Block chain digital asset security management method and system

Abstract

The invention belongs to the technical field of digital asset management, and discloses a block chain digital asset security management method and system. The method comprises the following steps: constructing a legal user database, a digital asset analysis model, an attack intrusion detection model and a digital asset block chain system based on a digital asset security management platform; performing key generation and identity registration on the terminal server based on the trusted mechanism; real-time digital asset data is collected based on a terminal server, and encryption and signature are carried out; calculating a real-time hash value, and uploading the real-time hash value to a digital asset security management platform; security verification is carried out based on the digital asset security management platform; after the security verification is passed, carrying out digital asset analysis by using a digital asset analysis model, and carrying out uplink storage on encrypted real-time digital asset data; and carrying out attack intrusion detection by using the attack intrusion detection model. According to the invention, the problems of low security, poor privacy and low practicability in the prior art are solved.

Description

Technical Field

[0001] The present invention belongs to the technical field of digital asset management, and specifically relates to a blockchain digital asset security management method and system. Background Art

[0002] Digital assets refer to assets that exist in digital form and have valuable, tradable, and controllable properties. They are usually based on cryptography and blockchain technology and can be stored, transferred, and traded on various network platforms. With the rapid development of the digital economy, the security management of digital assets has become increasingly important.

[0003] The existing digital asset security management methods have the following problems: first, the storage security of digital assets is not high and is vulnerable to network attacks; second, the privacy protection of digital assets is insufficient and user information is easily leaked; third, there is a lack of effective network attack detection methods, which is of low practicality and leads to digital asset losses. Summary of the invention

[0004] In order to solve the problems of low security, poor privacy and low practicality in the prior art, the present invention aims to provide a blockchain digital asset security management method and system.

[0005] The technical solution adopted by the present invention is:

[0006] A blockchain digital asset security management method comprises the following steps:

[0007] Based on the digital asset security management platform, a legal user database, digital asset analysis model, and attack intrusion detection model are constructed, and a digital asset blockchain system is constructed based on all terminal servers connected to the digital asset security management platform;

[0008] Based on the trusted institution, perform key generation and identity registration for the terminal server, obtain the corresponding public-private key pair and signature information, send the private key and signature information in the public-private key pair to the corresponding terminal server, and publish the public key in the public-private key pair to the digital asset security management platform;

[0009] Based on the terminal server, the user information and real-time digital asset data of the user to be verified are collected, and encryption and signing are performed according to the private key and signature information to obtain the encrypted user information, encrypted real-time digital asset data and signature data;

[0010] Using a hash function, calculate the real-time hash value of the encrypted real-time digital asset data, and upload the real-time hash value, encrypted user information, encrypted real-time digital asset data, and signature data to the digital asset security management platform;

[0011] Based on the digital asset security management platform, the encrypted user information and encrypted real-time digital asset data are decrypted according to the public key to obtain the decrypted user information and decrypted real-time digital asset data, and the signature data, real-time hash value and decrypted user information are securely verified;

[0012] After the security verification is passed, the digital asset analysis model is used to analyze the decrypted real-time digital asset data to obtain the real-time digital asset type. Based on the real-time digital asset type, the digital asset blockchain system is used to store the encrypted real-time digital asset data on the chain.

[0013] Collect real-time access traffic data of terminal servers accessing the digital asset security management platform, and use the attack intrusion detection model to perform attack intrusion detection based on the real-time access traffic data to obtain real-time attack intrusion detection results.

[0014] Furthermore, based on the digital asset security management platform, a legal user database, a digital asset analysis model, and an attack intrusion detection model are constructed, and a digital asset blockchain system is constructed based on all terminal servers connected to the digital asset security management platform, including the following steps:

[0015] Based on the digital asset security management platform, collect user information of legal users, build a legal user model based on the user information, and build a legal user database based on several legal user models;

[0016] Collect some historical digital asset data, and build a digital asset analysis model based on some historical digital asset data using deep learning algorithms;

[0017] Collect some historical access traffic data, and use deep learning algorithms to build an attack intrusion detection model based on some historical access traffic data;

[0018] Distributed connections are made between all terminal servers connected to the digital asset security management platform to form a blockchain, and calling interfaces, smart contracts and IFPS systems are deployed in the blockchain to build a digital asset blockchain system.

[0019] Furthermore, the digital asset analysis model is built based on the ResNET algorithm.

[0020] Furthermore, the attack intrusion detection model is constructed based on the BiLSTM algorithm.

[0021] Furthermore, the SHA-256 hash function is used to calculate the real-time SHA-256 hash value of the encrypted real-time digital asset data.

