A distributed management system for archive information based on blockchain

Abstract

The present invention discloses a distributed archival information management system based on blockchain, relates to the technical field of blockchain, and comprises a monitoring center, wherein the monitoring center is communicatively connected with an archival information collection module, an archival information classification module, an archival information processing module and an archival information management module; the archival information collection module is used to collect personal archival information data of company employees; the archival information classification module is used to perform step-by-step classification on the personal archival information data to obtain step-by-step archival information data; the archival information processing module is used to construct a blockchain node according to the step-by-step archival information data, and to establish an information security smart contract according to the blockchain node; the archival information management module is used to perform archival information management operations on the personal archival information data in the blockchain node according to the information security smart contract; and the security of archival information management is greatly improved.

Description

Technical Field

[0001] The present invention relates to the technical field of blockchain, and in particular to a distributed management system for archive information based on blockchain. Background Art

[0002] With the rapid development of information technology, archives work is gradually realizing the transformation and upgrading of modern archives management with informatization as the core. In order to make better use of archives data resources, various social units are using digital means on a large scale to improve archive storage, processing and data sharing. While the digital archive sharing management model brings convenience to archive management, there are still problems such as digital archives are easy to be tampered with, difficult to recover after tampering and destruction. Some archive information is often tampered with and deleted, which seriously affects the efficiency of archive management, violates the original intention of improving archive reliability, and brings users unnecessary troubles such as the transmission and guidance of wrong information.

[0003] Blockchain is a distributed computing network. Each node in the computing network executes and records the same transactions, which are eventually classified into blocks. Only one block can be added to the network at a time. Each block contains a mathematical proof to ensure that the block added this time is in the same sequence as the blocks already added to the network. In this way, the blockchain "distributed database" can ensure data consistency in all network nodes. Therefore, a distributed archive information management system based on blockchain is now provided. Summary of the invention

[0004] In order to solve the above technical problems, the purpose of the present invention is to provide a distributed management system for archive information based on blockchain.

[0005] In order to achieve the above-mentioned purpose, the present invention provides the following technical solutions:.

[0006] Compared with the prior art, the beneficial effects of the present invention are: the archive information collection module is used to collect personal archive information data of company employees; the archive information classification module is used to classify the personal archive information data into steps to obtain the step archive information data; the archive information processing module is used to construct a blockchain node according to the step archive information data, and obtain an information security smart contract according to the blockchain node; the archive information management module is used to perform archive information management operations on the personal archive information data in the blockchain node according to the information security smart contract; the security of archive information management is greatly improved. BRIEF DESCRIPTION OF THE DRAWINGS

[0007] In order to more clearly illustrate the embodiments of the present application or the technical solutions in the prior art, the drawings required for use in the embodiments will be briefly introduced below. Obviously, the drawings described below are only some embodiments recorded in the present invention. For ordinary technicians in this field, other drawings can also be obtained based on these drawings.

[0008] Figure 1 It is a schematic diagram of the present invention. DETAILED DESCRIPTION

[0009] To make the purpose, technical solution and advantages of the present invention clearer, the technical solution of the present invention will be described in detail below. Obviously, the described embodiments are only part of the embodiments of the present invention, rather than all the embodiments. Based on the embodiments of the present invention, all other implementation methods obtained by ordinary technicians in this field without creative work belong to the scope of protection of the present invention.

[0010] like Figure 1 As shown, a distributed archival information management system based on blockchain includes a monitoring center, wherein the monitoring center includes an archival information collection module, an archival information classification module, an archival information processing module and an archival information management module which are communicatively connected;

[0011] The file information collection module is used to collect personal file information data of company employees;

[0012] The file information classification module is used to classify the personal file information data into different levels to obtain the level file information data;

[0013] The archive information processing module is used to construct a blockchain node according to the ladder archive information data, and obtain an information security smart contract according to the blockchain node;

[0014] The profile information management module is used to perform profile information management operations on personal profile information data in the blockchain node according to the information security smart contract.

