An information security management system and method based on blockchain

Abstract

The present invention discloses an information security management system and method based on blockchain, and relates to the technical field of information security management. The system comprises: a blockchain module, a local information storage module, an information collection module, a data analysis module and a control module; the blockchain module is used to store information generated in a production process; the local information storage module is used to speed up the reading speed; the information collection module is used to obtain information in the production process; the data analysis module is used to determine the information stored in the local information storage module from the blockchain module; the control module is used to monitor and coordinate production equipment; the present invention obtains the global optimal solution or a better local optimal solution of the information stored in the local information storage module through simulated annealing; the data is stored in the blockchain to reduce the risk of data leakage and modification; the local information storage module obtains information from the blockchain, and only opens the data reading permission to the outside to ensure the security of the information in the local information storage module.

Description

Technical Field

[0001] The present invention relates to the technical field of information security management, and specifically to an information security management system and method based on blockchain. Background Art

[0002] Blockchain is a distributed database technology that realizes decentralized data storage and transaction verification by linking data together in the form of tamper-proof blocks to form a chain structure. The core features of blockchain include decentralization, transparency, security and traceability. In factory production, by storing the information generated in the production process in the blockchain, since the data storage of the blockchain adopts a chain structure, each block contains a certain amount of data, and each block contains the hash value of the previous block, forming an unalterable chain. This chain structure ensures the integrity and security of the data. No one can tamper with or delete it without authorization, which strengthens the security of production information; however, since each node in the blockchain needs to verify and store transaction data, and perform consensus and synchronization operations, the speed of reading data is relatively slow. Each node needs to verify the correctness of the data according to certain rules and algorithms, which may lead to longer reading delays; therefore, how to speed up the reading of production data from the blockchain has become a problem that needs to be solved. Summary of the invention

[0003] The purpose of the present invention is to provide an information security management system and method based on blockchain to solve the problems raised in the above background technology.

[0004] In one aspect of the present invention, there is provided an information security management system based on blockchain, comprising: a blockchain module, a local information storage module, an information collection module, a data analysis module and a control module; the output end of the blockchain module is interconnected with the input end of the local information storage module, and is used to store information generated during the production process, and store information with high usage rate in the local information storage module; the output end of the local information storage module is interconnected with the input end of the control module, and is used to speed up the reading speed of information with high usage rate; the output end of the information collection module is interconnected with the input end of the blockchain module and the control module, and is used to obtain information generated during the production process; the data analysis module is interconnected with the blockchain module, and determines the information stored in the local information storage module from the blockchain module based on the expected time for the control module to obtain information; the control module is interconnected with the blockchain module, and is used to monitor and coordinate production equipment.

[0005] Specifically, the blockchain module includes an application layer, a data layer, a consensus layer, a smart contract layer and a network layer; the application layer provides an interactive interface for the data analysis module and the control module, obtains data from the blockchain and responds to data requests from the data analysis module and the control module; the data layer is used to store information generated during the production process, and protects the information in the data layer through encryption technology; the consensus layer ensures data consistency in the blockchain through formula algorithms; the smart contract layer encapsulates scripts, algorithms and smart contracts, and automatically executes contracts and programs; the network layer is used for communication and data transmission between blockchain nodes.

[0006] Specifically, the analysis module also includes a first database, a second database, a third database and a fourth database; the first database stores the time when the local information storage module responds to the information request of the control module, the second database stores the time when the blockchain module responds to the information request of the control module, the third database stores the correlation data between any two pieces of information, and the fourth database stores the correlation data between any one piece of information and the combined information, where the combined information refers to the combination of two pieces of information; the data analysis module determines the information stored from the blockchain module to the local information storage module by simulated annealing to generate a directional disturbance. When a certain piece of information in the local information storage module changes, based on the correlation data of the remaining information in the local information storage module, the information newly stored in the local information storage module is searched and determined from the blockchain module.

[0007] The local information storage module only opens the information reading function to the control module. The control module sends an information request to the blockchain module. The blockchain module grants the control module the authority to read information through a smart contract. Only after obtaining the authority can the control module obtain information from the local information storage module; all information stored in the local information storage module records the time when the local information storage module obtains the information through a timestamp, and the timeliness of the information in the local information storage module is judged according to the timestamp; when the information of the local information storage module is updated, all the information of the local information storage module is deleted, and the information newly stored in the local information storage module is re-determined.