[0022] Further, based on the digital asset security management platform, the encrypted user information and the encrypted real-time digital asset data are decrypted according to the public key to obtain the decrypted user information and the decrypted real-time digital asset data, and the signature data, the real-time hash value and the decrypted user information are securely verified, including the following steps:

[0023] Based on the digital asset security management platform, the encrypted user information and the encrypted real-time digital asset data are decrypted according to the public key to obtain the decrypted user information and the decrypted real-time digital asset data;

[0024] Calling a trusted authority to authenticate the signature data, if the authentication is successful, proceeding to the next step, otherwise, returning an authentication failure signal to the terminal server and ending the security management method;

[0025] After the identity authentication is passed, the real-time hash value is verified for integrity. If the integrity verification is passed, the next step is entered. Otherwise, an integrity verification failure signal is returned to the terminal server and the security management method is terminated.

[0026] After the integrity verification is passed, the decrypted user information is verified according to the legal user authority database. If the user verification is passed, a security verification pass signal is output and the digital asset analysis step is entered. Otherwise, a user verification failure signal is returned to the terminal server and the security management method is terminated.

[0027] Furthermore, after the security verification is passed, the digital asset analysis model is used to perform digital asset analysis on the decrypted real-time digital asset data to obtain the real-time digital asset type, and according to the real-time digital asset type, the digital asset blockchain system is used to store the encrypted real-time digital asset data on the chain, including the following steps:

[0028] After the security verification is passed, the digital asset analysis model is used to perform digital asset analysis on the decrypted real-time digital asset data to obtain the real-time digital asset type;

[0029] Based on the digital asset blockchain system, the IPFS system is used to obtain the real-time digital asset hash value of the encrypted real-time digital asset data and generate a real-time data storage request;

[0030] Based on the calling interface, the smart contract is executed to convert the real-time digital asset hash value into a real-time data block, and the real-time data storage request and real-time data block are sent to the blockchain;

[0031] Based on blockchain, the IBFT consensus algorithm is used to reach consensus on real-time data storage requests according to the real-time digital asset type;

[0032] If the consensus is successful, the data block is linked to the chain, otherwise, a storage failure signal is returned to the terminal server and the security management method ends.

[0033] Furthermore, based on the blockchain, according to the real-time digital asset type, the IBFT consensus algorithm is used to reach consensus on the real-time data storage request, including the following steps:

[0034] According to the hierarchical mechanism, all nodes in the blockchain are divided into a classification consensus layer and a supervision layer;

[0035] Using the IAP clustering algorithm, with digital asset types as clustering targets, cluster all nodes in the classification consensus layer to obtain the leadership node group and the consensus node groups corresponding to several preset digital asset types;

[0036] According to the real-time digital asset type, a real-time data storage request is sent to a target consensus node group of the same preset digital asset type in a plurality of consensus node groups, and a target leader node in the target consensus node group is used to receive the real-time data storage request;

[0037] Based on the target consensus node group, the PBFT consensus algorithm is used to conduct intra-group consensus on the real-time data storage request. If the intra-group consensus succeeds, the next step is entered. Otherwise, a storage failure signal is returned to the terminal server, and the security management method ends.

[0038] Based on the leadership node group and several consensus node groups, the PBFT consensus algorithm is used to conduct inter-group consensus on real-time data storage requests. If the inter-group consensus is successful, a consensus success signal is output and the block chain step is entered. Otherwise, a storage failure signal is returned to the terminal server and the security management method ends.

[0039] Furthermore, the IAP clustering algorithm is composed of the AP clustering algorithm, the entropy weight method and the reputation mechanism scoring strategy.

[0040] A blockchain digital asset security management system is used to implement a blockchain digital asset security management method. The system includes a digital asset security management platform, a trusted institution, and a plurality of terminal servers. The digital asset security management platform and the trusted institution are respectively connected to the plurality of terminal servers in communication, and the digital asset security management platform is connected to the trusted institution in communication. The plurality of terminal servers constitute a digital asset blockchain system.

[0041] The digital asset security management platform includes a model building unit, a security verification unit, a digital asset analysis unit, and an attack and intrusion detection unit.

[0042] The beneficial effects of the present invention are:

[0043] The present invention discloses a blockchain digital asset security management method and system, which utilizes blockchain technology to ensure the security and traceability of digital assets, as well as the transparency and non-tamperability of asset ownership; adopts asymmetric encryption to effectively protect user privacy and digital asset security, and combines digital identity authentication and integrity verification to further strengthen the security protection level and improve the security of digital assets; deploys digital asset analysis models and attack intrusion detection models to perform digital asset analysis, improves the efficiency of asset transfer, storage and query, monitors network risks in real time, reduces digital asset losses, and improves practicality.

[0044] Other beneficial effects of the present invention will be further described in the specific embodiments. BRIEF DESCRIPTION OF THE DRAWINGS

[0045] Figure 1 It is a flowchart of the blockchain digital asset security management method in the present invention.

