A blockchain-based mine Internet of Things data management system and method

Abstract

The present application discloses a blockchain-based mine Internet of Things data management system and method. Among them, the system includes: a memory transmission initiating node for initiating a memory transmission request; a trusted node for sending memory transmission data according to the memory transmission request; a first memory transmission receiving node for receiving the memory transmission data, executing an operation instruction according to the memory transmission data, generating memory execution data, and broadcasting the memory execution data; the trusted node is further used for updating the memory transmission record data according to the memory execution data; a second memory transmission receiving node for recording, storing, and querying the memory transmission data. The present application can support the recording, storage, and query of memory transmission data, and can meet the requirements of control-type data for privacy security and traceability.

Description

Technical Field

[0001] This application relates to the field of mine data security, and particularly to a blockchain-based mine Internet of Things data management system and method. Background Art

[0002] In related technologies, the traditional mine Internet of Things is divided into a perception layer, a transmission layer, and an application layer from top to bottom. It mainly perceives, transmits, and processes insensitive data with low latency requirements, and at the same time lacks a data security protection mechanism and a data traceability mechanism. However, with the application of 5G technology in mines, the amount of control data has gradually increased, and control data has requirements for privacy security and traceability, which has led to the difficulty of the traditional mine Internet of Things in supporting the transmission and application of control data.

[0003] Application Content

[0004] This application aims to solve at least one of the technical problems in related technologies to some extent.

[0005] To this end, the purpose of this application is to solve the problem of the support of the mine Internet of Things for the privacy security and traceability of control data, and a blockchain-based mine Internet of Things data management system is proposed.

[0006] Another purpose of this application is to propose a blockchain-based mine Internet of Things data management method.

[0007] To achieve the above object, on the one hand, this application proposes a blockchain-based mine Internet of Things data management system, including: perception layer devices, edge layer devices, transmission layer devices, and application layer devices. The perception layer devices include a memory transmission initiation node and a first memory transmission receiving node. The transmission layer devices include trusted nodes. The application layer devices include a second memory transmission receiving node. Among them,

[0008] The memory transmission initiation node is used to initiate a memory transmission request;

[0009] The trusted node is used to send memory transmission data according to the memory transmission request;

[0010] The first memory transmission receiving node is used to receive the memory transmission data, execute an operation instruction according to the memory transmission data, generate memory execution data, and broadcast the memory execution data;

[0011] The trusted node is further used to update the memory transmission record data according to the memory execution data;

[0012] The second memory transmission receiving node is used to record, store, and query the memory transmission data.

[0013] In a possible implementation, the trusted node is further configured to perform node authentication on the memory transfer initiating node; in the case where the node authentication passes, perform memory rule judgment on the memory transfer request; and in the case where the memory rule judgment passes, obtain the memory transfer data.

[0014] In a possible implementation, the application layer device further includes a management node, where

[0015] the trusted node is further configured to obtain the network address, physical address, and timestamp of the memory transfer initiating node according to the memory transfer request, as well as encrypted data including the identity information and authentication information of the memory transfer initiating node, and send the encrypted data to the management node, where the encrypted data is encrypted and generated by the memory transfer initiating node according to its own network address, physical address, identity information, and timestamp;

[0016] the management node is further configured to perform identity authentication according to the encrypted data and return an authentication result to the trusted node;

[0017] the trusted node is further configured to, in the case where the authentication result is passed, obtain the identity information and authentication information of the memory transfer initiating node, and generate authentication comparison information according to the network address, physical address, identity information, and timestamp of the memory transfer initiating node; compare the authentication information of the memory transfer initiating node with the authentication comparison information, and determine that the node authentication of the memory transfer initiating node passes in the case of consistent comparison.

[0018] In a possible implementation, the management node is further configured to decrypt the encrypted data to obtain the identity information and authentication information of the memory transfer initiating node; query according to the identity information of the memory transfer initiating node in its own host management list; and in the case of successful query, generate and send the authentication result to the trusted node, where the authentication result includes the identity information and authentication information of the memory transfer initiating node encrypted by the public key of the trusted node.

[0019] In a possible implementation, the trusted node is further configured to obtain a preset data transfer policy; and pass the memory rule judgment in the case where the memory rule corresponding to the memory transfer request conforms to the preset data transfer policy.

[0020] In a possible implementation, the trusted node is further configured to send a memory transfer number and trusted node signature information to the memory transfer initiating node; and obtain the memory transfer data fed back by the memory transfer initiating node, where the memory transfer data includes the memory transfer number, the trusted node signature information, and the initiating node signature information.

[0021] In a possible implementation, the first memory transfer receiving node is further configured to obtain the trusted node signature information and the initiating node signature information according to the memory transfer data; verify the trusted node signature information and the initiating node signature information; and when both verifications pass, execute the operation instruction in the memory transfer data, generate the memory execution data, and broadcast the memory execution data, where the memory execution data includes the receiving node signature information.

