Digital blockchain supervision platform for hazardous chemical production safety

By introducing the TEE trusted execution environment and privacy computing platform into the blockchain supervision platform, the problems of data credibility and privacy security are solved, the trusted collection and privacy protection of data are realized, and the safety and supervision efficiency of hazardous chemical production are improved.

CN114564536BActive Publication Date: 2025-09-23HANGZHOU VASTCHAIN TECH CO LTD
View PDF 5 Cites 0 Cited by

Patent Information

Application Number
CN202210023130.1
Authority / Receiving Office
CN · China
Patent Type
Patents(China)
Current Assignee / Owner
Filing Date
2021-10-26
Publication Date
2025-09-23
Estimated Expiration
2041-10-26

AI Technical Summary

Technical Problem

Existing blockchain regulatory platforms cannot guarantee the credibility and authenticity of data. Data may be modified before being uploaded to the chain, and there is a lack of specialized hardware support, resulting in unreliable data collection and insufficient privacy and security when used by multiple parties.

Method used

The collection layer of the TEE trusted execution environment is used to encrypt and hash production data, store it on the alliance chain, and process the data on the privacy computing platform. The blockchain and privacy computing server are combined to encrypt and store data and manage metadata, realizing trusted data collection and privacy protection.

Benefits of technology

It achieves the credibility and privacy security of data from collection to use, ensures that data cannot be tampered with, and ensures the privacy of data when used by multiple parties, thereby improving the safety and regulatory efficiency of hazardous chemicals production.

✦ Generated by Eureka AI based on patent content.

Smart Images

  • Figure CN114564536B_ABST
    Figure CN114564536B_ABST
Patent Text Reader

Abstract

The present invention discloses a digital blockchain supervision platform for hazardous chemical production safety, including: an acquisition layer, which is used to collect production data information during the production process of production enterprises. The acquisition equipment of the acquisition layer sets a TEE trusted execution environment to encrypt or hash the collected production data information; a data layer, which is used to store the hash of the production data information collected by the acquisition layer on the chain through an alliance chain, and the acquisition layer and the data layer communicate; a blockchain, which is used to deploy file chain contracts, and at the same time, encrypt and store the files on a privacy computing server after connecting them to the trusted environment; a privacy computing platform, which is used to form a data metadata market with the file description information on the chain, record the metadata information of the collected data, and the data users apply for the right of use from the production enterprises that generate the data. After authorization, the data users can perform various applications on the privacy computing platform.
Need to check novelty before this filing date? Find Prior Art

Description

[0001] This patent application is a divisional application with application number 202111245384.X submitted on October 26, 2021, and is named "Digital Blockchain Supervision Platform for Hazardous Chemical Safety Production." Technical Field

[0002] The present invention relates to privacy computing technology, and in particular to a digital blockchain supervision platform for hazardous chemical production safety. Background Art

[0003] Blockchain-based digital regulatory platforms currently mostly use desktop clients to synchronize data to the blockchain, ensuring that the data is decentralized, transparent, and tamper-proof. However, this approach leaves the data untrustworthy before it's uploaded to the blockchain. The uploaded data may have been manually modified or adjusted by the platform, and may be out of chronological order or out of sequence.

[0004] Furthermore, due to the current lack of specialized blockchain chips and hardware, data authenticity cannot be guaranteed before being uploaded to the blockchain, making it difficult to achieve one-time collection of trusted data, ensuring permanent reliability and multi-party use. For example, regulators and insurance companies must conduct repeated on-site due diligence, wasting significant manpower and resources. There is an urgent need for a reliable regulatory platform that ensures that collected data is trustworthy, tamper-proof, and permanently reliable, while maintaining privacy and security for multi-party use. This will eliminate concerns for regulators about data tampering and for users about data falsification, ultimately achieving one-time collection, permanent reliability, and multi-party use. Summary of the Invention

[0005] The purpose of this invention is to address the deficiencies of the existing technology and provide a digital blockchain supervision platform for hazardous chemical production safety.