[0046] Figure 2 It is a structural block diagram of the blockchain digital asset security management system in the present invention. DETAILED DESCRIPTION

[0047] The present invention will be further explained below in conjunction with the accompanying drawings and specific embodiments.

[0048] Embodiment 1:

[0049] like Figure 1 As shown, this embodiment provides a blockchain digital asset security management method, including the following steps:

[0050] S1: Based on the digital asset security management platform, build a legal user database, digital asset analysis model and attack intrusion detection model, and build a digital asset blockchain system based on all terminal servers connected to the digital asset security management platform, including the following steps:

[0051] S1-1: Based on the digital asset security management platform, collect user information of legal users, build a legal user model based on the user information, and build a legal user database based on several legal user models;

[0052] S1-2: Collect some historical digital asset data, and build a digital asset analysis model based on some historical digital asset data using the Residual Network (ResNet) algorithm;

[0053] ResNET is a deep learning network structure that can identify deep features related to digital asset types in digital asset data, improving the accuracy and efficiency of digital asset analysis.

[0054] S1-3: Collect some historical access traffic data, and build an attack intrusion detection model based on some historical access traffic data using the Bidirectional Long Short-Term Memory (BiLSTM) algorithm;

[0055] The BiLSTM network is also a deep learning network structure, and the BiLSTM network has a powerful memory function, which can accurately identify and detect the newly input access traffic data and realize attack intrusion detection;

[0056] S1-4: Distribute connections between all terminal servers connected to the digital asset security management platform to form a blockchain, and deploy call interfaces, smart contracts, and Inter Planetary File System (IPFS) in the blockchain to build a digital asset blockchain system;

[0057] S2: Based on the trusted institution, key generation and identity registration are performed on the terminal server to obtain the corresponding public-private key pair and signature information, the private key and signature information in the public-private key pair are sent to the corresponding terminal server, and the public key in the public-private key pair is published to the digital asset security management platform, including the following steps:

[0058] S2-1: Based on the trusted institution, the attribute information of the terminal server is collected, and the asymmetric encryption algorithm is used to generate keys to obtain the public parameter GP, the master key MSK and the initial key PK;

[0059] The formula is:

[0060]

[0061] Where GP is the public parameter; MSK is the master key; PK is the initial key; a is the integer domain Z p Random numbers; H1, H2, H3, H4, H5, H6, H u All are target hash functions; g, g1, g a are all random numbers that are generators of the cyclic group G; e(g,g) a is a bilinear map of random numbers g;

[0062] S2-2: Based on the public parameter GP, the master key MSK, the initial key PK and the attribute information V of the terminal server u , generate the corresponding terminal server's public-private key pair, which includes the private key SK u and public key PK u , the formula is:

[0063] SK u= {MSK,V u ,K=g a g ab ,L u =g b ,(K=H3(V u ) b )}

[0064]

[0065] In the formula, SK u is the private key of the terminal server u; b is the integer domain Z p Random number; L u , K is the private key parameter of the terminal server u; H3 is the target hash function of the public parameter GP; u is the terminal server indicator; MSK is the master key; PK is the initial key; PK u is the public key of the terminal server u; g b , g a , g ab is the random number of the generator of the cyclic group G; V u The property information of the terminal server u;

[0066] S2-3: Perform identity registration based on the private key in the public-private key pair and the corresponding entity ID, and obtain the signature information of the corresponding terminal server;

[0067] The formula is:

[0068]

[0069] Where k′ is a random number; K u Registration parameters for the terminal server u; KID u The registration ID of the terminal server u; KID u and the corresponding K u The signature information {K u ,ID u}; H1 is the target hash function; ID u SK is the entity ID of the terminal server u; u It is the private key of the terminal server u; is the prime order; P is the base point of the prime domain;

[0070] S2-4: Send the private key and signature information in the public-private key pair to the corresponding terminal server, and publish the public key in the public-private key pair to the digital asset security management platform;

[0071] S3: Based on the terminal server, collect the user information and real-time digital asset data of the user to be verified, encrypt and sign according to the private key and signature information, and obtain the encrypted user information, encrypted real-time digital asset data and signature data;

[0072] The formula is:

[0073] M u =E(SK u ,m u )

[0074] Where M u is the encrypted user information / encrypted real-time digital asset data of the terminal server u; E(*) is the asymmetric encryption function; m u User information / real-time digital asset data of terminal server u; SK u is the private key of the terminal server u; u is the terminal server indicator;

[0075] The formula is:

[0076]

[0077] In the formula, r' is a random number; is the prime order; P is the base point of the prime domain; H2 is the target hash function; K u For the signature information {K u ,ID u}Registration parameters of terminal server u; KID u For the signature information {K u ,ID u}Registration ID of terminal server u; ID u is the entity ID of the terminal server u; the signature data is {ID u ,M u ,γ'={K u ,R u ,B u}}; R u ,B u ,γ' are the signature parameters of the terminal server u;