[0022] In a possible implementation, the trusted node is further configured to, when receiving the memory execution data, verify the memory execution data according to the receiving node signature information, generate verification result information; when the verification result information is passed, package the memory execution data into a block, add it to the blockchain, and generate consensus information; send the memory execution data and the consensus information to the initiating node, and send the verification result information and the consensus information to the receiving node.

[0023] In a possible implementation, the memory transfer initiating node includes at least one of an intelligent mining device, an intelligent transportation device, a monitoring and control device, a video analysis device, and a target positioning device, and initiates a memory transfer as a memory transfer initiating node when any of the following conditions is met:

[0024] The intelligent mining device determines that it needs to perform an operation regulation operation, a termination operation, or an operation failure is about to occur or has occurred.

[0025] The intelligent transportation device determines that it needs to perform an operation regulation operation, a termination operation, or an operation failure is about to occur or has occurred.

[0026] The monitoring and control device determines that the collected data is about to exceed the limit according to the collected data.

[0027] The video analysis device determines that a regulation violation has occurred for underground equipment or personnel, or determines that the equipment in the video needs to perform an operation regulation operation, a termination operation, or an operation failure is about to occur or has occurred.

[0028] The target positioning device determines that a regulation violation has occurred for underground equipment or personnel, or determines that the equipment in the video needs to perform an operation regulation operation, a termination operation, or an operation failure is about to occur or has occurred.

[0029] To achieve the above object, on the other hand, the present application proposes a blockchain-based data management method for mine Internet of Things, including: sensing layer devices, edge layer devices, transport layer devices and application layer devices. The sensing layer devices include memory transfer initiating nodes and first memory transfer receiving nodes. The transport layer devices include trusted nodes. The application layer devices include second memory transfer receiving nodes, where,

[0030] Initiate a memory transfer request through the memory transfer initiating node;

[0031] Send memory transfer data through the trusted node according to the memory transfer request;

[0032] Receive the memory transfer data through the first memory transfer receiving node, execute an operation instruction according to the memory transfer data, generate memory execution data, and broadcast the memory execution data;

[0033] Update the memory transfer record data through the trusted node according to the memory execution data;

[0034] Record, store, and query the memory transfer data through the second memory transfer receiving node.

[0035] Advantages of the present application:

[0036] In the embodiments of the present application, the memory transfer initiating node is used to initiate a memory transfer request; the trusted node is used to send memory transfer data according to the memory transfer request; the first memory transfer receiving node is used to receive the memory transfer data, execute an operation instruction according to the memory transfer data, generate memory execution data, and broadcast the memory execution data; the trusted node is further used to update the memory transfer record data according to the memory execution data; the second memory transfer receiving node is used to record, store, and query the memory transfer data. The present application can support the recording, storage, and query of memory transfer data, and can meet the requirements of control-type data for privacy security and traceability.

[0037] Additional aspects and advantages of the present application will be given in part in the following description, become apparent in part from the following description, or be learned through the practice of the present application. Description of the Drawings

[0038] The above and / or additional aspects and advantages of the present application will become apparent and be readily understood from the following description of the embodiments in conjunction with the drawings, where:

[0039] Figure 1 is a schematic diagram of a mine Internet of Things architecture with edge computing power proposed by an embodiment of the present application;

[0040] Figure 2 Schematic diagram of the uplink data transmission process according to an embodiment of the present application;

[0041] Figure 3 Schematic diagram of the structure of the blockchain-based mine Internet of Things data management system according to an embodiment of the present application;

[0042] Figure 4 Schematic diagram of the mine Internet of Things blockchain application platform according to an embodiment of the present application;

[0043] Figure 5 Flowchart of the blockchain-based mine Internet of Things data management method according to an embodiment of the present application. Detailed implementation manners

[0044] It should be noted that, without conflict, the embodiments in the present application and the features in the embodiments may be combined with each other. The present application will be described in detail below with reference to the drawings and in combination with the embodiments.

[0045] In order to enable those skilled in the art to better understand the solutions of the present application, the technical solutions in the embodiments of the present application will be clearly and completely described below with reference to the drawings in the embodiments of the present application. Obviously, the described embodiments are only a part of the embodiments of the present application, rather than all the embodiments. All other embodiments obtained by those of ordinary skill in the art based on the embodiments in the present application without making creative efforts shall fall within the protection scope of the present application.

[0046] Before describing the blockchain-based mine Internet of Things data management system and method according to the embodiments of the present application, the architecture of the mine Internet of Things proposed in the embodiments of the present application will be introduced first.

