A bill data integrity verification system and method

Abstract

The present invention relates to the field of data verification technology, and specifically to a bill data integrity verification system and method, the system comprising: a data hash processing module constructs a hash value of the data content based on the acquired bill data, calculates the time interval between each data item and its timestamp, associates the hash value and timestamp with a unique identifier, and generates a data integrity identifier. In the present invention, by inserting redundant data and monitoring errors in transmission in real time, it helps to improve the accuracy and stability of data transmission. The analysis of the distribution and fluctuation range of errors enables the system to dynamically adjust redundant data according to the actual transmission environment, reduces the probability of data loss, and ensures reliable transmission of data in complex environments. The verification mechanism is generated by a random number sequence to ensure continuous verification of the data stream, accurately detect error blocks in data transmission, and enhance the flexibility and efficiency of data verification.

Description

Technical Field

[0001] The present invention relates to the technical field of data verification, and in particular to a bill data integrity verification system and method. Background Art

[0002] The field of data verification technology uses multiple technologies such as checksums, hash functions, digital signatures or encryption algorithms to detect whether data has been tampered with or damaged during storage or transmission. In addition, data verification technology also involves implementing access control and using security protocols to protect data from unauthorized access and tampering. In industries with high risks and extremely high requirements for data accuracy, such as banking and finance, healthcare, and government agencies, it supports compliance audits, risk management, and data governance.

[0003] Among them, the bill data integrity verification system is a system specifically used to protect the integrity of bill data during processing and transmission. The system implements data verification protocols to prevent unauthorized modification of data during electronic bill exchange, financial transaction processing and archiving. It usually includes the use of digital signature technology to confirm that the data has not been tampered with, and the application of encryption measures to protect the privacy of data.

[0004] In the existing technology, although digital signatures and encryption technologies are used to ensure that data is not tampered with and privacy is protected in terms of integrity verification of bill data, it is difficult to effectively monitor the distribution characteristics of errors when errors occur during transmission, and it is also difficult to dynamically adjust data redundancy according to actual transmission conditions, resulting in an increased risk of data loss or damage in high-interference environments. In addition, the existing system is prone to inefficiency in the transmission of large amounts of data. In terms of data tampering detection, it is difficult to effectively intercept and respond to tampering in the early stages, which can easily lead to greater security risks. Summary of the invention

[0005] The purpose of the present invention is to solve the shortcomings existing in the prior art and to propose a bill data integrity verification system and method.

[0006] In order to achieve the above-mentioned purpose, the present invention adopts the following technical scheme: A bill data integrity verification system comprises:

[0007] The data hash processing module constructs a hash value of the data content based on the acquired ticket data, calculates the time interval between each data item and its timestamp, associates the hash value and timestamp with a unique identifier, and generates a data integrity identifier;

[0008] The predictive error correction coding module inserts redundant data into the bill information based on the data integrity identifier, monitors the transmission errors in the data stream in real time, calculates the probability value of each character being lost during the transmission process, analyzes the uniformity and fluctuation range of the error distribution, adjusts the redundant data, and generates a dynamic error correction data stream;

[0009] The random audit verification module generates a random number sequence based on the dynamic error correction data stream, re-verifies the verification mark of the data block, compares the expected and current verification results, calculates the ratio of the data blocks with inconsistent verification results to the total data blocks, and forms a data integrity analysis result;

[0010] The tampering response processing module marks the data blocks with hash value differences as suspected tampering according to the data integrity analysis results, restricts access rights, updates the hash value and index information, and generates a security processing result.

[0011] As a further solution of the present invention, the step of obtaining the data integrity identifier is specifically as follows:

[0012] Based on the acquired bill data, the text and numbers on the bill are interpreted and the extracted data content is classified and sorted, including the date, amount, multiple key information of the payee and the unique identifier of each bill, to generate a data hash value;

[0013] Based on the data hash value, each data item and its timestamp are calculated to identify the time pattern of data input, and abnormal pattern monitoring of data input is performed to obtain data input pattern analysis results;

[0014] Based on the data input pattern analysis result, the hash value, timestamp and unique identifier of each data item are associated and stored in a data table, a bidirectional index relationship between the hash table and the data table is established, and a data integrity identifier is generated.