[0078] S4: Using the SHA-256 hash function, calculate the real-time SHA-256 hash value of the encrypted real-time digital asset data, and upload the real-time SHA-256 hash value, the encrypted user information, the encrypted real-time digital asset data, and the signature data to the digital asset security management platform;

[0079] S5: Based on the digital asset security management platform, the encrypted user information and the encrypted real-time digital asset data are decrypted according to the public key to obtain the decrypted user information and the decrypted real-time digital asset data, and the signature data, the real-time SHA-256 hash value and the decrypted user information are security verified, including the following steps:

[0080] S5-1: Based on the digital asset security management platform, the encrypted user information and the encrypted real-time digital asset data are decrypted according to the public key to obtain the decrypted user information and the decrypted real-time digital asset data;

[0081] The formula is:

[0082] m' u =E - (PK u ,M u )

[0083] In the formula, m' u The decrypted user information / decrypted real-time digital asset data of the terminal server u; - (*) is an asymmetric decryption function; PK u is the public key of the terminal server u; M u It is the encrypted user information / encrypted real-time digital asset data of the terminal server u;

[0084] S5-2: calling a trusted institution to authenticate the signature data. If the authentication is successful, proceed to the next step. Otherwise, returning an authentication failure signal to the terminal server and ending the security management method.

[0085] The formula is:

[0086] β u B u P=β u H2(R u ,M u ,ID u ,K u )R u +β u K u +β u H1(ID u ,K u )PK u

[0087] In the formula, β u PK is the authentication parameter of the terminal server u; u is the public key of the terminal server u; if the left formula is equal to the right formula, the identity authentication is successful;

[0088] S5-3: After the identity authentication is passed, the real-time SHA-256 hash value is integrity verified. If the integrity verification is passed, the next step is entered. Otherwise, an integrity verification failure signal is returned to the terminal server and the security management method is terminated.

[0089] S5-4: After the integrity verification is passed, the decrypted user information is verified according to the legal user authority database. If the user verification is passed, a security verification pass signal is output and the digital asset analysis step is entered. Otherwise, a user verification failure signal is returned to the terminal server and the security management method is terminated.

[0090] S6: After the security verification is passed, the digital asset analysis model is used to perform digital asset analysis on the decrypted real-time digital asset data to obtain the real-time digital asset type, and according to the real-time digital asset type, the digital asset blockchain system is used to store the encrypted real-time digital asset data on the chain, including the following steps:

[0091] S6-1: After the security verification is passed, the digital asset analysis model is used to perform digital asset analysis on the decrypted real-time digital asset data to obtain the real-time digital asset type;

[0092] S6-2: Based on the digital asset blockchain system, use the IPFS system to obtain the real-time digital asset hash value of the encrypted real-time digital asset data and generate a real-time data storage request;

[0093] S6-3: Based on the calling interface, execute the smart contract, convert the real-time digital asset hash value into a real-time data block, and send the real-time data storage request and real-time data block to the blockchain;

[0094] S6-4: Based on blockchain, according to the real-time digital asset type, the Improved Byzantine Fault Tolerance (IBFT) consensus algorithm is used to reach consensus on real-time data storage requests, including the following steps:

[0095] S6-4-1: According to the hierarchical mechanism, all nodes in the blockchain are divided into a classification consensus layer and a supervision layer; each layer cooperates with each other to improve consensus efficiency and ensure consensus accuracy;

[0096] The classification consensus layer reaches consensus on intellectual property certification requests. The role of the supervision layer is to prevent Byzantine nodes from committing malicious acts during consensus. When it is found that the information sent by a consensus node is different from that sent by other consensus nodes, the node can be determined to be a malicious node.

[0097] S6-4-2: Use the Improved Affinity-Propagation (AP) clustering algorithm, take the digital asset type as the clustering target, cluster all nodes in the classification consensus layer, and obtain the leadership node group and the consensus node groups corresponding to several preset digital asset types;

[0098] The IAP clustering algorithm consists of the Affinity-Propagation (AP) clustering algorithm, the entropy weight method, and the reputation mechanism scoring strategy, and includes the following steps:

[0099] S6-4-2-1: Use the entropy weight method to obtain the honest behavior weights and malicious behavior weights of all nodes in the classification consensus layer;

[0100] Construct an evaluation matrix of honest behavior and malicious behavior. The evaluation matrix includes several honest behavior indicators / malicious behavior indicators. Then obtain the information entropy of the evaluation matrix. The formula is:

[0101]

[0102] In the formula, E i' is the information entropy of the i'th indicator; i' is the indicator quantity; j' is the evaluation matrix column indicator quantity; n is the total number of indicators; p i'j' is the normalized value of the i'th indicator in the j'th column;

