A trusted GIS map construction method and device based on blockchain

Abstract

The present invention proposes a method and device for constructing a trusted GIS map based on blockchain, which relates to the field of data security. Based on the trust, decentralization and automation characteristics of blockchain combined with a distributed storage system, it provides basic support for the construction of a GIS map, builds a distributed trusted architecture, realizes multi-user real-time distributed trusted identity authentication, realizes data intelligent encryption, and realizes distributed trusted data storage. The consensus mechanism based on blockchain technology ensures strict data synchronization, avoids data inconsistency problems, realizes secure mutual trust sharing, data encryption, and complete data storage, solves the problem of association between original data and updated data in data update in GIS map, solves the problems that need to be solved in data collection, data storage, data sharing, and data update in GIS map, and improves the security of GIS map in the application process.

Description

Technical Field

[0001] The present invention relates to the field of data security, and in particular to a blockchain-based trusted GIS one-picture construction method and a trusted GIS one-picture construction device. Background Art

[0002] With the continuous advancement of technologies such as the Internet of Things, cloud computing, big data, and artificial intelligence, "smart mines" have developed rapidly. Smart mines are built on the basis of mine automation, informatization, and digitalization. They are not only the forefront of mining technology innovation, but also a reliable guarantee for the sustainable development of the mining industry.

[0003] As one of the fastest-growing high-tech technologies in the construction of "smart mines", GIS (Geographic Information System) has become an important means for quickly acquiring, accurately querying, effectively analyzing and managing information in many fields. As an innovative application of GIS technology, GIS One Map is an information platform based on GIS technology to solve problems such as data collection, storage, sharing and updating. GIS One Map is the basis for carrying out mining work and serves as a base support in the development of smart mines. The data information it contains is the center of all mining work, matching and correcting, and is an inevitable trend in the development of smart mines.

[0004] Through the GIS one-picture platform, the spatial information of mines becomes more intuitive and visual, and can serve the mine supervision department's production verification, cross-border mining identification and other safety production management issues. Mine GIS information belongs to the category of basic geographic information, which is information that needs to be kept confidential at the national and production mine levels. In addition, the actual application of GIS one-picture in mines has gradually exposed some problems, such as: frequent data inconsistencies; data is easy to be tampered with, and the authenticity of the data is difficult to guarantee; data information islands are serious, and data fusion and sharing are difficult; data security control is weak, and data security is difficult to guarantee.

[0005] How to build a new trusted GIS map to achieve data consistency during the collection process, ensure the authenticity of data storage, prevent the leakage of thematic graphics, avoid conflicts in data version updates, and share data safely and effectively is a technical problem that needs to be solved at present. Summary of the invention

[0006] In view of the above problems, the present invention proposes a trusted GIS one-map construction method and a trusted GIS one-map construction device based on blockchain.

[0007] The embodiment of the present invention provides a method for constructing a trusted GIS map based on blockchain, and the method for constructing a trusted GIS map includes:

[0008] Use the user's operation permissions as a decision point to build a permission decision tree;

[0009] Designing a user authority smart contract based on the authority decision tree to store the authority decision tree in the blockchain so that the user's operation authority is credible;

[0010] Design a distributed trusted authentication smart contract, which is used to implement multi-user real-time distributed trusted identity authentication when multiple users simultaneously store or access a GIS map;

[0011] According to the layers and confidentiality levels of the GIS one-picture data, training, testing and verifying the confidentiality classification model to ensure the security of the GIS one-picture data;

[0012] Based on the confidentiality classification model, all GIS one-map data are intelligently encrypted to generate ciphertext and store the key;

[0013] Store the encrypted GIS map data into the distributed storage system of the blockchain and return the stored index;

[0014] Design a GIS one-map distributed trusted storage smart contract, which stores the index and the key in the blockchain, so that all participants in the blockchain can jointly ensure the credibility of the GIS one-map data;

[0015] An access control list is constructed based on the encrypted GIS one map data, and the access control list is stored in the blockchain through the GIS one map distributed trusted storage smart contract, so that the GIS one map data is distributed and trustedly stored through the target storage mode;

[0016] Based on the user's operation authority, request and obtain the GIS one-map data;

[0017] Among them, the target mode refers to storing the encrypted GIS map data in the distributed storage system of the blockchain, and storing the index, the key, and the access control list in the blockchain.

[0018] Optionally, before constructing the authority decision tree, the trusted GIS one-map construction method further includes:

[0019] Deploy blockchain clients and IPFS clients in distributed cloud servers, use P2P networking mode to build blockchain ecological network and distributed storage system, combine the trust, decentralization and automation characteristics of blockchain with the distributed storage system to provide basic support for the construction of a trusted GIS map based on blockchain, so that the GIS map data can realize data collection, data storage, data sharing and data update.

[0020] Optionally, the user's operation permissions are used as a decision tree to build a permission decision tree, including:

[0021] According to the corresponding layers of geodesy, production, communication and defense, electromechanical, safety, emergency, and monitoring in the GIS map, determine the user department to which each layer belongs and the role of each user in the department and the corresponding operation authority requirements, where each layer includes multiple sub-layers, and the operation authority requirements include reading, writing, modifying, and deleting;

[0022] Based on user roles and permission operation permission requirements, the permission decision tree is constructed, wherein each node of the permission decision tree represents a user or a user group, and the connection between nodes represents the permission relationship, including layers, layer-related attribute information, and operation permissions, and the root node of the permission decision tree represents the highest permission, and the leaf nodes represent the permissions of each user.