[0008] In another aspect of the present invention, a blockchain-based information security management method is provided, comprising the following steps:

[0009] S5-1, obtaining production information data, wherein the production information data includes utilization rate and response time; the response time refers to the time taken by the blockchain module or the local information storage module to respond to the information request of the control module;

[0010] S5-2, establishing the third and fourth databases according to the utilization rate data of the production information;

[0011] S5-3, determining the production information to be stored in the local information storage module by simulated annealing;

[0012] S5-4, the control module obtains production data from the local information storage module and the blockchain module to speed up the reading of production information.

[0013] In step S5-2, the establishment of the third and fourth databases includes the following analysis steps:

[0014] S6-1, with A 1 , A 2 , …, A n represents different production information, and n represents the number of production information;

[0015] S6-2, obtain the utilization rate of different production information and record it as P{A 1}、P{A 2}, …, P{A n}, the production information usage rate is the ratio of the number of times the production information is used to the total number of times all production information is used;

[0016] S6-3, obtain the utilization rate of two different production information combinations and record it as P{A 1 A 2}、P{A 1 A 3}, …, P{A n-1 A n};

[0017] S6-4, determine the correlation P{A between any two pieces of production information i |A j}, the correlation refers to the probability that the control module needs two production information at the same time, ; The value range of i and j is a positive integer between [1, n]. When i and j are equal, P{A i |A j} is set to zero; i , A j and P{A i |A j} is stored in the third database; as long as the production information A i and A j At the same time, it is required by the control module, regardless of whether other production information is required, it is counted in A i and A j The number of times the combination is used, used to calculate the usage rate ; When i and j are equal, the control module actually needs one piece of production information, which has already appeared in step S6-2, so the probability is set to zero;

[0018] S6-5, determining the association data P{A between one information and the combination of two information i A k |A j}, the correlation means that the control module needs three production information probabilities at the same time, ; The value range of k is a positive integer between [1, n]. When i, j or k have the same value, P{A i A k |A j} is set to zero; i , A j and P{A i |A j} is stored in the fourth database; when two of i, j or k are the same, the control module actually needs two pieces of production information, which have already appeared in step S6-4, so the probability is set to zero; when i, j or k are all the same, the control module actually needs one piece of production information, which has already appeared in step S6-2, so the probability is set to zero;

[0019] A database is established to store related data. Searching the database can obtain the data needed to generate disturbances and speed up the simulated annealing.

[0020] Specifically, determining the production information that needs to be stored in the local information storage module by simulated annealing includes the following steps:

[0021] S7-1, set the initial temperature T 0 , randomly select production information and store it in the local information storage module, use the selected production information as the initial solution, and determine the expected value of the response time t corresponding to the initial solution 0 ; and take the initial solution as the current solution, and the initial temperature as the current temperature;

[0022] S7-2, for counting units k=1, 2, ..., L, repeat steps S7-3 to S7-4; L is the number of inner loops;

[0023] S7-3, by generating a directed disturbance based on the current solution, changing the production information selected and stored in the local information storage module, taking the production information selected after the disturbance as a new solution, and determining the expected value t of the response time corresponding to the new solution;

[0024] S7-4, calculate the increment Δt of the expected value of the response time brought by the new solution. If the increment is less than 0, the new solution is accepted as the new current solution with probability 1. If the increment is greater than or equal to 0, the new solution is accepted as the new current solution with probability Accept the new solution as the new current solution; where T represents the current temperature;

[0025] S7-5, lower the current temperature according to the cooling plan. If the current temperature is greater than or equal to the threshold, proceed to step S7-2; if the current temperature is less than the threshold, determine the production information to be stored in the local information storage module based on the current solution.