[0015] As a further solution of the present invention, the step of obtaining the probability value of each character being lost during transmission is specifically as follows:

[0016] According to the data integrity identifier, character frequency and position information during transmission are analyzed to determine the position in the data where errors are prone to occur, and redundant data is inserted to generate real-time monitoring information of transmission errors;

[0017] Based on the real-time monitoring information of the transmission errors, the number of transmission errors, the number of delays and the frequency of occurrence of each character are recorded, using the formula:

[0018] ,

[0019] Calculate the probability of missing the i-th character , get the loss probability analysis result;

[0020] in, is the number of transmission errors of the i-th character, is the number of transmission delays for the ith character, is the frequency of occurrence of the i-th character, Indicates the total number of times character i is transmitted during the entire transmission process. are weight coefficients, which are used to adjust the influence ratio of the number of transmission errors, the number of delays and the frequency of character occurrence on the loss probability;

[0021] Based on the loss probability analysis result, the number of errors and the positions of characters in the transmission data packet are counted, and the distribution of errors in the transmission is analyzed in combination with the loss probability to generate a transmission error information analysis result.

[0022] As a further solution of the present invention, the step of obtaining the fluctuation range of the analysis error distribution is specifically:

[0023] Based on the transmission error information analysis result, the transmission characteristics of each character are analyzed using the formula:

[0024] ,

[0025] Calculate the range of the error distribution , generate fluctuation range information;

[0026] in, Representing characters The time delay from the sender to the receiver during the transmission process, Indicates that the character The number of times it was resent. is the average probability of loss of all characters, is the total number of characters, which indicates the total number of characters that appear during the transmission;

[0027] Based on the fluctuation range information, the insertion of redundant data is readjusted, the change of the data stream is dynamically monitored, and adjustments are made to generate a dynamic error correction data stream.

[0028] As a further solution of the present invention, the step of obtaining the comparison expected and current verification results is specifically as follows:

[0029] Based on the dynamic error correction data stream, a random number sequence is generated, the position of the data block to be audited is determined, and the position information of the data block to be audited is obtained;

[0030] Based on the position information of the data block to be audited, the verification identifiers of the receiving end and the sending end are compared, and the verification identifier of each data block is re-verified to obtain a verification identifier verification result;

[0031] Based on the verification result of the verification mark, the formula is adopted:

[0032] ,

[0033] Calculate the data block checksum inconsistency ratio , generate difference ratio information of data block verification;

[0034] in, Indicates the number of inconsistent data blocks found after verification. is the audit frequency, is the transmission delay, is the data block size, is the total number of audit data blocks.

[0035] As a further solution of the present invention, the step of obtaining the number of occurrences of the statistical verification difference is specifically:

[0036] Based on the difference ratio information of the data block verification, the formula is adopted:

[0037] ,

[0038] Calculate the total number of checksum differences , generate integrated verification difference analysis results;

[0039] in, Indicates the number of data blocks in the entire audit process. It is The number of checksums for each data block, It is The number of differences between data blocks indicates the The number of differences detected during the verification process for each data block, express and The number of data blocks for both series;

[0040] Based on the integrated verification difference analysis result, the original verification mark and the transmitted verification mark are compared, and the difference of each data block is analyzed step by step to generate a data integrity analysis result.

[0041] As a further solution of the present invention, the step of obtaining the updated hash value and index information is specifically as follows:

[0042] Based on the result of the data integrity analysis, the hash value of each data block is reallocated and compared with the original value, the data blocks with inconsistent hash values ​​are identified, and the data blocks are marked as suspected tampering, and a list of suspected tampering data blocks is generated;

[0043] Based on the suspected tampered data block list, the formula is used:

[0044] ,

[0045] Calculating the quantified severity of data tampering , generating a severity indicator of data tampering;

[0046] in, Used to measure the proportion of suspected tampered data blocks, is the number of data blocks marked as suspected of tampering, is the total number of data blocks;

[0047] Based on the severity index of the data tampering, the access rights of the suspected tampered data blocks are restricted, the unique identifier and timestamp of each data block are recorded, and the hash value and index information are updated to generate a security processing result.

[0048] A method for verifying the integrity of bill data, which is performed based on the above-mentioned bill data integrity verification system, comprises the following steps:

[0049] S1: Based on the acquired ticket data, read the content and associate the timestamp for each data item, input the combination of the content and timestamp of each data item into the hash process, and generate a unique hash value for each combination;

[0050] S2: according to the unique hash value of each combination, associating the hash value with the corresponding timestamp and unique identifier to form a data integrity identifier;

[0051] S3: Based on the data integrity identifier, redundant data is added to the ticket information, and the data stream is monitored in real time, errors in data transmission and the probability of loss of each character are recorded and analyzed, and a dynamic error correction data stream is generated;

[0052] S4: Based on the dynamic error correction data stream, a random number sequence is generated to select a data block that needs to be re-verified, a verification mark is checked on the selected data block, and the expected and current performance of the verification result are compared to form a data integrity analysis result;

[0053] S5: Based on the data integrity analysis result, identify and mark the data blocks with hash value differences, perform access restrictions on these data blocks, update the hash value and index information, and generate a security processing result.