[0047] By constructing blockchain computing nodes at the data source, the blockchain mechanism can be introduced into the mine Internet of Things to implement functions such as organizational division, node identity authentication, permission control, and node type division. Figure 1 It is a schematic diagram of the mine Internet of Things architecture with edge computing power proposed in the embodiments of the present application. As Figure 1 shown, due to the uneven intelligence level of the sensing layer devices, by inserting an edge layer with edge computing power between the sensing layer and the transmission layer and deploying a security carrier carrying the core functions of the blockchain, the combination of the blockchain mechanism and the edge computing framework can be realized, and at the same time, the load problem of high-speed transmission in the case of coexistence of a large number of nodes can be reduced.

[0048] Specifically, still as Figure 1 shown, in the above-mentioned mine Internet of Things architecture with edge computing power:

[0049] Sensing layer: includes on-site devices such as sensors and controllers, and is responsible for the collection of sensing data and the execution of control commands;

[0050] Edge layer: It includes a trusted blockchain unit and a user identity key management unit. The former is responsible for functions such as smart contracts, consensus mechanisms, encryption algorithms, and distributed ledgers, and the latter is responsible for functions such as key generation, encryption and decryption, digital signatures, and permission management;

[0051] Transport layer: It includes trusted nodes integrated in security carriers such as base stations and switches, and is responsible for functions such as identification code query, user identity management, and access control;

[0052] Application layer: It includes the software of the interoperable deposit forensics and traceability system for the mine Internet of Things, and provides distributed deposit services and blockchain query forensics and traceability.

[0053] In addition, considering the compatibility issues with different perception layer interfaces, the edge layer hardware (edge computing unit) can be deployed in the mine gateway. Figure 2 It is a schematic diagram of the uplink data transmission process according to an embodiment of the present application. As Figure 2 shown, the mine gateway can first collect data through an Ethernet port, an RS485 (a standard that defines the electrical characteristics of drivers and receivers in a balanced digital multipoint system) serial port, etc. Then, the collected data is processed in the edge computing unit, including blockchain computing. Finally, the processed data is protocol-converted by the protocol conversion unit and transmitted upward through communication networks such as 4G, 5G, and WiFi. It should be noted that for downlink data, the transmission process is opposite to the above process.

[0054] Next, a blockchain-based mine Internet of Things data management system and method according to an embodiment of the present application will be described with reference to the accompanying drawings. First, a blockchain-based mine Internet of Things data management system according to an embodiment of the present application will be described with reference to the accompanying drawings.

[0055] Figure 3 It is a schematic structural diagram of a blockchain-based mine Internet of Things data management system according to an embodiment of the present application.

[0056] As Figure 3 shown, the blockchain-based mine Internet of Things data management system 300 includes: a perception layer device, an edge layer device, a transport layer device, and an application layer device. The perception layer device includes a memory transfer initiation node 310 and a first memory transfer receiving node 320. The transport layer device includes a trusted node 330. The application layer device includes a second memory transfer receiving node 340. Among them,

[0057] The memory transfer initiation node 310 is used to initiate a memory transfer request.

[0058] In an embodiment of the present application, the memory transfer initiating node 310 may initiate a memory transfer task. By generating a memory transfer request and sending the memory transfer request to the trusted node 330, the memory transfer task corresponding to the memory transfer request can be started.

[0059] The trusted node 330 is used to send memory transfer data according to the memory transfer request.

[0060] In an embodiment of the present application, the trusted node 330 may receive a memory transfer request. After receiving the memory transfer request, it may obtain memory transfer data according to the memory transfer request, and send the memory transfer data to the first memory transfer receiving node 320 and the second memory transfer receiving node 340.

[0061] The first memory transfer receiving node 320 is used to receive the memory transfer data, execute the operation instruction according to the memory transfer data, generate memory execution data, and broadcast the memory execution data.

[0062] In an embodiment of the present application, the first memory transfer receiving node 320 may receive the memory transfer data. By parsing the memory transfer data, the operation instruction in the memory transfer data can be obtained. Then the first memory transfer receiving node 320 may execute the operation instruction. After the execution is completed, memory execution data can be generated. Finally, the first memory transfer receiving node 320 may broadcast the memory execution data to the mine Internet of Things.

[0063] The trusted node 330 is further used to update the memory transfer record data according to the memory execution data.

[0064] In an embodiment of the present application, the trusted node 330 may receive the memory execution data and update the memory transfer record data according to the memory execution data. It should be noted that all trusted nodes in the network can receive the memory execution data and update the local memory transfer record data.

[0065] The second memory transfer receiving node 340 is used to record, store, and query the memory transfer data.

[0066] In an embodiment of the present application, after receiving the memory transfer data, the second memory transfer receiving node 340 may record and store the memory transfer data, and query the memory transfer data after receiving the memory transfer data query instruction. In the case of finding the corresponding memory transfer data, the memory transfer data can be fed back as the query result.