[0006] In order to solve the above problems, the present invention adopts the following technical solutions:

[0007] A digital blockchain supervision platform for hazardous chemical production safety, including:

[0008] The collection layer is used to collect production data information during the production process of the manufacturing enterprise. The collection equipment of the collection layer sets up a TEE trusted execution environment to encrypt or hash the collected production data information;

[0009] The data layer is used to store the production data collected by the collection layer on the consortium chain through the hash of the data, and the collection layer and the data layer communicate;

[0010] Blockchain is used to deploy file-on-chain contracts, and the files are connected to a trusted environment and encrypted and stored on a privacy computing server;

[0011] The privacy computing platform is used to transform the file description information on the chain into a data metadata market, record the metadata information of the collected data, and allow data users to apply for use rights from the production companies that generate the data. After authorization, data users can use various applications on the privacy computing platform;

[0012] The supervision platform assigns different risk strategies based on the situation of each production enterprise and carries out corresponding risk management.

[0013] In one possible design, the data layer communicates with the data collection device of the collection layer through the data layer server, including the following steps:

[0014] The collection device generates a public-private key pair; the TEE of the collection device stores the private key, which is used to encrypt the collected data; the data layer server stores the public key, binds it to the unique information of the collection device, and synchronizes the data information collected by the collection device to the blockchain;

[0015] After the data acquisition device is powered on or turned on, it obtains the timestamp of the latest block on the blockchain and the unique information of the data acquisition device from the data layer server, and calibrates the local time based on the timestamp;

[0016] The data acquisition device stores a data record for each collected data, power on / off data, power data, and operation record generated during its use, and generates a local timestamp and data operation sequence number for the data record, which increases in sequence;

[0017] The data acquisition device generates a corresponding data hash value based on the data record, time stamp and operation sequence number;

[0018] The data collection device signs the data hash value with the private key in the TEE;

[0019] The data acquisition device sends the data hash value, public key and signature to the data layer server, and the data layer server verifies the data acquisition device public key, signature and serial number of the data acquisition device; after the verification is passed, the data layer server stores the data record, operation serial number, timestamp, public key and signature on the blockchain, and the data layer server records the operation serial number of the device's last successful upload.

[0020] In one possible design, communication between the acquisition layer and the data layer includes the following steps:

[0021] The secret keys in the TEE of the acquisition device are uniformly distributed by the key management system of the data layer;

[0022] The key management system binds the serial number of the acquisition device to the dispersion factor, and disperses the dispersion factor with the root key to obtain the device communication key of the acquisition device;

[0023] Before uploading data to the data layer, the collection device performs two-way identity authentication. The collection device generates a first random number through TEE, sends the first random number and the device serial number to the data layer, and waits for the data layer to return the encryption result for data layer identity authentication.

[0024] After receiving the first random number and serial number of the collection device, the data layer will query the key management system to obtain the corresponding dispersion factor, use the dispersion factor to disperse the root key to obtain the communication key of the collection device, and then use the communication key to encrypt the received first random number to obtain the first encryption result, and at the same time generate the second random number, and send the first encryption result and the second random number to the collection device;

[0025] After receiving the first encryption result and the second random number, the acquisition device first decrypts the first encryption result in the TEE and compares the result with the first random number. If it fails, the authentication ends. If it passes, the TEE will continue to encrypt the second random number to obtain the second encryption result. The second encryption result is returned to the data layer. The data layer uses the previously generated device communication key to decrypt the second encryption result and compare the result with the second random number. If the comparison passes, the device is considered trustworthy and accepts the data from the data acquisition device.

[0026] During operation, the data acquisition device forms a data packet with the collected data and the device serial number, encrypts it using the secret key in the TEE to form a ciphertext data packet, and uploads it to the data layer with the plaintext information of the device serial number;

[0027] The data layer uses the key management system to disperse the received serial number using its corresponding dispersion factor to obtain the communication key, and uses the key to decrypt the ciphertext data packet to verify whether the serial number is consistent. If passed, the data is displayed on the data layer and then uploaded to the blockchain through the data layer.

[0028] In one possible design, the privacy computing platform adopts TEE trusted execution environment technology. The data user writes the execution logic for data usage in a scripting language, encrypts the written script language and sends it to the trusted execution environment. After receiving the script, the TEE decrypts the script; after decryption, the TEE executes the script through a preset script interpreter. After the script is executed, the data user obtains the execution result.

[0029] In one possible design, the production data collected by the collection device includes unlocking operation information.

