Industrial internet trusted identifier and existing identifier fusion method, system and equipment

Abstract

The invention discloses a method, a system and equipment for fusing an industrial internet credible identifier and an existing identifier, and the method comprises the steps: integrating the credible identifier of an industrial internet identifier system with the existing identifier of an existing identifier system, so as to associate the credible identifier with the existing identifier; the trusted identifier in the industrial internet environment adopts a secure communication mechanism to transmit identifier information of the trusted identifier, and the existing identifier adopts an authentication mechanism to access or modify the identifier information; defining a data structure of the identification information on the block chain, and recording the identification information on a distributed account book on the block chain by using a block chain technology; a real-time monitoring system is established, identification information is continuously monitored and analyzed, and measures are rapidly taken when abnormity is found. Through the comprehensive application of the technical measures, the safety, the credibility and the management efficiency of identification analysis in the industrial internet environment are improved.

Description

Technical Field

[0001] The present invention relates to the field of industrial Internet technology, and in particular to methods, systems and devices for integrating industrial Internet trusted identifiers with existing identifiers. Background Art

[0002] The Industrial Internet identification resolution system is an important part of the Industrial Internet. It is not only the infrastructure supporting the interconnection of the Industrial Internet network, but also the core key to realizing the sharing and use of Industrial Internet data. The Industrial Internet identification is an identifier that is assigned to Industrial Internet objects (such as products, parts or machinery and equipment) according to certain rules and is easy for people or machines to identify. It is the unique identity of the Industrial Internet object in the information network and an important way to distinguish different Industrial Internet objects.

[0003] In recent years, blockchain technology has been widely used in finance, medical care, supply chain management and other fields. Through its decentralized, tamper-proof, open and transparent characteristics, it is expected to solve the problems of serious centralization, deletion or tampering of source data, uneven distribution of interests among multiple parties, and single point failure in the industrial Internet identification resolution system. However, the identification may have been tampered with before being uploaded to the chain, and the blockchain cannot ensure that the identification before being uploaded to the chain is safe and reliable. At present, the existing technology uses group signature technology to improve the credibility of the identification. This method requires multiple group signatures to sign the identification, and the implementation steps are too complicated, which leads to troublesome identity verification. Summary of the invention

[0004] The present invention provides a method for integrating an industrial Internet trusted identifier with an existing identifier to solve the technical problem of how to improve the identifier's credibility while simplifying identity authentication.

[0005] In order to solve the above technical problems, an embodiment of the present invention provides a method for integrating an industrial Internet trusted identifier with an existing identifier, and the method includes:

[0006] Integrate the trusted identifier of the industrial Internet identification system with the existing identifier of the existing identification system to associate the trusted identifier with the existing identifier;

[0007] The trusted identifier in the industrial Internet environment uses a secure communication mechanism to transmit the identification information of the trusted identifier, and the existing identifier uses an authentication mechanism to access or modify the identification information;

[0008] Defining a data structure of the identification information on the blockchain, and using blockchain technology to record the identification information in a distributed ledger on the blockchain;

[0009] Establish a real-time monitoring system to continuously monitor and analyze the identification information and take prompt measures when abnormalities are found.

[0010] Furthermore, the trusted identifier of the industrial Internet identification system is integrated with the existing identifier of the existing identification system to associate the trusted identifier with the existing identifier. The specific steps include:

[0011] Creating a mapping table and defining fields of the mapping table, wherein the fields include a device ID and an employee ID;

[0012] Establishing an index between the device identification and the employee identification;

[0013] Inserting mapping information into the mapping table, the mapping information including a unique identifier of the mapping relationship, a device identifier, an employee identifier, and an associated time;

[0014] When the device identification or the employee identification changes, the mapping information in the mapping table is updated in time through transactions or corresponding update logic.

[0015] Furthermore, before executing the step of establishing an index between the device identification and the employee identification, it is necessary to first verify the employee identity and the legitimacy of the device identification, and then execute if the verification is successful.

[0016] Furthermore, the trusted identifier in the industrial Internet environment adopts a secure communication mechanism to transmit the identification information of the trusted identifier, and the specific steps of the existing identifier using an authentication mechanism to access or modify the identification information include:

[0017] Configure secure communication protocols suitable for the Industrial Internet and use strong cipher suites and encryption algorithms;

[0018] Deploy two-factor authentication, requiring users to provide multiple verification factors, and use secure authentication protocols;

[0019] Configure a public key infrastructure system to issue digital certificates to devices and users and enforce the use of certificates for authentication;

[0020] Setting an access control list to limit the user's access rights to the identification information; or establishing different roles, defining permissions for each role, and setting access control based on the role;

[0021] Use secure communication channels and encrypt data transmission paths.