[0026] In step S7-3, the production information generating the disturbance is determined by random numbers, including the following steps:

[0027] The production information corresponding to the current solution is recorded as A m1 , A m2 , …, A mb , the value range of m1, m2, ..., mb is a positive integer between [1, n], and m1, m2, ..., mb are different, b is the amount of production information stored in the local information storage module;

[0028] Note A m1 , A m2 , …, A mb The number of times used is q 1 ,q 2 ,…,q b , calculate the inverse of the number of times used 1 / q 1 , 1 / q 2 , …, 1 / q b , taking the reciprocal as the interval length, splicing it into a complete interval, and obtaining b sub-intervals, the sub-intervals are [0,1 / q 1 ], [1 / q 1 ,1 / q 1 +1 / q 2 ], …, [1 / q 1 +…+1 / q b-1 ,1 / q 1 +…+1 / q b ], the sub-intervals correspond to the production information one by one; when the production data appears in the production process, it is used for the first time, and the minimum number of times the production data is used is 1;

[0029] In the interval [0,1 / q 1 +…+1 / q b ] Generate a random number, find the production information corresponding to the sub-interval where the random number is located, and the production information will be replaced by the new production information; when the random number is exactly at the end point of the interval, regenerate a random number for judgment;

[0030] Generally speaking, the more times the information is used, the higher the probability of being requested by the control module. Storing the high usage times in the local information storage module can speed up the reading of the information. Therefore, the more times the information is used, the smaller the probability of being replaced by new information, by taking the inverse method.

[0031] Specifically, generating the directed disturbance further includes the following steps:

[0032] S9-1, the one replaced by the new production information is A mq , q is a positive integer between [1,b];

[0033] S9-2, for the production information B in the blockchain that is not stored in the local information storage module w , w is a positive integer between [1, r], r is the amount of information in the blockchain that is not stored in the local information storage module; except A mq After that, analyze B w With A m1 , A m2 , …, A mb The correlation between w The probability of being needed P{B w}, ;

[0034] For the control module, more than one piece of information may be needed at one time. In this case, the time for the control module to obtain information is determined by the maximum value of all information transmission times. For example, the local information storage module stores information A 1 , A 2 , and A 3 , when the control module needs information A 1 and A 2 When the control module needs information A, it only needs to read information from the local information storage module, which is faster; 1 and A 4 When A is read from the blockchain 4 Since the reading speed of blockchain data is relatively slow, the speed at which the control module obtains information is also slow. 2 Storing information in the local information storage module does not achieve the effect of speeding up information reading;

[0035] New production information should be determined based on the information in the local information storage module. Since the information in the local information storage module has been determined, it can be used as a condition to determine the probability that the information in the blockchain is needed through the conditional probability formula. For example, the local information storage module stores information A 1 and A 2 , for information A in the blockchain 4 The probability of being needed P{A 4}, ; Since in the formula A 1 , A 2 , and A 4 At the same time, the control module demand, therefore, the formula After subtracting the duplicates, we get , and generalize it to the b information of the local information storage module to obtain the final result; the probability that the production information is needed can be greater than 1. The probability here is only used to assist in generating directional disturbances, and is not and does not need to be the probability that is actually needed.

[0036] S9-3, B 1 , B 2 , …, B r The corresponding probabilities are concatenated into a complete interval, and r sub-intervals are obtained, which are [0,P{B 1}]、[P{B 1},P{B 1}+P{B 2}], …, [P{B 1}+…+P{B r-1},P{B 1}+…+P{B r}], the sub-intervals correspond one-to-one to the production information;

[0037] S9-4, in the interval [0,P{B 1}+…+P{B r Generate a random number and find the production information corresponding to the subinterval where the random number is located. This production information will replace A mq A new solution is formed; when the random number is exactly at the endpoint of the interval, a new random number is generated for judgment.

[0038] Specifically, the response time expectation is determined in the following way:

[0039] The production information C stored in the local information storage module 1 , C 2 ,…,C b , determine the number of times each production information is requested by the control module individually, including C 1 , C 2 ,…,C bThe number of times any one of the production information combinations in the local information storage module is requested by the control module, the production information combination includes the production information in the local information storage module and the production information in the blockchain module; the frequency of the production information and the production information combination is calculated as the probability that the production information and the production information combination are needed by the control module, and the probability that the production information and the production information combination are needed is multiplied by the response time of the production information and the production information combination to obtain the expected value of the response time; the response time of the production information refers to the time when the local information storage module responds to the information request of the control module; for each production information in the production information combination, there is a response time, and the response time of the production information combination refers to the maximum value of the response time corresponding to all the production information in the production information combination; for example, the local information storage module stores information A 1 and A 2 , the time to respond to the control module information request is tA 1 , tA 3 andtA 3 , information A is stored in the blockchain module 4 There are 7 situations, namely A 1 , A 2 , A 4 , A 1 A 2 , A 1 A 4 , A 2 A 4 and A 1 A 2 A 4 The response times for the seven cases are tA 1 , tA 2 , tA 4 、max{tA 1 ,tA 2}、max{tA 1 ,tA 4}、max{tA 2 ,tA 4} and max{tA 1 ,tA 2 ,tA 4}, due to A 4 Stored in the blockchain module, A 4 The response time of the production information combination is relatively long, which has a greater impact on the response time of the production information combination; the probability of production information and production information combination being needed is obtained by calculating the frequency, and the expected value of the response time is obtained by multiplying the 7 frequencies and the response time and then accumulating them; the frequency of production information is the ratio of the number of times the control module requests production information to the total number of requests. The calculation frequency needs to take into account the status of other production information. The control module requests information A 1 and A 2 When the production information combination A1 A 2 The corresponding number of requests increases by 1, and A 1 and A 2 The number of separate requests does not increase;