[0023] Optionally, a user permission smart contract is designed based on the permission decision tree to store the permission decision tree in a blockchain, including:

[0024] According to the structure of the permission decision tree, the basic framework of the user permission smart contract is designed, and the contract parameters are set. According to the permission settings in the permission decision tree, corresponding parameters are set for the user permission smart contract, including the user's identity information, permission level, and operation scope, so that the parameters can accurately reflect the permission relationship in the permission decision tree;

[0025] Various permission operations are defined in the user permission smart contract, and the permission operations correspond to the nodes and connection relationships in the permission decision tree. The user permission smart contract can parse and process the nodes and connection relationships in the permission decision tree, and can handle abnormal situations that occur, so that the user permission smart contract can correctly handle abnormal situations and give corresponding prompts or error messages. The abnormal situations include: unauthorized users and insufficient permissions;

[0026] Using smart contract programming language, the designed data structure and function method are converted into actual smart contract code to implement the logic of the user permission smart contract, wherein the implementation logic includes: traversing the permission decision tree, judging the user's permission, and performing corresponding operations. When the user attempts to perform layer and attribute modification operations, the user permission smart contract automatically checks whether the user has the permission to perform the operation by traversing the permission decision tree and checking the user's permissions;

[0027] Test the user rights smart contract to ensure that it can correctly parse and process various situations in the rights decision tree, and optimize and improve the user rights smart contract based on the test results to improve its performance and security;

[0028] Deploy the user rights smart contract to the blockchain platform and ensure its normal operation, and regularly review and update the user rights smart contract to adapt to changes in business needs and security standards.

[0029] Optionally, according to the layers and confidentiality levels of the GIS map data, training, testing and validating the confidentiality classification model includes:

[0030] A portion of the original GIS one-map data is selected, and according to the layers and confidentiality levels of the portion of the original GIS one-map data, a multi-class classification SVM machine learning algorithm or a deep learning algorithm is used for training, so that the confidentiality classification model learns the method of classifying the data by confidentiality level;

[0031] After the training, another part of the original GIS map data is selected for testing to detect the classification effect of the classification model;

[0032] For all original GIS one-map data, the tested classification level is used for verification to determine the accuracy and generalization ability of the classification level model.

[0033] Optionally, all GIS one-map data is intelligently encrypted based on the confidentiality classification model, ciphertext is generated and the key is stored, including:

[0034] Based on the classification model, the classification result of each layer is determined for all GIS map data;

[0035] According to the confidentiality result, determine the encryption algorithm corresponding to each layer, wherein the higher the confidentiality level of the layer, the higher the confidentiality result;

[0036] Each layer is encrypted using its own corresponding encryption algorithm, the ciphertext corresponding to each layer is generated and the corresponding key is stored;

[0037] The confidentiality results include: first-level confidentiality results, second-level confidentiality results, and third-level confidentiality results; according to the confidentiality results, the encryption algorithm corresponding to each layer is determined, including:

[0038] If the target layer is a first-level encryption result, determine the elliptic curve encryption algorithm corresponding to the target layer;

[0039] If the target layer is a level 2 encryption result, determine the homomorphic encryption algorithm corresponding to the target layer;

[0040] If the target layer is a level three confidentiality result, determine the hash encryption algorithm corresponding to the target layer.

[0041] Optionally, design a GIS one-map distributed trusted storage smart contract, including:

[0042] According to the characteristics of the type, format, and access frequency of the GIS one-map data, a data storage structure with time and spatial coordinate information as the primary key index is designed and stored in the geographic information spatial database, and the layer slices are stored in the distributed file system, so that the data can be stored on the blockchain in an efficient and secure manner, which is convenient for realizing the functions and performance requirements required by the GIS one-map distributed trusted storage smart contract;

[0043] Define the code logic of the GIS one map distributed trusted storage smart contract for managing the GIS one map data storage and access rules, so as to implement the storage and access logic of GIS one map data in the GIS one map distributed trusted storage smart contract, including defining the data storage format, access interface and related authority verification logic;

[0044] Integrate encryption and hash functions in the GIS one-map distributed trusted storage smart contract, encrypt and store data, and use hash functions to verify the integrity of the data to ensure the confidentiality and integrity of the data;

[0045] Design the data update and version control logic in the GIS one map distributed trusted storage smart contract, which includes defining the rules for data update and recording the historical versions of data to ensure the consistency and traceability of data. When a user requests to access or update the GIS one map data, the GIS one map distributed trusted storage contract will be triggered and execute the corresponding logic.

[0046] Deploy the written GIS one map distributed trusted storage smart contract to the blockchain and test it to ensure that the GIS one map distributed trusted storage smart contract can be executed correctly and meet the expected functional and performance requirements;

[0047] The running status of the GIS one-map distributed trusted storage smart contract is continuously monitored to ensure that it works normally and handles abnormal situations in a timely manner. At the same time, the GIS one-map distributed trusted storage smart contract is maintained and updated according to actual needs.

[0048] Optionally, based on the operation authority of the user, requesting and obtaining the GIS one-map data includes:

[0049] Based on the access control list and the distributed trusted authentication smart contract, multiple users request to obtain a piece of map data of the target GIS;

[0050] The distributed trusted authentication smart contract verifies the request to verify whether each user has the authority to obtain the target GIS map data;

[0051] If the user does not have the permission, the user's request will be rejected and the rejection information will be fed back;

[0052] If the user has the authority, the target GIS map data will be fed back to the user with the authority.

[0053] Optionally, feeding back the target GIS one-map data to a user with authority includes:

[0054] According to the request, determine the index corresponding to the target GIS map data;

[0055] According to the index, searching and returning the ciphertext and the corresponding key of the target GIS map data in the distributed storage system;

[0056] The corresponding key is used to decrypt the ciphertext of the target GIS one-picture data to obtain the target GIS one-picture data.

