Remote sensing data encryption and decryption method, system and device based on block chain and medium

Abstract

The invention discloses a remote sensing data encryption and decryption method, system and device based on a block chain and a medium, and particularly relates to the technical field of remote sensing data encryption and decryption, and the technical key points are that the method comprises the steps: obtaining original remote sensing data, generating head information block data of the original remote sensing data based on the block chain, storing header information block data corresponding to the original remote sensing data in a first database of a remote sensing data platform; wherein the header information block data comprises a first hash value, a second hash value, block chain uplink information, user information and production attribute information; obtaining verification order information of the encrypted remote sensing data; wherein the verification order information comprises user information of the encrypted remote sensing data, key information, a first hash value and a second hash value; and traversing a second database of the remote sensing data encryption and decryption system based on the user information and the key information in the verification order information, and obtaining the remote sensing data authority of the encrypted remote sensing data and the read-write or modification operation authority.

Description

Technical Field

[0001] The present invention relates to the technical field of remote sensing data encryption and decryption, and in particular to a remote sensing data encryption and decryption method, system, device and medium based on blockchain. Background Art

[0002] In the field of satellite applications, the earth is observed through the large-span space advantage of satellites. Its fields can be widely used in fields such as earth resources and environment, meteorological observation, geology and geography, hydrology, etc. The remote sensing data product processing process is complex, and the remote sensing data generated by the industry application process has always received widespread attention. Due to the high cost of investment behind remote sensing data products, it requires a lot of funds, technology and labor from related enterprises, institutions and personnel. Some high-precision remote sensing data contains geographical features of sensitive areas of the country, military intelligence information, etc. From the perspective of the commercial value of remote sensing data and the need for confidentiality, there is a great demand for effective protection of remote sensing data and digital rights identification technology.

[0003] In the prior art, the traditional remote sensing data encryption and decryption method has defects in data confidentiality and data authority verification; for example, a Chinese patent with a patent publication number of CN113824735A discloses a remote sensing image encryption transmission method and system, including: the server divides the remote sensing image file into a first data file, a second data file and a third data file, and randomly divides the second data file into multiple sub-files; uses the client public key provided by the terminal to encrypt the first data file, the third data file and the rule file that records the naming information of multiple sub-files; sends all encrypted files and multiple sub-files to the client; the client uses the client private key to decrypt the encrypted first data file, the encrypted rule file and the encrypted third data file, uses the rule file to combine the multiple sub-files into a second data file, and combines the first data file, the second data file and the third data file into a remote sensing image file, which solves the current technical problem of lacking an effective method for encrypting and transmitting remote sensing data.

[0004] In the above technical scheme, the remote sensing image to be encrypted and transmitted is divided into multiple file blocks, and another file is used to record the naming rules and combination methods of such files. The remote sensing image file is fragmented to achieve the purpose of remote sensing image transmission encryption. Although the "block compression transmission" method solves the technical problem of the remote sensing data encryption transmission method, it is easy to cause the loss of the segmented files and thus cause the problem of missing remote sensing data.

[0005] Therefore, the present invention aims to provide a remote sensing data encryption and decryption method, system, device and medium based on blockchain to solve the above-mentioned related problems. Summary of the invention

[0006] The technical problem to be solved by the present invention is that the remote sensing data transmission method in the prior art has defects in the verification of data confidentiality and data authority. The purpose is to provide a remote sensing data encryption and decryption method, system, equipment and medium based on blockchain. By adding a specific header information block data to the header of the original remote sensing data, it serves as the data basis for subsequent transparent decryption, data verification and authority authentication to complete the encryption and decryption of the remote sensing data, thereby ensuring the integrity of the remote sensing data during the encryption and decryption process and preventing the remote sensing data from being lost due to encryption and decryption; by combining the hash value of the remote sensing data and the hash value of the encrypted remote sensing data, the reliability of the remote sensing data encryption is further increased.

[0007] The present invention is achieved through the following technical solutions:

[0008] A remote sensing data encryption and decryption method based on blockchain, the remote sensing data encryption and decryption method is used in a remote sensing data encryption and decryption system, and the method includes:

[0009] Obtaining original remote sensing data, generating header information block data of the original remote sensing data based on blockchain, and storing the header information block data corresponding to the original remote sensing data in a first database of the remote sensing data platform; wherein the header information block data includes a first hash value, a second hash value, blockchain on-chain information, user information, and production attribute information;

[0010] Acquire verification order information of the encrypted remote sensing data; wherein the verification order information includes user information, key information, a first hash value, and a second hash value of the encrypted remote sensing data;

[0011] Based on the user information and key information in the verification order information, the second database of the remote sensing data encryption and decryption system is traversed to obtain the remote sensing data authority and the read, write or modify operation authority of the encrypted remote sensing data.