[0103] According to the ratio of information entropy to total information entropy, the honest behavior weight of each honest behavior indicator and the malicious behavior weight of each malicious behavior indicator are obtained. The smaller the information entropy, the greater the weight. The formula is:

[0104]

[0105] In the formula, w i' is the weight of the i'th indicator;

[0106] Use the entropy weight method to quantitatively evaluate each node's behavior and determine the corresponding weight in the consensus, so as to formulate reward and punishment measures more objectively, more accurately reward nodes that abide by the rules and participate in good faith, and punish nodes that deliberately violate the rules and disrupt the transaction order;

[0107] S6-4-2-2: Obtain the node's reward and penalty values ​​based on the honest behavior weight and malicious behavior weight. Use the reputation mechanism scoring strategy to obtain the node's reputation value based on the reward and penalty values, and set the node reputation value update strategy.

[0108] The formula is:

[0109]

[0110] In the formula, is the reputation value of node i at iteration number t; The reward base for the integrity behavior indicator L; is the honest behavior weight of the honest behavior index L; is the count of the honest behavior indicator L; is the penalty base of the malicious behavior indicator L'; is the malicious behavior weight of the malicious behavior index L'; is the count of malicious behavior indicator L'; i is the node indicator; t is the iteration number indicator; L is the honest behavior indicator indicator; L' is the malicious behavior indicator indicator;

[0111]

[0112] In the formula, is the updated reputation value of node i at iteration number t+1; α is the upper limit of the reputation value; k" is the slope parameter; is the reputation value of node i at iteration number t;

[0113] The honest and malicious behaviors of nodes are associated with the factors of efficient and normal operation of the blockchain. The new reputation value of the node is calculated based on the reward value and the penalty value. When the node performs well, its reputation value will be improved, thereby improving its status and weight in the system, and when the node performs poorly, its reputation value will decrease.

[0114] S6-4-2-3: According to the reputation value of the node, several nodes are sorted in descending order to obtain a node sorting set, and a bias parameter p(i) is set for the first K nodes in the node sorting set; the bias parameter indicates the tendency of node i to be selected as the cluster center, and has an important influence on which class representatives will be the final clustering center. The larger the p(i) value, the greater the possibility that node i will be the final clustering center, which weakens the influence of the AP clustering algorithm on the initial nodes;

[0115] S6-4-2-4: Use the AP clustering algorithm to initialize and obtain K initial cluster centers, where K is the total number of cluster centers;

[0116] S6-4-2-5: Obtain the initial attraction information and initial belonging information of the node to each initial cluster center;

[0117] The formula for attractiveness information is:

[0118]

[0119] In the formula, r t+1 (i, k) is the degree to which node k is suitable as the cluster center of node i at iteration number t+1, that is, the attraction information of node k to node i; at (i, j) is the suitability of node i to select node j as its cluster center at iteration number t; r t (i, j) is the degree to which node j is suitable as the cluster center of node i at iteration number t; s(i, k) is the similarity of node k as the cluster center of node i; i, j and k are all node indicators;

[0120] The formula for attribution information is:

[0121]

[0122] In the formula, r t+1 (k, k) is the degree to which node k is suitable as a cluster center when the number of iterations is t+1; ∑ j≠i,k max{r t+1 (j,k),0} is the degree to which node k is suitable to be a cluster center other than node i at the iteration number t+1; a t+1 (i, k) is the suitability of node i to select node k as its cluster center at iteration number t+1, that is, the belonging information of node k to node i;

[0123] S6-4-2-4: Introduce an iterative attenuation coefficient, update the attraction information and belonging information of all nodes, and update the K initial cluster centers according to the updated attraction information and updated belonging information to obtain K updated cluster centers;

[0124] The formula is:

[0125] r' t+1 (i,k)=λ*r t (i,k)+(1-λ)*r t+1 (i,k)

[0126] a' t+1 (i,k)=λ*a t (i,k)+(1-λ)*a t+1 (i,k)

[0127] In the formula, r' t+1 (i,k), a' t+1 (i, k) is the updated attraction information and updated belonging information of node k to node i at iteration number t+1; λ is the iteration attenuation coefficient; r t (i,k),r t+1 (i, k) is the attraction information of node k to node i at iterations t and t+1; a t (i,k), a t+1 (i, k) is the ownership information of node k to node i at iterations t and t+1;

[0128] The formula for determining the cluster center is:

[0129] k=argmax{a(i,k)+r(i,k)}

[0130] In the formula, i and k are both node indicators; if i = k, then node i is the cluster center of node k; if i ≠ k, then node k is the cluster center of node i;

[0131] S6-4-2-5: Obtain the similarity between each node and several updated cluster centers, group all nodes, and obtain several corresponding initial consensus node groups;