[0057] In a second aspect, an embodiment of the present invention provides a trusted GIS one-picture construction device based on blockchain, and the trusted GIS one-picture construction device includes:

[0058] Build a decision tree module, which is used to build a permission decision tree based on the user's operation permissions;

[0059] A permission contract design module is used to design a user permission smart contract based on the permission decision tree, so as to store the permission decision tree in the blockchain so as to make the user's operation permission credible;

[0060] Design an authentication contract module for designing a distributed trusted authentication smart contract, which is used to implement multi-user real-time distributed trusted identity authentication when multiple users simultaneously store or access a GIS map;

[0061] A training model module is used to train, test and verify the confidentiality classification model according to the layers and confidentiality levels of the GIS one-picture data, so as to ensure the security of the GIS one-picture data;

[0062] An encryption module is used to intelligently encrypt all GIS one-map data based on the confidentiality classification model, generate ciphertext and store keys;

[0063] The storage index module is used to store the encrypted GIS map data into the distributed storage system of the blockchain and return the stored index;

[0064] Design a storage contract module for designing a GIS one-map distributed trusted storage smart contract, which stores the index and the key in the blockchain to ensure the trustworthiness of the GIS one-map data through all participants in the blockchain;

[0065] A list module is used to construct an access control list based on the encrypted GIS one map data, and store the access control list in the blockchain through the GIS one map distributed trusted storage smart contract, so as to enable distributed trusted storage of GIS one map data through a target storage mode;

[0066] A data request module, used to request and obtain the GIS one-map data based on the user's operation authority;

[0067] Among them, the target mode refers to storing the encrypted GIS map data in the distributed storage system of the blockchain, and storing the index, the key, and the access control list in the blockchain.

[0068] The blockchain-based trusted GIS one-map construction method provided by the present invention takes the user's operating authority as a decision and constructs a permission decision tree; a user authority smart contract is designed based on the permission decision tree to store the permission decision tree in the blockchain, so that the user's operating authority is credible.

[0069] Design a distributed trusted authentication smart contract. Design a distributed trusted authentication smart contract to realize multi-user real-time distributed trusted identity authentication when multiple users simultaneously store or access GIS one-map data; train, test and verify the confidentiality classification model according to the layers and confidentiality level of GIS one-map data to make GIS one-map data secure.

[0070] Based on the confidentiality classification model, all GIS one-map data are intelligently encrypted to generate ciphertext and store keys; the encrypted GIS one-map data is stored in the distributed storage system of the blockchain and the stored index is returned; a GIS one-map distributed trusted storage smart contract is designed, which stores the index and key in the blockchain to ensure the credibility of the GIS one-map data through all participants in the blockchain.

[0071] An access control list is constructed based on the encrypted GIS one map data, and the access control list is stored in the blockchain through the GIS one map distributed trusted storage smart contract, so that the GIS one map data can be distributed and trusted through the target storage mode; based on the user's operating permissions, GIS one map data is requested and obtained; wherein the target mode refers to the distributed storage system that stores the encrypted GIS one map data in the blockchain, and the storage mode that stores the index, key, and access control list in the blockchain.

[0072] The method for constructing a trusted GIS map based on blockchain proposed in the present invention creatively utilizes the characteristics of blockchain technology such as centralization, data immutability, high security, traceability, and data sharing, and provides a new solution to the problems existing in the application of GIS map in mines.

[0073] The identity and authority of visitors are verified through multi-user distributed trusted identity authentication and GIS one-map distributed trusted access, and the consensus mechanism based on blockchain technology ensures strict synchronization of data among participants, avoids data inconsistency and data version conflicts, and thus realizes safe, mutual trust sharing and interaction of data.

[0074] Intelligent encryption technology encrypts sensitive data and data with privacy requirements in GIS one map to ensure data security; and securely stores encrypted data through distributed trusted storage of GIS one map data, and uses the tamper-proof feature of blockchain technology to ensure the credibility of GIS one map data stored on the chain.

[0075] Distributed trusted storage of GIS one-map data can store the historical data, current data and log data of GIS one-map completely, solving the problem of associating original data and updated data in data update of GIS one-map. It ensures strict data synchronization and avoids data inconsistency problems, realizes safe and trustworthy data sharing, data encryption and complete data storage, solves the problem of associating original data and updated data in data update of GIS one-map, solves the problems that need to be solved in data collection, data storage, data sharing and data update of GIS one-map, and improves the security of GIS one-map in the application process. BRIEF DESCRIPTION OF THE DRAWINGS

[0076] Various other advantages and benefits will become apparent to those of ordinary skill in the art by reading the detailed description of the preferred embodiments below. The accompanying drawings are only for the purpose of illustrating the preferred embodiments and are not to be considered as limiting the present invention. Moreover, the same reference symbols are used throughout the accompanying drawings to represent the same components. In the accompanying drawings:

[0077] Figure 1 This is a flowchart of a method for constructing a trusted GIS map based on blockchain in an embodiment of the present invention;

[0078] Figure 2 is a schematic diagram of a distributed trusted architecture diagram in an embodiment of the present invention;

[0079] Figure 3 This is a flowchart of implementing a multi-user distributed trusted authentication mechanism in an embodiment of the present invention;

[0080] Figure 4 This is a diagram of a method for realizing intelligent encryption of GIS data in one picture in an embodiment of the present invention;

[0081] Figure 5 This is a diagram for implementing a distributed trusted storage method for GIS one-picture data in an embodiment of the present invention;

[0082] Figure 6 It is a diagram for implementing a distributed trusted access method for GIS one-map data in an embodiment of the present invention. DETAILED DESCRIPTION

[0083] In order to make the above-mentioned purposes, features and advantages of the present invention more obvious and easy to understand, the present invention is further described in detail below in conjunction with the accompanying drawings and specific embodiments. It should be understood that the specific embodiments described herein are only used to explain the present invention, are only part of the embodiments of the present invention, not all of the embodiments, and are not used to limit the present invention.

[0084] A trusted GIS map construction method based on blockchain in an embodiment of the present invention, referring to Figure 1 The flowchart shown includes:

[0085] Step 101: Build a permission decision tree based on the user's operation permissions.

