Blockchain-based college archive management system and management method

Abstract

A blockchain-based college archive management system and method, comprising: arranging independent servers one by one corresponding to the major categories of archive management; arranging independent servers one by one corresponding to the secondary teaching and scientific research units of the college; at the same time, arranging independent servers one by one corresponding to each branch campus of the college; these independently arranged servers form full nodes on the blockchain, and each full node is in communication connection with each other; under each full node, a plurality of sub-nodes in communication connection with the full node are arranged, and these sub-nodes are light nodes, which are arranged in the corresponding volume arrangement and archiving unit; effectively avoiding the defects of the prior art that the college archive management lacks information interaction management system between the nodes of the college archives, and the security of the management system access information is not enough.

Description

Technical Field

[0001] This invention relates to the field of higher education archives management technology, specifically to a blockchain-based higher education archives management system and management method. Background Technology

[0002] University archives are specialized institutions for preserving and providing access to university archives, and should possess compliant archive storage facilities and management systems. Archives requiring special preservation conditions or frequently used and possessing a degree of independence may be stored separately in designated rooms, as needed. These branch rooms are essentially sub-branches of the university archives. Personnel responsible for archives work in each department should, in accordance with filing requirements, organize their department's teaching, research, and administrative staff to promptly organize and file archives. The person responsible for filing should systematically organize and file documents according to the natural formation process of both paper and electronic documents, assign page or document numbers, create a file index, and submit it to their department's archives personnel for inspection before transferring it to the university archives.

[0003] Currently, the management of university archives by university archives institutions is mainly based on isolated management systems for individual nodes between departments. There is a lack of an information exchange management system for university archives that connects all nodes, and the security of information access in the management system is insufficient. Summary of the Invention

[0004] To address the aforementioned issues, this invention provides a blockchain-based university archives management system and transmission method, effectively avoiding the shortcomings of existing technologies, such as the lack of interconnected information exchange management systems between various nodes in the management of university archives and insufficient security of access information in the management system.

[0005] To overcome the shortcomings of existing technologies, this invention provides a solution for a university archives management system and transmission method based on blockchain, as detailed below:

[0006] A blockchain-based university records management system includes:

[0007] Deploy separate servers for each major category of records management;

[0008] Each secondary teaching and research unit of the university should be assigned a separate server.

[0009] At the same time, each branch campus of the university also has its own independent server set up;

[0010] These independently configured servers form full nodes on the blockchain, and the full nodes maintain communication connections with each other.

[0011] Under each full node, several child nodes are set up to communicate with that full node. These child nodes are light nodes, and the light nodes are set up in the corresponding filing and archiving unit.

[0012] The light node communicates with the query client.

[0013] The blockchain-based university archives management system includes a user layer, an application layer, a data layer, and a blockchain layer.

[0014] The user layer includes filing and archiving units, archive administrators, and query clients;

[0015] The filing and archiving unit can only create and query archives, and cannot perform operations on user and blockchain node management;

[0016] Archivists can create users, modify user information, delete and assign blockchain accounts, and limit the IP address of each filing and archiving department.

[0017] The query client is for non-filing and archiving units and individuals, and can only query the archive catalog and archives that have passed the confidentiality period;

[0018] The application layer consists of smart contracts, which define the operation permissions of each user layer and establish data exchange with other layers.

[0019] The data layer includes a data processing module and a data operation memory module;

[0020] The data processing module is used to determine and record data for each node according to the same rules of the blockchain; to encrypt and process the archive business data submitted by the node using the node's corresponding public key; and to decrypt the encrypted data submitted by the node on the blockchain using the node's corresponding private key.

[0021] The data operation memory module is used to store the operation processing information of the filing and archiving unit; and to store the corresponding public and private keys of the node where the filing and archiving unit is located.

[0022] The blockchain layer includes an archive block generation module, an archive block storage module, an archive query and utilization module, and an archive block tampering verification module;

[0023] The archive block generation module is used to package the encrypted archive business data submitted by the nodes into corresponding data blocks. This data block includes at least the hash value of the previous data block, the timestamp information of the current data block, the height of the current data block, the encrypted archive business data, the file SHA-256 value of the current encrypted archive business data obtained by using a hash algorithm, the original hash value of the current data block after merging the archive directory, and sends the newly generated data block to each node.

[0024] The archive block tampering verification module is used to ensure the consistency of blockchain data and structure for each node through secondary verification;

[0025] The archive block storage module is used to add data blocks that have passed the sorting order and data integrity and authenticity verification by the archive block tampering verification module to the end of the original blockchain to generate a new blockchain;

[0026] The document query module is used to view and request access to document data.