[0132] Update the consensus node group according to the number of nodes in the consensus node group; determine the number of nodes in the consensus node group. When it is greater than the maximum number of nodes that the consensus node group can accommodate, the newly applied node is divided into the smallest consensus node group except the cluster center point; when the number of nodes is less than 4, update the attraction and belongingness values ​​of each point, and repeat this process continuously to make all consensus node groups meet Byzantine fault tolerance;

[0133] S6-4-2-6: Use the updated cluster center as the initial leader node of the corresponding initial consensus node group to obtain the leader node group, and use the other nodes in the consensus node group as consensus nodes;

[0134] S6-4-2-6: If the number of iterations exceeds the iteration threshold or the cluster center does not change, output the final leader node group and the corresponding final consensus node groups;

[0135] S6-4-3: sending a real-time data storage request to a target consensus node group of the same preset digital asset type in a plurality of consensus node groups according to the real-time digital asset type, and using a target leader node in the target consensus node group to receive the real-time data storage request;

[0136] S6-4-4: Based on the target consensus node group, the Practical Byzantine Fault Tolerance (PBFT) consensus algorithm is used to perform group consensus on the real-time data storage request. If the group consensus succeeds, the next step is entered. Otherwise, a storage failure signal is returned to the terminal server, and the security management method is terminated, including the following steps:

[0137] S6-4-4-1: Based on the target leader node, verify the correctness of the real-time data storage request. After successful verification, broadcast the pre-preparation message to other consensus nodes in the target consensus node group;

[0138] S6-4-4-2: Based on the consensus nodes of the target consensus node group, verify the validity of the received pre-prepare message, record the pre-prepare message locally, and if the number of pre-prepare messages reaches 2f+1, enter the preparation phase and broadcast the preparation message to other consensus nodes in the target consensus node group, indicating that the sequence number request is accepted; where f is the number of Byzantine nodes;

[0139] S6-4-4-3: If the consensus node in the target consensus node group reaches 2f+1 preparation messages, it enters the submission phase and broadcasts the submission message to other consensus nodes in the intellectual property consensus group to synchronize the status of all nodes in the cluster;

[0140] S6-4-4-4: Based on the consensus nodes of the target consensus node group, if the number of submitted messages reaches 2f+1, the consensus within the group is successful and the next step is entered; otherwise, a storage failure signal is returned to the terminal server and the security management method ends;

[0141] S6-4-5: Based on the leadership node group and several consensus node groups, the PBFT consensus algorithm is used to conduct inter-group consensus on the real-time data storage request. If the inter-group consensus is successful, a consensus success signal is output and the block chain step is entered. Otherwise, a storage failure signal is returned to the terminal server and the security management method is terminated, including the following steps:

[0142] S6-4-5-1: After the consensus within the group is successful, the target leader node of the target consensus node group broadcasts the pre-preparation message to other leader nodes of the leader node group;

[0143] S6-4-5-1: Based on the leader node of the leader node group, verify the validity of the received pre-prepare message, record the pre-prepare message locally, and if the number of pre-prepare messages reaches 2f+1, enter the preparation phase and broadcast the preparation message to other consensus nodes in the corresponding consensus node group, indicating that the sequence number request is accepted;

[0144] S6-4-5-2: If the consensus node in the consensus node group reaches 2f+1 preparation messages, it enters the submission phase, collects digital signature sets and real-time data storage requests, generates packaged messages, and broadcasts the packaged messages to other consensus nodes in the consensus node group to synchronize the status of all nodes;

[0145] S6-4-5-3: Based on the consensus node of the consensus node group, the digital signature set in the packaged message is verified. If the verification is successful, the inter-group consensus is successful, a consensus success signal is output, and the block chain step is entered. Otherwise, a storage failure signal is returned to the terminal server, and the security management method ends;

[0146] S6-5: If the consensus is successful, the data block is linked to the chain, otherwise, a storage failure signal is returned to the terminal server and the security management method ends;

[0147] S7: Collect the real-time access traffic data of the terminal server accessing the digital asset security management platform, and use the attack intrusion detection model to perform attack intrusion detection based on the real-time access traffic data to obtain real-time attack intrusion detection results.

[0148] Embodiment 2:

[0149] like Figure 2 As shown, this embodiment provides a blockchain digital asset security management system for implementing a blockchain digital asset security management method. The system includes a digital asset security management platform, a trusted institution, and a plurality of terminal servers. The digital asset security management platform and the trusted institution are respectively connected to the plurality of terminal servers in communication, and the digital asset security management platform is connected to the trusted institution in communication. The plurality of terminal servers constitute a digital asset blockchain system.

