and a data introduction.

[0108] The determination module 203 is configured to determine a target data owner of the target safety accident investigation original data when receiving an access request of a target user to the target safety accident investigation original data.

[0109] The decryption and sending module 204 is configured to authenticate the target user, decrypt the safety accident investigation original data ciphertext based on a first private key of the target data owner in the case of passing the authentication, and send the target safety accident investigation original data to the target user.

[0110] The application discloses a safety accident investigation data sharing device applied to a target blockchain, which comprises the following steps: a user completes registration in the target blockchain; safety accident investigation original data is encrypted to obtain safety accident investigation original data ciphertext, which is stored in the target blockchain, and a shareable data directory is generated based on the safety accident investigation original data ciphertext; when receiving an access request of a target user to target safety accident investigation original data, a target data owner of the safety accident investigation original data is determined; the target user is authenticated, the safety accident investigation original data ciphertext is decrypted based on a first private key of the target data owner in the case of passing the authentication, and the target safety accident investigation original data is sent to the target user. The safety accident investigation data sharing process based on the safety accident investigation data is realized based on the blockchain, information extraction is convenient, and the safety accident investigation data is prevented from being tampered with or deleted due to the tamper-proof and traceable characteristics of the blockchain.

[0111] In the embodiment of the application, the registration module 201 comprises:

[0112] The generation unit 205, the sending unit 206, and the return unit 207.

[0113] The generation unit 205, the sending unit 206, and the return unit 207.

[0114] The generation unit 205 is configured to generate a second public key and a second private key matched with the user based on an improved ElGamal encryption algorithm.

[0115] The sending unit 206 is configured to send the second public key and user information to the target blockchain, so that the target blockchain encrypts the second public key based on a first private key to generate a digital signature.

[0116] The return unit 207 is used to return the digital signature to the user.

[0117] In this embodiment of the invention, the storage and generation module 202 includes:

[0118] The system comprises a first acquisition unit 208, an encryption unit 209, and a generation and storage unit 210.

[0119] in,

[0120] The first acquisition unit 208 is used to acquire the original data of the safety accident investigation based on image solidification technology and OCR technology;

[0121] The encryption unit 209 is used to encrypt the original data of the safety accident investigation to obtain the encrypted original data of the safety accident investigation.

[0122] The generation and storage unit 210 is used to broadcast the encrypted original data of the security incident investigation, initiate consensus, aggregate the original data of the security incident investigation based on the data aggregator to form a shareable data directory, and write the storage address into the target blockchain.

[0123] In this embodiment of the invention, the decryption and sending module 204 includes:

[0124] The second acquisition unit 211, the first decryption unit 212, and the verification unit 213.

[0125] in,

[0126] The second acquisition unit 211 is used to acquire the second public key of the target data owner and the target digital signature of the target user;

[0127] The first decryption unit 212 is used to decrypt the target digital signature based on the second public key to obtain the target second public key;

[0128] The verification unit 213 is used to authenticate the target user based on the target second public key.

[0129] In this embodiment of the invention, the decryption and sending module 204 includes:

[0130] The second decryption unit 214, the acquisition and encryption unit 215, and the third decryption unit 216.

[0131] in,

[0132] The second decryption unit 214 is used to decrypt the ciphertext of the original security incident investigation data based on the first private key to obtain the original security incident investigation data;

[0133] The acquisition and encryption unit 215 is configured to acquire a target second public key and a target second private key of the target user before sending the target user, and encrypt the security incident investigation original data based on the target second public key.

[0134] The third decryption unit 216 is configured to decrypt the security incident investigation original data encrypted based on the target second public key based on the target second private key after receiving the completion.

[0135] It should be noted that each of the embodiments in the specification adopts a progressive manner for description, and each embodiment focuses on the difference from other embodiments, and the same and similar parts of each embodiment can be referred to each other. For the device embodiment, since it is basically similar to the method embodiment, the description is relatively simple, and the relevant parts are referred to the part of the method embodiment.

[0136] Finally, it should be noted that in this paper, relationship terms such as first and second are only used to distinguish one entity or operation from another entity or operation, and do not necessarily require or imply any such actual relationship or order between the entities or operations. Moreover, the terms "include", "contain" or any other variants thereof are intended to cover non-exclusive inclusion, so that the process, method, article or equipment including a series of elements not only includes those elements, but also includes other elements not explicitly listed or inherent to such process, method, article or equipment. Without more limitations, the element defined by the statement "including a" does not exclude the presence of another identical element in the process, method, article or equipment including the element.

[0137] For the convenience of description, the above device is described as various units respectively described in function. Of course, the functions of each unit can be realized in the same or more software and / or hardware when implementing the present application.

[0138] From the description of the above embodiments, those skilled in the art can clearly understand that the present application can be realized by means of software and necessary general hardware platform. Based on such understanding, the technical solutions of the present application can be embodied in the form of software product, which can be stored in storage medium, such as ROM / RAM, magnetic disk, optical disk, etc., including a plurality of instructions to make a computer device (which can be a personal computer, server, or network device, etc.) execute the method described in each embodiment or some parts of the embodiment of the present application.

[0139] The above describes in detail the method and device for sharing safety accident investigation data provided by the present application, and the principles and implementation manners of the present application are described by using specific examples. The above description of the examples is only used to help understand the method of the present application and its core idea. Meanwhile, for those skilled in the art, according to the idea of the present application, the specific implementation manners and application ranges can be changed, and the above description of the present application should not be understood as a limitation of the present application.