[0022] Furthermore, a single sign-on system is integrated so that users can access multiple related systems with just one login.

[0023] Furthermore, the specific steps of defining the data structure of the identification information on the blockchain and recording the identification information in a distributed ledger on the blockchain using blockchain technology include:

[0024] Determine various fields of the identification information, including device identification, employee identification, and associated time;

[0025] Deploy a smart contract to a blockchain network, and submit the identification information transaction to the blockchain network through the smart contract or API;

[0026] The change event of the identification information is defined in the smart contract, and the change of the identification information is notified to the nodes in the relevant blockchain network using an event mechanism.

[0027] Furthermore, the specific steps of establishing a real-time monitoring system to continuously monitor and analyze the identification information and take prompt measures when an abnormality is found include:

[0028] Integrate monitoring tools into key nodes of the system to obtain monitoring data of the identification information in real time;

[0029] Use big data analysis tools to analyze the real-time monitoring data;

[0030] Use user behavior analysis tools to analyze usage patterns of the identification information and identify unusual behaviors;

[0031] Develop rules or machine learning models for abnormal behavior to identify potential risks and anomalies;

[0032] Configure alerts and response rules to automatically trigger automated responses when trigger conditions are met. The automated responses include automatically blocking malicious behaviors and notifying relevant personnel.

[0033] An embodiment of the present invention further provides a computer device, including:

[0034] one or more processors;

[0035] A storage device for storing one or more programs;

[0036] When the one or more programs are executed by the one or more processors, the one or more processors are enabled to implement any of the above methods.

[0037] An embodiment of the present invention further provides a computer-readable storage medium storing a computer program, which implements any of the above-mentioned methods when executed by a processor.

[0038] Beneficial effects of the embodiments of the present invention:

[0039] The present invention integrates different identification systems to facilitate unified management, improve security and authority control, and on this basis, adopts a secure communication and authentication mechanism to ensure the confidentiality and integrity of identification information, introduces blockchain technology, establishes unalterable identification records, and enhances credibility and transparency. In addition, a real-time monitoring system is established to continuously monitor and analyze identification information, and strict user authority management is implemented to ensure that only legitimate users can access and modify identification information. The comprehensive application of these technical measures improves the security, credibility and management efficiency of identity resolution in the industrial Internet environment. BRIEF DESCRIPTION OF THE DRAWINGS

[0040] Figure 1 is a flow chart of an embodiment of the present invention;

[0041] Figure 2 is a flowchart of a specific implementation of step S10 of the present invention;

[0042] Figure 3 is a flowchart of a specific implementation of step S20 of the present invention;

[0043] Figure 4 is a flow chart of a specific implementation of step S30 of the present invention;

[0044] Figure 5 is a flowchart of a specific implementation of step S40 of the present invention;

[0045] Figure 6 is a schematic block diagram of an example computer device of an embodiment of the present invention.

[0046] The reference numerals of the drawings in the specification are as follows:

[0047] 600, computer device; 601, computing unit; 602, ROM; 603, RAM; 604, bus; 605, I / O interface; 606, input unit; 607, output unit; 608, storage unit; 609, communication unit. DETAILED DESCRIPTION

[0048] The following will be combined with the drawings in the embodiments of the present invention to clearly and completely describe the technical solutions in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0049] Embodiment 1

[0050] Please refer to Figure 1, a method for integrating an industrial Internet trusted identifier with an existing identifier provided by an embodiment of the present invention, the method comprising:

[0051] S10: The trusted identifier of the industrial Internet identification system is integrated with the existing identifier of the existing identification system to associate the trusted identifier with the existing identifier.

[0052] The trusted identifier of this embodiment is the device identifier, and the existing identifier is the employee identifier. The device identifier and the employee identifier are associated to facilitate unified management and improve security and authority control.

[0053] S20: Trusted identifiers in the industrial Internet environment use secure communication mechanisms to transmit the identification information of trusted identifiers to ensure the confidentiality and integrity of the identification information transmission. Existing identifiers use authentication mechanisms to access or modify identification information, which can improve the credibility of the identifiers.

[0054] The secure communication mechanism of this embodiment specifically adopts a suitable secure communication protocol and encryption algorithm. The secure communication protocol can be specifically the Transport Layer Security / Secure Sockets Layer (TLS / SSL) protocol, and is configured to use a strong cryptographic suite to ensure the confidentiality of the identification information during transmission. The encryption algorithm can be specifically a symmetric encryption algorithm (AES) to ensure the integrity of the identification information during transmission.