[0150] The trusted institution is used to generate keys and register identities for terminal servers, obtain corresponding public-private key pairs and signature information, send the private key and signature information in the public-private key pair to the corresponding terminal server, and publish the public key in the public-private key pair to the digital asset security management platform;

[0151] The terminal server is used to collect the user information and real-time digital asset data of the user to be verified, encrypt and sign according to the private key and signature information, and obtain the encrypted user information, the encrypted real-time digital asset data and the signature data; use the hash function to calculate the real-time hash value of the encrypted real-time digital asset data, and upload the real-time hash value, the encrypted user information, the encrypted real-time digital asset data and the signature data to the digital asset security management platform;

[0152] The digital asset blockchain system is used to store encrypted real-time digital asset data on the blockchain according to the real-time digital asset type;

[0153] The digital asset security management platform includes a model building unit, a security verification unit, a digital asset analysis unit, and an attack and intrusion detection unit;

[0154] Model building unit, used to build a legal user database, digital asset analysis model and attack intrusion detection model;

[0155] A security verification unit is used to decrypt the encrypted user information and the encrypted real-time digital asset data according to the public key, obtain the decrypted user information and the decrypted real-time digital asset data, and perform security verification on the signature data, the real-time hash value and the decrypted user information;

[0156] A digital asset analysis unit, used to use a digital asset analysis model to perform digital asset analysis on the decrypted real-time digital asset data, obtain the real-time digital asset type, and send the real-time digital asset type and the corresponding encrypted real-time digital asset data to the digital asset blockchain system;

[0157] The attack intrusion detection unit is used to collect real-time access flow data of the terminal server accessing the digital asset security management platform, and use the attack intrusion detection model to perform attack intrusion detection based on the real-time access flow data to obtain real-time attack intrusion detection results.

[0158] The present invention discloses a blockchain digital asset security management method and system, which utilizes blockchain technology to ensure the security and traceability of digital assets, as well as the transparency and non-tamperability of asset ownership; adopts asymmetric encryption to effectively protect user privacy and digital asset security, and combines digital identity authentication and integrity verification to further strengthen the security protection level and improve the security of digital assets; deploys digital asset analysis models and attack intrusion detection models to perform digital asset analysis, improves the efficiency of asset transfer, storage and query, monitors network risks in real time, reduces digital asset losses, and improves practicality.

[0159] The present invention is not limited to the above optional implementations, and anyone can derive other various forms of products under the enlightenment of the present invention. The above specific implementations should not be understood as limiting the scope of protection of the present invention. The scope of protection of the present invention should be based on the definition in the claims, and the description can be used to interpret the claims.

Claims

1. A blockchain digital asset security management method, characterized by: The steps include: Based on the digital asset security management platform, a legal user database, digital asset analysis model, and attack intrusion detection model are constructed, and a digital asset blockchain system is constructed based on all terminal servers connected to the digital asset security management platform; Based on the trusted institution, perform key generation and identity registration for the terminal server, obtain the corresponding public-private key pair and signature information, send the private key and signature information in the public-private key pair to the corresponding terminal server, and publish the public key in the public-private key pair to the digital asset security management platform; Based on the terminal server, the user information and real-time digital asset data of the user to be verified are collected, and encryption and signing are performed according to the private key and signature information to obtain the encrypted user information, encrypted real-time digital asset data and signature data; Using a hash function, calculate the real-time hash value of the encrypted real-time digital asset data, and upload the real-time hash value, encrypted user information, encrypted real-time digital asset data, and signature data to the digital asset security management platform; Based on the digital asset security management platform, the encrypted user information and encrypted real-time digital asset data are decrypted according to the public key to obtain the decrypted user information and decrypted real-time digital asset data, and the signature data, real-time hash value and decrypted user information are securely verified; After the security verification is passed, the digital asset analysis model is used to analyze the decrypted real-time digital asset data to obtain the real-time digital asset type. Based on the real-time digital asset type, the digital asset blockchain system is used to store the encrypted real-time digital asset data on the chain. Collect real-time access traffic data of terminal servers accessing the digital asset security management platform, and use the attack intrusion detection model to perform attack intrusion detection based on the real-time access traffic data to obtain real-time attack intrusion detection results.

2. A blockchain digital asset security management method according to claim 1, characterized in that: Based on the digital asset security management platform, a legal user database, a digital asset analysis model, and an attack intrusion detection model are constructed, and a digital asset blockchain system is constructed based on all terminal servers connected to the digital asset security management platform, including the following steps: Based on the digital asset security management platform, collect user information of legal users, build a legal user model based on the user information, and build a legal user database based on several legal user models; Collect some historical digital asset data, and build a digital asset analysis model based on some historical digital asset data using deep learning algorithms; Collect some historical access traffic data, and use deep learning algorithms to build an attack intrusion detection model based on some historical access traffic data; Distributed connections are made between all terminal servers connected to the digital asset security management platform to form a blockchain, and calling interfaces, smart contracts and IFPS systems are deployed in the blockchain to build a digital asset blockchain system.