[0054] Compared with the prior art, the advantages and positive effects of the present invention are:

[0055] In the present invention, inserting redundant data and monitoring errors in transmission in real time helps to improve the accuracy and stability of data transmission. The analysis of the distribution and fluctuation range of errors enables the system to dynamically adjust redundant data according to the actual transmission environment, reducing the probability of data loss and ensuring reliable transmission of data in complex environments. The verification mechanism is generated by a random number sequence to ensure continuous verification of the data stream, accurately detect error blocks in data transmission, and enhance the flexibility and efficiency of data verification. The access restriction and security processing of suspected tampered data blocks further enhance the data's responsiveness when tampered with, preventing damage to the system and users caused by malicious tampering of data. The security of bill data in each link of transmission, storage and processing has been comprehensively improved. BRIEF DESCRIPTION OF THE DRAWINGS

[0056] Figure 1 is a system flow chart of the present invention;

[0057] Figure 2 A flowchart of the steps for obtaining the data integrity identifier of the present invention;

[0058] Figure 3 A flow chart of the steps for obtaining the probability value of each character being lost during transmission according to the present invention;

[0059] Figure 4 A flow chart of the steps for obtaining the fluctuation range of error distribution analysis of the present invention;

[0060] Figure 5 A flowchart of the steps for obtaining the comparison between the expected and current verification results of the present invention;

[0061] Figure 6 A flow chart of the steps for obtaining the number of occurrences of statistical verification differences according to the present invention;

[0062] Figure 7 A flowchart of the steps for updating the hash value and index information of the present invention. DETAILED DESCRIPTION

[0063] In order to make the purpose, technical solution and advantages of the present invention more clearly understood, the present invention is further described in detail below in conjunction with the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are only used to explain the present invention and are not intended to limit the present invention.

[0064] In the description of the present invention, it should be understood that the terms "length", "width", "up", "down", "front", "back", "left", "right", "vertical", "horizontal", "top", "bottom", "inside", "outside" and the like indicate positions or positional relationships based on the positions or positional relationships shown in the drawings, and are only for the convenience of describing the present invention and simplifying the description, rather than indicating or implying that the device or element referred to must have a specific orientation, be constructed and operated in a specific orientation, and therefore cannot be understood as limiting the present invention. In addition, in the description of the present invention, "multiple" means two or more, unless otherwise clearly and specifically defined.

[0065] See also Figure 1 The present invention provides a technical solution: a bill data integrity verification system comprising:

[0066] The data hash processing module extracts the data content and unique identifier based on the acquired ticket data, constructs the hash value of the data content, calculates the time interval between each data item and its timestamp to prevent abnormal data input patterns, associates the hash value and timestamp with the unique identifier, stores the data content and user signature in the data table, and generates a data integrity identifier;

[0067] The predictive error correction coding module uses the character frequency and position information in the transmission process based on the data integrity identifier, inserts redundant data into the ticket information, monitors the transmission errors in the data stream in real time, calculates the probability value of each character being lost in the transmission process, counts the number and position of transmission errors, analyzes the fluctuation range of error distribution, adjusts redundant data according to the error distribution characteristics, and generates a dynamic error correction data stream;

[0068] The random audit verification module generates a random number sequence based on the dynamic error correction data stream to determine the location of the data block to be audited, re-verifies the verification mark of the data block, compares the expected and current verification results, calculates the ratio of data blocks with inconsistent verification results to the total data blocks, to assist in determining the location of the data block that needs to be tampered with, counts the number of occurrences of verification differences, and the information of the difference data blocks, and forms the data integrity analysis results;

[0069] The tampering response processing module marks the data blocks with hash value differences as suspected tampering based on the data integrity analysis results, quantifies the severity of the data tampering, restricts access rights, records the unique identifier and timestamp of the data block, updates the hash value and index information, and generates a security processing result;

[0070] The data integrity identification includes the associated data hash value, the combination of data content and user signature, timestamp information, and the unique identifier associated with it. The dynamic error correction data stream includes the added redundant data type, error correction parameters automatically adjusted according to the error distribution, and error statistics used for monitoring. The data integrity analysis results include the recalculated data block hash value, the data block information with inconsistent hash values, and the location and content details of these data blocks. The security processing results include the identification information of the marked suspected tampered data blocks, the access restriction measures taken, and the updated hash value and index information.