[0086] Since the method proposed in the present invention needs to utilize blockchain, before implementing the method proposed in the present invention, it is necessary to first build a blockchain system and a distributed storage system. The preferred construction methods include:

[0087] Deploy blockchain clients and IPFS (InterPlanetary FileSystem) clients in distributed cloud servers. IPFS is a peer-to-peer distributed file system that can permanently and decentralizedly save and share files. It can be used as the storage layer of blockchain technology to process large amounts of data and achieve faster and safer data storage and transmission. P2P peer-to-peer network: P2P, or Peer to Peer, is often called a peer-to-peer network. Compared with the traditional Client-Server network model, the P2P network has no central server, all nodes in the network are equal, and data is transmitted to each other. Each node in the P2P network can act as a client and server to request or provide services to other nodes, thereby improving the security and reliability of the network. Blockchain technology is based on the P2P network, where all participants are peer nodes and data is distributed throughout the network.

[0088] Reference Figure 2 The structural diagram shown uses the P2P networking model to build a blockchain ecological network and distributed storage system, combining the trust, decentralization and automation characteristics of blockchain with the distributed storage system to provide basic support for the construction of a trusted GIS map based on blockchain, so that GIS one map data can realize data collection, data storage, data sharing and data update.

[0089] After the blockchain system and distributed storage system are built, the user's operation permissions can be used as a decision to build a permission decision tree. A better method of building a permission decision tree based on the user's operation permissions includes:

[0090] First, according to the corresponding layers of surveying, production, communication and defense, electromechanical, safety, emergency, and monitoring in a GIS map, determine the user department to which each layer belongs and the role of each user in the department and the corresponding operation permission requirements. Each layer includes multiple sub-layers, and the operation permission requirements include but are not limited to reading, writing, modifying, deleting, etc.

[0091] Then, based on user roles and permission operation permission requirements, a permission decision tree is constructed, where each node of the permission decision tree represents a user or a user group, and the connection between nodes represents the permission relationship, including layers, layer-related attribute information, and operation permissions. The root node of the permission decision tree represents the highest permission, and the leaf nodes represent the permissions of each user.

[0092] Step 102: Design a user permission smart contract based on the permission decision tree to store the permission decision tree in the blockchain so that the user's operation permissions are credible.

[0093] After the permission decision tree is completed, the user permission smart contract is designed based on the permission decision tree to store the permission decision tree in the blockchain so that the user's operation permissions are credible. The better methods include:

[0094] Step S1: First, according to the structure of the permission decision tree, design the basic framework of the user permission smart contract, set the contract parameters, and set the corresponding parameters for the user permission smart contract according to the permission settings in the permission decision tree, including the user's identity information, permission level, operation scope, etc., so that these parameters can accurately reflect the permission relationship in the permission decision tree.

[0095] Step S2: various permission operations are defined in the user permission smart contract, which correspond to the nodes and connection relationships in the permission decision tree, and the user permission smart contract can parse and process the nodes and connection relationships in the permission decision tree, and can handle abnormal situations that arise, so that the user permission smart contract can correctly handle abnormal situations and give corresponding prompts or error messages. Abnormal situations include: unauthorized user, insufficient authority, etc.

[0096] Step S3: Use the smart contract programming language to convert the designed data structure and function method into actual smart contract code to implement the logic of the user permission smart contract, where the implementation logic includes: traversing the permission decision tree, judging user permissions, and performing corresponding operations. When the user tries to perform layer and attribute modification operations, the user permission smart contract automatically checks whether the user has the permission to perform the operation by traversing the permission decision tree and checking the permissions the user has.

[0097] Step S4: Test the user permission smart contract to ensure that it can correctly parse and handle various situations in the permission decision tree. According to the test results, optimize and improve the user permission smart contract to improve its performance and security.

[0098] Step S5: Deploy the user rights smart contract to the blockchain platform and ensure that it can operate normally. Regularly review and update the user rights smart contract to adapt to changes in business needs and security standards.

[0099] Step 103: Design a distributed trusted authentication smart contract. Design a distributed trusted authentication smart contract to implement multi-user real-time distributed trusted identity authentication when multiple users simultaneously store or access a GIS map data.

[0100] After the user authority smart contract is designed and stored, a distributed trusted authentication smart contract is designed. The distributed trusted authentication smart contract is used to realize multi-user real-time distributed trusted identity authentication when multiple users store or access a GIS map data at the same time.

[0101] The process of steps 102 and 103 can refer to Figure 3 The multi-user distributed trusted authentication mechanism implementation flow chart shown in the figure is summarized. The mechanism includes user rights, user rights smart contracts and distributed trusted authentication smart contracts. User rights are responsible for constructing a permission decision tree for user operation rights; user rights smart contracts can add, query and update user rights; distributed trusted authentication smart contracts can query user rights and return corresponding user operation permissions.

[0102] Step 104: According to the layers and confidentiality levels of the GIS one-map data, train, test, and verify the confidentiality classification model to ensure that the GIS one-map data is secure.

[0103] In order to ensure the data security of GIS one-map data, it is necessary to train, test and verify the confidentiality classification model according to the layers and confidentiality level of GIS one-map data, so that GIS one-map data has security. The better methods include:

[0104] A portion of the original GIS one-map data is selected, and according to the layers and confidentiality levels of the portion of the original GIS one-map data, a multi-class classification SVM machine learning algorithm or a deep learning algorithm is used for training, so that the confidentiality classification model learns how to classify the data.

[0105] After the training, another part of the original GIS one-map data is selected for testing to detect the classification effect of the classification model; finally, all the original GIS one-map data are verified using the tested classification to determine the accuracy and generalization ability of the classification model.

[0106] Step 105: Intelligently encrypt all GIS map data based on the confidentiality classification model, generate ciphertext and store the key.