[0015] It should be further explained that, in the specific implementation process, the specific process of the profile information collection module collecting personal profile information data includes:

[0016] The profile information collection module is provided with a personal profile information collection unit and a personal profile information sorting unit, and company employees enter personal basic identity data and personal biometric data through the personal profile information collection unit;

[0017] Generate a unique identity token based on the basic personal identity data and personal biometric data;

[0018] The personal profile information sorting unit presets a personal profile information standard format, and standardizes and sorts the obtained personal basic identity data and personal biometric data according to the personal profile information standard format to obtain personal profile information data;

[0019] It should be further explained that the personal profile information data includes name, gender, age, ID number, mobile phone number, position, fingerprint data, face data, and iris data;

[0020] The archive information collection module uploads the collected personal archive information data to the archive information classification module.

[0021] It should be further explained that, in the specific implementation process, the specific process of the profile information classification module classifying the personal profile information data in a step-by-step manner includes:

[0022] It should be further explained that the positions mentioned include ordinary employees, middle management and senior management;

[0023] When the position is ordinary employee, the personal file information data of the company employee who is an ordinary employee is marked as first-level file information data;

[0024] When the position is middle management, the personal file information data of the company employees belonging to the middle management is marked as second-level file information data;

[0025] When the position is senior management, the personal file information data of the company employees belonging to the senior management shall be marked as three-level ladder file information data;

[0026] It should be further explained that the first-level ladder file information data, the second-level ladder file information data and the third-level ladder file information data include corresponding personal file information data and a unique identity token.

[0027] The archive information classification module uploads the obtained ladder archive information data to the archive information processing module.

[0028] It should be further explained that, in the specific implementation process, the specific process of the archive information processing module constructing the blockchain node according to the ladder archive information data includes:

[0029] It should be further explained that the blockchain nodes include primary blockchain nodes, secondary blockchain nodes and tertiary blockchain nodes;

[0030] It should be further explained that, in the specific implementation process, according to the first-level ladder file information data in the ladder file information data, the specific process of constructing the first-level blockchain node includes:

[0031] It should be further explained that the first-level blockchain node includes a first-level core data unit, a first-level security verification unit, and a first-level twin data unit;

[0032] It should be further explained that the first-level core data unit is used to store the first-level ladder archive information data; the first-level twin data unit is used to back up the first-level ladder archive information data of the archive information management operation history of the first-level core data unit in real time; the first-level security verification unit is used to perform access security verification on the second-level blockchain node;

[0033] The obtained first-level ladder archive information data is sent to the first-level core data unit for storage, and the first-level ladder archive information data stored in the first-level core data unit is sent to the first-level twin data unit for backup in real time;

[0034] Build a first-level blockchain node based on the configured first-level core data unit and first-level twin data unit.

[0035] It should be further explained that, in the specific implementation process, according to the secondary ladder file information data in the ladder file information data, the specific process of constructing the secondary blockchain node includes:

[0036] It should be further explained that the secondary blockchain node includes a secondary core data unit, a secondary twin data unit, a secondary security verification unit, and a primary blockchain node access unit;

[0037] It should be further explained that the secondary core data unit is used to store secondary ladder archive information data; the secondary twin data unit is used to back up the secondary ladder archive information data of the archive information management operation history of the secondary core data unit in real time; the secondary security verification unit is used for the security verification of the third-level blockchain node to access the secondary blockchain node; the primary blockchain node access unit is used for the secondary blockchain node to perform data access operations on the primary blockchain;

[0038] The obtained secondary ladder file information data is sent to the secondary core data unit for storage, and the secondary ladder file information data stored in the secondary core data unit is sent to the secondary twin data unit for backup in real time;

[0039] Build a secondary blockchain node based on the configured secondary core data unit and secondary twin data unit.

[0040] It should be further explained that, in the specific implementation process, according to the three-level ladder file information data in the ladder file information data, the specific process of constructing the three-level blockchain node includes:

[0041] It should be further explained that the three-level blockchain node includes a three-level core data unit, a three-level twin data unit, a three-level security verification unit, a three-level blockchain node access unit and a second-level blockchain node access unit;

[0042] It should be further explained that the three-level core data unit is used to store the three-level ladder archive information data; the three-level twin data unit is used to back up the three-level ladder archive information data of the archive information management operation history of the three-level core data unit in real time; the three-level security verification unit is used for security verification of other three-level blockchain nodes accessing the three-level blockchain node; the three-level blockchain node access unit is used for other three-level blockchain nodes to perform data access operations on the three-level blockchain node; the secondary blockchain node access unit is used for the three-level blockchain node to perform data access operations on the secondary blockchain;