[0071] See also Figure 2 , the specific steps for obtaining the data integrity identifier are:

[0072] Based on the acquired bill data, the text and numbers on the bill are interpreted and the extracted data content is classified and sorted, including the date, amount, multiple key information of the payee and the unique identifier of each bill, to generate a data hash value;

[0073] The process of acquiring bill data involves extracting digital information from various bills after scanning. This process usually includes OCR (optical character recognition) technology to automatically interpret the text and numbers on the bill, which is then classified and organized by the data extraction module. The extracted data content includes but is not limited to key information such as date, amount, payee, and unique identifiers for each bill, such as serial numbers or specific QR code information. These unique identifiers are assigned by the internal system when the bill is generated to ensure the traceability of each bill in subsequent processing. The extracted data content and unique identifiers are used to construct the hash value of the bill data. The hash value is calculated using a specific hash function, such as SHA-256, to ensure that any slight data change will result in a significant change in the hash value, so that any unauthorized modification of the data can be effectively detected during the data verification stage.

[0074] Based on the data hash value, each data item and its timestamp are calculated to identify the time pattern of data input, and abnormal pattern monitoring of data input is performed to obtain data input pattern analysis results;

[0075] For calculation of each data item and its timestamp, the formula is: ,in, is the time interval between the ith data item and the previous data item, is the timestamp of the ith data item, is the timestamp of the i-1th data item;

[0076] like and ,but Minutes. Usually obtained by synchronizing the server time or using the Network Time Protocol (NTP). By statistically analyzing the time intervals between consecutive ticket inputs, the regularity or abnormality of the input time can be found. For example, if It is significantly lower than other time periods, which may indicate that there is batch processing of bills during this period. The results show that the calculation and analysis of time intervals can effectively monitor and identify preliminary abnormal patterns of data input.

[0077] Based on the data input pattern analysis results, the hash value, timestamp and unique identifier of each data item are associated and stored in the data table, a bidirectional index relationship between the hash table and the data table is established, and a data integrity identifier is generated;

[0078] Associate hash values ​​and timestamps with unique identifiers. The association step includes matching and storing the hash value of each data item with its corresponding timestamp and unique identifier to ensure the integrity and traceability of each data item in the data table. The associated data is managed through a database using database software such as MySQL or Oracle. These data are then used to generate an overall data integrity identifier, which is generated through a specific algorithm such as a Merkle tree structure. Each node represents the hash value of a single data item, which is aggregated layer by layer to ultimately form a root hash value. The root hash value serves as an identifier of data integrity, and it combines the hash values ​​of all data items. Any change in data will result in a change in the root hash value, thereby providing a verification mechanism when data is accessed or exchanged.

[0079] See also Figure 3 , the specific steps for calculating the probability value of each character being lost during transmission are:

[0080] According to the data integrity mark, the character frequency and position information in the transmission process are analyzed to determine the position in the data where errors are prone to occur, and redundant data is inserted to generate real-time monitoring information of transmission errors;

[0081] First, it is necessary to analyze the frequency and position information of characters in the transmission process. The character frequency is obtained by scanning the transmitted data stream character by character and counting the number of times the characters appear. By analyzing the various characters in the bill information, the system can track the frequency and distribution of each character in the transmission process in real time. At the same time, the position information of the characters is achieved by marking each character with a unique serial number. The generation of the serial number is based on the order of data packet transmission, and the position of the character is recorded by appending it to each character. By inserting redundant data, the system can automatically identify the positions in the transmission that are most prone to errors based on the frequency and position information, and insert additional redundant data at these positions. By real-time monitoring of errors in the transmission process, the system checks each transmitted character to ensure that the character data that is not lost can be accurately identified and processed after the data packet arrives at the receiving end.

[0082] Based on the real-time monitoring information of transmission errors, the number of transmission errors, delays and their frequency of occurrence for each character are recorded, using the formula:

[0083] ,

[0084] Calculate the probability of missing the i-th character , get the loss probability analysis result;

[0085] in, Indicates the probability that character i is lost during transmission. is the number of transmission errors of the i-th character, obtained through the verification mechanism at the receiving end, is the number of transmission delays of the i-th character, obtained by real-time monitoring of the transmission delay log. is the frequency of occurrence of the i-th character, which is the number of times character i appears in the data stream divided by the total number of characters, Indicates the total number of times character i is transmitted during the entire transmission process, obtained through the transmission statistics of the receiving end. Are weight coefficients, which are used to adjust the proportion of the number of transmission errors, number of delays and frequency of character occurrence in the loss probability. The weight setting is based on the analysis of the actual data transmission process. The reasonable range is determined by analyzing historical data to ensure the flexibility and accuracy of the system.

[0086] If character A has 100 transmission errors, is delayed 50 times, and is transmitted 1000 times, the frequency of character A is for , set the weight coefficient to , , , then the probability of losing character A is:

[0087] ,

[0088] The results show that the loss probability of character A is 0.08, indicating that it may be lost about 8 times out of 1000 transmissions. The final calculated result can help identify the transmission risk of character A and adjust the redundant data insertion strategy in the system based on this probability to reduce the possibility of character A loss and ensure the integrity of the bill data.