[0030] In one possible design, the unlocking operation information is double-locking operation information for two people. The warehouse door of the hazardous chemical production enterprise requires two people to be present at the same time, and the door is opened only after both people have verified their identity information. The equipment data information records who opened the hazardous chemical warehouse door and when.

[0031] In one possible design, the production data collected by the collection equipment includes electronic scale data information. When items are taken from the warehouse of the production enterprise, they are weighed using the electronic scale. The equipment data information records who took what, when, and how much it weighed.

[0032] In one possible design, the production data collected by the collection device includes inspection box operation data.

[0033] In one possible design, the production data collected by the collection equipment includes data from a tracker. If the item taken is a hazardous chemical, the tracker will record where the item has moved from the warehouse after it is taken.

[0034] In one possible design, the production data collected by the collection equipment includes the temperature of hazardous chemicals, flammable and explosive materials and the surrounding temperature, and the risks they pose are monitored in real time, with timely warnings and reports.

[0035] In one possible design, the production data collected by the collection equipment includes the hydraulic and air pressures of hazardous chemical storage pipes, and their numbers and changing trends are monitored in real time, with timely warnings and reports.

[0036] In one possible design, the production data collected by the collection equipment includes infrared images of the transportation pipelines in hazardous chemical production enterprises, timely analysis of problems such as damage and leakage, real-time monitoring of their operating status, and timely warning and reporting.

[0037] The beneficial effects of the present invention are:

[0038] (1) When using the digital blockchain supervision platform for hazardous chemical production safety according to the embodiment of the present invention, users only need to care about the conclusions of the metadata of the privacy computing platform after various industry applications, and do not need to care about the authenticity of the metadata. Through reliable data communication between the collection layer and the data layer, the data is guaranteed to be trustworthy from collection to use, from before being uploaded to the chain, to use, and the realization of a trusted IoT (Internet of Things) is guaranteed. One-time collection, multi-party use, and permanent trustworthiness.

[0039] (2) By setting up a connection between the privacy computing platform and the blockchain, and the privacy data platform completes data processing within it, data leakage is avoided and the security of privacy data is protected;

[0040] (3) By collecting unlocking operation information, electronic scale data, inspection box operation data, and tracker data at the collection layer, the data of hazardous chemicals can be standardized, so that hazardous chemicals can be insured. On the other hand, by tracking and inspecting hazardous chemicals, the safety of hazardous chemicals can be directly improved.

[0041] (4) By pre-installing the interpreter of the scripting language in the TEE trusted execution environment on the privacy computing platform, it is ensured that the script can be passed to the trusted execution environment for direct execution, avoiding the risk of data leakage caused by using non-scripting languages ​​to be passed to the server for compilation. BRIEF DESCRIPTION OF THE DRAWINGS

[0042] Figure 1 This is a structural diagram of the digital blockchain supervision platform for hazardous chemical production safety in accordance with the first embodiment of the present invention. DETAILED DESCRIPTION

[0043] The following describes the embodiments of the present invention through specific examples. Those skilled in the art can easily understand other advantages and effects of the present invention from the content disclosed in this specification. The present invention can also be implemented or applied through other different specific embodiments. The details in this specification can also be modified or changed based on different viewpoints and applications without departing from the spirit of the present invention. It should be noted that the following embodiments and features in the embodiments can be combined with each other unless they conflict.

[0044] It should be noted that the illustrations provided in the following embodiments are merely schematic illustrations of the basic concept of the present invention. Therefore, the illustrations only show components related to the present invention and are not drawn according to the number, shape, and size of components in actual implementation. In actual implementation, the type, quantity, and proportion of each component may be changed arbitrarily, and the component layout may also be more complex.

[0045] Example 1

[0046] like Figure 1As shown, a digital blockchain supervision platform for hazardous chemical production safety in an embodiment of the present invention includes a collection layer, a data layer, a blockchain, and a privacy computing platform; the collection layer is used to collect production data information during the production process of the production enterprise. The collection device of the collection layer sets TEE (Trusted Execution Environment) to encrypt or hash the collected production data information; the data layer is used to store the hash of the production data collected by the collection layer on the chain through the alliance chain, and the collection layer and the data layer communicate; the blockchain is used to deploy the file chain contract, and at the same time, the file is connected to the trusted environment and encrypted and stored on the privacy computing server; the privacy computing platform is used to form a metadata market for the file description information on the chain, record the metadata information of the collected data, and the data user applies for the right to use the production enterprise that generates the data. After authorization, the data user performs various applications on the privacy computing platform; the supervision platform assigns different risk strategies according to the situation of each production enterprise and performs corresponding risk processing. The supervision platform configures risk strategies and risk processing for different processes based on the aggregated data and the actual situation of the production enterprise, thereby achieving the purpose of automatic early warning and automatic supervision.