[0012] Further, when the second database of the remote sensing data encryption and decryption system is traversed and the remote sensing data authority and the read, write or modify operation authority of the encrypted remote sensing data are not obtained, a permission verification request and verification order information of the encrypted remote sensing data are sent to the remote sensing data platform;

[0013] Receive data permission instructions for encrypted remote sensing data from a remote sensing data platform, and decrypt the encrypted remote sensing data based on the data permission instructions to obtain permission to read, write or modify the encrypted remote sensing data; wherein, the data permission instructions are performed by the remote sensing data platform based on preset remote sensing data confidentiality levels and user confidentiality permissions to authenticate user information, and use the blockchain information in the header information block data of the encrypted remote sensing data to compare and verify with the first hash value and the second hash value in the request order information, as well as the key information output in combination with the permission authentication, and output based on the verification result.

[0014] Furthermore, remote sensing data is obtained and header information block data of the blockchain of remote sensing data is generated, specifically:

[0015] Acquire original remote sensing data, and perform hash operation on the original remote sensing data to obtain a first hash value corresponding to the original remote sensing data;

[0016] Randomly generate original key information for the original remote sensing data, encrypt the original remote sensing data, and perform hash operation on the encrypted original remote sensing data and the original key information to obtain a corresponding second hash value;

[0017] Acquire remote sensing data resource information, and generate blockchain information based on the remote sensing data resource information, the first hash value, and the second hash value;

[0018] Obtain user information of users who purchase remote sensing data, as well as production attribute information of remote sensing data production.

[0019] The present invention also provides a remote sensing data encryption and decryption method based on blockchain, which is used for a remote sensing data platform, and the method includes:

[0020] Receiving header information block data corresponding to the original remote sensing data transmitted by the remote sensing data encryption and decryption system, and storing the data in the first database;

[0021] In response to the permission verification request of the remote sensing data encryption and decryption system, the user information in the verification order information is obtained and compared with the user information data stored in the first database, and the permission is authenticated based on the preset remote sensing data confidentiality level and user confidentiality level permission to obtain the key information for encrypting the remote sensing data;

[0022] The blockchain information in the header information block data of the encrypted remote sensing data is compared and verified with the first hash value and the second hash value in the verification order information, as well as the key information output in combination with the authority authentication, and the data authority instruction is output based on the verification result.

[0023] Furthermore, after performing authority identification based on the preset remote sensing data confidentiality level and user confidentiality level authority and obtaining key information for encrypting remote sensing data, it also includes:

[0024] The key information output by the authentication and the user information in the verification order information are sent to the second database of the remote sensing data encryption and decryption system to update the key information and remote sensing data authority in the second database.

[0025] Furthermore, the data permission instruction includes a data permission usage period and a data permission scope.

[0026] The present invention also provides a remote sensing data encryption and decryption system based on blockchain, the system comprising:

[0027] A data acquisition module is used to acquire original remote sensing data, generate header information block data of the original remote sensing data based on blockchain, and store the header information block data corresponding to the original remote sensing data in the first database of the remote sensing data platform; wherein the header information block data includes a first hash value, a second hash value, blockchain on-chain information, user information, and production attribute information;

[0028] An order information acquisition module is used to acquire verification order information of encrypted remote sensing data; wherein the verification order information includes user information, key information, a first hash value, and a second hash value of the encrypted remote sensing data;

[0029] The authority verification module is used to traverse the second database of the remote sensing data encryption and decryption system based on the user information and key information in the verification order information, and obtain the remote sensing data authority and the read, write or modify operation authority of the encrypted remote sensing data.

