Government affair data security sharing system based on block chain

Abstract

The invention relates to the related technical field of government affair data sharing, and discloses a government affair data security sharing system based on a block chain. The system comprises a government affair information resource management system, a data preprocessing module, a data arrangement module, a random encryption module, a target data acquisition module, a data pre-classification module, a permission allocation module and a dynamic identity recognition module. The link systems of the government affair information resource management system are divided into the public chain application system, the alliance chain application system and the private chain application system, different link systems are opened for information query and processing for different departments and different access objects, and it is ensured that data information is not crossed; and the random encryption of the data in each MPT tree storage node and the data access channel establishment algorithm is adopted, and the security processing of the data is carried out in a manner of updating the encryption algorithm every time the data access is carried out, so that the security of the block chain internal loading big data is greatly improved.

Description

Technical Field

[0001] The present invention relates to the technical field related to government data sharing, and in particular to a government data security sharing system based on blockchain. Background Art

[0002] With the advent of big data, big data has gradually entered the lives of the public. Now, more and more government data is shared and opened. With the increase in the number of access personnel, problems such as data leakage and data loss have arisen, followed by the problem of high data correlation risks.

[0003] Data association may lead to the leakage of a large range of sensitive government information. At the same time, due to the lack of control over data information, shared data may be untrue and unreliable. In order to solve these problems, a government data security sharing system based on blockchain is proposed. Summary of the invention

[0004] The present invention provides a blockchain-based government data security sharing system, which solves the problems in the above-mentioned background technology.

[0005] The present invention solves the technical problem by adopting the following technical solutions:

[0006] A government data security sharing system based on blockchain, including a government information resource management system, a data preprocessing module, a data sorting module, a random encryption module, a target data acquisition module, a data preclassification module, a permission allocation module, and a dynamic identity recognition module;

[0007] The government information resource management system includes a government information resource management system and a data security management and control system. The data security management and control system includes a public chain application system, an alliance chain application system and a private chain application system, which are respectively connected to the government information resource management system through a network;

[0008] The data preprocessing module is used to assign different data identifiers to different big data based on a hash function;

[0009] The data sorting module is used to match the corresponding MPT tree storage nodes and data computing nodes for the big data according to the type of data identification, and to build the corresponding data transmission channel;

[0010] The random encryption module is used to implement random encryption of the data in each MPT tree storage node and the data access channel construction algorithm. Each time data is accessed, the encryption algorithm is updated;

[0011] The target data acquisition module is used to realize the targeted acquisition of target data based on a preset data mining model;

[0012] The data pre-classification module is used to implement pre-classification of big data using SparkR's parallelized k-means algorithm;

[0013] The authority allocation module is used to realize the identification of user identity and the allocation of authority according to the input biometric model. The allocated authority is the authority to access data, which belongs to the primary key. After the user passes the primary key review, he enters the data directory to be accessed. The system will send the corresponding intermediate key to the user end. The user calls the corresponding data access channel construction algorithm by entering the intermediate key to realize the construction of the data access channel. After the construction is completed, the system will send the corresponding data decryption key to the user end, which is used to access the target data by entering the decryption key. The data not entered in the data directory to be accessed this time is in a random encryption state;

[0014] The user end and the random encryption module are connected through independent dual channels. When any channel is communicating, the other backup channel is updating the key.

[0015] When encrypting, the random encryption module first randomly divides the data in each MPT tree storage node into several data groups, and then randomly calls the corresponding encryption algorithm to achieve separate encryption of each data group;

[0016] The dynamic identity recognition module is used to dynamically identify the user identity in the form of a pop-up dialog box during data access. If the dynamic recognition result is correct, data access can continue. If the dynamic recognition result is incorrect, the data access channel is cut off, the random encryption module is started to complete the random encryption of the data in the corresponding MPT tree storage node, and the early warning module is started to feedback the access situation to the administrator terminal.

[0017] Preferably, the data security management and control system includes a data authentication and authorization management and control system, a data security access audit gateway system and a sensitive data leakage protection system under the data platform.

[0018] Preferably, the public chain application system, the alliance chain application system and the private chain application system are respectively provided with software and hardware firewalls with the government information resource management system.

[0019] Preferably, the public chain application system is connected to a public access platform.

[0020] Preferably, the alliance chain application system is connected to the access systems of various government departments.

[0021] Preferably, the private chain application system is connected to a government confidential department access system.