[0067] In an embodiment of the present application, a memory transfer initiating node is used to initiate a memory transfer request; a trusted node is used to send memory transfer data according to the memory transfer request; a first memory transfer receiving node is used to receive the memory transfer data, execute an operation instruction according to the memory transfer data, generate memory execution data, and broadcast the memory execution data; the trusted node is further used to update the memory transfer record data according to the memory execution data; a second memory transfer receiving node is used to record, store, and query the memory transfer data. The present application can support the recording, storage, and query of memory transfer data, and can meet the requirements of control-type data for privacy security and traceability.

[0068] In a possible implementation manner, the trusted node 330 is further used to perform node authentication on the memory transfer initiating node 310; in the case where the node authentication passes, perform a memory rule judgment on the memory transfer request; in the case where the memory rule judgment passes, obtain the memory transfer data.

[0069] In an embodiment of the present application, considering the security and reliability issues of data transmission, the trusted node 330 may have a node authentication function for authenticating the identity of the memory transfer initiating node. The trusted node 330 can perform node authentication on the memory transfer initiating node 310. In the case where the node authentication passes, the identity authentication of the memory transfer initiating node is passed, and then a memory rule judgment can be performed on the memory transfer request of the memory transfer initiating node 310 to check whether the memory transfer request meets the data transmission policy. In the case where the memory rule judgment also passes, it indicates that the memory transfer request meets the data transmission policy, and finally the memory transfer data is obtained.

[0070] In a possible implementation manner, the application layer device further includes a management node 350, where

[0071] the trusted node 330 is further used to obtain the network address, physical address, and timestamp of the memory transfer initiating node 310 according to the memory transfer request, as well as encrypted data including the identity information and authentication information of the memory transfer initiating node 310, and send the encrypted data to the management node 350, where the encrypted data is encrypted and generated by the memory transfer initiating node according to its own network address, physical address, identity information, and timestamp;

[0072] the management node 350 is further used to perform identity authentication according to the encrypted data and return an authentication result to the trusted node 330;

[0073] The trusted node 330 is further configured to, when the authentication result is passed, obtain the identity information and authentication information of the memory transfer initiating node 310, and generate authentication comparison information according to the network address, physical address, identity information, and timestamp of the memory transfer initiating node 310; compare the authentication information of the memory transfer initiating node 310 with the authentication comparison information, and determine that the node authentication of the memory transfer initiating node is passed when the comparison is consistent.

[0074] In an embodiment of the present application, to implement node authentication of the memory transfer initiating node, the application layer device may include a management node 350. First, the trusted node 330 may obtain the network address, physical address, and timestamp of the memory transfer request initiating node 310 according to the memory transfer request, as well as encrypted data including the identity information and authentication information of the memory transfer initiating node 310, and send the encrypted data to the management node 350. Then, the management node 350 may decrypt the encrypted data to obtain the identity information and authentication information of the memory transfer initiating node 310, then perform identity authentication according to the identity information of the memory transfer initiating node 310, and return an authentication result to the trusted node 330. Finally, when the received authentication result is passed, the trusted node 330 may obtain the identity information and authentication information of the memory transfer initiating node 310 through the management node 350, and at the same time generate authentication comparison information according to the network address, physical address, identity information, and timestamp of the memory transfer initiating node 310, compare the authentication information of the memory transfer initiating node 310 with the authentication comparison information, and determine that the node authentication of the memory transfer initiating node is passed when the comparison is consistent.

[0075] It can be understood that when the authentication result is not passed, the trusted node 330 may reject the memory transfer request corresponding to the identity information.

[0076] It should be noted that the authentication information and authentication comparison information may be calculated by SHA256 (Secure Hash Algorithm 256) according to the network address, physical address, identity information, and timestamp of the memory transfer initiating node 310.

[0077] In a possible implementation manner, the management node 350 is further configured to decrypt the encrypted data to obtain the identity information and authentication information of the memory transfer initiating node 310; query in its own host management list according to the identity information of the memory transfer initiating node 310; when the query is successful, generate and send an authentication result to the trusted node 330, where the authentication result includes the identity information and authentication information of the memory transfer initiating node 310 encrypted by the public key of the trusted node 330.

[0078] In an embodiment of the present application, the management node 350 can authenticate the identity of the memory transmission initiating node 310 through its own host management list. First, the management node 350 can decrypt the encrypted data to obtain the identity information and authentication information of the memory transmission initiating node 310, and then can query in its own host management list according to the identity information of the memory transmission initiating node 310. Finally, in the case of a successful query, the management node 350 can generate and send an authentication result to the trusted node 330. Among them, the authentication result includes the identity information and authentication information of the memory transmission initiating node 310 encrypted by the public key of the trusted node 330.

[0079] It can be understood that in the case where the management node 350 does not query the identity information of the memory transmission initiating node 310 in its own host management list, it can also send a failed authentication result to the trusted node 330, which no longer includes the identity information and authentication information of the memory transmission initiating node 310.