[0047] In one embodiment of the present invention, the privacy computing platform adopts TEE trusted execution environment technology. The data user writes the execution logic for data use in a scripting language, encrypts the written script language and sends it to the trusted execution environment. After receiving the script, the TEE decrypts the script; after decryption, the TEE executes the script through a preset script interpreter. After the script is executed, the data user obtains the execution result.

[0048] In one embodiment of the present invention, the acquisition equipment collects production data information during the production process of the production enterprise as unlocking operation information. Electronic scale data information, inspection box operation data and trajectory tracker data. The unlocking operation information indicates the entry and exit of personnel. A facial access control device is used, the device is connected to the network, and then the mode is set to a two-person double-lock mode. First, the personnel with unlocking authority are divided into two teams and entered into two authority groups of two-person double locks respectively. The two-person double-lock operation means that one person in each of the two authority groups is required to authenticate separately. The authentication method can be face swiping, card swiping, fingerprint, or password, etc. Only after both staff members are authenticated can the door lock be opened, thereby improving the safety factor of hazardous chemical production and storage. Therefore, in the unlocking operation information of this example, the information of two people can be recorded each time. It should be noted that in some other implementation methods, single-person unlocking or other unlocking methods can also be used. When the door opening time is too long and exceeds the closing time specified by the risk strategy, the door closing timeout alarm is triggered. When the door is opened automatically without authorization, the intrusion alarm is triggered, and then according to the risk management method, such as sound and light alarms, text message prompts, email copies, etc. are handled.

[0049] In one embodiment of the present invention, the production data collected by the collection device during the production process of a manufacturing enterprise is electronic scale information. The electronic scale data is used to record the amount of hazardous chemicals removed from the warehouse. When personnel remove hazardous chemicals from the warehouse, they are weighed using an electronic scale. The electronic scale, acting as a data collection device, is connected to the Internet in real time. The electronic scale data also includes personnel information, which is captured through unlocking operation information obtained via facial recognition access control devices. The electronic scale data visually displays who removed what amount of hazardous chemicals from the warehouse, facilitating the coordination and tracing of hazardous chemicals. When the amount of hazardous chemicals removed at a particular time exceeds the value configured in the risk strategy, an alarm is triggered.

[0050] In one embodiment of the present invention, the acquisition equipment collects production data information during the production process of the production enterprise as inspection box operation data. The inspection box operation data includes image data during the inspection process. In this example, the image data is obtained during the inspection process of the hazardous chemicals storage warehouse after the AI ​​automatic inspection robot or the inspection personnel passes the identity authentication of the trusted device (Bluetooth inspection box or NFC inspection box). The image data can record information such as the type of hazardous chemicals and the corresponding quantity. When the relevant inspection data is not received within the time specified by the risk strategy, a prompt is triggered, and the inspection personnel are notified by SMS or phone, and the supervisor is notified at the same time, which automatically triggers the risk processing mechanism, such as notifying other on-duty personnel to perform inspection tasks.

[0051] In one embodiment of the present invention, the production data collected by the collection device during the production process of the manufacturer is tracker data. Tracker data represents the trajectory of hazardous chemicals after they leave the warehouse. In this example, the hazardous chemical manufacturer has installed flow tracking devices along the hazardous chemical transportation routes, and the data layer registers the actual physical address of each flow tracking device. When personnel take away hazardous chemicals, their transportation equipment carries a Bluetooth inspection box and emits an identity beacon to the surrounding area. When the transportation equipment passes the Yuchain flow tracking device set up on the transportation route, the flow tracking device will receive the beacon signal. At the same time, the flow tracking device uploads the beacon and time of the transportation equipment to the data layer. The data layer can calculate the movement trajectory of the transportation equipment through time, beacon and the physical address of the flow tracking device that reported the data, so as to determine whether the trajectory is correct or not. By calculating the transportation time, it can be determined whether the transportation process has timed out. If the timeout is abnormal, the data layer will issue an alarm; through the trajectory tracker data, it is easy to trace hazardous chemicals, prevent or deal with the leakage of hazardous chemicals in a timely manner, and improve the safety of hazardous chemicals after leaving the warehouse. When the transportation time exceeds the time specified in the risk strategy, some special accidents may have occurred in the meantime. The system will immediately issue an alarm to notify the supervisor. The supervisor can check on site or call to inquire about the reason for the timeout and ask whether support is needed.