[0107] After obtaining the classification model, it is necessary to intelligently encrypt all GIS data based on the classification model, generate ciphertext and store the key. The better methods include:

[0108] Based on the confidentiality classification model, the confidentiality results of each layer are determined for all GIS map data; then, according to the confidentiality results, the encryption algorithm corresponding to each layer is determined, where the higher the confidentiality of the layer, the higher the confidentiality result, and the confidentiality results can include: first-level confidentiality results, second-level confidentiality results, and third-level confidentiality results. Finally, each layer is encrypted using its corresponding encryption algorithm to generate the corresponding ciphertext of each layer and store the corresponding key;

[0109] Among them, according to the confidentiality level results, the encryption algorithm corresponding to each layer is determined, including:

[0110] If the target layer is a level 1 confidentiality result, then determine the elliptic curve encryption algorithm corresponding to the target layer; if the target layer is a level 2 confidentiality result, then determine the homomorphic encryption algorithm corresponding to the target layer; if the target layer is a level 3 confidentiality result, then determine the hash encryption algorithm corresponding to the target layer.

[0111] It should be noted that the above-mentioned confidentiality results and their corresponding encryption algorithms are only used as examples for better explanation and illustration. In actual applications, multiple confidentiality results and the encryption algorithms corresponding to each confidentiality result can be determined according to actual needs. Generally speaking, the higher the security of the encryption algorithm, the lower the efficiency of encrypting each layer, and the lower the security of the encryption algorithm, the higher the efficiency of encrypting each layer.

[0112] Step 106: Store the encrypted GIS map data in the distributed storage system of the blockchain and return the stored index.

[0113] After encrypting the GIS map data, the encrypted GIS map data is stored in the distributed storage system of the blockchain and the stored index is returned.

[0114] The above process can refer to Figure 4 The diagram shows an overview of the implementation method of the GIS one-map data intelligent encryption technology: the GIS one-map data confidentiality classification model is obtained according to the layers and confidentiality levels of the original GIS one-map data, specifically including training the GIS one-map data confidentiality classification model, testing the GIS one-map data confidentiality classification model and verifying the GIS one-map data confidentiality classification model; GIS one-map data encryption is responsible for selecting encryption algorithms for GIS one-map data of different confidentiality levels, generating ciphertext and storage keys.

[0115] Step 107: Design a GIS one-map distributed trusted storage smart contract, which stores the index and the key in the blockchain to ensure the credibility of the GIS one-map data through all participants in the blockchain.

[0116] After the GIS one-map data is encrypted and stored, it is also necessary to design a GIS one-map distributed trusted storage smart contract, which stores the index and key in the blockchain to ensure the credibility of the GIS one-map data through all participants in the blockchain. A better method for designing a GIS one-map distributed trusted storage smart contract includes:

[0117] Step T1: According to the characteristics of the type, format, and access frequency of GIS one-map data, a data storage structure with time and spatial coordinate information as the primary key index is designed and stored in the geographic information spatial database, and the layer slices are stored in the distributed file system, so that the data can be stored on the blockchain in an efficient and secure manner, which is convenient for realizing the functions and performance requirements of the GIS one-map distributed trusted storage smart contract;

[0118] Step T2: define the code logic of the GIS one map distributed trusted storage smart contract for managing the GIS one map data storage and access rules, so as to implement the storage and access logic of GIS one map data in the GIS one map distributed trusted storage smart contract, which includes defining the data storage format, access interface and related authority verification logic;

[0119] Step T3: Integrate encryption and hash functions in the GIS one-map distributed trusted storage smart contract, encrypt and store the data, and use hash functions to verify the integrity of the data to ensure the confidentiality and integrity of the data;

[0120] Step T4: Design the data update and version control logic in the GIS one map distributed trusted storage smart contract, which includes defining the rules for data update and recording the historical versions of data to ensure the consistency and traceability of data. When a user requests to access or update the GIS one map data, the GIS one map distributed trusted storage contract will be triggered and execute the corresponding logic.

[0121] Step T5: Deploy the written GIS one map distributed trusted storage smart contract to the blockchain and test it to ensure that the GIS one map distributed trusted storage smart contract can be executed correctly and meet the expected functional and performance requirements;

[0122] Step T6: Continuously monitor the running status of the GIS one-map distributed trusted storage smart contract to ensure that it works normally and handles abnormal situations in a timely manner. At the same time, maintain and update the GIS one-map distributed trusted storage smart contract according to actual needs.

[0123] Step 108: Construct an access control list based on the encrypted GIS one map data, and store the access control list in the blockchain through the GIS one map distributed trusted storage smart contract, so as to enable distributed and trusted storage of GIS one map data through the target storage mode, wherein the target mode refers to the distributed storage system that stores the encrypted GIS one map data in the blockchain, and the storage mode that stores the index, key, and access control list in the blockchain.

[0124] After the GIS one map distributed trusted storage smart contract is designed, an access control list is constructed with the encrypted GIS one map data as the main body, and the access control list is stored in the blockchain through the GIS one map distributed trusted storage smart contract, so that the GIS one map data can be distributed and trusted through the target storage mode. Among them, the target mode refers to the distributed storage system that stores the encrypted GIS one map data in the blockchain, and the storage mode that stores the index, key, and access control list in the blockchain.

[0125] The above process can refer to Figure 5 The distributed trusted storage method implementation diagram of GIS one map data is shown in the figure for overview: the distributed trusted storage method adopts the "on-chain-off-chain" storage mode. The "on-chain-off-chain" storage mode is divided into two parts: blockchain (on-chain) and distributed storage system (off-chain). Off-chain storage of GIS one map ciphertext data and return indexes are implemented; on-chain, the ciphertext index and key storage and the access control list built with GIS one map data as the main body are stored on the blockchain through the designed GIS one map distributed trusted storage smart contract.

[0126] Step 109: Based on the user's operating authority, request and obtain GIS map data.