[0030] The present invention also provides a remote sensing data platform, the remote sensing data platform comprising:

[0031] A data storage module, used to receive header information block data corresponding to the original remote sensing data transmitted by the remote sensing data encryption and decryption system, and store the data in the first database;

[0032] The authority authentication module is used to respond to the authority authentication request of the remote sensing data encryption and decryption system, obtain the user information in the verification order information and compare it with the user information data stored in the first database, and perform authority authentication based on the preset remote sensing data confidentiality level and user confidentiality level authority to obtain the key information for encrypting the remote sensing data;

[0033] The permission instruction generation module is used to compare and verify the blockchain information in the header information block data of the encrypted remote sensing data with the first hash value and the second hash value in the verification order information, and the key information output in combination with the permission identification, and output the data permission instruction based on the verification result.

[0034] The present invention also provides a computer device, comprising a memory and a processor, wherein the memory stores a computer program, and the processor implements the steps of the method described in any one of claims 1 to 6 when executing the computer program.

[0035] The present invention also provides a computer-readable storage medium having a computer program stored thereon, wherein the computer program, when executed by a processor, implements the steps of the method described in any one of claims 1 to 6.

[0036] Compared with the prior art, the present invention has the following advantages and beneficial effects:

[0037] In the present invention, a specific header information block data is added to the header of the original remote sensing data as the data basis for subsequent transparent decryption, data verification and authority authentication to complete the encryption and decryption of the remote sensing data, thereby ensuring the integrity of the remote sensing data during the encryption and decryption process and preventing the remote sensing data from being lost due to encryption and decryption; the reliability of the remote sensing data encryption is further increased by combining the hash value of the remote sensing data and the hash value of the encrypted remote sensing data. BRIEF DESCRIPTION OF THE DRAWINGS

[0038] In order to more clearly illustrate the technical solutions of the exemplary embodiments of the present invention, the following briefly introduces the drawings required for use in the embodiments. It should be understood that the following drawings only illustrate certain embodiments of the present invention and should not be regarded as limiting the scope. For those of ordinary skill in the art, other relevant drawings can be obtained based on these drawings without creative work. In the drawings:

[0039] Figure 1 This is a flowchart of a remote sensing data encryption and decryption method based on blockchain in this embodiment;

[0040] Figure 2 This is a module diagram of a blockchain-based remote sensing data encryption and decryption system in this embodiment;

[0041] Figure 3 Schematic diagram of a module of a remote sensing data platform in this embodiment;

[0042] Figure 4 A schematic diagram of the file driver, binding process and file encryption and decryption workflow of the remote sensing data encryption and decryption system in this embodiment;

[0043] Figure 5 It is a structural schematic diagram of a computer device in this embodiment. DETAILED DESCRIPTION

[0044] The following is a description of exemplary embodiments of the present disclosure in conjunction with the accompanying drawings, including various details of the embodiments of the present disclosure to facilitate understanding, which should be considered as merely exemplary. Therefore, it should be recognized by those of ordinary skill in the art that various changes and modifications may be made to the embodiments described herein without departing from the scope of the present disclosure. Similarly, for the sake of clarity and conciseness, the description of well-known functions and structures is omitted in the following description.

[0045] In the present disclosure, unless otherwise specified, the use of the terms "first", "second", etc. to describe various elements is not intended to limit the positional relationship, timing relationship, or importance relationship of these elements, and such terms are only used to distinguish one element from another element. In some examples, the first element and the second element may refer to the same instance of the element, and in some cases, based on the description of the context, they may also refer to different instances.

[0046] The terms used in the description of various examples in this disclosure are only for the purpose of describing specific examples and are not intended to be limiting. Unless the context clearly indicates otherwise, if the number of elements is not specifically limited, the element can be one or more. In addition, the term "and / or" used in this disclosure covers any one of the listed items and all possible combinations.

[0047] In order to facilitate understanding of the embodiments of the present invention, first, some terms involved in the present invention are explained.

[0048] Blockchain is a distributed database technology that records and stores transaction data in the form of blocks and uses cryptographic algorithms to ensure the security and immutability of data.

[0049] Hash computing is an important algorithm in computer science. It accepts an input of arbitrary length and returns an output of fixed length, namely a hash value.

[0050] The AES-128ECB encryption algorithm is an implementation of the AES (Advanced Encryption Standard) encryption algorithm in the ECB (Electronic Codebook) mode; its encryption process includes key expansion, data grouping, data encryption, and output ciphertext.