3. A blockchain digital asset security management method according to claim 2, characterized in that: The digital asset analysis model is built based on the ResNET algorithm.

4. A blockchain digital asset security management method according to claim 2, characterized in that: The attack intrusion detection model is built based on the BiLSTM algorithm.

5. A blockchain digital asset security management method according to claim 1, characterized in that: Use the SHA-256 hash function to calculate the real-time SHA-256 hash value of the encrypted real-time digital asset data.

6. A blockchain digital asset security management method according to claim 1, characterized in that: Based on the digital asset security management platform, the encrypted user information and the encrypted real-time digital asset data are decrypted according to the public key to obtain the decrypted user information and the decrypted real-time digital asset data, and the signature data, the real-time hash value and the decrypted user information are securely verified, including the following steps: Based on the digital asset security management platform, the encrypted user information and the encrypted real-time digital asset data are decrypted according to the public key to obtain the decrypted user information and the decrypted real-time digital asset data; Calling a trusted authority to authenticate the signature data, if the authentication is successful, proceeding to the next step, otherwise, returning an authentication failure signal to the terminal server and ending the security management method; After the identity authentication is passed, the real-time hash value is verified for integrity. If the integrity verification is passed, the next step is entered. Otherwise, an integrity verification failure signal is returned to the terminal server and the security management method is terminated. After the integrity verification is passed, the decrypted user information is verified according to the legal user authority database. If the user verification is passed, a security verification pass signal is output and the digital asset analysis step is entered. Otherwise, a user verification failure signal is returned to the terminal server and the security management method is terminated.

7. A blockchain digital asset security management method according to claim 3, characterized in that: After the security verification is passed, the digital asset analysis model is used to perform digital asset analysis on the decrypted real-time digital asset data to obtain the real-time digital asset type. Based on the real-time digital asset type, the digital asset blockchain system is used to store the encrypted real-time digital asset data on the chain, including the following steps: After the security verification is passed, the digital asset analysis model is used to perform digital asset analysis on the decrypted real-time digital asset data to obtain the real-time digital asset type; Based on the digital asset blockchain system, the IPFS system is used to obtain the real-time digital asset hash value of the encrypted real-time digital asset data and generate a real-time data storage request; Based on the calling interface, the smart contract is executed to convert the real-time digital asset hash value into a real-time data block, and the real-time data storage request and real-time data block are sent to the blockchain; Based on blockchain, the IBFT consensus algorithm is used to reach consensus on real-time data storage requests according to the real-time digital asset type; If the consensus is successful, the data block is linked to the chain, otherwise, a storage failure signal is returned to the terminal server and the security management method ends.

8. A blockchain digital asset security management method according to claim 7, characterized in that: Based on blockchain, according to the real-time digital asset type, the IBFT consensus algorithm is used to reach consensus on real-time data storage requests, including the following steps: According to the hierarchical mechanism, all nodes in the blockchain are divided into a classification consensus layer and a supervision layer; Using the IAP clustering algorithm, with digital asset types as clustering targets, cluster all nodes in the classification consensus layer to obtain the leadership node group and the consensus node groups corresponding to several preset digital asset types; According to the real-time digital asset type, a real-time data storage request is sent to a target consensus node group of the same preset digital asset type in a plurality of consensus node groups, and a target leader node in the target consensus node group is used to receive the real-time data storage request; Based on the target consensus node group, the PBFT consensus algorithm is used to conduct intra-group consensus on the real-time data storage request. If the intra-group consensus succeeds, the next step is entered. Otherwise, a storage failure signal is returned to the terminal server, and the security management method ends. Based on the leadership node group and several consensus node groups, the PBFT consensus algorithm is used to conduct inter-group consensus on real-time data storage requests. If the inter-group consensus is successful, a consensus success signal is output and the block chain step is entered. Otherwise, a storage failure signal is returned to the terminal server and the security management method ends.

9. A blockchain digital asset security management method according to claim 8, characterized in that: The IAP clustering algorithm is composed of an AP clustering algorithm, an entropy weight method, and a reputation mechanism scoring strategy.

10. A blockchain digital asset security management system, used to implement the blockchain digital asset security management method as described in any one of claims 1 to 9, characterized in that: The system includes a digital asset security management platform, a trusted institution, and several terminal servers. The digital asset security management platform and the trusted institution are respectively connected to the several terminal servers in communication, and the digital asset security management platform is connected to the trusted institution in communication. The several terminal servers constitute a digital asset blockchain system. The digital asset security management platform includes a model building unit, a security verification unit, a digital asset analysis unit, and an attack and intrusion detection unit.

Images