[0040] Only when information is stored in the local information storage module can the speed at which the control module obtains information be accelerated. The information stored in the local information storage module has a high utilization rate. It is only necessary to calculate the probability and response time of the information in the local information storage module, and there is no need to calculate all the data in the blockchain module.

[0041] Compared with the prior art, the beneficial effects achieved by the present invention are as follows: partial information is selected and stored in a local information storage module by simulated annealing, thereby accelerating the information reading speed; when the information changes, only part of the data corresponding to the changed information needs to be modified, and the operation is simple; the global optimal solution or a better local optimal solution of the information stored in the local information storage module can be obtained without enumerating all possibilities; storing data in a blockchain can protect sensitive information, perform decentralized identity authentication and ensure data integrity, provide a higher level of data protection, and reduce the risk of data leakage and modification; the local information storage module obtains information from the blockchain, and only opens data reading authority to the outside, thereby ensuring the integrity and security of the information in the local information storage module. BRIEF DESCRIPTION OF THE DRAWINGS

[0042] The accompanying drawings are used to provide a further understanding of the present invention and constitute a part of the specification. Together with the embodiments of the present invention, they are used to explain the present invention and do not constitute a limitation of the present invention. In the accompanying drawings:

[0043] Figure 1 It is a structural diagram of an information security management system based on blockchain according to an embodiment of the present invention. DETAILED DESCRIPTION

[0044] The following will be combined with the drawings in the embodiments of the present invention to clearly and completely describe the technical solutions in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0045] In the embodiments of the present invention, please refer to Figure 1, provides an information security management system based on blockchain, including: a blockchain module, a local information storage module, an information collection module, a data analysis module and a control module; the output end of the blockchain module is interconnected with the input end of the local information storage module to store information generated in the production process, and store the information with high usage rate in the local information storage module; the output end of the local information storage module is interconnected with the input end of the control module to speed up the reading speed of the information with high usage rate; the output end of the information collection module is interconnected with the input end of the blockchain module and the control module to obtain the information generated in the production process; the data analysis module is interconnected with the blockchain module, and determines the information stored in the local information storage module from the blockchain module based on the expected time for the control module to obtain the information; the control module is interconnected with the blockchain module to monitor and coordinate production equipment.

[0046] The blockchain module includes an application layer, a data layer, a consensus layer, a smart contract layer and a network layer; the application layer provides an interactive interface for the data analysis module and the control module, obtains data from the blockchain and responds to data requests from the data analysis module and the control module; the data layer is used to store information generated during the production process, and protects the information in the data layer through encryption technology; the consensus layer ensures data consistency in the blockchain through formula algorithms; the smart contract layer encapsulates scripts, algorithms and smart contracts, and automatically executes contracts and programs; the network layer is used for communication and data transmission between blockchain nodes.

[0047] The analysis module also includes a first database, a second database, a third database and a fourth database; the first database stores the time when the local information storage module responds to the information request of the control module, the second database stores the time when the blockchain module responds to the information request of the control module, the third database stores the correlation data between any two pieces of information, and the fourth database stores the correlation data between any one piece of information and the combined information, where the combined information refers to the combination of two pieces of information; the data analysis module determines the information stored from the blockchain module to the local information storage module by simulated annealing to generate a directional disturbance. When a certain piece of information in the local information storage module changes, based on the correlation data of the remaining information in the local information storage module, the information newly stored in the local information storage module is searched from the blockchain module and determined.