[0080] In a possible implementation manner, the trusted node 330 is further configured to obtain a preset data transmission policy; and judge through the memory rule in the case where the memory rule corresponding to the memory transmission request conforms to the preset data transmission policy.

[0081] It should be noted that the preset data transmission policy can be a data transmission policy preset according to different types of data. The memory rule in the memory transmission request needs to conform to the preset data transmission policy, otherwise, the memory rule judgment fails, and the trusted node can reject the memory transmission request.

[0082] In an embodiment of the present application, the trusted node 330 can judge the memory rule of the memory transmission request according to the preset data transmission policy. The trusted node 330 can obtain the preset data transmission policy, then obtain the memory rule corresponding to the memory transmission request according to the memory transmission request, and then judge through the memory rule in the case where the foregoing memory rule conforms to the preset data transmission policy.

[0083] In a possible implementation manner, the trusted node 330 is further configured to send a memory transmission number and trusted node signature information to the memory transmission initiating node; and obtain the memory transmission data fed back by the memory transmission initiating node, where the memory transmission data includes the remembered transmission number, trusted node signature information, and initiating node signature information.

[0084] In an embodiment of the present application, after the trusted node 330 determines the memory transfer request of the memory transfer initiating node 310 through the memory rule, it can generate a memory transfer number and trusted node signature information, and send the memory transfer number and trusted node signature information to the memory transfer initiating node 310. After receiving the memory transfer number and trusted node signature information, the memory transfer initiating node 310 can generate initiating node signature information, add the memory transfer number, trusted node signature information, and initiating node signature information to the memory transfer data, and feedback the memory transfer data to the trusted node 330. The trusted node 330 can receive the memory transfer data fed back by the memory transfer initiating node 310, verify the trusted node signature information and initiating node signature information therein, and send the memory transfer data to the first memory transfer receiving node 320 when the verification passes.

[0085] It should be noted that when the verification of the trusted node signature information and the initiating node signature information by the trusted node 330 fails, it can discard the memory transfer data and feedback the discard information to the memory transfer initiating node.

[0086] In a possible implementation manner, the first memory transfer receiving node 320 is further configured to obtain the trusted node signature information and the initiating node signature information according to the memory transfer data; verify the trusted node signature information and the initiating node signature information; execute the operation instruction in the memory transfer data and generate memory execution data, and broadcast the memory execution data when the verifications all pass.

[0087] Among them, the memory execution data includes receiving node signature information, and the receiving node signature information can be generated by the first memory transfer receiving node 320.

[0088] In an embodiment of the present application, after receiving the memory transfer data, the first memory transfer receiving node 320 can obtain the trusted node signature information and the initiating node signature information according to the memory transfer data. Then verify the trusted node signature information and the initiating node signature information. When the verifications all pass, it can execute the operation instruction in the memory transfer data, generate memory execution data, add the receiving node signature information to the memory execution data, and finally broadcast the memory execution data to the network.

[0089] In a possible implementation manner, the trusted node 330 is further configured to verify the memory execution data according to the receiving node signature information when receiving the memory execution data, generate verification result information; when the verification result information is passed, package the memory execution data into a block, add it to the blockchain, and generate consensus information; send the memory execution data and the consensus information to the memory transfer initiating node 310, and send the verification result information and the consensus information to the first memory transfer receiving node 320.

[0090] In an embodiment of the present application, after the trusted node 330 receives the memory execution data, it can obtain the receiving node signature information according to the memory execution data. Then, it verifies the memory execution data based on the receiving node signature information to generate verification result information. When the verification result information passes, it proves that the memory execution data has not been tampered with. Then, the memory execution data can be packaged into a block, added to the blockchain, and consensus information is generated. Finally, the memory execution data and the consensus information are sent to the memory transmission initiating node 310, and the verification result information and the consensus information are sent to the first memory transmission receiving node 320.

[0091] In a possible implementation manner, the memory transmission initiating node 310 includes at least one of an intelligent mining device, an intelligent transportation device, a monitoring and control device, a video analysis device, and a target positioning device. When any of the following conditions is met, it acts as the memory transmission initiating node 310 to initiate memory transmission:

[0092] The intelligent mining device determines that it needs to perform an operation regulation operation, a termination operation, or an operation failure is about to occur or has occurred.

[0093] The intelligent transportation device determines that it needs to perform an operation regulation operation, a termination operation, or an operation failure is about to occur or has occurred.

[0094] The monitoring and control device determines according to the collected data that the data is about to exceed the limit.

[0095] The video analysis device determines that a regulation behavior has occurred for underground equipment or personnel, or determines that the equipment in the video needs to perform an operation regulation operation, a termination operation, or an operation failure is about to occur or has occurred.

[0096] The target positioning device determines that a regulation behavior has occurred for underground equipment or personnel, or determines that the equipment in the video needs to perform an operation regulation operation, a termination operation, or an operation failure is about to occur or has occurred.