[0127] Through the above 8 steps, GIS one-map data is combined with blockchain system and distributed storage system. During the user's use, based on the user's operation authority, GIS one-map data can be requested and obtained. The better way is:

[0128] Multiple users request to obtain the target GIS map data based on the access control list and distributed trusted authentication smart contract; then the distributed trusted authentication smart contract verifies the request to verify whether each user has the authority to obtain the target GIS map data.

[0129] If the user does not have the authority, the user's request is directly rejected and the rejection information is fed back; if the user has the authority, the target GIS one-map data is fed back to the user with the authority. Among them, the better methods of feeding back the target GIS one-map data to the user with the authority include:

[0130] First, according to the request, the index corresponding to the target GIS one-map data is determined; then, according to the index, the ciphertext and corresponding key of the target GIS one-map data are searched and returned in the distributed storage system; finally, the ciphertext of the target GIS one-map data is decrypted using the corresponding key to obtain the target GIS one-map data.

[0131] The above process can refer to Figure 6The distributed trusted access method implementation diagram of GIS one map data is summarized as shown in the figure: the distributed trusted access method of GIS one map data is implemented based on a distributed trusted operation architecture and a multi-user distributed trusted authentication mechanism. Among them, the distribution of the distributed trusted access method of GIS one map data is guaranteed to be trusted based on the distributed trusted operation architecture; the multi-user distributed trusted authentication mechanism verifies the accessor requesting GIS one map data. The qualified person accesses the blockchain system and the distributed storage system through the GIS one map data access method in the GIS one map distributed storage smart contract to obtain the encrypted GIS one map data and key. The original GIS one map data is obtained after decryption by the key.

[0132] On the basis of the blockchain-based trusted GIS one-picture construction method, the embodiment of the present invention further proposes a blockchain-based trusted GIS one-picture construction device, the trusted GIS one-picture construction device comprising:

[0133] Build a decision tree module, which is used to build a permission decision tree based on the user's operation permissions;

[0134] A permission contract design module is used to design a user permission smart contract based on the permission decision tree, so as to store the permission decision tree in the blockchain so as to make the user's operation permission credible;

[0135] Design an authentication contract module for designing a distributed trusted authentication smart contract, which is used to implement multi-user real-time distributed trusted identity authentication when multiple users simultaneously store or access a GIS map;

[0136] A training model module is used to train, test and verify the confidentiality classification model according to the layers and confidentiality levels of the GIS one-picture data, so as to ensure the security of the GIS one-picture data;

[0137] An encryption module is used to intelligently encrypt all GIS one-map data based on the confidentiality classification model, generate ciphertext and store keys;

[0138] The storage index module is used to store the encrypted GIS map data into the distributed storage system of the blockchain and return the stored index;

[0139] Design a storage contract module, which is used to design a GIS one-map distributed trusted storage smart contract, which stores the index and the key in the blockchain, so as to ensure the credibility of the GIS one-map data through all participants in the blockchain;

[0140] A list module is used to construct an access control list based on the encrypted GIS one map data, and store the access control list in the blockchain through the GIS one map distributed trusted storage smart contract, so as to enable distributed trusted storage of the GIS one map data through a target storage mode, wherein the target mode refers to a distributed storage system that stores the encrypted GIS one map data in the blockchain, and a storage mode that stores the index, the key, and the access control list in the blockchain;

[0141] The data request module is used to request and obtain the GIS one-map data based on the user's operation authority.

[0142] Each of the above modules corresponds to a method for implementing the above steps 101 to 109 , which can be understood in conjunction with the above description and will not be described in detail.

[0143] In summary, the method for constructing a trusted GIS map based on blockchain proposed in the present invention creatively utilizes the characteristics of blockchain technology such as centralization, data immutability, high security, traceability, and data sharing, and provides a new solution to the problems existing in the application of GIS map in mines.

[0144] The identity and authority of visitors are verified through multi-user distributed trusted identity authentication and GIS one-map distributed trusted access, and the consensus mechanism based on blockchain technology ensures strict synchronization of data among participants, avoids data inconsistency and data version conflicts, and thus realizes safe, mutual trust sharing and interaction of data.

[0145] Intelligent encryption technology encrypts sensitive data and data with privacy requirements in GIS one map to ensure data security; and securely stores encrypted data through distributed trusted storage of GIS one map data, and uses the tamper-proof feature of blockchain technology to ensure the credibility of GIS one map data stored on the chain.

[0146] Distributed trusted storage of GIS one-map data can store the historical data, current data and log data of GIS one-map completely, solving the problem of associating original data and updated data in data update of GIS one-map. It ensures strict data synchronization and avoids data inconsistency problems, realizes safe and trustworthy data sharing, data encryption and complete data storage, solves the problem of associating original data and updated data in data update of GIS one-map, solves the problems that need to be solved in data collection, data storage, data sharing and data update of GIS one-map, and improves the security of GIS one-map in the application process.

[0147] Although the preferred embodiments of the present invention have been described, those skilled in the art may make additional changes and modifications to these embodiments once they have learned the basic creative concept. Therefore, the appended claims are intended to be interpreted as including the preferred embodiments and all changes and modifications that fall within the scope of the embodiments of the present invention.

[0148] Finally, it should be noted that, in this article, relational terms such as first and second, etc. are only used to distinguish one entity or operation from another entity or operation, and do not necessarily require or imply any such actual relationship or order between these entities or operations. Moreover, the terms "include", "comprise" or any other variants thereof are intended to cover non-exclusive inclusion, so that a process, method, article or terminal device including a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, method, article or terminal device. In the absence of further restrictions, the elements defined by the sentence "comprise a ..." do not exclude the existence of other identical elements in the process, method, article or terminal device including the elements.