[0043] The obtained three-level ladder archive information data is sent to the three-level core data unit for storage, and the three-level ladder archive information data stored in the three-level core data unit is sent to the three-level twin data unit for backup in real time;

[0044] Build a three-level blockchain node based on the configured three-level core data unit and three-level twin data unit;

[0045] It should be further explained that the primary blockchain node is subordinate to the secondary blockchain node, the secondary blockchain node is subordinate to the tertiary blockchain node, and the access of the tertiary blockchain node to the secondary blockchain node and the primary blockchain node needs to be accessed in a progressive chain;

[0046] For example:

[0047] If a third-level blockchain node accesses a first-level blockchain node, the third-level blockchain node must pass the security verification protection of the second-level blockchain node, and then initiate an access request to the first-level blockchain node. After passing the security verification protection of the first-level blockchain node, the first-level blockchain node can be accessed;

[0048] If other third-level blockchain nodes access the first-level blockchain node of the third-level blockchain node, the other third-level blockchain nodes must pass the security verification protection of the third-level blockchain node, and then repeat the above operation to access the first-level blockchain node of the third-level blockchain node;

[0049] It should be further explained that, according to the uniqueness of the first-level ladder file information data, the second-level ladder file information data and the third-level ladder file information data, the first-level blockchain node, the second-level blockchain node and the third-level blockchain node are unique;

[0050] The archive information processing module uploads the obtained blockchain node to the archive information processing module.

[0051] It should be further explained that, in the specific implementation process, the specific process of the archive information processing module obtaining the information security smart contract according to the blockchain node includes:

[0052] Generate an information security smart contract based on the primary security verification unit of the primary blockchain node, the secondary security verification unit of the secondary blockchain node and the primary blockchain node access unit, and the tertiary security verification unit, the tertiary blockchain node access unit and the secondary blockchain node access unit of the tertiary blockchain node;

[0053] It should be further explained that the information security smart contract has encryption and decryption functions, permission management functions, and identity authentication functions;

[0054] The information security smart contract includes a first-level information security smart contract, a second-level information security smart contract and a third-level information security smart contract;

[0055] It should be further explained that the first-level information security smart contract is used for security verification access between the first-level blockchain node and the second-level blockchain node; the second-level information security smart contract is used for security verification access between the second-level blockchain node and the third-level blockchain node; the third-level information security smart contract is used for security verification access between the third-level blockchain node and other third-level blockchain nodes;

[0056] It should be further explained that, in the specific implementation process, the specific process of generating a first-level information security smart contract includes:

[0057] Obtain unique identity tokens for ladder profile information data in primary blockchain nodes and secondary blockchain nodes;

[0058] Encrypt the unique identity token of the primary blockchain node and the unique identity token of the secondary blockchain node by using the ECC asymmetric encryption algorithm (elliptic curve encryption) to obtain a first key pair for the primary blockchain node and a second key pair for the secondary blockchain node, wherein the first key includes a first public key and a first private key; and the second key includes a second public key and a second private key;

[0059] When the secondary blockchain node accesses the primary blockchain node, the primary blockchain node access unit of the secondary blockchain node will encrypt the second public key or the second private key according to the first public key to obtain the first encrypted data, and send the first encrypted data to the primary security verification unit of the primary blockchain node. The primary security verification unit decrypts the first encrypted data according to the first private key to obtain the decrypted second public key or the second private key, thereby realizing the encryption and decryption functions of the primary information security smart contract;

[0060] By authenticating the decrypted second public key or second private key, the identity authentication function of the first-level information security smart contract is realized;

[0061] After completing the identity authentication function, the secondary blockchain node performs archive information management operations on the primary blockchain node to realize the permission management function of the primary information security smart contract.