[0097] In an embodiment of the present application, the memory transmission initiating node 310 can be at least one of an intelligent mining device, an intelligent transportation device, a monitoring and control device, a video analysis device, and a target positioning device. When any of the following conditions is met, it can act as the memory transmission initiating node 310 to initiate memory transmission:

[0098] When the intelligent mining device or the intelligent transportation device determines that it needs to perform an operation regulation operation, a termination operation, or an operation failure is about to occur or has occurred, production control data or transportation control data can be generated respectively.

[0099] The monitoring and control device can generate abnormal over-limit data based on the collected data when it determines that the data is about to exceed the limit.

[0100] The video analysis device can generate analysis abnormal data when it determines that the underground equipment or personnel have violated regulations or when it determines that the equipment in the video needs to perform regulation operations, such as regulation operations, termination operations, or when an operating failure is about to occur or has already occurred.

[0101] The target positioning device can generate over-limit alarm data when it determines that the underground equipment or personnel have violated regulations or when it determines that the equipment in the video needs to perform regulation operations, such as regulation operations, termination operations, or when an operating failure is about to occur or has already occurred.

[0102] It should be noted that Figure 4 is a schematic diagram of the mine Internet of Things blockchain application platform according to an embodiment of the present application. As Figure 4 shown, for the data generated by the above devices, the second memory transfer receiving node can perform on-chain data filtering, and then perform on-chain and storage. In the case where data blockchain traceability is required, such as control application data traceability, production management traceability, accident investigation traceability, etc., the second memory transfer receiving node can use the application layer software to retrieve, match, and verify all the block information stored, so as to support and ensure the traceability of the mine Internet of Things blockchain information.

[0103] To implement the above embodiment, as Figure 5 shown, in this embodiment, a blockchain-based mine Internet of Things data management method 500 is also provided. The device 500 includes: a perception layer device, an edge layer device, a transmission layer device, and an application layer device. The perception layer device includes a memory transfer initiating node and a first memory transfer receiving node. The transmission layer device includes a trusted node. The application layer device includes a second memory transfer receiving node. Among them,

[0104] Step 510: Initiate a memory transfer request through the memory transfer initiating node;

[0105] Step 520: Send memory transfer data through the trusted node according to the memory transfer request;

[0106] Step 530: Receive the memory transfer data through the first memory transfer receiving node, execute the operation instruction according to the memory transfer data, generate memory execution data, and broadcast the memory execution data;

[0107] Step 540: Update the memory transfer record data through the trusted node according to the memory execution data;

[0108] Step 550: Record, store, and query the memory transfer data through the second memory transfer receiving node.

[0109] In a possible implementation, step 520 includes:

[0110] Performing node authentication on the memory transfer initiating node by the trusted node;

[0111] When the node authentication passes, performing memory rule judgment on the memory transfer request;

[0112] When the memory rule judgment passes, obtaining the memory transfer data.

[0113] In a possible implementation, the performing node authentication on the memory transfer initiating node by the trusted node includes:

[0114] According to the memory transfer request, obtaining the network address, physical address, and timestamp of the memory transfer initiating node, as well as encrypted data including the identity information and authentication information of the memory transfer initiating node, where the encrypted data is encrypted and generated by the memory transfer initiating node based on its own network address, physical address, identity information, and timestamp;

[0115] Sending the encrypted data to the management node for identity authentication and obtaining the authentication result of the management node, where the management node is located at the application layer;

[0116] When the authentication result is passed, obtaining the identity information and authentication information of the memory transfer initiating node, and generating authentication comparison information based on the network address, physical address, identity information, and timestamp of the memory transfer initiating node;

[0117] Comparing the authentication information of the memory transfer initiating node with the authentication comparison information, and determining that the node authentication of the memory transfer initiating node passes when the comparison is consistent.

[0118] In a possible implementation, the sending the encrypted data to the management node for identity authentication and obtaining the authentication result of the management node includes:

[0119] Decrypting the encrypted data by the management node to obtain the identity information and authentication information of the memory transfer initiating node;

[0120] Querying in the host management list of the management node according to the identity information of the memory transfer initiating node;

[0121] When the query is successful, generating and sending the authentication result to the trusted node, where the authentication result includes the identity information and authentication information of the memory transfer initiating node encrypted by the public key of the trusted node.

[0122] In a possible implementation, the memory rule judgment on the memory transmission request includes:

[0123] Obtain a preset data transmission policy;

[0124] When the memory rule corresponding to the memory transmission request conforms to the preset data transmission policy, the memory rule judgment is passed.

[0125] In a possible implementation, when the memory rule judgment is passed, obtaining the memory transmission data includes:

[0126] Send a memory transmission number and trusted node signature information to the memory transmission initiating node through the trusted node;

[0127] Obtain the memory transmission data fed back by the memory transmission initiating node, where the memory transmission data includes the memory transmission number, the trusted node signature information, and the initiating node signature information.