[0027] A management method for a blockchain-based university records management system, comprising:

[0028] Step 1: For the data block transmitted, the node first verifies whether the hash value of the previous data block carried by the data block is consistent with the hash value of the last data block on the current data chain;

[0029] Step 2: After verifying the data block by sorting order, proceed to the data integrity and authenticity verification. Recalculate the hash value of the business data in the data block and verify whether the recalculated hash value is consistent with the original hash value carried by the data block.

[0030] Step 3: If the order verification fails, return the verification failure information to all nodes, indicating that the data block does not meet the blockchain's order requirements and needs to be regenerated.

[0031] Step 4: If the data integrity and authenticity verification fails, return the verification failure information to all nodes, indicating that the data block has been altered during transmission or generation.

[0032] In step 3, after receiving the message that the sorting order verification failed, the node that sent the data block needs to regenerate and resend it.

[0033] The management method of the blockchain-based university archives management system also includes:

[0034] On the query client, users who have passed identity authentication can view all the archive catalogs on the blockchain. They can submit an application to access archive business data and submit their public key at the same time. Only after the application is approved by the original archiving unit can the blockchain-based university archive management system decrypt, encrypt and transmit the archive business data.

[0035] After receiving approval from the original archiving unit for the user to access the archive data, the system decrypts and restores the data using the private key of the node where the original archiving unit is located, and then encrypts it using the public key of the user requesting access to complete the query and utilization of the archive data.

[0036] Users who fail authentication on a query client can submit a temporary request to a full node. Upon receiving the temporary request, the full node will conduct a manual review. If the temporary request is approved, the full node will assign a public and private key to the query client and notify the full node to allow the query client to view the archive data on that node. The query client then sends the query request encrypted with the public key, along with the public and private keys, to the full node. The full node decrypts the query request encrypted with the public key using the received private key, then encrypts the archive data using the received public key and sends it to the query client. The query client then decrypts the archive data encrypted with the public key using its private key.

[0037] The beneficial effects of this invention are as follows:

[0038] In this invention, for each data block transmitted, the node first verifies whether the hash value of the previous data block carried by the data block is consistent with the hash value of the last data block on the current data chain, thus ensuring the consistency of the data block arrangement order of each node. Data blocks that pass the arrangement order verification then enter the data integrity and authenticity verification process. The hash value of the business data in the data block is recalculated, and it is verified whether the recalculated hash value is consistent with the original hash value carried by the data block. This ensures the integrity of the data during transmission and that it has not been intercepted or tampered with. This effectively avoids the shortcomings of existing technologies where university archives management lacks interconnected information exchange management systems between nodes, and the security of access information by the management system is insufficient. Attached Figure Description

[0039] Figure 1 This is an overall flowchart of the management method of the blockchain-based university archives management system of the present invention. Detailed Implementation

[0040] The present invention will be further described below with reference to the accompanying drawings and embodiments.

[0041] like Figure 1 As shown, the blockchain-based university records management system includes:

[0042] Deploy separate servers for each major category of records management;

[0043] Each secondary teaching and research unit of the university should be assigned a separate server.

[0044] At the same time, each branch campus of the university also has its own independent server set up;

[0045] These independently configured servers form full nodes on the blockchain, and the full nodes maintain communication connections with each other.

[0046] Under each full node, several child nodes are set up to communicate with the full node. These child nodes are light nodes, which only have transaction data nodes related to themselves. The light nodes are set up in the corresponding filing and archiving unit. All filing and archiving units form these light nodes by installing login clients. The IP address of each filing and archiving department or filing unit is limited, which makes it easy to control independently.

[0047] The light node communicates with the query client. The child node can also be a server. The query client can be a PC, PDA, laptop, or smartphone.

[0048] There are at least 12 full nodes on the blockchain. These full nodes possess all the archive blocks that serve as transaction data across the entire network.

[0049] The major categories of archives management are defined in the "Regulations on Archives Management of Institutions of Higher Learning" (Order No. 27 of the Ministry of Education of the People's Republic of China), which divides the scope of document and material filing into 11 major categories.

[0050] The blockchain-based university archives management system includes a user layer, an application layer, a data layer, and a blockchain layer.

[0051] The user layer includes filing and archiving units, archive administrators, and query clients;

[0052] The filing and archiving unit can only create and query archives, and cannot perform operations on user and blockchain node management;

[0053] Archivists can create users, modify user information, delete and assign blockchain accounts, and limit the IP address of each filing and archiving department unit, making it easy to control independently;

[0054] The query client is for non-filing and archiving units and individuals, and can only query the archive catalog and archives that have passed the confidentiality period;

[0055] The application layer consists of smart contracts, which define the operation permissions of each user layer and establish data exchange with other layers.