[0062] It should be further explained that, in the specific implementation process, the specific process of generating a secondary information security smart contract includes:

[0063] Obtain the unique identity token of the ladder file information data in the third-level blockchain node;

[0064] Encrypting the unique identity token of the third-level blockchain node by using the RSA asymmetric encryption algorithm; obtaining a third key pair for the third-level blockchain node, wherein the third key includes a third public key and a third private key;

[0065] When the third-level blockchain node accesses the second-level blockchain node, the second-level blockchain node access unit of the third-level blockchain node will encrypt the third public key or the third private key according to the second public key to obtain the second encrypted data, and send the second encrypted data to the second-level security verification unit of the second-level blockchain node. The second-level security verification unit decrypts the second encrypted data according to the second private key to obtain the decrypted third public key or the third private key, thereby realizing the encryption and decryption functions of the second-level information security smart contract;

[0066] By authenticating the decrypted third public key or third private key, the identity authentication function of the secondary information security smart contract is realized;

[0067] After completing the identity authentication function, the third-level blockchain node performs archive information management operations on the second-level blockchain node to realize the permission management function of the second-level information security smart contract.

[0068] It should be further explained that, in the specific implementation process, the specific process of generating a three-level information security smart contract includes:

[0069] Obtain unique identity tokens for ladder profile information data in other third-level blockchain nodes;

[0070] Encrypt the unique identity tokens of other third-level blockchain nodes through the ElG asymmetric encryption algorithm; obtain a fourth key pair for other third-level blockchain nodes, wherein the fourth key includes a fourth public key and a fourth private key;

[0071] When other third-level blockchain nodes access the third-level blockchain node, the third-level blockchain node access unit of the other third-level blockchain node will encrypt the fourth public key or the fourth private key according to the third public key to obtain third encrypted data, and send the third encrypted data to the third-level security verification unit of the third-level blockchain node. The third-level security verification unit decrypts the third encrypted data according to the third private key to obtain the decrypted fourth public key or the fourth private key, thereby realizing the encryption and decryption functions of the third-level information security smart contract;

[0072] By authenticating the decrypted fourth public key or fourth private key, the identity authentication function of the third-level information security smart contract is realized;

[0073] After completing the identity authentication function, other third-level blockchain nodes perform archive information management operations on the third-level blockchain nodes to realize the permission management function of the third-level information security smart contract;

[0074] The archive information processing module uploads the obtained information security smart contract to the archive information management module.

[0075] It should be further explained that, in the specific implementation process, the specific process of the archive information management module performing archive information management operations on the personal archive information data in the blockchain node according to the information security smart contract includes:

[0076] Set effective access time for the first-level information security smart contract, second-level information security smart contract, and third-level information security smart contract obtained.

[0077] During the effective access time, the profile information management operation performed on the personal profile information data in the blockchain node is recorded as an execution transaction, and the execution transaction includes a first transaction, a second transaction, a third transaction, and a fourth transaction;

[0078] It should be further explained that the first transaction is used to add personal profile information data to the personal profile information data in the blockchain node; the second transaction is used to delete personal profile information data from the personal profile information data in the blockchain node; the third transaction is used to add personal profile information data to the personal profile information data in the blockchain node; the fourth transaction is used to add personal profile information data to the personal profile information data in the blockchain node;

[0079] According to the first-level information security smart contract, the second-level blockchain node executes the first transaction, the second transaction, the third transaction or the fourth transaction on the first-level ladder file information data of the first-level blockchain node, obtains the first-level ladder file information data that completes the execution transaction, and updates the first-level ladder file information data of the first-level core data unit in the first-level blockchain node; sends the first-level ladder file information data before the update to the first-level twin data unit for storage, and the first-level security verification unit records the execution transaction;

[0080] According to the secondary information security smart contract, the third-level blockchain node executes the first transaction, the second transaction, the third transaction or the fourth transaction on the secondary ladder file information data of the secondary blockchain node, obtains the secondary ladder file information data that completes the execution transaction, and updates the secondary ladder file information data of the secondary core data unit in the secondary blockchain node; sends the secondary ladder file information data before the update to the secondary twin data unit for storage, and the secondary security verification unit records the execution transaction;

[0081] According to the three-level information security smart contract, other three-level blockchain nodes execute the first transaction, the second transaction, the third transaction or the fourth transaction on the three-level ladder file information data of the three-level blockchain node, obtain the three-level ladder file information data that completes the execution transaction, and update the three-level ladder file information data of the three-level core data unit in the three-level blockchain node; send the three-level ladder file information data before the update to the three-level twin data unit for storage, and the three-level security verification unit records the execution transaction;

[0082] According to the first-level information security smart contract and the second-level information security smart contract, the third-level blockchain node executes transactions on the first-level blockchain node and the second-level blockchain node;

[0083] According to the first-level information security smart contract, the second-level information security smart contract and the third-level information security smart contract, other third-level blockchain nodes execute transactions on the third-level blockchain nodes and the second-level blockchain nodes and the first-level blockchain nodes belonging to the third-level blockchain nodes.