[0089] Based on the loss probability analysis results, the number of errors and character positions in the transmitted data packets are counted, and the distribution of errors in the transmission is analyzed in combination with the loss probability to generate the transmission error information analysis results;

[0090] By analyzing the data packet transmission log, the system first records the unique serial number of each data packet and its transmission timestamp. The number of transmission errors is counted by checking whether the character data fed back by the receiving end matches the original data. If inconsistent characters are found, the system will mark them as erroneous characters and record the occurrence position and transmission period of the character. In this way, the system can locate the exact position and number of each character error. In addition, the system will analyze the frequency and distribution of errors during the transmission process, and combined with the calculation results of the aforementioned loss probability, further aggregate statistics on the areas and time periods of transmission errors. Through these aggregate analyses, the areas and time periods where errors frequently occur during transmission are identified, and the insertion strategy of redundant data is adjusted to ensure that the error rate of these areas and time periods is reduced in future transmissions.

[0091] See also Figure 4 , the steps for obtaining the fluctuation range of error distribution analysis are as follows:

[0092] Based on the results of the transmission error information analysis, the transmission characteristics of each character are analyzed using the formula:

[0093] ,

[0094] Calculate the range of the error distribution , generate fluctuation range information;

[0095] in, It is used to measure the uneven distribution of errors of each character during transmission. A high value means that the transmission error distribution is uneven, and a low value means that the error distribution is uniform. Representing characters The time delay from sending to receiving end during the transmission process is obtained through the network delay log. A long delay time may indicate a problem with the transmission path or network. Indicates that the character The number of retransmissions is obtained through the feedback records of the receiving end. A high number of retransmissions usually means that the network is unstable or there are many transmission errors. is the average loss probability of all characters, through the formula: calculate, It is the total number of characters, which indicates the total number of different characters that appear during transmission, recorded by the transmission network.

[0096] If 4 types of characters are transmitted in the data stream, the probability of loss is , , , , the transmission delay is , , , , the number of retransmissions is , , , , then the average loss probability is:

[0097] ,

[0098] Substitute into the formula:

[0099] ,

[0100] ,

[0101] The results show that the fluctuation range of the error distribution is 13.6377. A large fluctuation range indicates that some characters have large errors, delays, or retransmission times in transmission, while other characters are relatively normal. This result is used to determine whether the system needs to adjust the insertion strategy of redundant data in a specific area. Generally speaking, if the fluctuation range exceeds 10, the system will adjust the redundant data distribution in the high error area to reduce transmission errors.

[0102] Based on the fluctuation range information, the insertion of redundant data is readjusted, the changes of data stream are dynamically monitored, and adjustments are made to generate dynamic error correction data stream;

[0103] By analyzing the loss probability, delay and number of retransmissions of each character during the transmission process, these data are obtained through error reports and delay logs fed back by the receiving end. After analyzing these data, the system comprehensively calculates the transmission characteristics of each character, especially for characters with large fluctuations. The system will focus on the transmission path, delay time and number of retransmissions of these characters. By analyzing the distribution and transmission behavior of the characters, the system can identify which areas have abnormal fluctuations in character transmission. Then, by inserting more redundant data in these high-fluctuation areas, the system ensures the integrity of the data in transmission, including dynamic monitoring and adjustment of data streams. The adjustment of redundant data is based on the error probability calculation results of each character, allocating more redundant data to characters with large fluctuations, and reducing the allocation of redundant data in areas with stable transmission. The system generates a dynamic error correction data stream through this adjustment strategy, ensuring the stability and accuracy of data in different transmission environments.

[0104] See also Figure 5 , the specific steps for obtaining the expected and current verification results are as follows:

[0105] Based on the dynamic error correction data stream, a random number sequence is generated to determine the location of the data block to be audited, and the location information of the data block to be audited is obtained;

[0106] The system's random number generation method relies on the transmission order and timestamp information of the data stream. By extracting and processing this information, the generated data sequence can correspond to a specific data block in the data stream, ensuring randomness during the audit process while avoiding repeated audits of data blocks that have already been checked. The specific operations include extracting information about each data block in the data stream, mapping these data blocks to locations in the storage unit using the generated random number sequence, and constructing an audit data block list to ensure extensive coverage of the audit process and random distribution of data blocks, thereby determining the location of the data blocks to be audited.