[0056] The data layer includes a data processing module and a data operation memory module;

[0057] The data processing module is used by each node to determine and record data according to the same rules of the blockchain (identifying the archive storage protocol, transmission protocol, and receiving and parsing protocol based on the actual situation); to encrypt the archive business data submitted by the node for archiving using the node's corresponding public key; and to decrypt the encrypted data submitted by the node on the blockchain using the node's corresponding private key.

[0058] The data operation memory module is used to store the operation processing information of the filing and archiving unit; it stores the corresponding public key and private key of the node where the filing and archiving unit is located; each node has a different public key and private key, but the encryption and decryption algorithms of each node are the same; both the public key and private key can be uniformly stored in a specified full node.

[0059] The blockchain layer includes an archive block generation module, an archive block storage module, an archive query and utilization module, and an archive block tampering verification module;

[0060] The archive block generation module is used to package the encrypted archive business data submitted by the nodes into corresponding data blocks. This data block includes at least the hash value of the previous data block, the timestamp information of the current data block, the height of the current data block, the encrypted archive business data, the file SHA-256 value of the current encrypted archive business data obtained by using a hash algorithm, the original hash value of the current data block after merging the archive directory, and sends the newly generated data block to each node.

[0061] The archive block tampering verification module is used to ensure the consistency of blockchain data and structure for each node through secondary verification;

[0062] The archive block storage module is used to add data blocks that have passed the sorting order and data integrity and authenticity verification by the archive block tampering verification module to the end of the original blockchain to generate a new blockchain;

[0063] The document query module is used to view and request access to document data.

[0064] The blockchain layer has a dedicated module for querying and utilizing archives. On this module, users who have been authenticated can view all archive catalogs on the blockchain, submit applications to access archive business data, and submit their public keys. Only after the application is approved by the original archiving unit can the blockchain archive management system perform the decryption, encryption, and transmission of archive business data.

[0065] When a blockchain-based university archives management system receives an instruction from the original archiving unit to access archive data, it decrypts and restores the data using the private key corresponding to the node where the original archiving unit is located, and then encrypts it again using the public key of the requesting user to complete the query and access of the archive data. Even users without authorization will have their own public and private keys after approval.

[0066] The management methods of a blockchain-based university records management system include:

[0067] Step 1: For each data block transmitted, the node first verifies whether the hash value of the previous data block carried by the data block is consistent with the hash value of the last data block on the current data chain. This ensures the consistency of the data block arrangement order of each node.

[0068] Step 2: After verifying the data blocks by sorting order, proceed to the data integrity and authenticity verification. Recalculate the hash value of the business data in the data block and verify whether the recalculated hash value is consistent with the original hash value carried by the data block. This ensures the integrity of the data during transmission and that it has not been intercepted or tampered with.

[0069] Step 3: If the order verification fails, return the verification failure information to all nodes, indicating that the data block does not meet the blockchain's order requirements and needs to be regenerated.

[0070] Step 4: If the data integrity and authenticity verification fails, return the verification failure information to all nodes, indicating that the data block has been altered during transmission or generation.

[0071] In step 3, after receiving the message that the sorting order verification failed, the node that sent the data block needs to regenerate and resend it.

[0072] The management method of the blockchain-based university archives management system also includes:

[0073] On the query client, users who have passed identity authentication can view all the archive catalogs on the blockchain. They can submit an application to access archive business data and submit their public key at the same time. Only after the application is approved by the original archiving unit can the blockchain-based university archive management system decrypt, encrypt and transmit the archive business data.

[0074] After receiving approval from the original archiving unit for the user to access the archive data, the system decrypts and restores the data using the private key of the node where the original archiving unit is located, and then encrypts it using the public key of the user requesting access to complete the query and utilization of the archive data.

[0075] Users who fail authentication on a query client can submit a temporary request to a full node. Upon receiving this request, the full node will conduct a manual review. If approved, the full node will assign a public and private key to the query client and notify the full node that the client is permitted to view archive data on that node. The query client then sends a query request encrypted with the public key, along with the public and private keys, to the full node. The full node decrypts the query request using the received private key and then encrypts the archive data using the received public key before sending it to the query client. The query client then decrypts the encrypted archive data using its private key. This achieves a balance between security and flexibility.