[0051] Example 1

[0052] See also Figure 1As shown, a data encryption and decryption processing application scenario that can be applied in this embodiment is given, and in other embodiments, it can also be applied to other application scenarios, which are not limited in this application. The application scenario shown above includes one or more user terminals and one or more terminal servers. The user terminal can be a smart device such as a mobile phone, a television, a smart watch, a personal computer or a tablet computer, which at least has a processor that can process information data and a memory that can store data information. The processor is deployed with a Win7 X64 bit or Win10 X64 bit or Win11 X64 bit or a higher version of the operating system, and the user terminal is deployed with the data encryption and decryption system described in Example 2; at the same time, the terminal server can also be a terminal device such as a mobile phone, a television, a smart watch, a personal computer or a tablet computer, which at least has a processor that can process information data and a memory that can store data information. The processor is deployed with a Win7 X64 bit or Win10 X64 bit or Win11 X64 bit or a higher version of the operating system, and the terminal is deployed with the remote sensing data platform shown in Example 3, which can be a remote sensing data service center data platform.

[0053] See also Figure 1 As shown, a remote sensing data encryption and decryption method based on blockchain is used for data encryption and decryption processing between a remote sensing data encryption and decryption system and a remote sensing data platform, and the method includes:

[0054] S1: The remote sensing data encryption and decryption system obtains the original remote sensing data, generates the header information block data of the original remote sensing data based on the blockchain, and stores the header information block data corresponding to the original remote sensing data in the first database of the remote sensing data platform; wherein the header information block data includes the first hash value, the second hash value, the blockchain on-chain information, the user information and the production attribute information, specifically:

[0055] S101: Acquire original remote sensing data, and perform a hash operation on the original remote sensing data to obtain a first hash value corresponding to the original remote sensing data;

[0056] S102: randomly generating original key information for the original remote sensing data, encrypting the original remote sensing data, and performing a hash operation on the encrypted original remote sensing data and the original key information to obtain a corresponding second hash value;

[0057] Specifically, in this embodiment, the corresponding second hash value is obtained by: removing the file header part of the original remote sensing data, and aligning the data block size of the remote sensing data with the file header part removed by using the ciphertext misappropriation method; encrypting the processed remote sensing data by using the AES-128ECB encryption algorithm, and performing a hash operation on the encrypted remote sensing data and the original key information to obtain the corresponding second hash value;

[0058] S103: Acquire remote sensing data resource information, and generate blockchain information based on the remote sensing data resource information, the first hash value, and the second hash value;

[0059] S104: Acquire user information of users who purchase remote sensing data and production attribute information of remote sensing data production;

[0060] It should be noted that, in this embodiment, the first database refers to the database of the remote sensing data platform, and the second database refers to the database of the remote sensing data encryption and decryption system.

[0061] Specifically, in this embodiment, specific header information block data is added to the technology of the original remote sensing data to serve as the data basis for subsequent transparent decryption, data verification and authority verification; wherein, the first hash value is the MD5 value generated after hashing the original remote sensing data; the second hash value is the randomly generated original key information for the original remote sensing data, and the file header part is removed from the original remote sensing data, and then the data block size of the remote sensing data with the file header part removed is aligned using the ciphertext misappropriation method, and then the processed remote sensing data is encrypted using the AES-128ECB encryption algorithm, and the encrypted remote sensing data and the original key information are hashed to obtain the MD5 value; the blockchain on-chain information is constructed based on the remote sensing data resource information (including different data suppliers, data generation date and sensor type, etc.), and the above-mentioned two MD5 values; it should also be noted that when obtaining the first hash value, the second hash value, and the third hash value, the data block size will also be obtained respectively.

[0062] S2: The remote sensing data platform receives the header information block data corresponding to the original remote sensing data transmitted by the remote sensing data encryption and decryption system, and stores it in the first database;

[0063] Specifically, in this embodiment, the original remote sensing data and its header information block data are saved in the database of the remote sensing data platform to facilitate subsequent data verification and communication between the remote sensing data platform and the user end; at the same time, a corresponding user end license file is generated based on universal displacement identifiers such as the MAC address of the remote sensing data platform.

[0064] S3: The remote sensing data encryption and decryption system obtains verification order information of the encrypted remote sensing data input by the user; wherein the verification order information includes user information, key information, a first hash value, and a second hash value of the encrypted remote sensing data;

[0065] Specifically, in this embodiment, the user inputs the encrypted remote sensing data to be decrypted in the remote sensing data encryption and decryption system, and generates verification order information.