[0022] The advantages and positive effects of the present invention are: the link system of the government information resource management system is divided into a public chain application system, an alliance chain application system and a private chain application system, and different link systems are opened for information query and processing for different departments and different access objects to ensure that data information does not cross; and random encryption of the data in each MPT tree storage node and the data access channel construction algorithm is adopted. Each time data is accessed, the encryption algorithm is updated to perform secure data processing, which greatly improves the security of big data contained in the blockchain. BRIEF DESCRIPTION OF THE DRAWINGS

[0023] The present invention is further described below in conjunction with the accompanying drawings and embodiments.

[0024] Figure 1 It is a schematic diagram of the process of the present invention;

[0025] Figure 2 It is a schematic diagram of the process of the big data security processing system of the present invention; DETAILED DESCRIPTION

[0026] The present invention will now be described in further detail with reference to the accompanying drawings. These drawings are simplified schematic diagrams, which only illustrate the basic structure of the present invention in a schematic manner, and therefore only show the components related to the present invention.

[0027] The embodiments of the present invention are further described in detail below with reference to the accompanying drawings:

[0028] Reference Figure 1 and Figure 2 As shown in the figure, with the advent of big data, big data has gradually entered the lives of the public. Now, more and more government data are shared and opened. With the increase in the number of visitors, data leakage and data loss have been brought about. The second is the problem of high data association risk, which may lead to the leakage of sensitive government information on a large scale through data association. At the same time, due to the lack of control over data information, the shared data is not real and reliable. In order to solve these problems, a government data security sharing system based on blockchain is proposed, including government information resource management system, data preprocessing module, data sorting module, random encryption module, target data acquisition module, data pre-classification module, authority allocation module, and dynamic identity recognition module.

[0029] The government information resource management system includes a government information resource management system and a data security management and control system. The data security management and control system includes a public chain application system, an alliance chain application system and a private chain application system, which are respectively connected to the government information resource management system through a network;

[0030] The data preprocessing module is used to assign different data identifiers to different big data based on a hash function;

[0031] The data sorting module is used to match the corresponding MPT tree storage nodes and data computing nodes for the big data according to the type of data identification, and to build the corresponding data transmission channel;

[0032] The random encryption module is used to implement random encryption of the data in each MPT tree storage node and the data access channel construction algorithm. Each time data is accessed, the encryption algorithm is updated;

[0033] The target data acquisition module is used to realize the targeted acquisition of target data based on a preset data mining model;

[0034] The data pre-classification module is used to implement pre-classification of big data using SparkR's parallelized k-means algorithm;

[0035] The authority allocation module is used to realize the identification of user identity and the allocation of authority according to the input biometric model. The allocated authority is the authority to access data, which belongs to the primary key. After the user passes the primary key review, he enters the data directory to be accessed. The system will send the corresponding intermediate key to the user end. The user calls the corresponding data access channel construction algorithm by entering the intermediate key to realize the construction of the data access channel. After the construction is completed, the system will send the corresponding data decryption key to the user end, which is used to access the target data by entering the decryption key. The data not entered in the data directory to be accessed this time is in a random encryption state;

[0036] The user end and the random encryption module are connected through independent dual channels. When any channel is communicating, the other backup channel is updating the key.

[0037] When encrypting, the random encryption module first randomly divides the data in each MPT tree storage node into several data groups, and then randomly calls the corresponding encryption algorithm to achieve separate encryption of each data group;

[0038] The dynamic identity recognition module is used to dynamically identify the user identity in the form of a pop-up dialog box during data access. If the dynamic recognition result is correct, data access can continue. If the dynamic recognition result is incorrect, the data access channel is cut off, and the random encryption module is started to complete the random encryption of the data in the corresponding MPT tree storage node, and the early warning module is started to feedback the access situation to the manager terminal; the link system of the government information resource management system is divided into a public chain application system, an alliance chain application system and a private chain application system, and different link systems are opened for information query and processing for different departments and different access objects to ensure that data information does not cross; and random encryption of the data in each MPT tree storage node and the data access channel construction algorithm is adopted. Each time data is accessed, the encryption algorithm is updated to perform data security processing, which greatly improves the security of big data contained in the blockchain.

[0039] It should be noted that the user end and the random encryption module are connected through independent dual channels. When communication is carried out on any one channel, the other backup channel is used to update the key.

[0040] Furthermore, in order to ensure that the protection of the entire data security management and control system is improved, in this embodiment, the data security management and control system includes a data authentication and authorization management system, a data security access audit gateway system and a sensitive data leakage protection system under the data platform; through the setting of the above-mentioned system modules, the protection of the entire data security management and control system can be improved.