[0107] Based on the location information of the data block to be audited, the verification identifiers of the receiving end and the sending end are compared, and the verification identifier of each data block is re-verified to obtain the verification identifier verification result;

[0108] After determining the data block to be audited, the checksum of each data block is re-verified. The specific process includes comparing the checksum of the receiving end with the checksum of the original record of the sending end. The system extracts the checksum value of the data block recorded in the transmission log and calls the corresponding checksum algorithm such as SHA-256 to recalculate the hash value of the data block to ensure the integrity of the data during transmission. The system calculates the checksum for each data block one by one, and verifies whether the data block has been tampered with or lost during transmission by comparing the checksum value, ensuring the integrity and accuracy of the checksum of each audited data block. The system obtains the checksum result by comparing the checksum of the original data block with the checksum of the current data block, ensuring that the checksums of all data blocks are correct during the re-verification process.

[0109] Based on the verification result of the verification mark, the formula is used:

[0110] ,

[0111] Calculate the data block checksum inconsistency ratio , generate difference ratio information of data block verification;

[0112] in, Indicates the proportion of data blocks that need further review, ranging from 0 to 1, used to measure the inconsistency of the checksum of the data block. Indicates the number of inconsistent data blocks found after verification. The method of obtaining it is to compare the hash value of the data block. It is the audit frequency, which is obtained by setting the audit strategy. When the frequency is higher, problems can be found earlier, which reflects the intensity of the audit. It is the transmission delay, which means the delay caused by network or system reasons during data transmission. The delay time is collected by the monitoring system. The greater the delay, the greater the risk of verification inconsistency. It is the data block size, indicating the size difference of the data block. Larger data blocks are more likely to have inconsistent verification during transmission. The acquisition method is the actual size of the data block. It is the total number of audit data blocks, indicating the number of all data blocks selected in this audit.

[0113] If 100 data blocks are selected during the audit process, and 5 of them have inconsistent checksums, the audit frequency is , the transmission delay is seconds, the data block size difference is , the calculation formula is:

[0114] ,

[0115] The results show that the verification inconsistency ratio is 0.08, indicating that among the 100 data blocks, 8% of the data blocks have inconsistent verification results. The system needs to further analyze these data blocks to determine possible errors or tampering during the transmission process.

[0116] See also Figure 6 , the specific steps for obtaining the number of occurrences of statistical verification differences are:

[0117] Based on the difference ratio information of data block verification, the formula is:

[0118] ,

[0119] Calculate the total number of checksum differences , generate integrated verification difference analysis results;

[0120] in, Indicates the total number of inconsistencies in all checks counted by the system during the audit process. This result can help the system accurately measure the differences between data blocks and identify possible errors or tampering during the transmission process. Indicates the number of data blocks in the entire audit process. When the system is auditing, it will randomly generate audit data blocks from all data, extract and count this number. It is The number of times the system verifies each data block is obtained by recording multiple verifications of each data block. It is The number of differences between data blocks indicates the The number of differences detected during the verification process for each data block. The differences are calculated by comparing the expected verification mark with the actual verification mark. express and The number of data blocks for both series.

[0121] Setting parameters , audited data blocks, and the number of checksum differences for each data block is , , , , then calculate the total number of verification differences as follows:

[0122] ,

[0123] The results show that the total number of checksum differences in the system is 14, which means that there are 14 checksum differences in 100 data blocks. These statistical results provide the system with a basis for in-depth analysis of the difference data blocks, so as to further confirm whether these differences are caused by tampering or transmission errors, and take corresponding remedial measures.

[0124] Based on the integrated verification difference analysis results, the original verification mark and the verification mark after transmission are compared, and the difference of each data block is gradually analyzed to generate the data integrity analysis results;

[0125] First, all data blocks involving verification differences are extracted from the transmission log, and the relevant information of each data block is recorded, including the time when the difference occurred, the transmission path, the size and location of the data block, etc. These data are obtained through the log file generated during the transmission process or the real-time monitoring system. The system calls the verification record of each data block in turn, and compares the verification mark of the difference data block with the original data block. By comparing the verification results of each data block, the system can identify which data blocks have inconsistent conditions during transmission. Then, these difference data blocks are further analyzed. By counting the frequency of occurrence of differences, combined with the transmission path and time period, the system can determine whether these differences are regular or appear in a concentrated manner under certain transmission conditions. In addition, the system will integrate and associate the relevant information of each difference data block, and combine the statistical results with other audit data to ensure the integrity of data transmission. After this operation, the data integrity analysis results are generated, and further processing suggestions are made for the difference data blocks.

[0126] See also Figure 7 , the specific steps to update the hash value and index information are:

[0127] Based on the results of data integrity analysis, the hash value of each data block is reallocated and compared with the original value, data blocks with inconsistent hash values ​​are identified and marked as suspected tampering, and a list of suspected tampered data blocks is generated;

[0128] The hash value of each data block is regenerated through the hash algorithm and compared with the original value. The system uses this comparison process to identify data blocks with inconsistent hash values. These data blocks are then marked as suspected tampering objects. The hash calculation and comparison process is recorded in detail in the system's audit log for subsequent tracking and analysis. Through these steps, all data blocks suspected of being tampered with can be successfully marked.