[0066] S4: The remote sensing data encryption and decryption system traverses the second database of the remote sensing data encryption and decryption system based on the user information and key information in the verification order information, and obtains the remote sensing data authority and the read, write or modify operation authority of the encrypted remote sensing data.

[0067] It should be noted that, in the present embodiment, after the remote sensing data encryption and decryption system obtains the verification order information, it first performs permission verification in the second database of the system itself. The second database stores permission instructions corresponding to some remote sensing data. By comparing the user information in the verification order information with all the user information stored in the second database, and by comparing the key information in the verification order information with the corresponding key information in the second database, the remote sensing data permissions and the read, write or modify operation permissions of the encrypted remote sensing data are obtained.

[0068] Specifically, in this embodiment, the remote sensing data encryption and decryption system uses Windows file driver, buffer management and memory manager collaborative technology, and uses a double buffer, ciphertext misappropriation encryption and decryption transparent filter driver for different permission application processes, corresponding to the system authorized process and unauthorized process applied under the user operating system platform, respectively, using plaintext and ciphertext buffers, authorized processes are allowed to modify the plaintext buffer, and unauthorized processes are not allowed to modify the ciphertext buffer;

[0069] The client uses the StreamContext in the mini filter driver technology to store the file information of the driver during runtime. The encrypted remote sensing data uses the file information to identify the block data. A 4KB file header is added to store the decryption information, blockchain information, and verification information required for the file. The encryption algorithm for the original remote sensing data uses the AES-128ECB mode. For the padding problem of the data block size not aligned, the ciphertext stealing method is used. The driver uses the SwapBuffers method for transparent encryption and decryption of the file read and write operations. In order to implement privileged encryption and decryption, the client uses the reentry method to let the mini filter driver re-encrypt and decrypt the file.

[0070] In order to support the system process, the remote sensing data encryption and decryption system registers the relevant process callback function, uses a bidirectional linked list to store the process strategy, and periodically scans the integrity of the authorized process code segment to protect the user's system process; the suffix of the encrypted remote sensing data is changed to .EnData, and in order to adapt to the remote sensing data encryption and decryption system authorized process, special processing is performed when the file driver's internal processes FileRenameInformationEx and FileRenameInformation are used.

[0071] See also Figure 4 As shown, in the remote sensing data encryption and decryption method, the minifilter file driver, binding process and file encryption and decryption workflow of the remote sensing data encryption and decryption system are as follows: Steps 1-6 are: a buffered read operation initiated by a user application, when the initial buffer is not established, at this time the IRP is established by the IO manager, sent to the file system driver through the minifilter, the file system driver establishes a buffer, and the buffer manager and the memory manager jointly initiate a non-buffered paging read operation; Steps 7-9 are: the request is encapsulated as an IRP by the IO manager, sent to the file system driver again through the minifilter, and the file system driver reads the file from the disk; Steps 10-18 are: return step by step.

[0072] S5: If the remote sensing data authority and the read, write or modify operation authority of the encrypted remote sensing data are not obtained, a permission verification request and verification order information of the encrypted remote sensing data are sent to the remote sensing data platform;

[0073] It should be noted that, in this embodiment, when the remote sensing data encryption and decryption system cannot complete the authority authentication or communicates with the remote sensing data encryption and decryption regularly, the remote sensing data encryption and decryption system will send an authority verification request and verification order information to the remote sensing data platform to perform authority authentication on the encrypted remote sensing data.

[0074] S6: The remote sensing data platform responds to the permission verification request of the remote sensing data encryption and decryption system, obtains the user information in the verification order information and compares it with the user information data stored in the first database, and performs permission identification based on the preset remote sensing data confidentiality level and user confidentiality level authority to obtain the key information for encrypting the remote sensing data;

[0075] Specifically, in this embodiment, the remote sensing data platform responds to the authority verification request of the remote sensing data encryption and decryption system, extracts the user information of the encrypted remote sensing data from the verification order information, and then compares it with all user information data stored in the first database, and performs authority authentication based on the remote sensing data platform's own authority level and user confidentiality level to obtain the key information for the encrypted remote sensing data.

[0076] S7: The remote sensing data platform uses the blockchain information in the header information block data of the encrypted remote sensing data to compare and verify the first hash value and the second hash value in the verification order information, as well as the key information output in combination with the authority authentication, and outputs the data authority instruction based on the verification result.