[0128] In a possible implementation, the first memory transmission receiving node executes the operation instruction in the memory transmission data, generates memory execution data, and broadcasts the memory execution data, including:

[0129] According to the memory transmission data, obtain the trusted node signature information and the initiating node signature information;

[0130] Verify the trusted node signature information and the initiating node signature information through the first memory transmission receiving node;

[0131] When both verifications are passed, the receiving node executes the operation instruction in the memory transmission data, generates the memory execution data, and broadcasts the memory execution data, where the memory execution data includes the receiving node signature information.

[0132] In a possible implementation, step 540 includes:

[0133] When the trusted node receives the memory execution data, verify the memory execution data according to the receiving node signature information to generate verification result information;

[0134] When the verification result information is passed, the trusted node packs the memory execution data into a block, adds it to the blockchain, and generates consensus information;

[0135] Send the memory execution data and the consensus information to the memory transfer initiating node, and send the verification result information and the consensus information to the first memory transfer receiving node.

[0136] In a possible implementation, the memory transfer initiating node includes at least one of an intelligent mining device, an intelligent transportation device, a monitoring and control device, a video analysis device, and a target positioning device. When any of the following conditions is met, it acts as a memory transfer initiating node to initiate a memory transfer:

[0137] The intelligent mining device determines that it needs to perform an operation regulation operation, a termination operation, or an operation failure is about to occur or has occurred.

[0138] The intelligent transportation device determines that it needs to perform an operation regulation operation, a termination operation, or an operation failure is about to occur or has occurred.

[0139] The monitoring and control device determines according to the collected data that the data is about to exceed the limit.

[0140] The video analysis device determines that a regulation violation has occurred to underground equipment or personnel, or determines that the equipment in the video needs to perform an operation regulation operation, a termination operation, or an operation failure is about to occur or has occurred.

[0141] The target positioning device determines that a regulation violation has occurred to underground equipment or personnel, or determines that the equipment in the video needs to perform an operation regulation operation, a termination operation, or an operation failure is about to occur or has occurred.

[0142] It should be noted that the foregoing explanation of the embodiments of the blockchain-based mine Internet of Things data management system also applies to the blockchain-based mine Internet of Things data management method of this embodiment, and will not be repeated here.

[0143] In addition, the terms "first" and "second" are only used for descriptive purposes and cannot be understood as indicating or implying relative importance or implicitly specifying the quantity of the indicated technical features. Thus, features defined with "first" and "second" may explicitly or implicitly include at least one of such features. In the description of this application, "a plurality" means at least two, such as two, three, etc., unless otherwise specifically defined.

[0144] In the description of this specification, the description with reference to terms such as "one embodiment", "some embodiments", "examples", "specific examples", or "some examples" means that the specific features, structures, materials, or characteristics described in connection with the embodiment or example are included in at least one embodiment or example of this application. In this specification, the schematic representations of the above terms do not necessarily refer to the same embodiment or example. Moreover, the specific features, structures, materials, or characteristics described may be combined in any one or more embodiments or examples in a suitable manner. In addition, without contradiction, those skilled in the art can combine and combine the different embodiments or examples described in this specification and the features of different embodiments or examples.

[0145] Although the embodiments of this application have been shown and described above, it can be understood that the above embodiments are exemplary and should not be construed as limiting this application. Those of ordinary skill in the art can make changes, modifications, substitutions, and variations to the above embodiments within the scope of this application.

Claims

1. A blockchain-based mine Internet of Things data management system, characterized in that, Including: Perception layer devices, edge layer devices, transmission layer devices, and application layer devices. The perception layer devices include a memory transmission initiation node and a first memory transmission receiving node. The transmission layer devices include trusted nodes. The application layer devices include a second memory transmission receiving node. Among them, The memory transmission initiation node is used to initiate a memory transmission request; The trusted node is used to send memory transmission data according to the memory transmission request; The first memory transmission receiving node is used to receive the memory transmission data, execute an operation instruction according to the memory transmission data, generate memory execution data, and broadcast the memory execution data; The trusted node is further used to update the memory transmission record data according to the memory execution data; The second memory transmission receiving node is used to record, store, and query the memory transmission data; The memory transmission initiation node includes at least one of an intelligent mining device, an intelligent transportation device, a monitoring and control device, a video analysis device, and a target positioning device. When any of the following conditions is met, it acts as a memory transmission initiation node to initiate a memory transmission: The intelligent mining device determines that it needs to perform an operation regulation operation, a termination operation, or an operation failure is about to occur or has occurred; The intelligent transportation device determines that it needs to perform an operation regulation operation, a termination operation, or an operation failure is about to occur or has occurred; The monitoring and control device determines that the collected data is about to exceed the limit according to the collected data; The video analysis device determines that a regulation behavior has occurred for underground equipment or personnel, or determines that a regulation operation, a termination operation, or an operation failure is about to occur or has occurred for the equipment in the video; The target positioning device determines that a regulation behavior has occurred for underground equipment or personnel, or determines that a regulation operation, a termination operation, or an operation failure is about to occur or has occurred for the equipment in the video.