[0055] The authentication mechanism implemented in this embodiment can be specifically two-factor authentication, that is, requiring users to provide a second identity authentication factor in addition to the password when logging in, such as a mobile phone verification code, fingerprint, etc.

[0056] S30: Define the data structure of the identification information on the blockchain, and use blockchain technology to record the identification information in a distributed ledger on the blockchain.

[0057] Specifically, evaluate the characteristics, performance and applicable scenarios of different blockchain platforms, select blockchain platforms that meet business needs, such as Ethereum, Hyper ledger Fabric, etc., determine the various fields of identification information, including device identification, employee identification, associated time, etc., and design appropriate data structures in combination with the data model of the blockchain platform to ensure that storage and retrieval requirements can be met. Design a specialized data structure that not only includes identification information, but also takes into account the characteristics of the blockchain platform to ensure that data can be stored and retrieved efficiently.

[0058] Deploy blockchain nodes to ensure the replication and synchronization of distributed ledgers, and use blockchain technology to establish tamper-proof identification records to enhance credibility and transparency.

[0059] S40: Establish a real-time monitoring system to continuously monitor and analyze identification information and take prompt measures when anomalies are detected.

[0060] Specifically, configure real-time monitoring tools such as Prometheus and Grafana according to system requirements and technical architecture to ensure compatibility with the system. Integrate monitoring tools into key nodes of the system to obtain real-time monitoring data of identification information, including access frequency, association relationships, etc.

[0061] The present invention integrates different identification systems to facilitate unified management, improve security and authority control, and on this basis, adopts a secure communication and authentication mechanism to ensure the confidentiality and integrity of identification information, introduces blockchain technology, establishes unalterable identification records, and enhances credibility and transparency. In addition, a real-time monitoring system is established to continuously monitor and analyze identification information, and strict user authority management is implemented to ensure that only legitimate users can access and modify identification information. The comprehensive application of these technical measures improves the security, credibility and management efficiency of identity resolution in the industrial Internet environment.

[0062] Embodiment 2

[0063] Please refer to Figure 2 Based on the first embodiment, the specific steps of step S10 of the present invention include:

[0064] S11: Create a mapping table and define fields of the mapping table, where the fields include a device ID and an employee ID.

[0065] Clarify the characteristics and requirements of each identification system, design identification mapping and conversion mechanisms, and ensure the relevance and consistency between identifications.

[0066] A database is created using a database management system. The database management system of this embodiment may be MySQL, PostgreSQL, or MongoDB. A mapping table for storing the mapping relationship between device identifiers and employee identifiers is created in the database. The mapping table may be named Device Employee Mapping. The fields in the mapping table may include a unique identifier of the mapping relationship, a device identifier, an employee identifier, and an associated time. The unique identifier of the mapping relationship may use an auto-increment primary key.

[0067] S12: An index is established between the device ID and the employee ID.

[0068] Create indexes for device IDs and employee IDs to speed up search and association operations, so that the indexes can be effectively updated when the mapping table is maintained later.

[0069] Specifically, before executing step S12, it is necessary to first verify the legitimacy of the employee identity and the device identification. If the verification is successful, then execute step S12.

[0070] Implement an identity authentication mechanism in the Industrial Internet system to associate device IDs with employee IDs. When a device is connected, employee identity authentication is required and the legitimacy of the device ID is verified. After the verification is passed, the device ID and the corresponding employee ID are associated in the mapping table.

[0071] S13: inserting mapping information into the mapping table, the mapping information including a unique identifier of the mapping relationship, a device identifier, an employee identifier, and an associated time.

[0072] Set a trigger or corresponding business logic in the system. When a device is associated with an employee, insert a new record into the mapping table. The record includes information such as the unique identifier of the mapping relationship, the device ID, the employee ID, and the association time.

[0073] S14: When the device identification or employee identification changes, the mapping information in the mapping table is updated in time through transactions or corresponding update logic.

[0074] Monitor events such as employee transfers or equipment replacements to trigger updates to the mapping table, ensuring that identification changes are reflected in a timely manner and that the accuracy of the mapping table is maintained.

[0075] Embodiment 3

[0076] Please refer to Figure 3 Based on the first and second embodiments, the specific steps of step S20 of the present invention include:

[0077] S21: Configure secure communication protocols suitable for the Industrial Internet, such as TLS / SSL, and use strong cipher suites and encryption algorithms.

[0078] In order to ensure the secure communication of identification information, the TLS / SSL secure communication protocol is used and a strong cipher suite is configured to ensure the confidentiality of data transmission. At the same time, encryption algorithms such as AES are used to ensure the integrity of identification information and effectively prevent data from being stolen or tampered with during transmission.

[0079] S22: Deploy two-factor authentication, requiring users to provide multiple verification factors, and use secure authentication protocols.