[0149] The embodiments of the present invention are described above in conjunction with the accompanying drawings, but the present invention is not limited to the above-mentioned specific implementation modes, which are merely illustrative rather than restrictive. Under the guidance of the present invention, ordinary technicians in this field can also make many forms without departing from the scope of protection of the present invention and the claims, all of which are within the protection of the present invention.

Claims

1. A method for constructing a trusted GIS map based on blockchain, characterized in that: The method for constructing a trusted GIS map includes: Use the user's operation permissions as a decision point to build a permission decision tree; Designing a user authority smart contract based on the authority decision tree to store the authority decision tree in the blockchain so that the user's operation authority is credible; Design a distributed trusted authentication smart contract, which is used to implement multi-user real-time distributed trusted identity authentication when multiple users simultaneously store or access a GIS map; According to the layers and confidentiality levels of the GIS one-picture data, training, testing and verifying the confidentiality classification model to ensure the security of the GIS one-picture data; Based on the confidentiality classification model, all GIS one-map data is intelligently encrypted to generate ciphertext and store the key; Store the encrypted GIS map data into the distributed storage system of the blockchain and return the stored index; Design a GIS one-map distributed trusted storage smart contract, which stores the index and the key in the blockchain, so that all participants in the blockchain can jointly ensure the credibility of the GIS one-map data; An access control list is constructed based on the encrypted GIS one map data, and the access control list is stored in the blockchain through the GIS one map distributed trusted storage smart contract, so that the GIS one map data is distributed and trustedly stored through the target storage mode; Based on the user's operation authority, request and obtain the GIS one-map data; The target storage mode refers to a storage mode in which the encrypted GIS map data is stored in a distributed storage system of a blockchain, and the index, the key, and the access control list are stored in the blockchain; According to the characteristics of the type, format, and access frequency of the GIS one-map data, a data storage structure with time and spatial coordinate information as the primary key index is designed and stored in the geographic information spatial database, and the layer slices are stored in the distributed file system, so that the data can be stored on the blockchain in an efficient and secure manner, which is convenient for realizing the functions and performance requirements required by the GIS one-map distributed trusted storage smart contract; Define the code logic of the GIS one map distributed trusted storage smart contract for managing the GIS one map data storage and access rules, so as to implement the storage and access logic of GIS one map data in the GIS one map distributed trusted storage smart contract, including defining the data storage format, access interface and related authority verification logic; Integrate encryption and hash functions in the GIS one-map distributed trusted storage smart contract, encrypt and store data, and use hash functions to verify the integrity of the data to ensure the confidentiality and integrity of the data; Design the data update and version control logic in the GIS one map distributed trusted storage smart contract, which includes defining the rules for data update and recording the historical versions of data to ensure the consistency and traceability of data. When a user requests to access or update the GIS one map data, the GIS one map distributed trusted storage contract will be triggered and execute the corresponding logic. Deploy the written GIS one map distributed trusted storage smart contract to the blockchain and test it to ensure that the GIS one map distributed trusted storage smart contract can be executed correctly and meet the expected functional and performance requirements; The running status of the GIS one-map distributed trusted storage smart contract is continuously monitored to ensure that it works normally and handles abnormal situations in a timely manner. At the same time, the GIS one-map distributed trusted storage smart contract is maintained and updated according to actual needs.

2. The method for constructing a trusted GIS map according to claim 1, characterized in that: Before constructing the authority decision tree, the trusted GIS one-picture construction method further includes: Deploy blockchain clients and IPFS clients in distributed cloud servers, use P2P networking mode to build blockchain ecological network and distributed storage system, combine the trust, decentralization and automation characteristics of blockchain with the distributed storage system to provide basic support for the construction of a trusted GIS map based on blockchain, so that the GIS map data can realize data collection, data storage, data sharing and data update.

3. The method for constructing a trusted GIS map according to claim 1, characterized in that: Based on the user's operation permissions, a permission decision tree is constructed, including: According to the corresponding layers of geodesy, production, communication and defense, electromechanical, safety, emergency, and monitoring in the GIS map, determine the user department to which each layer belongs and the role of each user in the department and the corresponding operation authority requirements, where each layer includes multiple sub-layers, and the operation authority requirements include reading, writing, modifying, and deleting; Based on user roles and permission operation permission requirements, the permission decision tree is constructed, wherein each node of the permission decision tree represents a user or a user group, and the connection between nodes represents the permission relationship, including layers, layer-related attribute information, and operation permissions, and the root node of the permission decision tree represents the highest permission, and the leaf nodes represent the permissions of each user.

4. The method for constructing a trusted GIS map according to claim 1, characterized in that: Designing a user permission smart contract based on the permission decision tree to store the permission decision tree in the blockchain includes: According to the structure of the permission decision tree, the basic framework of the user permission smart contract is designed, and the contract parameters are set. According to the permission settings in the permission decision tree, corresponding parameters are set for the user permission smart contract, including the user's identity information, permission level, and operation scope, so that the parameters can accurately reflect the permission relationship in the permission decision tree; Various permission operations are defined in the user permission smart contract, and the permission operations correspond to the nodes and connection relationships in the permission decision tree. The user permission smart contract can parse and process the nodes and connection relationships in the permission decision tree, and can handle abnormal situations that occur, so that the user permission smart contract can correctly handle abnormal situations and give corresponding prompts or error messages. The abnormal situations include: unauthorized users and insufficient permissions; Using smart contract programming language, the designed data structure and function method are converted into actual smart contract code to implement the logic of the user permission smart contract, wherein the implementation logic includes: traversing the permission decision tree, judging the user's permission, and performing corresponding operations. When the user attempts to perform layer and attribute modification operations, the user permission smart contract automatically checks whether the user has the permission to perform the operation by traversing the permission decision tree and checking the user's permissions; Test the user rights smart contract to ensure that it can correctly parse and process various situations in the rights decision tree, and optimize and improve the user rights smart contract based on the test results to improve its performance and security; Deploy the user rights smart contract to the blockchain platform and ensure its normal operation, and regularly review and update the user rights smart contract to adapt to changes in business needs and security standards.