[0052] In one embodiment of the present invention, the production data collected by the acquisition equipment includes the temperature of hazardous chemicals, flammable and explosive materials, as well as the surrounding temperature, to monitor risks in real time and provide timely warnings and reports. The industrial infrared camera uses infrared imaging temperature recognition technology to collect production data information from the production process of the manufacturer, including the temperature of hazardous chemicals, flammable and explosive materials, as well as the surrounding temperature. This infrared imaging temperature recognition technology monitors risks in real time, compares the real-time temperature with the threshold configured by the risk strategy, and provides timely warnings and reports.

[0053] In one embodiment of the present invention, the production data collected by the collection equipment includes the hydraulic and air pressure of hazardous chemical storage pipes, and the data and change trends are monitored in real time, with timely warnings and timely reports. An industrial AI camera is used to obtain the hydraulic and air pressure gauge data of hazardous chemical storage tanks by taking pictures at regular intervals. The image information is converted into digital information through AI analysis and uploaded to the data layer in a timely manner. The data layer monitors the data and change trends in real time, and judges its development law through continuous numerical changes. It issues warnings based on the difference between the continuous changes and the configured risk strategy. When the data exceeds the preset normal data range, risk handling actions are triggered in a timely manner, such as: timely reporting of page warnings, SMS notifications to relevant supervisors, and phone calls to 119.

[0054] In one embodiment of the present invention, the production data collected by the acquisition equipment includes infrared images of transportation pipelines within hazardous chemical production enterprises. This allows for timely analysis of damage and leaks, real-time monitoring of operational status, and prompt reporting of any potential problems. The industrial infrared camera uses infrared imaging temperature recognition technology to first identify and mark the pipeline location. It then analyzes the temperature at each point in the pipeline and compares it with preset high and low temperature thresholds. When the pipeline temperature exceeds the high-temperature threshold configured in the risk strategy, a high-temperature alarm is issued. When the temperature falls below the low-temperature threshold, a low-temperature alarm is issued. This triggers risk management actions, such as timely reporting of web-based warnings, text message notifications to relevant supervisory personnel, and a call to 119.

[0055] In one embodiment of the present invention, the data layer communicates with the data collection device of the collection layer through the data layer server, including the following steps:

[0056] The collection device generates a public-private key pair; the TEE of the collection device stores the private key, which is absolutely secure and cannot be cracked or stolen through TEE, ensuring the uniqueness and credibility of the private key. The private key is used to encrypt the collected data; the data layer server stores the public key, which is bound to the unique information of the collection device and synchronizes the data information collected by the collection device to the blockchain. Asymmetric encryption is used to ensure that the data ciphertext sent by the collection device cannot be forged;

[0057] After the data acquisition device is powered on or turned on, it obtains the timestamp of the latest block on the blockchain and the unique information of the data acquisition device from the data layer server, and calibrates the local time based on the timestamp to ensure the time consistency between the server and the acquisition device, thereby ensuring the reliability of the subsequent data generation sequence;

[0058] The data acquisition device stores a data record for each collected data, power on / off data, power data, and operation record generated during its use, and generates a local timestamp and data operation sequence number for the data record. The sequence number increases in increments to ensure that the ciphertext cannot be copied and to avoid unnecessary errors caused by receiving two identical data consecutively.

[0059] The data acquisition device generates a corresponding data hash value based on the data record, time stamp and operation sequence number;

[0060] The data collection device signs the data hash value with the private key in the TEE;

[0061] The data acquisition device sends the data hash value, public key, and signature to the data layer server. The data layer server verifies the data acquisition device's public key, signature, and serial number. Only data signed with the corresponding device's private key can be correctly decrypted, producing data that can be interpreted and analyzed by the data layer. After verification, the data layer server stores the data record, operation serial number, timestamp, public key, and signature on the blockchain. The data layer server also records the serial number of the device's last successful upload.