[0084] The above embodiments are only used to illustrate the technical method of the present invention rather than to limit it. Although the present invention has been described in detail with reference to the preferred embodiments, those skilled in the art should understand that the technical method of the present invention may be modified or replaced by equivalents without departing from the spirit and scope of the technical method of the present invention.

Claims

1. A distributed archival information management system based on blockchain, including a monitoring center, characterized in that: The monitoring center is communicatively connected to an archive information collection module, an archive information classification module, an archive information processing module and an archive information management module; The file information collection module is used to collect personal file information data of company employees; The file information classification module is used to classify the personal file information data into different levels to obtain the level file information data; The archive information processing module is used to construct a blockchain node according to the ladder archive information data, and to establish an information security smart contract according to the blockchain node; The specific process of generating a first-level information security smart contract includes: Obtain unique identity tokens for ladder profile information data in primary blockchain nodes and secondary blockchain nodes; The first-level blockchain node includes a first-level core data unit, a first-level security verification unit, and a first-level twin data unit; The first-level core data unit is used to store the first-level ladder archive information data; the first-level twin data unit is used to back up the first-level ladder archive information data of the archive information management operation history of the first-level core data unit in real time; the first-level security verification unit is used to perform access security verification on the second-level blockchain node; The secondary blockchain node includes a secondary core data unit, a secondary twin data unit, a secondary security verification unit, and a primary blockchain node access unit; The secondary core data unit is used to store secondary ladder archive information data; the secondary twin data unit is used to back up the secondary ladder archive information data of the archive information management operation history of the secondary core data unit in real time; the secondary security verification unit is used for the security verification of the third-level blockchain node to access the secondary blockchain node; the primary blockchain node access unit is used for the secondary blockchain node to perform data access operations on the primary blockchain; Encrypt the unique identity token of the primary blockchain node and the unique identity token of the secondary blockchain node by using an ECC asymmetric encryption algorithm to obtain a first key pair of the primary blockchain node and a second key pair of the secondary blockchain node, wherein the first key includes a first public key and a first private key; and the second key includes a second public key and a second private key; When the secondary blockchain node accesses the primary blockchain node, the primary blockchain node access unit of the secondary blockchain node will encrypt the second public key or the second private key according to the first public key to obtain the first encrypted data, and send the first encrypted data to the primary security verification unit of the primary blockchain node. The primary security verification unit decrypts the first encrypted data according to the first private key to obtain the decrypted second public key or the second private key, thereby realizing the encryption and decryption functions of the primary information security smart contract; By authenticating the decrypted second public key or second private key, the identity authentication function of the first-level information security smart contract is realized; After completing the identity authentication function, the secondary blockchain node performs archive information management operations on the primary blockchain node to realize the permission management function of the primary information security smart contract; The specific process of generating a secondary information security smart contract includes: Obtain the unique identity token of the ladder file information data in the third-level blockchain node; The three-level blockchain node includes a three-level core data unit, a three-level twin data unit, a three-level security verification unit, a three-level blockchain node access unit, and a second-level blockchain node access unit; The third-level core data unit is used to store the third-level ladder archive information data; the third-level twin data unit is used to back up the third-level ladder archive information data of the archive information management operation history of the third-level core data unit in real time; the third-level security verification unit is used for security verification of other third-level blockchain nodes accessing the third-level blockchain node; the third-level blockchain node access unit is used for other third-level blockchain nodes to perform data access operations on the third-level blockchain node; the second-level blockchain node access unit is used for the third-level blockchain node to perform data access operations on the second-level blockchain; Encrypting the unique identity token of the third-level blockchain node by using the RSA asymmetric encryption algorithm; obtaining a third key pair for the third-level blockchain node, wherein the third key includes a third public key and a third private key; When the third-level blockchain node accesses the second-level blockchain node, the second-level blockchain node access unit of the third-level blockchain node will encrypt the third public key or the third private key according to the second public key to obtain the second encrypted data, and send the second encrypted data to the second-level security verification unit of the second-level blockchain node. The second-level security verification unit decrypts the second encrypted data according to the second private key to obtain the decrypted third public key or the third private key, thereby realizing the encryption and decryption functions of the second-level information security smart contract; By authenticating the decrypted third public key or third private key, the identity authentication function of the secondary information security smart contract is realized; After completing the identity authentication function, the third-level blockchain node performs archive information management operations on the second-level blockchain node to realize the permission management function of the second-level information security smart contract; The specific process of generating a three-level information security smart contract includes: Obtain unique identity tokens for ladder profile information data in other third-level blockchain nodes; Encrypt the unique identity tokens of other third-level blockchain nodes through the ElG asymmetric encryption algorithm; obtain a fourth key pair for other third-level blockchain nodes, wherein the fourth key includes a fourth public key and a fourth private key; When other third-level blockchain nodes access the third-level blockchain node, the third-level blockchain node access unit of the other third-level blockchain node will encrypt the fourth public key or the fourth private key according to the third public key to obtain third encrypted data, and send the third encrypted data to the third-level security verification unit of the third-level blockchain node. The third-level security verification unit decrypts the third encrypted data according to the third private key to obtain the decrypted fourth public key or the fourth private key, thereby realizing the encryption and decryption functions of the third-level information security smart contract; By authenticating the decrypted fourth public key or fourth private key, the identity authentication function of the third-level information security smart contract is realized; After completing the identity authentication function, other third-level blockchain nodes perform archive information management operations on the third-level blockchain nodes to realize the permission management function of the third-level information security smart contract; The archive information processing module uploads the obtained information security smart contract to the archive information management module; The profile information management module is used to perform profile information management operations on personal profile information data in the blockchain node according to the information security smart contract.