5. The method for constructing a trusted GIS map according to claim 1, characterized in that: According to the layers and confidentiality levels of the GIS data, the confidentiality classification model is trained, tested and verified, including: A portion of the original GIS one-map data is selected, and according to the layers and confidentiality levels of the portion of the original GIS one-map data, a multi-class classification SVM machine learning algorithm or a deep learning algorithm is used for training, so that the confidentiality classification model learns the method of classifying the data by confidentiality level; After the training, another part of the original GIS map data is selected for testing to detect the classification effect of the classification model; For all original GIS one-map data, the tested classification level is used for verification to determine the accuracy and generalization ability of the classification level model.

6. The method for constructing a trusted GIS map according to claim 1, characterized in that: Based on the confidentiality classification model, all GIS one-map data is intelligently encrypted, ciphertext is generated and keys are stored, including: Based on the classification model, the classification result of each layer is determined for all GIS map data; According to the confidentiality result, determine the encryption algorithm corresponding to each layer, wherein the higher the confidentiality level of the layer, the higher the confidentiality result; Each layer is encrypted using its own corresponding encryption algorithm, the ciphertext corresponding to each layer is generated and the corresponding key is stored; The confidentiality results include: first-level confidentiality results, second-level confidentiality results, and third-level confidentiality results; according to the confidentiality results, the encryption algorithm corresponding to each layer is determined, including: If the target layer is a first-level encryption result, determine the elliptic curve encryption algorithm corresponding to the target layer; If the target layer is a level 2 encryption result, determine the homomorphic encryption algorithm corresponding to the target layer; If the target layer is a level three confidentiality result, determine the hash encryption algorithm corresponding to the target layer.

7. The method for constructing a trusted GIS map according to claim 1, characterized in that: Based on the user's operation authority, request and obtain the GIS one-map data, including: Based on the access control list and the distributed trusted authentication smart contract, multiple users request to obtain a piece of map data of the target GIS; The distributed trusted authentication smart contract verifies the request to verify whether each user has the authority to obtain the target GIS map data; If the user does not have the permission, the user's request will be rejected and the rejection information will be fed back; If the user has the authority, the target GIS map data will be fed back to the user with the authority.

8. The method for constructing a trusted GIS map according to claim 7, characterized in that: Feedback the target GIS map data to the authorized user, including: According to the request, determine the index corresponding to the target GIS map data; According to the index, searching and returning the ciphertext and the corresponding key of the target GIS map data in the distributed storage system; The corresponding key is used to decrypt the ciphertext of the target GIS one-picture data to obtain the target GIS one-picture data.

9. A trusted GIS one-picture construction device based on blockchain, characterized in that: The credible GIS one-picture construction device comprises: Build a decision tree module, which is used to build a permission decision tree based on the user's operation permissions; A permission contract design module is used to design a user permission smart contract based on the permission decision tree, so as to store the permission decision tree in the blockchain so as to make the user's operation permission credible; Design an authentication contract module for designing a distributed trusted authentication smart contract, which is used to implement multi-user real-time distributed trusted identity authentication when multiple users simultaneously store or access a GIS map; A training model module is used to train, test and verify the confidentiality classification model according to the layers and confidentiality levels of the GIS one-picture data, so as to ensure the security of the GIS one-picture data; An encryption module is used to intelligently encrypt all GIS one-map data based on the confidentiality classification model, generate ciphertext and store keys; The storage index module is used to store the encrypted GIS map data into the distributed storage system of the blockchain and return the stored index; Design a storage contract module, which is used to design a GIS one-map distributed trusted storage smart contract, which stores the index and the key in the blockchain, so as to ensure the credibility of the GIS one-map data through all participants in the blockchain; A list module is used to construct an access control list based on the encrypted GIS one map data, and store the access control list in the blockchain through the GIS one map distributed trusted storage smart contract, so as to enable distributed trusted storage of GIS one map data through a target storage mode; A data request module, used to request and obtain the GIS one-map data based on the user's operation authority; The target storage mode refers to a storage mode in which the encrypted GIS map data is stored in a distributed storage system of a blockchain, and the index, the key, and the access control list are stored in the blockchain; The storage contract design module is specifically used to design a data storage structure with time and spatial coordinate information as the primary key index according to the characteristics of the type, format, and access frequency of the GIS one-map data, store it in the geographic information spatial database, and slice the layers and store them in the distributed file system, so that the data can be stored on the blockchain in an efficient and secure manner, which is convenient for realizing the functions and performance requirements required by the GIS one-map distributed trusted storage smart contract; define the code logic of the GIS one-map distributed trusted storage smart contract for managing the GIS one-map data storage and access rules, so as to realize the storage and access logic of GIS one-map data in the GIS one-map distributed trusted storage smart contract, which includes defining the data storage format, access interface and related permission verification logic; integrate encryption and hash functions in the GIS one-map distributed trusted storage smart contract, encrypt and store the data, and Use hash functions to verify data integrity to ensure data confidentiality and integrity; design data update and version control logic in the GIS one map distributed trusted storage smart contract, which includes defining data update rules and recording historical versions of data to ensure data consistency and traceability, and when a user requests to access or update the GIS one map data, the GIS one map distributed trusted storage contract will be triggered and execute the corresponding logic; deploy the written GIS one map distributed trusted storage smart contract to the blockchain and test it so that the GIS one map distributed trusted storage smart contract can be executed correctly and meet the expected functional and performance requirements; continuously monitor the running status of the GIS one map distributed trusted storage smart contract to ensure that it works normally and handles abnormal situations in a timely manner, and at the same time, maintain and update the GIS one map distributed trusted storage smart contract according to actual needs.

Images