[0062] In one embodiment of the present invention, the communication between the collection layer and the data layer includes the following steps:

[0063] The secret keys in the TEE of the acquisition device are uniformly distributed by the key management system of the data layer;

[0064] The key management system binds the serial number of the acquisition device to the dispersion factor, and then disperses the dispersion factor with the root key to obtain the device communication key of the acquisition device, thereby achieving a one-device-one-key effect. This prevents the keys of all devices from being cracked if a certain device is cracked, thereby improving the reliability of the device. The dispersion factor includes the device serial number, or other unique device information, such as Mac address, chip serial number, and the system-assigned unique system identification code.

[0065] Before the collection device uploads the data to the data layer, a two-way identity authentication is performed. The first step of the two-way authentication is that the data layer authenticates the collection device to ensure that the devices uploading the data are authenticated devices. The data uploaded by unauthenticated devices are directly filtered, thereby effectively preventing the data layer from being maliciously attacked and ensuring the validity of the data source. The second step is that the collection device authenticates the data layer to ensure that the data of the collection device is uploaded to a trusted platform, preventing other counterfeit platforms from understanding the basic data of the production enterprise and causing adverse consequences for the production enterprise.

[0066] First, the acquisition device generates a first random number through TEE, sends the first random number and the device serial number to the data layer, and waits for the data layer to return the encryption result for data layer identity authentication;

[0067] After receiving the first random number and serial number of the collection device, the data layer will query the key management system to obtain the corresponding dispersion factor, use the dispersion factor to disperse the root key to obtain the communication key of the collection device, and then use the communication key to encrypt the received first random number to obtain the first encryption result, and at the same time generate the second random number, and send the first encryption result and the second random number to the collection device;

[0068] After receiving the first encryption result and the second random number, the acquisition device first decrypts the first encryption result in the TEE and compares the result with the first random number. If it fails, the authentication ends. If it passes, the TEE will continue to encrypt the second random number to obtain the second encryption result. The second encryption result is returned to the data layer. The data layer uses the previously generated device communication key to decrypt the second encryption result and compare the result with the second random number. If the comparison passes, the device is considered trustworthy and accepts the data from the data acquisition device.

[0069] During operation, the data collection device forms a data packet with the collected data and the device serial number, encrypts it with the secret key in the TEE to form a ciphertext data packet, and uploads it to the data layer with the plaintext information of the device serial number. The use of ciphertext data packets is to prevent the data from being intercepted by criminals during transmission and analyzed to obtain the basic information of the production enterprise, thereby causing adverse effects on the production enterprise;

[0070] The data layer uses the key management system to disperse the received serial number using its corresponding dispersion factor to obtain the communication key, and uses the key to decrypt the ciphertext data packet to verify whether the serial number is consistent. If passed, the data is displayed on the data layer and then uploaded to the blockchain through the data layer.

[0071] The above description is a specific example of the present invention and does not constitute any limitation of the present invention. It is obvious that those skilled in the art, after understanding the content and principles of the present invention, may make various modifications and changes in form and details without departing from the principles and structure of the present invention. However, such modifications and changes based on the principles of the present invention are still within the scope of protection of the claims of the present invention.