[0077] Specifically, in this embodiment, the remote sensing data platform reads the blockchain information in the header information block data of the encrypted remote sensing data, and compares it one by one with the first hash value and the second hash value in the verification order information, as well as the key information output by the authority authentication, to verify the integrity and feasibility of the encrypted remote sensing data. After verification, a data permission instruction is sent to the remote sensing data encryption and decryption system based on the verification result; it should be noted that, in this embodiment, the data permission instruction includes the data permission usage period and the data permission scope.

[0078] S8: The remote sensing data encryption and decryption system receives data permission instructions for encrypted remote sensing data from the remote sensing data platform, and decrypts the encrypted remote sensing data based on the data permission instructions to obtain operation permissions for reading, writing or modifying the encrypted remote sensing data.

[0079] Specifically, in this embodiment, the remote sensing data encryption and decryption system receives a data permission instruction sent from the remote sensing data platform to control the read, write or modify scope and permission usage period of the encrypted remote sensing data.

[0080] Furthermore, after performing authority identification based on the preset remote sensing data confidentiality level and user confidentiality level authority and obtaining key information for encrypting remote sensing data, it also includes:

[0081] The key information output by the authentication and the user information in the verification order information are sent to the second database of the remote sensing data encryption and decryption system to update the key information and remote sensing data authority in the second database.

[0082] Specifically, in this embodiment, after the remote sensing data platform performs authority authentication and outputs the key information, the key information and the user information in the verification order information are sent to the second database of the remote sensing data encryption and decryption system to update the key information and remote sensing data permissions in the second database.

[0083] Example 2

[0084] See also Figure 2 As shown, the present invention also provides a remote sensing data encryption and decryption system based on blockchain, the system comprising:

[0085] The data acquisition module 100 is used to acquire the original remote sensing data, generate the header information block data of the original remote sensing data based on the blockchain, and store the header information block data corresponding to the original remote sensing data in the first database of the remote sensing data platform; wherein the header information block data includes the first hash value, the second hash value, the blockchain chain information, the user information and the production attribute information;

[0086] The order information acquisition module 200 is used to acquire the verification order information of the encrypted remote sensing data; wherein the verification order information includes the user information, key information, first hash value and second hash value of the encrypted remote sensing data;

[0087] The authority verification module 300 is used to traverse the second database of the remote sensing data encryption and decryption system based on the user information and key information in the verification order information, and obtain the remote sensing data authority and the read, write or modify operation authority of the encrypted remote sensing data.

[0088] See also Figure 3 As shown, the present invention also provides a remote sensing data platform, the remote sensing data platform includes:

[0089] The data storage module 400 is used to receive the header information block data corresponding to the original remote sensing data transmitted by the remote sensing data encryption and decryption system, and store it in the first database;

[0090] The authority authentication module 500 is used to respond to the authority authentication request of the remote sensing data encryption and decryption system, obtain the user information in the verification order information and compare it with the user information data stored in the first database, and perform authority authentication based on the preset remote sensing data confidentiality level and user confidentiality level authority to obtain the key information for encrypting the remote sensing data;

[0091] The permission instruction generation module 600 is used to compare and verify the blockchain information in the header information block data of the encrypted remote sensing data with the first hash value and the second hash value in the verification order information, and the key information output in combination with the permission authentication, and output the data permission instruction based on the verification result.

[0092] It should be noted that the modules in the system and platform of Example 2 correspond to the steps in the method of Example 1. The steps in the method of Example 1 have been described in detail in Example 1, and the contents of the modules in the system and platform will not be described in detail in this Example 2.

[0093] Example 3

[0094] See also Figure 5 As shown, this embodiment further provides a computer device, including a memory 1005 and a processor 1001, wherein the memory 1005 stores a computer program, and the processor 1001 implements the steps of any one of the above methods when executing the computer program.

[0095] It should be noted that the processor 1001 is used to execute the steps in the above method embodiments according to the instructions in the program code. Alternatively, the processor 1001 implements the functions of each module / unit in the above system / device embodiments when executing the computer program.

[0096] Specifically, in this embodiment, the computer program may be divided into one or more modules / units, one or more modules / units are stored in the memory 1005, and are executed by the processor 1001 to complete the present application. One or more modules / units may be a series of computer program instruction segments that can complete specific functions, and the instruction segments are used to describe the execution process of the computer program in the terminal device.