[0080] Deploy two-factor authentication, requiring users to provide a second authentication factor in addition to their password when logging in, such as a mobile phone verification code, fingerprint, etc. This multi-factor authentication mechanism significantly improves the security of the system, effectively prevents security risks caused by a single password being cracked, improves the credibility of the identification, and ensures that only legitimate users can access identification information.

[0081] Furthermore, you can also require regular password updates and use password hashes and salt values ​​to store user passwords to prevent risks caused by password leaks and ensure the security of user accounts.

[0082] S23: Configure the public key infrastructure (PKI) system, issue digital certificates to devices and users, and enforce the use of certificates for identity authentication to ensure the legitimacy of both parties in communication. This provides reliable identity authentication for the entire system.

[0083] Preferably, the system will also regularly update the certificate to prevent security risks caused by certificate expiration or leakage.

[0084] S24: Set an access control list (ACL) to limit the user's access rights to the identification information; or, formulate different roles, define permissions for each role, and set role-based access control (RBAC).

[0085] The present invention has formulated a strict access control strategy, which limits the access to identification information through the access control list (ACL), defines the ACL for each identification information object, clarifies which users have access rights, follows the principle of least privilege, and ensures that users can only access the information they need.

[0086] Alternatively, identify different user roles, such as administrators, ordinary users, approvers, etc., define appropriate permissions for each user role, such as read, modify, delete and other operations, grant permissions to roles, assign roles to users according to authorization policies, and set different levels of access rights for different users. This fine-grained access control ensures that only authorized users can access corresponding identification information or perform sensitive operations, effectively preventing unauthorized access and potential information leakage.

[0087] Furthermore, a session timeout mechanism can be set in the system to ensure that users only have permissions within the necessary time frame, revoke permissions in a timely manner when users no longer need access, and force users to log in again to prevent risks from long-inactive session windows.

[0088] S25: Use secure communication channels and encrypt data transmission paths.

[0089] Use a virtual private network (VPN) or other secure communication channel to encrypt the data transmission path, avoid transmitting identification information in plain text, and ensure the security of data during transmission. Preferably, use a mechanism such as a message authentication code (MAC) to prevent data tampering attacks.

[0090] To improve user experience and system security, a single sign-on (SSO) system is integrated to uniformly manage user authentication information, allowing users to access multiple related systems with just one login.

[0091] Embodiment 4

[0092] Please refer to Figure 4Based on the first embodiment, the second embodiment or the third embodiment, the specific steps of step S30 of the present invention include:

[0093] S31: Determine various fields of identification information, including device identification, employee identification, and associated time.

[0094] By defining the data structure of identification information on the blockchain, it is ensured that storage and retrieval requirements can be met.

[0095] S32: Deploy the smart contract to the blockchain network, and submit the identification information transaction to the blockchain network through the smart contract or API.

[0096] Smart contracts are designed and deployed to define the verification rules and logic of identification information. Smart contracts are deployed to the blockchain network and become trusted codes that can be executed by each node. By submitting identification information transactions to the blockchain network through smart contracts or APIs, the system can automatically perform verification and management of identification information, ensuring the legitimacy and consistency of identification information. This automated management based on smart contracts greatly improves the efficiency and reliability of the system.

[0097] Furthermore, data encryption is performed before identification information is uploaded to the chain to protect the privacy of sensitive information. The identification information is encrypted using an encryption algorithm and decrypted only when the access conditions are met, ensuring that only authorized users can access the plaintext information.

[0098] S33: Define the change event of identification information in the smart contract, and use the event mechanism to notify the nodes in the relevant blockchain network of the change of identification information.

[0099] Define the change events of identification information in the smart contract, such as addition, update, deletion, etc. Use the smart contract to respond to changes in identification information and trigger corresponding events.

[0100] Embodiment 5

[0101] Please refer to Figure 5 Based on the first embodiment, the second embodiment, the third embodiment or the fourth embodiment, the specific steps of step S40 of the present invention include:

[0102] S41: Integrate monitoring tools into key nodes of the system to obtain monitoring data of identification information in real time.

[0103] The monitoring tool can be Prometheus or Grafana, which is used to track the real-time usage of identification information, including key indicators such as access frequency and changes in association relationships. The system is designed with a dashboard to display key data of identification information in real time, so that system administrators can intuitively understand the usage of identification information. This real-time monitoring and visual display of real-time usage enables the system to promptly detect and respond to potential abnormal behaviors, improving the system's response speed and manageability.