[0129] Based on the list of suspected tampered data blocks, the formula is used:

[0130] ,

[0131] Calculating the quantified severity of data tampering , generating a severity indicator of data tampering;

[0132] in, Used to measure the proportion of suspected tampered data blocks, is the number of data blocks marked as suspected of tampering, is the total number of data blocks.

[0133] like , , ,but:

[0134] ,

[0135] The results show that the severity of data tampering is 1%, indicating that among all the data blocks reviewed, 1% of the data blocks are detected as suspected tampering, which is a key metric used in decision making. Generally, any data tampering greater than 0.5% is detected as suspected tampering. Values ​​above 0.001 should be considered an indicator of concern as they may indicate that the system's security controls are vulnerable or have been bypassed.

[0136] Based on the severity index of data tampering, restrict access rights to suspected tampered data blocks, record the unique identifier and timestamp of each data block, and update the hash value and index information to generate a security processing result;

[0137] After a data block is marked as suspected of tampering, the system further restricts access rights to the data block by setting an access control list (ACL) to prohibit unauthorized access and records the unique identifier and timestamp of each data block to ensure that the source and modification time of each data block can be accurately tracked. In addition, the system also updates the hash value and index information of the marked data block to enhance the protection of data integrity. All these operations are recorded in the system log for subsequent security audits and risk assessments.

[0138] A method for verifying the integrity of bill data, which is performed based on the above-mentioned bill data integrity verification system, comprises the following steps:

[0139] S1: Based on the acquired ticket data, read the content and associate the timestamp for each data item, input the combination of the content and timestamp of each data item into the hash process, and generate a unique hash value for each combination;

[0140] S2: Based on the unique hash value of each combination, the hash value is associated with the corresponding timestamp and unique identifier to form a data integrity identifier;

[0141] S3: Based on the data integrity identifier, redundant data is added to the ticket information, and the data stream is monitored in real time, recording and analyzing the errors in data transmission and the loss probability of each character, and generating a dynamic error correction data stream;

[0142] S4: Based on the dynamic error correction data stream, a random number sequence is generated to select the data block that needs to be re-verified, the verification mark is checked on the selected data block, and the expected and current performance of the verification result are compared to form a data integrity analysis result;

[0143] S5: Based on the data integrity analysis results, identify and mark data blocks with hash value differences, perform access restrictions on these data blocks, update hash values ​​and index information, and generate security processing results.

[0144] The above are only preferred embodiments of the present invention and are not intended to limit the present invention in other forms. Any technician familiar with the profession may use the technical contents disclosed above to change or modify them into equivalent embodiments with equivalent changes and apply them to other fields. However, any simple modification, equivalent change and modification made to the above embodiments based on the technical essence of the present invention without departing from the technical solution of the present invention still falls within the protection scope of the technical solution of the present invention.

Claims

1. A bill data integrity verification system, characterized in that: The system comprises: The data hash processing module constructs a hash value of the data content based on the acquired ticket data, calculates the time interval between the timestamp of each current data item and the timestamp of the previous data item, associates the hash value and timestamp with a unique identifier, and generates a data integrity identifier; The predictive error correction coding module inserts redundant data into the bill information based on the data integrity identifier, monitors the transmission errors in the data stream in real time, calculates the probability value of each character being lost during the transmission process, analyzes the uniformity and fluctuation range of the error distribution, adjusts the redundant data, and generates a dynamic error correction data stream; The steps for obtaining the probability value of each character being lost during transmission are specifically as follows: According to the data integrity identifier, character frequency and position information during transmission are analyzed to determine the position in the data where errors are prone to occur, and redundant data is inserted to generate real-time monitoring information of transmission errors; Based on the real-time monitoring information of the transmission errors, the number of transmission errors, the number of delays and the frequency of occurrence of each character are recorded, using the formula: ， Calculate the probability of missing the i-th character , get the loss probability analysis result; in, is the number of transmission errors of the i-th character, is the number of transmission delays for the ith character, is the frequency of occurrence of the i-th character, Indicates the total number of times character i is transmitted during the entire transmission process. are weight coefficients, which are used to adjust the influence ratio of the number of transmission errors, the number of delays and the frequency of character occurrence on the loss probability; Based on the loss probability analysis result, the number of errors and the positions of characters in the transmission data packet are counted, and the distribution of errors in the transmission is analyzed in combination with the loss probability to generate a transmission error information analysis result; The steps for obtaining the fluctuation range of the analysis error distribution are specifically as follows: Based on the transmission error information analysis result, the transmission characteristics of each character are analyzed using the formula: ， Calculate the range of the error distribution , generate fluctuation range information; in, Representing characters The time delay from the sender to the receiver during the transmission process, Indicates that the character The number of times it was resent. is the average probability of loss of all characters, is the total number of characters, which indicates the total number of characters that appear during the transmission; Based on the fluctuation range information, the insertion of redundant data is readjusted, changes in the data stream are dynamically monitored, and adjustments are made to generate a dynamic error correction data stream; The random audit verification module generates a random number sequence based on the dynamic error correction data stream, re-verifies the verification mark of the data block, compares the expected and current verification results, calculates the ratio of the data blocks with inconsistent verification results to the total data blocks, counts the number of occurrences of verification differences, and the information of the difference data blocks, and forms a data integrity analysis result; The tampering response processing module marks the data blocks with hash value differences as suspected tampering according to the data integrity analysis results, restricts access rights, updates the hash value and index information, and generates a security processing result.