[0048] The local information storage module only opens the information reading function to the control module. The control module sends an information request to the blockchain module. The blockchain module grants the control module the authority to read information through a smart contract. Only after obtaining the authority can the control module obtain information from the local information storage module; all information stored in the local information storage module records the time when the local information storage module obtains the information through a timestamp, and the timeliness of the information in the local information storage module is judged according to the timestamp; when the information of the local information storage module is updated, all the information of the local information storage module is deleted, and the information newly stored in the local information storage module is re-determined.

[0049] In an embodiment of the present invention, a blockchain-based information security management method is provided, comprising the following steps:

[0050] S5-1, obtaining production information data, wherein the production information data includes utilization rate and response time; the response time refers to the time taken by the blockchain module or the local information storage module to respond to the information request of the control module;

[0051] S5-2, establishing the third and fourth databases according to the utilization rate data of the production information; specifically comprising the following steps:

[0052] S6-1, with A 1 , A 2 , …, A n represents different production information, and n represents the number of production information;

[0053] S6-2, obtain the utilization rate of different production information and record it as P{A 1}、P{A 2}, …, P{A n}, the production information usage rate is the ratio of the number of times the production information is used to the total number of times all production information is used;

[0054] S6-3, obtain the number of times two different production information combinations are used, calculate the usage rate and record it as P{A 1 A 2}、P{A 1 A 3}, …, P{A n-1 A n};

[0055] S6-4, determine the correlation P{A between any two pieces of production information i |A j}, the correlation refers to the probability that the control module needs two production information at the same time, ; The value range of i and j is a positive integer between [1, n]. When i and j are equal, P{A i |A j} is set to zero; i , A j and P{A i |A j} is stored in the third database; as long as the production information A i and A j At the same time, it is required by the control module, regardless of whether other production information is required, it is counted in A i and A j The number of times the combination is used, used to calculate the usage rate ;

[0056] S6-5, determining the association data P{A between one information and the combination of two information i A k |A j}, the correlation means that the control module needs three production information probabilities at the same time, ; The value range of k is a positive integer between [1, n]. When i, j or k have the same value, P{A i A k |A j} is set to zero; i , A j and P{A i |A j} is stored in the fourth database;

[0057] For production information A 1 , A 2 , A 3 and A 4 , a total of If each combination is requested by the control module 1 times, then , , , , ;

[0058] S5-3, determining the production information to be stored in the local information storage module by simulated annealing; comprising the following steps:

[0059] S7-1, set the initial temperature T 0 , randomly select production information and store it in the local information storage module, use the selected production information as the initial solution, and determine the expected value of the response time t corresponding to the initial solution 0 ; and the initial solution is taken as the current solution, and the initial temperature is taken as the current temperature; the initial temperature T 0 The higher the value, the more complete the search. 0 Set to 100;

[0060] S7-2, for counting units k=1, 2, ..., L, repeat steps S7-3 to S7-4; L is the number of inner loops, the larger L is, the greater the breadth and depth of the search is, and L can be set to 100;

[0061] S7-3, by generating a directed disturbance based on the current solution, changing the production information selected and stored in the local information storage module, taking the production information selected after the disturbance as a new solution, and determining the expected value t of the response time corresponding to the new solution; generating a disturbance includes the following steps:

[0062] The production information corresponding to the current solution is recorded as A m1 , A m2 , …, A mb , the value range of m1, m2, ..., mb is a positive integer between [1, n], and m1, m2, ..., mb are different, b is the amount of production information stored in the local information storage module;

[0063] Note A m1 , A m2 , …, A mb The number of times used is q 1 ,q 2 ,…,q b , calculate the inverse of the number of times used 1 / q 1 , 1 / q 2 , …, 1 / q b , taking the reciprocal as the interval length, splicing it into a complete interval, and obtaining b sub-intervals, the sub-intervals are [0,1 / q 1 ], [1 / q 1 ,1 / q 1 +1 / q 2 ], …, [1 / q 1 +…+1 / q b-1 ,1 / q 1 +…+1 / q b ], the sub-intervals correspond to the production information one by one; when the production data appears in the production process, it is used for the first time, and the minimum number of times the production data is used is 1;

[0064] In the interval [0,1 / q 1 +…+1 / q b ]Generate a random number and find the production information corresponding to the sub-interval where the random number is located. The production information will be replaced by the new production information; when the random number is exactly at the endpoint of the interval, a new random number will be generated for judgment.