[0104] Preferably, you can also configure a log collection tool, such as ELK Stack, to collect and analyze log information in real time, including identification operations, access events, etc. By recording identification operations and access events in detail, the system can conduct more in-depth analysis and auditing, providing strong support for security management. This comprehensive log management provides an important basis for post-event tracing and problem location.

[0105] S42: Use big data analysis tools to analyze real-time monitoring data.

[0106] The big data analysis tool can be Apache Spark or Hadoop. This anomaly detection mechanism based on big data analysis greatly improves the system's ability to identify and respond to security threats.

[0107] Preferably, a permission audit function can also be designed to record user login, access and operation events, and detect potential permission abuse or abnormal usage through real-time monitoring tools or log analysis systems, so as to audit and discover abnormal behavior.

[0108] S43: Use user behavior analysis tools to analyze usage patterns of identification information and identify unusual behaviors.

[0109] S44: Develop rules or machine learning models for abnormal behavior to identify potential risks and anomalies.

[0110] Preferably, a behavior recognition model based on field anomalies is established. The model identifies potential data anomalies or security threats by analyzing the usage patterns, change trends and other characteristics of the fields, thereby improving the security protection capabilities of the system.

[0111] S45: Configure alerts and response rules to automatically trigger automated responses when trigger conditions are met. Automated responses include automatically blocking malicious behavior and notifying relevant personnel.

[0112] Develop real-time monitoring strategies, including monitoring frequency, trigger conditions, etc. Trigger conditions are used to define what behaviors are considered abnormal behaviors, and automatically trigger alarms or responses when the trigger conditions are met. When abnormal permissions occur, timely notify relevant personnel, temporarily disable accounts, automatically isolate suspicious devices, or dynamically adjust access permissions.

[0113] Preferably, a multi-level linkage alarm system is designed to trigger different levels of alarms according to the severity of abnormal behavior. Combined with automated response, rapid response and processing of security threats can be achieved.

[0114] Preferably, monitoring indicators and dashboards are reviewed regularly to ensure that they are consistent with actual needs, and monitoring strategies and rules are adjusted according to the evolution of the system and changes in needs.

[0115] Embodiment 6

[0116] The embodiment of the present invention also provides an industrial Internet trusted identification and existing identification integration system, which includes:

[0117] An integration module, used to integrate the trusted identifier of the industrial Internet identification system with the existing identifier of the existing identification system to associate the trusted identifier with the existing identifier;

[0118] A transmission module is used for the trusted identification in the industrial Internet environment to use a secure communication mechanism to transmit the identification information of the trusted identification, and the existing identification uses an authentication mechanism to access or modify the identification information;

[0119] The on-chain module is used to define the data structure of the identification information on the blockchain and use blockchain technology to record the identification information in the distributed ledger on the blockchain;

[0120] The monitoring module is used to establish a real-time monitoring system to continuously monitor and analyze identification information and take prompt measures when anomalies are found.

[0121] The beneficial effects of the system of the embodiment of the present invention are equivalent to the beneficial effects of the above-mentioned industrial Internet trusted identification and existing identification integration method, which will not be elaborated here.

[0122] Furthermore, the trusted identifier of the industrial Internet identification system is integrated with the existing identifier of the existing identification system, and the specific steps of associating the trusted identifier with the existing identifier include:

[0123] Create a mapping table and define its fields, including device ID and employee ID;

[0124] Establish an index between the equipment ID and the employee ID;

[0125] Inserting mapping information into a mapping table, the mapping information including a unique identifier of the mapping relationship, a device identifier, an employee identifier, and an associated time;

[0126] When the device ID or employee ID changes, the mapping information in the mapping table is updated in a timely manner through transactions or corresponding update logic.

[0127] Furthermore, before executing the step of establishing an index between the device identification and the employee identification, the legitimacy of the employee identity and the device identification needs to be verified first, and the step is executed only if the verification is successful.

[0128] Furthermore, the trusted identification in the industrial Internet environment adopts a secure communication mechanism to transmit the identification information of the trusted identification, and the specific steps of the existing identification using the authentication mechanism to access or modify the identification information include:

[0129] Configure secure communication protocols suitable for the Industrial Internet and use strong cipher suites and encryption algorithms;

[0130] Deploy two-factor authentication, requiring users to provide multiple verification factors, and use secure authentication protocols;

[0131] Configure a public key infrastructure (PKI) system to issue digital certificates to devices and users and enforce the use of certificates for authentication;

[0132] Set up access control lists (ACLs) to limit user access to identity information; or, create different roles and define permissions for each role to set up role-based access control (RBAC);

[0133] Use secure communication channels and encrypt data transmission paths.

[0134] Furthermore, a single sign-on (SSO) system is integrated so that users can access multiple related systems with just one login.