[0097] The terminal device may be a computing device such as a desktop computer, a notebook, a PDA, a cloud server, etc. The terminal device may include, but is not limited to, a processor 1001 and a memory 1005. Those skilled in the art will appreciate that this does not constitute a limitation on the terminal device, and may include more or fewer components than shown in the figure, or a combination of certain components, or different components. For example, the terminal device may also include an input / output device 1003, a network access device 1002, a bus 1006, etc.

[0098] The processor 1001 may be a central processing unit (CPU), or other general-purpose processors 1001, digital signal processors 1001 (DSP), application-specific integrated circuits (ASIC), field-programmable gate arrays (FPGA), or other programmable logic devices, discrete gate or transistor logic devices, discrete hardware components, etc. The general-purpose processor 1001 may be a microprocessor or any conventional processor, etc.

[0099] The memory 1005 may be an internal storage unit of the terminal device, such as a hard disk or memory of the terminal device. The memory 1005 may also be an external storage device 1004 of the terminal device, such as a plug-in hard disk, a smart memory card (SmartMedia Card, SMC), a secure digital (Secure Digital, SD) card, a flash card (Flash Card), etc. equipped on the terminal device. Further, the memory 1005 may also include both the internal storage unit of the terminal device and the external storage device 1004. The memory 1005 is used to store computer programs and other programs and data required by the terminal device. The memory 1005 may also be used to temporarily store data that has been output or is to be output.

[0100] Those skilled in the art can clearly understand that, for the convenience and brevity of description, the specific working processes of the above-described systems, systems and units can refer to the corresponding processes in the aforementioned method embodiments and will not be repeated here.

[0101] Example 4

[0102] This embodiment provides a computer-readable storage medium on which a computer program is stored. When the computer program is executed by a processor, the steps of any one of the above methods are implemented.

[0103] Among them, the computer readable storage medium can be, for example, but not limited to, an electrical, magnetic, optical, electromagnetic, infrared, or semiconductor system, system or device, or any combination of the above. More specific examples of computer readable storage media (a non-exhaustive list) include: an electrical connection with one or more wires, a portable computer disk, a hard disk. Random Access Memory (RAM), Read-Only Memory (ROM), Erasable Programmable Read Only Memory (EPROM), registers, hard disks, optical fibers, portable compact disk read-only memory (CD-ROM), optical storage devices, magnetic storage devices, or the above in a suitable combination, or any other form of computer readable storage medium known in the art.

[0104] An exemplary storage medium is coupled to a processor so that the processor can read information from the storage medium and write information to the storage medium. Of course, the storage medium can also be a component of the processor. The processor and the storage medium can be located in an application-specific integrated circuit (ASIC). In an embodiment of the present invention, a computer-readable storage medium can be any tangible medium containing or storing a program that can be used by or in combination with an instruction execution system, system, or device.

[0105] The specific implementation methods described above further illustrate the objectives, technical solutions and beneficial effects of the present invention in detail. It should be understood that the above description is only a specific implementation method of the present invention and is not intended to limit the scope of protection of the present invention. Any modifications, equivalent substitutions, improvements, etc. made within the spirit and principles of the present invention should be included in the scope of protection of the present invention.

Claims

1. A remote sensing data encryption and decryption method based on blockchain, It is characterized in that The remote sensing data encryption and decryption method is used in a remote sensing data encryption and decryption system, and the method includes: Obtaining original remote sensing data, generating header information block data of the original remote sensing data based on blockchain, and storing the header information block data corresponding to the original remote sensing data in a first database of the remote sensing data platform; wherein the header information block data includes a first hash value, a second hash value, blockchain on-chain information, user information, and production attribute information; Acquire verification order information of the encrypted remote sensing data; wherein the verification order information includes user information, key information, a first hash value, and a second hash value of the encrypted remote sensing data; Based on the user information and key information in the verification order information, the second database of the remote sensing data encryption and decryption system is traversed to obtain the remote sensing data authority and the read, write or modify operation authority of the encrypted remote sensing data.

2. According to the blockchain-based remote sensing data encryption and decryption method of claim 1, It is characterized in that When traversing the second database of the remote sensing data encryption and decryption system, if the remote sensing data authority and the read, write or modify operation authority of the encrypted remote sensing data are not obtained, a permission verification request and verification order information of the encrypted remote sensing data are sent to the remote sensing data platform; Receive data permission instructions for encrypted remote sensing data from a remote sensing data platform, and decrypt the encrypted remote sensing data based on the data permission instructions to obtain permission to read, write or modify the encrypted remote sensing data; wherein, the data permission instructions are performed by the remote sensing data platform based on preset remote sensing data confidentiality levels and user confidentiality permissions to authenticate user information, and use the blockchain information in the header information block data of the encrypted remote sensing data to compare and verify with the first hash value and the second hash value in the request order information, as well as the key information output in combination with the permission authentication, and output based on the verification result.