2. The bill data integrity verification system according to claim 1, characterized in that: The steps for obtaining the data integrity identifier are specifically as follows: Based on the acquired bill data, the text and numbers on the bill are interpreted and the extracted data content is classified and sorted, including the date, amount, multiple key information of the payee and the unique identifier of each bill, to generate a data hash value; Based on the data hash value, each data item and its timestamp are calculated to identify the time pattern of data input, and abnormal pattern monitoring of data input is performed to obtain data input pattern analysis results; Based on the data input pattern analysis result, the hash value, timestamp and unique identifier of each data item are associated and stored in a data table, a bidirectional index relationship between the hash table and the data table is established, and a data integrity identifier is generated.

3. The bill data integrity verification system according to claim 1, characterized in that: The steps for obtaining the comparison of expected and current verification results are specifically as follows: Based on the dynamic error correction data stream, a random number sequence is generated, the position of the data block to be audited is determined, and the position information of the data block to be audited is obtained; Based on the position information of the data block to be audited, the verification identifiers of the receiving end and the sending end are compared, and the verification identifier of each data block is re-verified to obtain a verification identifier verification result; Based on the verification result of the verification mark, the formula is adopted: ， Calculate the data block checksum inconsistency ratio , generate difference ratio information of data block verification; in, Indicates the number of inconsistent data blocks found after verification. is the audit frequency, is the transmission delay, is the data block size, is the total number of audit data blocks.

4. The bill data integrity verification system according to claim 3, characterized in that: The steps for obtaining the number of occurrences of the statistical verification difference are specifically as follows: Based on the difference ratio information of the data block verification, the formula is adopted: ， Calculate the total number of checksum differences , generate integrated verification difference analysis results; in, Indicates the number of data blocks in the entire audit process. It is The number of checksums for each data block, It is The number of differences between data blocks indicates the The number of differences detected during the verification process for each data block, express and The number of data blocks for both series; Based on the integrated verification difference analysis result, the original verification mark and the verification mark after transmission are compared, and the difference of each data block is analyzed step by step to generate a data integrity analysis result.

5. The bill data integrity verification system according to claim 4, characterized in that: The steps for obtaining the updated hash value and index information are specifically as follows: Based on the result of the data integrity analysis, the hash value of each data block is reallocated and compared with the original value, the data blocks with inconsistent hash values ​​are identified, and the data blocks are marked as suspected tampering, and a list of suspected tampering data blocks is generated; Based on the suspected tampered data block list, the formula is used: ， Calculating the quantified severity of data tampering , generating a severity indicator of data tampering; in, Used to measure the proportion of suspected tampered data blocks, is the number of data blocks marked as suspected of tampering, is the total number of data blocks; Based on the severity index of the data tampering, the access rights of the suspected tampered data blocks are restricted, the unique identifier and timestamp of each data block are recorded, and the hash value and index information are updated to generate a security processing result.

6. A method for verifying the integrity of bill data, characterized in that: The bill data integrity verification system according to any one of claims 1 to 5 is implemented, comprising the following steps: Based on the acquired ticket data, read the content and associate the timestamp for each data item, input the combination of the content and the timestamp of each data item into the hash process, and generate a unique hash value for each combination; According to the unique hash value of each combination, the hash value is associated with the corresponding timestamp and unique identifier to form a data integrity identifier; Based on the data integrity identifier, redundant data is added to the ticket information, and the data stream is monitored in real time, errors in data transmission and the probability of loss of each character are recorded and analyzed, and a dynamic error correction data stream is generated; Based on the dynamic error correction data stream, a random number sequence is generated to select a data block that needs to be re-verified, a verification mark is checked on the selected data block, and the expected and current performance of the verification result are compared to form a data integrity analysis result; Based on the data integrity analysis result, data blocks with hash value differences are identified and marked, access restrictions are performed on these data blocks, hash values ​​and index information are updated, and security processing results are generated.

Images