[0135] Furthermore, the specific steps of defining the data structure of the identification information on the blockchain and recording the identification information in the distributed ledger on the blockchain using the blockchain technology include:

[0136] Determine the various fields of identification information, including device identification, employee identification, and associated time;

[0137] Deploy smart contracts to the blockchain network and submit identification information transactions to the blockchain network through smart contracts or APIs;

[0138] Define the change event of identification information in the smart contract, and use the event mechanism to notify the nodes in the relevant blockchain network of the change of identification information.

[0139] Furthermore, the specific steps for establishing a real-time monitoring system to continuously monitor and analyze identification information and take prompt measures when abnormalities are found include:

[0140] Integrate monitoring tools into key nodes of the system to obtain monitoring data of identification information in real time;

[0141] Use big data analysis tools to analyze real-time monitoring data;

[0142] Use user behavior analysis tools to analyze usage patterns of identification information and identify unusual behavior;

[0143] Develop rules or machine learning models for abnormal behavior to identify potential risks and anomalies;

[0144] Configure alerts and response rules to automatically trigger automated responses when trigger conditions are met. Automated responses include automatically blocking malicious behavior and notifying relevant personnel.

[0145] Embodiment 7

[0146] An embodiment of the present invention further provides a computer device, comprising:

[0147] one or more processors;

[0148] A storage device for storing one or more programs;

[0149] When one or more programs are executed by one or more processors, one or more processors implement the above-mentioned method of integrating the industrial Internet trusted identity with the existing identity.

[0150] The beneficial effects of the computer device of the embodiment of the present invention are equivalent to the beneficial effects of the above-mentioned industrial Internet trusted identification and existing identification integration method, which will not be elaborated here.

[0151] An embodiment of the present invention also provides a storage medium on which a computer program is stored, and when the program is processed, the method for integrating the above-mentioned industrial Internet trusted identification with the existing identification is implemented.

[0152] The beneficial effects of the storage medium of the present invention are equivalent to the beneficial effects of the above-mentioned industrial Internet trusted identification and existing identification integration method, which will not be elaborated here.

[0153] Figure 6 A schematic block diagram of an example computer device 600 that can be used to implement an embodiment of the present invention is shown. The computer device is intended to represent various forms of digital computers, such as laptop computers, desktop computers, workstations, personal digital assistants, servers, blade servers, mainframe computers, and other suitable computers. The computer device can also represent various forms of mobile devices, such as personal digital assistants, cellular phones, smart phones, wearable devices, and other similar computing devices. The components shown herein, their connections and relationships, and their functions are merely examples and are not intended to limit the implementation of the present invention described and / or required herein.

[0154] like Figure 6As shown, the computer device 600 includes a computing unit 601, which can perform various appropriate actions and processes according to a computer program stored in a read-only memory (ROM) 602 or a computer program loaded from a storage unit 608 into a random access memory (RAM) 603. In the RAM 603, various programs and data required for the operation of the device can also be stored. The computing unit 601, the ROM 602, and the RAM 603 are connected to each other via a bus 604. An input / output (I / O) interface 605 is also connected to the bus 604.

[0155] A number of components in the computer device 600 are connected to the I / O interface 605, including: an input unit 606, such as a keyboard, a mouse, etc.; an output unit 607, such as various types of displays, speakers, etc.; a storage unit 608, such as a disk, an optical disk, etc.; and a communication unit 609, such as a network card, a modem, a wireless communication transceiver, etc. The communication unit 609 allows the computer device 600 to exchange information / data with other devices through a computer network such as the Internet and / or various telecommunication networks.

[0156] The computing unit 601 may be a variety of general and / or special processing components with processing and computing capabilities. Some examples of the computing unit 601 include, but are not limited to, a central processing unit (CPU), a graphics processing unit (GPU), various dedicated artificial intelligence (AI) computing chips, various computing units running machine learning model algorithms, digital signal processors (DSPs), and any appropriate processors, controllers, microcontrollers, etc. The computing unit 601 performs the various methods and processes described above, such as the method for integrating the trusted identification of the industrial Internet with the existing identification. For example, in some embodiments, the method for integrating the trusted identification of the industrial Internet with the existing identification may be implemented as a computer software program, which is tangibly contained in a machine-readable medium, such as a storage unit 608. In some embodiments, part or all of the computer program may be loaded and / or installed on the computer device 600 via the ROM 602 and / or the communication unit 609. When the computer program is loaded into the RAM 603 and executed by the computing unit 601, one or more steps of the method for integrating the trusted identification of the industrial Internet with the existing identification described above may be executed. Alternatively, in other embodiments, the computing unit 601 may be configured to execute the method for integrating the Industrial Internet trusted identity with the existing identity in any other appropriate manner (for example, by means of firmware).