3. According to the blockchain-based remote sensing data encryption and decryption method of claim 1, It is characterized in that Obtain remote sensing data and generate the header information block data of the blockchain of remote sensing data, specifically: Acquire original remote sensing data, and perform a hash operation on the original remote sensing data to obtain a first hash value corresponding to the original remote sensing data; Randomly generate original key information for the original remote sensing data, encrypt the original remote sensing data, and perform hash operation on the encrypted original remote sensing data and the original key information to obtain a corresponding second hash value; Acquire remote sensing data resource information, and generate blockchain information based on the remote sensing data resource information, the first hash value, and the second hash value; Obtain user information of users who purchase remote sensing data, as well as production attribute information of remote sensing data production.

4. A remote sensing data encryption and decryption method based on blockchain, It is characterized in that The remote sensing data encryption and decryption method is used for the remote sensing data platform, and the method includes: Receiving header information block data corresponding to the original remote sensing data transmitted by the remote sensing data encryption and decryption system, and storing the data in the first database; In response to the permission verification request of the remote sensing data encryption and decryption system, the user information in the verification order information is obtained and compared with the user information data stored in the first database, and the permission is authenticated based on the preset remote sensing data confidentiality level and user confidentiality level permission to obtain the key information for encrypting the remote sensing data; The blockchain information in the header information block data of the encrypted remote sensing data is compared and verified with the first hash value and the second hash value in the verification order information, as well as the key information output in combination with the authority authentication, and the data authority instruction is output based on the verification result.

5. According to the remote sensing data encryption and decryption method based on blockchain according to claim 4, It is characterized in that After performing authority identification based on the preset remote sensing data confidentiality level and user confidentiality level authority and obtaining the key information for encrypting remote sensing data, it also includes: The key information output by the authentication and the user information in the verification order information are sent to the second database of the remote sensing data encryption and decryption system to update the key information and remote sensing data authority in the second database.

6. According to a blockchain-based remote sensing data encryption and decryption method as described in claim 4, It is characterized in that Data permission instructions include data permission usage period and data permission scope.

7. A remote sensing data encryption and decryption system based on blockchain, It is characterized in that The system comprises: A data acquisition module is used to acquire original remote sensing data, generate header information block data of the original remote sensing data based on blockchain, and store the header information block data corresponding to the original remote sensing data in the first database of the remote sensing data platform; wherein the header information block data includes a first hash value, a second hash value, blockchain on-chain information, user information, and production attribute information; An order information acquisition module is used to acquire verification order information of encrypted remote sensing data; wherein the verification order information includes user information, key information, a first hash value, and a second hash value of the encrypted remote sensing data; The authority verification module is used to traverse the second database of the remote sensing data encryption and decryption system based on the user information and key information in the verification order information, and obtain the remote sensing data authority and the read, write or modify operation authority of the encrypted remote sensing data.

8. A remote sensing data platform, It is characterized in that The remote sensing data platform includes: A data storage module, used to receive header information block data corresponding to the original remote sensing data transmitted by the remote sensing data encryption and decryption system, and store the data in the first database; The authority authentication module is used to respond to the authority authentication request of the remote sensing data encryption and decryption system, obtain the user information in the verification order information and compare it with the user information data stored in the first database, and perform authority authentication based on the preset remote sensing data confidentiality level and user confidentiality level authority to obtain the key information for encrypting the remote sensing data; The permission instruction generation module is used to compare and verify the blockchain information in the header information block data of the encrypted remote sensing data with the first hash value and the second hash value in the verification order information, and the key information output in combination with the permission identification, and output the data permission instruction based on the verification result.

9. A computer device comprising a memory and a processor, wherein the memory stores a computer program. It is characterized in that When the processor executes the computer program, the steps of the method according to any one of claims 1 to 6 are implemented.

10. A computer-readable storage medium having a computer program stored thereon, It is characterized in that When the computer program is executed by a processor, the steps of the method according to any one of claims 1 to 6 are implemented.

Images