[0041] In addition, the public chain application system, the alliance chain application system and the private chain application system are respectively provided with software and hardware firewalls with the government information resource management system; and the public chain application system is connected to the public access platform, the alliance chain application system is connected to the access systems of various government departments, and the private chain application system is connected to the access system of government confidential departments; through the above settings, the purpose of the security of the entire government data is further guaranteed, and with the connection between the various systems, the purpose of indirect sharing can be achieved.

[0042] It should also be noted that the user identity is identified and the authority is allocated based on the entered biometric model. The allocated authority is the authority to access data, which belongs to the primary key. After the user passes the primary key review and enters the data directory to be accessed, the system will send the corresponding intermediate key to the user end. The user calls the corresponding data access channel construction algorithm by entering the intermediate key to achieve the construction of the data access channel. After the construction is completed, the system will send the corresponding data decryption key to the user end, which is used to enter the decryption key to access the target data. The data not entered in the data directory to be accessed this time is in a randomly encrypted state.

[0043] Furthermore, during the data access process, the user identity is dynamically identified in the form of a pop-up dialog box. If the dynamic identification result is correct, data access can continue. If the dynamic identification result is incorrect, the data access channel is cut off, the random encryption module is started to complete the random encryption of the data in the corresponding MPT tree storage node, and the early warning module is started to feedback the access situation to the administrator terminal.

[0044] It should be emphasized that the embodiments described in the present invention are illustrative rather than restrictive, and therefore the present invention is not limited to the embodiments described in the specific implementation manners. Any other implementation manners derived by those skilled in the art based on the technical solutions of the present invention also fall within the scope of protection of the present invention.

Claims

1. A blockchain-based government data security sharing system, characterized by: It includes government information resource management system, data preprocessing module, data sorting module, random encryption module, target data acquisition module, data preclassification module, authority allocation module and dynamic identity recognition module; The government information resource management system includes a government information resource management system and a data security management and control system. The data security management and control system includes a public chain application system, an alliance chain application system and a private chain application system, which are respectively connected to the government information resource management system through a network; The data preprocessing module is used to assign different data identifiers to different big data based on a hash function; The data sorting module is used to match the corresponding MPT tree storage nodes and data computing nodes for the big data according to the type of data identification, and to build the corresponding data transmission channel; The random encryption module is used to implement random encryption of the data in each MPT tree storage node and the data access channel construction algorithm. Each time data is accessed, the encryption algorithm is updated; The target data acquisition module is used to realize the targeted acquisition of target data based on a preset data mining model; The data pre-classification module is used to implement pre-classification of big data using SparkR's parallelized k-means algorithm; The authority allocation module is used to realize the identification of user identity and the allocation of authority according to the input biometric model. The allocated authority is the authority to access data, which belongs to the primary key. After the user passes the primary key review, he enters the data directory to be accessed. The system will send the corresponding intermediate key to the user end. The user calls the corresponding data access channel construction algorithm by entering the intermediate key to realize the construction of the data access channel. After the construction is completed, the system will send the corresponding data decryption key to the user end, which is used to access the target data by entering the decryption key. The data not entered in the data directory to be accessed this time is in a random encryption state; The user end and the random encryption module are connected through independent dual channels. When any channel is communicating, the other backup channel is updating the key. When encrypting, the random encryption module first randomly divides the data in each MPT tree storage node into several data groups, and then randomly calls the corresponding encryption algorithm to achieve separate encryption of each data group; The dynamic identity recognition module is used to dynamically identify the user identity in the form of a pop-up dialog box during data access. If the dynamic recognition result is correct, data access can continue. If the dynamic recognition result is incorrect, the data access channel is cut off, the random encryption module is started to complete the random encryption of the data in the corresponding MPT tree storage node, and the early warning module is started to feedback the access situation to the administrator terminal.

2. According to the blockchain-based government data security sharing system of claim 1, it is characterized by: The data security management and control system includes a data authentication and authorization management and control system, a data security access audit gateway system and a sensitive data leakage protection system under the data platform.

3. According to the blockchain-based government data security sharing system of claim 1, it is characterized by: The public chain application system, alliance chain application system and private chain application system are respectively provided with software and hardware firewalls with the government information resource management system.

4. According to a blockchain-based government data security sharing system according to claim 1, it is characterized by: The public chain application system is connected to the public access platform.

5. According to a blockchain-based government data security sharing system according to claim 1, it is characterized by: The alliance chain application system is connected to the access systems of various government departments.

6. According to a blockchain-based government data security sharing system according to claim 1, it is characterized by: The private chain application system is connected to the government confidential department access system.

Images