[0065] The new information is determined through the following steps S10 to S40:

[0066] S10, the one replaced by the new production information is A mq, q is a positive integer between [1,b];

[0067] S20, the production information B in the blockchain that is not stored in the local information storage module w , w is a positive integer between [1, r], r is the amount of information in the blockchain that is not stored in the local information storage module; except A mq After that, analyze B w With A m1 , A m2 , …, A mb The correlation between w The probability of being needed P{B w}, ;

[0068] If production information A 1 , A 2 and A 3 Stored in the local information storage module, A 4 Stored in the blockchain module, A 4 Probability of being needed ;

[0069] S30, B 1 , B 2 , …, B r The corresponding probabilities are concatenated into a complete interval, and r sub-intervals are obtained, which are [0,P{B 1}]、[P{B 1},P{B 1}+P{B 2}], …, [P{B 1}+…+P{B r-1},P{B 1}+…+P{B r}], the sub-intervals correspond one-to-one to the production information;

[0070] S40, in the interval [0,P{B 1}+…+P{B r Generate a random number and find the production information corresponding to the subinterval where the random number is located. This production information will replace A mq A new solution is formed; when the random number is exactly at the endpoint of the interval, a new random number is generated for judgment;

[0071] S7-4, calculate the increment Δt of the expected value of the response time brought by the new solution. If the increment is less than 0, the new solution is accepted as the new current solution with probability 1. If the increment is greater than or equal to 0, the new solution is accepted as the new current solution with probability Accept the new solution as the new current solution; where T is the current temperature; the expected value of the response time is determined by the following steps:

[0072] The production information C stored in the local information storage module 1 , C 2 ,…,C b , determine the number of times each production information is requested by the control module individually, including C 1 , C 2 ,…,C b The number of times any one of the production information combinations in the local information storage module and the production information in the blockchain module is requested by the control module; the production information combination includes the production information in the local information storage module and the production information in the blockchain module; the frequency of the production information and the production information combination is calculated as the probability that the production information and the production information combination are needed by the control module, and the expected value of the response time is obtained by multiplying the probability that the production information and the production information combination are needed by the response time of the production information and the production information combination; the response time of the production information refers to the time when the local information storage module responds to the information request of the control module; for each production information in the production information combination, there is a response time, and the response time of the production information combination refers to the maximum value of the response time corresponding to all the production information in the production information combination;

[0073] For the production information stored in the local information storage module, when calculating the production information and the frequency of the combination of production information, it is required that other production information cannot be requested by the control module; continue with A 1 , A 2 , A 3 and A 4 To explain, although A 1 It appeared 8 times in total, production information A 1 The frequency of is 1 / 15, because A 1 The control module requests only once; for production information combination A 1 A 2 A 4 , if A 1 and A 2 The response time of A is 0.1 second. 4 The response time is 0.3 seconds, then the production information combination A 1 A 2 A 4 The response time is max{0.1,0.1,0.3}=0.3 seconds, and its contribution to the expected response time is 0.3×1 / 15=0.02 seconds.

[0074] S7-5, lower the current temperature according to the cooling scheme. If the current temperature is greater than or equal to the threshold, proceed to step S7-2; if the current temperature is less than the threshold, determine the production information stored in the local information storage module according to the current solution; the cooling scheme determines the way in which the temperature decreases as the number of iterations increases, and the current temperature can be lowered according to the cooling curve; when the linear cooling curve with a cooling coefficient of 0.99 is used for cooling, the temperature changes from 100°C to 100×0.99°C after the first iteration; the threshold is usually a smaller value, and the threshold here can be taken as 0.1°C;

[0075] S5-4, the control module obtains production data from the local information storage module and the blockchain module, speeds up the reading of production information, and coordinates production equipment based on the obtained information.

[0076] It should be noted that, in this article, relational terms such as first and second, etc. are only used to distinguish one entity or operation from another entity or operation, and do not necessarily require or imply any such actual relationship or order between these entities or operations. Moreover, the terms "include", "comprise" or any other variants thereof are intended to cover non-exclusive inclusion, so that a process, method, article or device including a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, method, article or device.