Claims

1. A method of sharing of safety incident investigation data, characterized in that, The method is applied to a target blockchain, and the method comprises the following steps: A user completes registration in the target blockchain; Original security incident investigation data is encrypted to obtain original security incident investigation data ciphertext, the original security incident investigation data ciphertext is broadcasted and consensus is initiated, the original security incident investigation data ciphertext is stored in an off-chain form of a data collector, and a shareable data directory is formed by the data collector, and a storage address is written into the target blockchain; wherein the shareable data directory comprises a data name, a data owner and a data introduction; When receiving an access request of a target user to target security incident investigation original data, the access request is sent to the data collector, the data collector searches the shareable data directory maintained by the data collector to determine a target data owner of the target security incident investigation original data, if the data collector cannot query, the request is transferred to other data collectors, and if the data collector can query, the access request is transferred to the target data owner; Identity authentication is performed on the target user, and if the authentication is passed, an access constraint condition for the target user is formulated by the target data owner, the access constraint condition comprises an accident investigation data sharing range, a time limit and a number of times; A smart contract decrypts the security incident investigation original data ciphertext according to a first private key provided by the target data owner and according to the access constraint condition to obtain target security incident investigation original data, and sends the target security incident investigation original data to the target user.

2. The method of claim 1, wherein, The user completes registration in the target blockchain, comprising: A second public key and a second private key matched with the user are generated based on an improved ElGamal encryption algorithm; The second public key and user information are sent to the target blockchain, so that the target blockchain encrypts the second public key based on a first private key to generate a digital signature; The digital signature is returned to the user.

3. The method of claim 1, wherein, The original security incident investigation data is encrypted to obtain original security incident investigation data ciphertext, comprising: The original security incident investigation data is obtained based on an image solidification technology and an OCR technology; The original security incident investigation data is encrypted to obtain original security incident investigation data ciphertext.

4. The method of claim 1, wherein, Identity authentication is performed on the target user, comprising: A second public key of the target data owner and a target digital signature of the target user are obtained; The target digital signature is decrypted based on the second public key to obtain a target second public key; Identity authentication is performed on the target user based on the target second public key.

5. The method of claim 1, wherein, Before the target security incident investigation original data is sent to the target user, the following steps are further included: A target second public key and a target second private key of the target user are obtained, and the original security incident investigation data is encrypted based on the target second public key; After the receiving is completed, the original security incident investigation data encrypted based on the target second public key is decrypted based on the target second private key.

6. A device for sharing of safety incident investigation data, characterized by The device is applied to a target blockchain, and the device comprises: A registration module for a user to complete registration in the target blockchain; The storage and generation module is configured to encrypt the safety accident investigation original data to obtain safety accident investigation original data ciphertext, store the safety accident investigation original data ciphertext in the target blockchain, and generate a shareable data directory based on the safety accident investigation original data ciphertext, wherein the shareable data directory includes a data name, a data owner, and a data introduction. The determination module is configured to, when receiving an access request of a target user to target safety accident investigation original data, send the access request to a data collector, search the shareable data directory maintained by the data collector to determine a target data owner of the target safety accident investigation original data, if the data collector cannot query, transfer the request to other data collectors, and if the data collector can query, transfer the access request to the target data owner. The decryption and sending module is configured to authenticate the target user, decrypt the safety accident investigation original data ciphertext based on a first private key of the target data owner if the authentication is passed, and send the target safety accident investigation original data to the target user. The storage and generation module includes a generation and storage unit. The generation and storage unit is specifically configured to broadcast the safety accident investigation original data ciphertext, initiate consensus, store the safety accident investigation original data ciphertext in an off-chain form of a data collector, and aggregate the safety accident investigation original data ciphertext by the data collector to form a shareable data directory, and write a storage address into the target blockchain. The decryption and sending module includes a second decryption unit. The second decryption unit is specifically configured to formulate an access constraint condition for the target user by the target data owner, the access constraint condition includes an accident investigation data sharing range, a time limit, and a number of times, and a smart contract decrypts the safety accident investigation original data ciphertext based on the first private key provided by the target data owner and the access constraint condition to obtain target safety accident investigation original data.

7. The apparatus of claim 6, wherein, The registration module includes: A generation unit is configured to generate a second public key and a second private key matched with the user based on an improved ElGamal encryption algorithm. A sending unit is configured to send the second public key and user information to the target blockchain, so that the target blockchain encrypts the second public key based on a first private key to generate a digital signature. A return unit is configured to return the digital signature to the user.

8. The apparatus of claim 6, wherein, The storage and generation module further includes: A first acquisition unit is configured to acquire the safety accident investigation original data based on an image solidification technology and an OCR technology. An encryption unit is configured to encrypt the safety accident investigation original data to obtain safety accident investigation original data ciphertext.

9. The apparatus of claim 6, wherein, The decryption and sending module includes: A second acquisition unit is configured to acquire a second public key of the target data owner and a target digital signature of the target user. A first decryption unit is configured to decrypt the target digital signature based on the second public key to obtain a target second public key. A verification unit is configured to verify the target user based on the target second public key.

10. The apparatus of claim 6, wherein, The decryption and sending module further comprises: An acquisition and encryption unit is configured to acquire a target second public key and a target second private key of the target user before sending the target user, and encrypt the security incident investigation original data based on the target second public key; A third decryption unit is configured to decrypt the security incident investigation original data encrypted based on the target second public key based on the target second private key after receiving the completion.

Images