[0157] Various embodiments of the systems and techniques described above herein can be implemented in digital electronic circuit systems, integrated circuit systems, field programmable gate arrays (FPGAs), application specific integrated circuits (ASICs), application specific standard products (ASSPs), systems on chips (SOCs), programmable logic devices (CPLDs), computer hardware, firmware, software, and / or combinations thereof. Implemented in one or more computer programs, the one or more computer programs can be executed and / or interpreted on a programmable system including at least one programmable processor, which can be a dedicated or general programmable processor that can receive data and instructions from a storage system, at least one input device, and at least one output device, and transmit data and instructions to the storage system, the at least one input device, and the at least one output device.

[0158] The program code for implementing the method of the present invention can be written in any combination of one or more programming languages. These program codes can be provided to a processor or controller of a general-purpose computer, a special-purpose computer or other programmable data processing device, so that the program code, when executed by the processor or controller, enables the functions / operations specified in the flow chart and / or block diagram to be implemented. The program code can be executed entirely on the machine, partially on the machine, partially on the machine as a stand-alone software package and partially on a remote machine, or entirely on a remote machine or server.

[0159] In the context of the present invention, a machine-readable medium may be a tangible medium that may contain or store a program for use by or in conjunction with an instruction execution system, device, or equipment. A machine-readable medium may be a machine-readable signal medium or a machine-readable storage medium. A machine-readable medium may include, but is not limited to, electronic, magnetic, optical, electromagnetic, infrared, or semiconductor systems, devices, or equipment, or any suitable combination of the foregoing. A more specific example of a machine-readable storage medium may include an electrical connection based on one or more lines, a portable computer disk, a hard disk, a random access memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or flash memory), an optical fiber, a portable compact disk read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination of the foregoing.

[0160] To provide interaction with a user, the systems and techniques described herein can be implemented on a computer having: a display device (e.g., a CRT (cathode ray tube) or LCD (liquid crystal display) monitor) for displaying information to the user; and a keyboard and pointing device (e.g., a mouse or trackball) through which the user can provide input to the computer. Other types of devices can also be used to provide interaction with the user; for example, the feedback provided to the user can be any form of sensory feedback (e.g., visual feedback, auditory feedback, or tactile feedback); and input from the user can be received in any form (including acoustic input, voice input, or tactile input).

[0161] The systems and techniques described herein may be implemented in a computing system that includes back-end components (e.g., as a data server), or a computing system that includes middleware components (e.g., an application server), or a computing system that includes front-end components (e.g., a user computer with a graphical user interface or a web browser through which a user can interact with implementations of the systems and techniques described herein), or a computing system that includes any combination of such back-end components, middleware components, or front-end components. The components of the system may be interconnected by any form or medium of digital data communication (e.g., a communication network). Examples of communication networks include: a local area network (LAN), a wide area network (WAN), and the Internet.

[0162] A computer system may include a client and a server. The client and the server are generally remote from each other and usually interact through a communication network. The relationship of client and server is generated by computer programs running on respective computers and having a client-server relationship with each other. The server may be a cloud server, a server of a distributed system, or a server combined with a blockchain.

[0163] It should be understood that the various forms of processes shown above can be used to reorder, add or delete steps. For example, the steps described in the present invention can be executed in parallel, sequentially or in different orders, as long as the desired results of the technical solution disclosed in the present invention can be achieved, and this document does not limit this.

[0164] It should be understood that although the steps in the flowchart of the accompanying drawings are shown in sequence according to the instructions of the arrows, these steps are not necessarily performed in the order indicated by the arrows. Unless otherwise clearly stated in this document, the execution of these steps is not strictly limited in order and can be performed in other orders.

[0165] Moreover, at least part of the steps in the flowchart of the accompanying drawings may include multiple sub-steps or multiple stages. These sub-steps or stages are not necessarily executed at the same time, but can be executed at different times. The order of execution is not necessarily sequential, but can be executed in turn or alternately with other steps or at least part of the sub-steps or stages of other steps.

[0166] The specific embodiments described above further illustrate the purpose, technical solutions and beneficial effects of the present invention. It should be understood that the above description is only a specific embodiment of the present invention and is not intended to limit the scope of protection of the present invention. It is particularly pointed out that for those skilled in the art, any modification, equivalent replacement, improvement, etc. made within the spirit and principle of the present invention should be included in the scope of protection of the present invention.