[0076] The present invention has been described above by way of example. Those skilled in the art should understand that the present disclosure is not limited to the embodiments described above, and various changes, modifications and substitutions can be made without departing from the scope of the present invention.

Claims

1. A management method for a blockchain-based university archives management system, characterized in that, include: Deploy separate servers for each major category of records management; Each secondary teaching and research unit of the university should be assigned a separate server. At the same time, each branch campus of the university also has its own independent server set up; These independently configured servers form full nodes on the blockchain, and the full nodes maintain communication connections with each other. Under each full node, several child nodes are set up to communicate with that full node. These child nodes are light nodes, and the light nodes are set up in the corresponding filing and archiving unit; the light nodes communicate with the query client. The user layer includes filing and archiving units, archive administrators, and query clients; The filing and archiving unit can only create and query archives, and cannot perform operations on user and blockchain node management; the archive administrator can create users, modify user information, delete and assign blockchain accounts, and limit the IP address of each filing and archiving department unit; The query client is for non-filing and archiving units and individuals, and can only query the archive catalog and archives that have passed the confidentiality period; The blockchain layer includes an archive block generation module, an archive block storage module, an archive query and utilization module, and an archive block tampering verification module. The archive block generation module is used to package the encrypted archive business data submitted by the nodes to generate corresponding data blocks. This data block includes at least the hash value of the previous data block, the timestamp information of the current data block, and the height of the current data block. It also includes the encrypted archive business data to be archived, the file SHA-256 value of the current encrypted archive business data obtained by using a hash algorithm, the original hash value of the current data block after merging the archive catalog, and sends the newly generated data block to each node. When a node receives a data block, it first checks whether the hash value of the previous data block carried by the data block is consistent with the hash value of the last data block on the current data chain. Data blocks that have passed the order verification process enter the data integrity and authenticity verification stage. The hash value of the business data in the data block is recalculated, and it is verified whether the recalculated hash value is consistent with the original hash value carried by the data block. If the order verification fails, the verification failure message is returned to all nodes, indicating that the data block does not meet the blockchain's order requirements and needs to be regenerated. If the data integrity and authenticity verification fails, the verification failure information is returned to all nodes, indicating that the data block has been altered during transmission or generation. A user who fails authentication on a query client can submit a temporary request to a full node. Upon receiving the temporary request, the full node performs a manual review. If the temporary request is approved, the full node assigns a public and private key to the query client and notifies the full node that the query client is allowed to view the archive data on that node. The query client then sends a query request encrypted with the public key, along with the public and private keys, to the full node. The full node decrypts the query request encrypted with the public key using the received private key, then encrypts the archive data using the received public key and sends it to the query client. Finally, the query client decrypts the archive data encrypted with the public key using its private key.

2. The management method of the university archives management system based on blockchain according to claim 1, characterized in that, The blockchain-based university archives management system includes a user layer, an application layer, a data layer, and a blockchain layer. The application layer consists of smart contracts, which define the operation permissions of each user layer and establish data exchange with other layers. The data layer includes a data processing module and a data operation memory module; The data processing module is used to determine and record data for each node according to the same rules of the blockchain; to encrypt and process the archive business data submitted by the node using the node's corresponding public key; and to decrypt the encrypted data submitted by the node on the blockchain using the node's corresponding private key. The data operation memory module is used to store the operation processing information of the filing and archiving unit; and to store the corresponding public and private keys of the node where the filing and archiving unit is located. The archive block tampering verification module is used to ensure the consistency of blockchain data and structure for each node through secondary verification. The archive block storage module is used to add data blocks that have passed the sorting order and data integrity and authenticity verification by the archive block tampering verification module to the end of the original blockchain to generate a new blockchain; The document query module is used to view and request access to document data.

3. The management method of the university archives management system based on blockchain according to claim 1, characterized in that, The management method of the blockchain-based university archives management system also includes: On the query client, users who have passed identity authentication can view all the archive catalogs on the blockchain. They can submit an application to access archive business data and submit their public key at the same time. Only after the application is approved by the original archiving unit can the blockchain-based university archive management system decrypt, encrypt and transmit the archive business data.

4. The management method of the university archives management system based on blockchain according to claim 3, characterized in that, After receiving approval from the original archiving unit to allow the applicant to access the archive data, the system decrypts and restores the data using the private key corresponding to the node where the original archiving unit is located, and then encrypts it using the applicant's public key to complete the query and utilization of the archive data.

5. The management method of the university archives management system based on blockchain according to claim 1, characterized in that, If the permutation order verification fails, the node that sent the data block needs to regenerate and resend it after receiving the permutation order verification failure information.

Images