[0077] Finally, it should be noted that the above is only a preferred embodiment of the present invention and is not intended to limit the present invention. Although the present invention has been described in detail with reference to the aforementioned embodiments, those skilled in the art can still modify the technical solutions described in the aforementioned embodiments or replace some of the technical features therein by equivalents. Any modification, equivalent replacement, improvement, etc. made within the spirit and principle of the present invention shall be included in the protection scope of the present invention.

Claims

1. A blockchain-based information security management method, characterized in that: The following steps are involved: S5-1, obtaining production information data, wherein the production information data includes utilization rate and response time; the response time refers to the time taken by the blockchain module or the local information storage module to respond to the information request of the control module; The blockchain module is used to store information generated during the production process and store the information with high usage rate in the local information storage module; The local information storage module is used to speed up the reading of high-usage information; S5-2, establishing the third and fourth databases according to the utilization rate data of the production information, including steps S6-1 to S6-5: S6-1, with A1, A2, ..., A n represents different production information, and n represents the number of production information; S6-2, obtain the utilization rate of different production information and record it as P{A1}, P{A2}, ..., P{A n }, the production information usage rate is the ratio of the number of times the production information is used to the total number of times all production information is used; S6-3, obtain the usage times of two different production information combinations, calculate the usage rates and record them as P{A1A2}, P{A1A3}, ..., P{A n-1 A n }; S6-4, determine the correlation P{A between any two pieces of production information i |A j }, the correlation refers to the probability that the control module needs two production information at the same time, ; The value range of i and j is a positive integer between [1, n]. When i and j are equal, P{A i |A j } is set to zero; i , A j and P{A i |A j } is stored in the third database; as long as the production information A i and A j At the same time, it is required by the control module, regardless of whether other production information is required, it is counted in A i and A j The number of times the combination is used, used to calculate the usage rate ; S6-5, determining the association data P{A between one information and the combination of two information i A k |A j }, the correlation means that the control module needs three production information probabilities at the same time, ; The value range of k is a positive integer between [1, n]. When i, j or k have the same value, P{A i A k |A j } is set to zero; i , A j and P{A i |A j } is stored in the fourth database; S5-3, determining the production information to be stored in the local information storage module by simulated annealing, including steps S7-1 to S7-5; S7-1, set the initial temperature T0, randomly select production information and store it in the local information storage module, use the selected production information as the initial solution, and determine the expected value t0 of the response time corresponding to the initial solution; And take the initial solution as the current solution, and the initial temperature as the current temperature; S7-2, for counting units k=1, 2, ..., L, repeat steps S7-3 to S7-4; L is the number of inner loops; S7-3, by generating a directed disturbance based on the current solution, changing the production information selected and stored in the local information storage module, taking the production information selected after the disturbance as a new solution, and determining the expected value t of the response time corresponding to the new solution; S7-4, calculate the increment Δt of the expected value of the response time brought by the new solution. If the increment is less than 0, the new solution is accepted as the new current solution with probability 1. If the increment is greater than or equal to 0, the new solution is accepted as the new current solution with probability Accept the new solution as the new current solution; where T represents the current temperature; S7-5, lower the current temperature according to the cooling plan. If the current temperature is greater than or equal to the threshold, proceed to step S7-2; if the current temperature is less than the threshold, determine the production information stored in the local information storage module according to the current solution; In step S7-3, the production information generating the disturbance is determined by random numbers, including the following steps: The production information corresponding to the current solution is recorded as A m1 , A m2 , …, A mb , the value range of m1, m2, ..., mb is a positive integer between [1, n], and m1, m2, ..., mb are different, b is the amount of production information stored in the local information storage module; Note A m1 , A m2 , …, A mb The number of times they are used are q1, q2, …, q b , calculate the reciprocal of the number of times used 1 / q1, 1 / q2, ..., 1 / q b , taking the reciprocal as the interval length, splicing it into a complete interval, and obtaining b sub-intervals, the sub-intervals are [0,1 / q1], [1 / q1,1 / q1+1 / q2], …, [1 / q1+…+1 / q b-1 ,1 / q1+…+1 / q b ], the sub-intervals correspond to the production information one by one; when the production data appears in the production process, it is used for the first time, and the minimum number of times the production data is used is 1; In the interval [0,1 / q1+…+1 / q b ] Generate a random number, find the production information corresponding to the sub-interval where the random number is located, and the production information will be replaced by the new production information; when the random number is exactly at the end point of the interval, regenerate a random number for judgment; Generating directed perturbations also includes the following steps: S9-1, the one replaced by the new production information is A mq , q is a positive integer between [1,b]; S9-2, for the production information B in the blockchain that is not stored in the local information storage module w , w is a positive integer between [1, r], r is the amount of information in the blockchain that is not stored in the local information storage module; except A mq After that, analyze B w With A m1 , A m2 , …, A mb The correlation between w The probability of being needed P{B w }, ; S9-3, B1, B2, ..., B r The corresponding probabilities are concatenated into a complete interval, and r subintervals are obtained, namely [0, P{B1}], [P{B1}, P{B1}+P{B2}], …, [P{B1}+…+P{B r-1 },P{B1}+…+P{B r }], the sub-intervals correspond one-to-one to the production information; S9-4, in the interval [0,P{B1}+…+P{B r Generate a random number and find the production information corresponding to the subinterval where the random number is located. This production information will replace A mq A new solution is formed; when the random number is exactly at the endpoint of the interval, a new random number is generated for judgment; Response time expectations are determined as follows: The production information C1, C2, ..., C stored in the local information storage module b , determine the number of times each production information is requested by the control module separately, including C1, C2, ..., C b The number of times any one of the production information combinations in the local information storage module and the production information in the blockchain module is requested by the control module; the production information combination includes the production information in the local information storage module and the production information in the blockchain module; the frequency of the production information and the production information combination is calculated as the probability that the production information and the production information combination are needed by the control module, and the expected value of the response time is obtained by multiplying the probability that the production information and the production information combination are needed by the response time of the production information and the production information combination; the response time of the production information refers to the time when the local information storage module responds to the information request of the control module; for each production information in the production information combination, there is a response time, and the response time of the production information combination refers to the maximum value of the response time corresponding to all the production information in the production information combination; S5-4, the control module obtains production data from the local information storage module to speed up the reading of production information.