Claims

1. Methods for integrating Industrial Internet trusted identification with existing identification, It is characterized in that The method comprises: Integrate the trusted identifier of the industrial Internet identification system with the existing identifier of the existing identification system to associate the trusted identifier with the existing identifier; The trusted identifier in the industrial Internet environment uses a secure communication mechanism to transmit the identification information of the trusted identifier, and the existing identifier uses an authentication mechanism to access or modify the identification information; Defining a data structure of the identification information on the blockchain, and using blockchain technology to record the identification information in a distributed ledger on the blockchain; Establish a real-time monitoring system to continuously monitor and analyze the identification information and take prompt measures when abnormalities are found.

2. The method for integrating the industrial Internet trusted identification with the existing identification as claimed in claim 1, It is characterized in that The specific steps of integrating the trusted identifier of the industrial Internet identification system with the existing identifier of the existing identification system to associate the trusted identifier with the existing identifier include: Creating a mapping table and defining fields of the mapping table, wherein the fields include a device ID and an employee ID; Establishing an index between the device identification and the employee identification; Inserting mapping information into the mapping table, the mapping information including a unique identifier of the mapping relationship, a device identifier, an employee identifier, and an associated time; When the device identification or the employee identification changes, the mapping information in the mapping table is updated in time through transactions or corresponding update logic.

3. The method for integrating the industrial Internet trusted identification with the existing identification as claimed in claim 2, It is characterized in that Before executing the step of establishing an index between the device identification and the employee identification, it is necessary to first verify the employee identity and the legitimacy of the device identification, and then execute if the verification is successful.

4. The method for integrating the industrial Internet trusted identification with the existing identification as claimed in claim 1, It is characterized in that The specific steps of the trusted identifier in the industrial Internet environment using a secure communication mechanism to transmit the identification information of the trusted identifier, and the existing identifier using an authentication mechanism to access or modify the identification information include: Configure secure communication protocols suitable for the Industrial Internet and use strong cipher suites and encryption algorithms; Deploy two-factor authentication, requiring users to provide multiple verification factors, and use secure authentication protocols; Configure a public key infrastructure system to issue digital certificates to devices and users and enforce the use of certificates for authentication; Setting an access control list to limit the user's access rights to the identification information; or establishing different roles, defining permissions for each role, and setting access control based on the role; Use secure communication channels and encrypt data transmission paths.

5. The method for integrating the industrial Internet trusted identification with the existing identification as claimed in claim 4, It is characterized in that Integrated single sign-on system allows users to access multiple related systems with just one login.

6. The method for integrating the industrial Internet trusted identification with the existing identification as claimed in claim 1, It is characterized in that The specific steps of defining the data structure of the identification information on the blockchain and recording the identification information in a distributed ledger on the blockchain using blockchain technology include: Determine various fields of the identification information, including device identification, employee identification, and associated time; Deploy a smart contract to a blockchain network, and submit the identification information transaction to the blockchain network through the smart contract or API; The change event of the identification information is defined in the smart contract, and the change of the identification information is notified to the nodes in the relevant blockchain network using an event mechanism.

7. The method for integrating the industrial Internet trusted identification with the existing identification as claimed in claim 1, It is characterized in that The specific steps of establishing a real-time monitoring system, continuously monitoring and analyzing the identification information, and taking prompt measures when abnormalities are found include: Integrate monitoring tools into key nodes of the system to obtain monitoring data of the identification information in real time; Use big data analysis tools to analyze the real-time monitoring data; Use user behavior analysis tools to analyze usage patterns of the identification information and identify unusual behaviors; Develop rules or machine learning models for abnormal behavior to identify potential risks and anomalies; Configure alerts and response rules to automatically trigger automated responses when trigger conditions are met. The automated responses include automatically blocking malicious behaviors and notifying relevant personnel.

8. The integration system of the trusted identification of the Industrial Internet and the existing identification, It is characterized in that The system comprises: An integration module, used for integrating the trusted identification of the industrial Internet identification system with the existing identification of the existing identification system, so as to associate the trusted identification with the existing identification; A transmission module, used for the trusted identifier in the industrial Internet environment to transmit the identification information of the trusted identifier using a secure communication mechanism, and the existing identifier to access or modify the identification information using an authentication mechanism; The blockchain module is used to define the data structure of the identification information on the blockchain and record the identification information in a distributed ledger on the blockchain using blockchain technology; The monitoring module is used to establish a real-time monitoring system to continuously monitor and analyze the identification information and take prompt measures when an abnormality is found.

9. A computer device, It is characterized in that include: one or more processors; A storage device for storing one or more programs; When the one or more programs are executed by the one or more processors, the one or more processors are enabled to implement the method according to any one of claims 1 to 7.

10. A computer-readable storage medium storing a computer program, It is characterized in that When the program is executed by a processor, the method according to any one of claims 1 to 7 is implemented.

Images