2. According to the blockchain-based distributed archival information management system of claim 1, it is characterized in that: The process of collecting personal profile information data by the profile information collection module includes: The profile information collection module includes a personal profile information collection unit and a personal profile information sorting unit, and company employees input personal basic identity data and personal biometric data through the personal profile information collection unit; The personal profile information sorting unit presets a personal profile information standard format, and standardizes and sorts the obtained personal basic identity data and personal biometric data according to the personal profile information standard format to obtain personal profile information data, wherein the personal profile information data includes the position.

3. According to claim 2, a distributed archival information management system based on blockchain is characterized in that: The process of the profile information classification module classifying the personal profile information data in stages includes: Generate a unique identity token based on the personal profile information data; the positions include ordinary employees, middle management and senior management; When the position is ordinary employee, the personal file information data of the company employee who is an ordinary employee is marked as first-level file information data; When the position is middle management, the personal file information data of the company employees belonging to the middle management is marked as second-level file information data; When the position is senior management, the personal file information data of the company employees belonging to the senior management shall be marked as three-level ladder file information data; The first-level ladder file information data, the second-level ladder file information data and the third-level ladder file information data include corresponding personal file information data and a unique identity token.

4. According to claim 3, a distributed archival information management system based on blockchain is characterized in that: The process of the archive information management module performing archive information management operations on the personal archive information data in the blockchain node according to the information security smart contract includes: Set effective access time for the obtained first-level information security smart contracts, second-level information security smart contracts, and third-level information security smart contracts; During the effective access time, the profile information management operation performed on the personal profile information data in the blockchain node is recorded as an executed transaction; According to the primary information security smart contract, the secondary blockchain node executes transactions on the primary blockchain node; According to the Level 2 information security smart contract, the Level 3 blockchain node executes transactions on the Level 2 blockchain node; Execute transactions between level 3 blockchain nodes based on level 3 information security smart contracts; According to the first-level information security smart contract and the second-level information security smart contract, the third-level blockchain node executes transactions on the first-level blockchain node; According to the first-level information security smart contract, the second-level information security smart contract and the third-level information security smart contract, the third-level blockchain node executes transactions on the first-level blockchain nodes among other third-level blockchain nodes.

Images