Claims

1. A digital blockchain supervision platform for hazardous chemical production safety, characterized by: include: The collection layer is used to collect production data information during the production process of the manufacturing enterprise. The collection equipment of the collection layer sets up a TEE trusted execution environment to encrypt or hash the collected production data information; The data layer is used to store the production data collected by the collection layer on the consortium chain through the hash of the data, and the collection layer and the data layer communicate; Blockchain is used to deploy file-on-chain contracts, and the files are connected to a trusted environment and encrypted and stored on a privacy computing server; The privacy computing platform is used to transform the file description information on the chain into a data metadata market, record the metadata information of the collected data, and allow data users to apply for use rights from the production companies that generate the data. After authorization, data users can use various applications on the privacy computing platform; The supervision platform assigns different risk strategies to each production enterprise according to its situation and handles the risks accordingly; The communication between the collection layer and the data layer includes the following steps: The secret keys in the TEE of the acquisition device are uniformly distributed by the key management system of the data layer; The key management system binds the serial number of the acquisition device to the dispersion factor, and disperses the dispersion factor with the root key to obtain the device communication key of the acquisition device; Before uploading data to the data layer, the collection device performs two-way identity authentication. The collection device generates a first random number through TEE, sends the first random number and the device serial number to the data layer, and waits for the data layer to return the encryption result for data layer identity authentication. After receiving the first random number and serial number of the collection device, the data layer will query the key management system to obtain the corresponding dispersion factor, use the dispersion factor to disperse the root key to obtain the communication key of the collection device, and then use the communication key to encrypt the received first random number to obtain the first encryption result, and at the same time generate the second random number, and send the first encryption result and the second random number to the collection device; After receiving the first encryption result and the second random number, the acquisition device first decrypts the first encryption result in the TEE and compares the result with the first random number. If it fails, the authentication ends. If it passes, the TEE will continue to encrypt the second random number to obtain the second encryption result. The second encryption result is returned to the data layer. The data layer uses the previously generated device communication key to decrypt the second encryption result and compare the result with the second random number. If the comparison passes, the device is considered trustworthy and accepts the data from the data acquisition device. During operation, the data acquisition device forms a data packet with the collected data and the device serial number, encrypts it using the secret key in the TEE to form a ciphertext data packet, and uploads it to the data layer with the plaintext information of the device serial number; The data layer uses the key management system to disperse the received serial number using its corresponding dispersion factor to obtain the communication key, and uses this key to decrypt the ciphertext data packet to verify whether the serial number is consistent. If it passes, the data is displayed on the data layer and then uploaded to the blockchain through the data layer; Furthermore, the production data collected by the collection equipment includes unlocking operation information, electronic scale data information, inspection box operation data, trajectory tracker data, the temperature of hazardous chemicals and flammable and explosive materials and the surrounding temperature, the hydraulic and air pressure of hazardous chemical storage pipes, and infrared images of transportation pipelines in hazardous chemical production enterprises. Among them, the hydraulic and air pressure of hazardous chemical storage pipes are measured by industrial AI cameras. The hydraulic and air pressure gauge data of hazardous chemical storage tanks are obtained by taking pictures at regular intervals. The image information is converted into digital information through AI analysis and uploaded to the data layer in time. The data layer monitors its numbers and change trends in real time, and judges its development law through continuous numerical changes and issues early warnings based on the continuous change difference configured in the risk strategy.

2. The digital blockchain supervision platform for hazardous chemical production safety as claimed in claim 1 is characterized in that: The privacy computing platform uses TEE trusted execution environment technology. Data users use scripting language to write the execution logic for data use, encrypt the script language and send it to the trusted execution environment. After receiving the script, TEE decrypts the script. After decryption, TEE executes the script through the preset script interpreter. After the script is executed, the data user obtains the execution result.

3. The digital blockchain supervision platform for hazardous chemical production safety according to claim 1 is characterized in that: The unlocking operation information is double-person double-lock operation information. The warehouse door of the hazardous chemical production enterprise requires two people to be present at the same time, and the door will be opened only after both people have verified their identity information. The equipment data information records who opened the hazardous chemical warehouse door and when.

4. The digital blockchain supervision platform for hazardous chemical production safety according to claim 1 or 2 is characterized in that: The electronic scale data information is used to weigh items in the warehouse of the manufacturing enterprise through the electronic scale, and the device data information is used to record who took what and how much it weighed.

5. The digital blockchain supervision platform for hazardous chemical production safety according to claim 1 or 2 is characterized in that: The data of the track tracker is used to record where the item has moved from the warehouse after it is taken if the item is a hazardous chemical.

Citation Information

Patent Citations

  • A data sharing exchange system and method based on a block chain

    CN109729168A

  • Production data monitoring method and device, block chain node and storage medium

    CN112749232A

  • Electronic equipment data credible acquisition and evidence storage method based on blockchain technology

    CN113158248A

  • Dangerous chemical safety production digital block chain supervision platform

    CN113688187A

  • Privacy computing system and method for enabling secure production insurance

    CN113781245A