2. The system according to claim 1, wherein The trusted node is further used to perform node authentication on the memory transmission initiation node; in the case where the node authentication passes, perform a memory rule judgment on the memory transmission request; in the case where the memory rule judgment passes, obtain the memory transmission data.

3. The system according to claim 2, wherein The application layer device further includes a management node. Among them, The trusted node is further used to obtain the network address, physical address, and timestamp of the memory transmission initiation node according to the memory transmission request, as well as encrypted data including the identity information and authentication information of the memory transmission initiation node, and send the encrypted data to the management node, where the encrypted data is encrypted and generated by the memory transmission initiation node according to its own network address, physical address, identity information, and timestamp; The management node is further used to perform identity authentication according to the encrypted data and return an authentication result to the trusted node; The trusted node is further configured to, when the authentication result is passed, obtain the identity information and authentication information of the memory transmission initiating node, and generate authentication comparison information based on the network address, physical address, identity information, and timestamp of the memory transmission initiating node; compare the authentication information of the memory transmission initiating node with the authentication comparison information, and determine that the node authentication of the memory transmission initiating node is passed when the comparison is consistent.

4. The system according to claim 3, wherein The management node is further configured to decrypt the encrypted data to obtain the identity information and authentication information of the memory transmission initiating node; query in its own host management list according to the identity information of the memory transmission initiating node; When the query is successful, generate and send the authentication result to the trusted node, where the authentication result includes the identity information and authentication information of the memory transmission initiating node encrypted by the public key of the trusted node.

5. The system according to claim 2, wherein The trusted node is further configured to obtain a preset data transmission policy; and judge through the memory rule when the memory rule corresponding to the memory transmission request conforms to the preset data transmission policy.

6. The system according to claim 2, wherein The trusted node is further configured to send a memory transmission number and trusted node signature information to the memory transmission initiating node; obtain the memory transmission data fed back by the memory transmission initiating node, where the memory transmission data includes the memory transmission number, the trusted node signature information, and the initiating node signature information.

7. The system according to claim 1, wherein The first memory transmission receiving node is further configured to obtain the trusted node signature information and the initiating node signature information according to the memory transmission data; verify the trusted node signature information and the initiating node signature information; when both verifications pass, execute the operation instruction in the memory transmission data, generate the memory execution data, and broadcast the memory execution data, where the memory execution data includes receiving node signature information.

8. The system according to claim 7, wherein The trusted node is further configured to, when receiving the memory execution data, verify the memory execution data according to the receiving node signature information to generate verification result information; when the verification result information is passed, pack the memory execution data into a block, add it to the blockchain, and generate consensus information; Send the memory execution data and the consensus information to the memory transmission initiating node, and send the verification result information and the consensus information to the first memory transmission receiving node.

9. A blockchain-based method for managing mine Internet of Things data, characterized in that, Comprising: Perception layer devices, edge layer devices, transmission layer devices, and application layer devices. The perception layer devices include a memory transmission initiating node and a first memory transmission receiving node. The transmission layer devices include a trusted node. The application layer devices include a second memory transmission receiving node, where Initiate a memory transfer request through the memory transfer initiating node; Send memory transfer data through the trusted node according to the memory transfer request; Receive the memory transfer data through the first memory transfer receiving node, execute the operation instruction according to the memory transfer data, generate memory execution data, and broadcast the memory execution data; Update the memory transfer record data through the trusted node according to the memory execution data; Record, store, and query the memory transfer data through the second memory transfer receiving node, where The memory transfer initiating node includes at least one of intelligent mining equipment, intelligent transportation equipment, monitoring and control equipment, video analysis equipment, and target positioning equipment. When any of the following conditions is met, it acts as a memory transfer initiating node to initiate a memory transfer: The intelligent mining equipment determines that it needs to execute an operation regulation operation, a termination operation, or an operation failure is about to occur or has occurred; The intelligent transportation equipment determines that it needs to execute an operation regulation operation, a termination operation, or an operation failure is about to occur or has occurred; The monitoring and control equipment determines that the collected data is about to exceed the limit according to the collected data; The video analysis equipment determines that a regulatory behavior has occurred for underground equipment or personnel, or determines that the equipment in the video needs to perform a regulatory operation, a termination operation, or an operation failure is about to occur or has occurred; The target positioning equipment determines that a regulatory behavior has occurred for underground equipment or personnel, or determines that the equipment in the video needs to perform a regulatory operation, a termination operation, or an operation failure is about to occur or has occurred.

Images