2. A blockchain-based information security management system, using a blockchain-based information security management method as claimed in claim 1, characterized in that: It includes a blockchain module, a local information storage module, an information collection module, a data analysis module and a control module; the output end of the blockchain module is interconnected with the input end of the local information storage module; the output end of the local information storage module is interconnected with the input end of the control module; the output end of the information collection module is interconnected with the input end of the blockchain module and the control module, and is used to obtain information generated during the production process; the data analysis module is interconnected with the blockchain module, and determines the information stored in the local information storage module from the blockchain module based on the expected time for the control module to obtain information; The control module is interconnected with the blockchain module for monitoring and coordinating production equipment.

3. According to claim 2, the information security management system based on blockchain is characterized in that: The blockchain module includes an application layer, a data layer, a consensus layer, a smart contract layer and a network layer; the application layer provides an interactive interface for the data analysis module and the control module, obtains data from the blockchain and responds to data requests from the data analysis module and the control module; the data layer is used to store information generated during the production process, and the information in the data layer is protected by encryption technology; The consensus layer ensures data consistency in the blockchain through formula algorithms; the smart contract layer encapsulates scripts, algorithms and smart contracts, and automatically executes contracts and programs; the network layer is used for communication and data transmission between blockchain nodes.

4. According to claim 2, the information security management system based on blockchain is characterized in that: The analysis module further includes a first database, a second database, a third database and a fourth database; the first database stores the time when the local information storage module responds to the information request of the control module, the second database stores the time when the blockchain module responds to the information request of the control module, the third database stores the association data between any two pieces of information, and the fourth database stores the association data between any one piece of information and the combined information, wherein the combined information refers to the combination of two pieces of information; The data analysis module determines the information stored in the local information storage module from the blockchain module by simulated annealing to generate directional disturbances. When a certain information in the local information storage module changes, based on the correlation data of the remaining information in the local information storage module, the blockchain module is searched and the information newly stored in the local information storage module is determined.

5. According to the information security management system based on blockchain in claim 4, the local information storage module only opens the information reading function to the control module, the control module sends an information request to the blockchain module, and the blockchain module grants the control module the authority to read information through the smart contract. Only after obtaining the authority can the control module obtain information from the local information storage module; All information stored in the local information storage module records the time when the local information storage module obtains the information through a timestamp, and the timeliness of the information in the local information storage module is determined based on the timestamp; When the information in the local information storage module is updated, all the information in the local information storage module is deleted, and the information newly stored in the local information storage module is re-determined.

Images