Integrated system tamper-proofing method and system based on block chain

Abstract

The invention belongs to the technical field of data security, and discloses a block chain-based integrated system tamper-proofing method and system. The method comprises the following steps: carrying out key generation and identity registration on an integrated system based on a trusted mechanism; based on the integrated system, deploying a block chain network, and deploying a Hfish honeypot chain network, a data tampering detection model and a network interception detection model; encrypting and signing internal data of the system, and performing uplink storage; extracting internal data of the target encrypted system according to the query information; performing data tampering detection on the access behavior traffic by using a data tampering detection model; performing network interception detection on the network transmission data by using the network interception detection model; performing signature verification and decryption based on the data query terminal; and carrying out integrity verification, and carrying out visual display. According to the invention, the problems of low practicability, low storage reliability and low transmission security of a tamper-proof technology in the prior art are solved.

Description

Technical Field

[0001] The present invention belongs to the field of data security technology, and specifically relates to a blockchain-based integrated system tamper-proof method and system. Background Art

[0002] With the rapid development of information technology, data security has become the focus of attention for enterprises and individuals. Existing integrated systems are vulnerable to malicious tampering and attacks during data transmission, storage and processing, resulting in low data security and lack of integrity. In order to ensure the security and integrity of data, it is necessary to study an effective anti-tampering method for integrated systems.

[0003] The existing integrated system anti-tampering method has the following defects: 1) In the existing technology, only simple hash value verification technology is used for integrity verification, which lacks more effective anti-tampering measures and has low practicality; 2) During the data storage process of the integrated system, due to the low protection level of the local storage database, it is vulnerable to illegal intrusion and tampering of key data, and the storage reliability is low; 3) During the data transmission process of the integrated system, it is often carried out in plain text, which is easy to be maliciously intercepted and has low transmission security. Summary of the invention

[0004] In order to solve the problems of low practicality, low storage reliability and low transmission security of the existing anti-tampering technology, the purpose of the present invention is to provide an integrated system anti-tampering method and system based on blockchain.

[0005] The technical solution adopted by the present invention is: A blockchain-based integrated system tamper-proof method comprises the following steps: Based on the trusted institution, the integrated system is key-generated and identity-registered to obtain the public-private key pair and signature information of the integrated system, the private key and signature information in the public-private key pair are sent to the integrated system, and the public key in the public-private key pair is published to all data query terminals connected to the integrated system; Based on the integrated system, the data storage area is divided into internal and external areas. The blockchain network is deployed in the internal area, and the Hfish honeypot chain network and data tampering detection model are deployed in the external area. In addition, the network interception detection model is deployed according to the network channel connecting the integrated system and the data query terminal. Generate a data hash value for the system's internal data, and encrypt and sign the system's internal data based on the data hash value, private key, and signature information to obtain the encrypted system's internal data and signature data, and use the blockchain network to store the encrypted system's internal data and data hash value on the chain; Receive the query information sent by the data query terminal, obtain the query hash value of the query information, retrieve the corresponding target data hash value in the blockchain network according to the query hash value, and extract the target encrypted system internal data corresponding to the target data hash value; Use Hfish honeypot chain network to collect data query terminal access behavior traffic of blockchain network, and use data tampering detection model to perform data tampering detection on access behavior traffic to obtain data tampering detection results; The target data hash value, the target encrypted system internal data and the corresponding target signature data are transmitted to the data query terminal, the network transmission data of the network channel is collected, and the network interception detection model is used to perform network interception detection on the network transmission data to obtain the network interception detection result; Based on the data query terminal, the trusted institution is called to perform signature verification on the target signature data. After the signature verification is passed, the encrypted internal data of the target system is decrypted according to the target data hash value and the public key of the integrated system to obtain the decrypted internal data of the system; Generate a decrypted data hash value for the decrypted system internal data, perform integrity verification on the decrypted data hash value and the target data hash value, and after the integrity verification passes, visualize the decrypted system internal data.

[0006] Furthermore, based on the integrated system, the data storage area is divided into an internal area and an external area, a blockchain network is deployed in the internal area, and an Hfish honeypot chain network and a data tampering detection model are deployed in the external area. According to the network channel of the integrated system and the data query terminal, a network interception detection model is deployed, including the following steps: Based on the integrated system, the data storage area is divided into an internal area and an external area, and a firewall is set between the internal area and the external area; In the internal area, several data servers are connected in a distributed manner, and the IPFS system and smart contracts are set up to deploy the blockchain network; According to the system information of the data server, build the corresponding Hfish honeypot in the external area, deploy the Hfish honeypot management module, connect all Hfish honeypots, and deploy the Hfish honeypot chain network; Deploy a data tampering detection model in the Hfish honeypot management module, set up a flow probe in each Hfish honeypot, and connect all flow probes to the data tampering detection model; A network interception detection model is deployed in the external area, data probes are set in the network channel connecting the integrated system and the data query terminal, and all data probes are connected to the network interception detection model.

[0007] Furthermore, a data hash value of the system internal data is generated, and the system internal data is encrypted and signed according to the data hash value, the private key and the signature information to obtain the encrypted system internal data and the signature data, and the encrypted system internal data and the data hash value are stored on the blockchain network, including the following steps: Based on the external area, collect the internal data of the system and use the SHA-3 algorithm to generate the data hash value of the internal data of the system; The data hash value is concatenated with the private key to obtain a mixed encryption key, and the internal data of the system is encrypted using an asymmetric encryption algorithm based on the mixed encryption key to obtain the encrypted internal data of the system; According to the signature information, the digital identity signature technology is used to sign the internal data of the system to obtain the signature data of the encrypted internal data of the system; The encrypted system internal data and data hash values ​​are transmitted to the internal area, and the encrypted system internal data and data hash values ​​are stored on the chain using the blockchain network.

[0008] Furthermore, the encrypted system internal data and data hash values ​​are transmitted to the internal area, and the encrypted system internal data and data hash values ​​are stored on the chain using the blockchain network, including the following steps: The encrypted system internal data and data hash value are transmitted to the internal area, the encrypted system internal data is stored in the IPFS system of the blockchain network, and a storage address and storage hash value are generated; The storage hash value and the data hash value are tamper-verified. After the tamper-verification is passed, the smart contract of the blockchain network is used to generate storage requests and transaction data based on the data hash value and storage address; Store the data hash value and the corresponding storage address in a distributed ledger, and publish the distributed ledger to the blockchain network; The storage request and transaction data are sent to several nodes in the blockchain network to reach a consensus on the storage request. After the consensus is passed, the transaction data is packaged into data blocks and linked to the chain.

[0009] Furthermore, the storage request and transaction data are sent to several nodes in the blockchain network, and the PBFT consensus algorithm is used to reach a consensus on the storage request. After the consensus is passed, the transaction data is packaged into data blocks and linked to the chain.

[0010] Further, receiving the query information sent by the data query terminal, obtaining the query hash value of the query information, searching the blockchain network for the target data hash value that matches the query hash value, and extracting the target encrypted system internal data corresponding to the target data hash value, including the following steps: Based on the data query terminal, the query information and the user login information are encrypted according to the public key of the integrated system, the encrypted query information and the encrypted user login information are obtained, and uploaded to the integrated system; Based on the integrated system, the encrypted query information and the encrypted user login information are decrypted according to the private key to obtain the decrypted query information and the decrypted user login information; Perform login verification on the decrypted user login information. After the login verification is passed, use the SHA-3 algorithm to obtain the query hash value of the query information; Perform search and matching in the distributed ledger of the blockchain network, obtain the Euclidean distance between the query hash value and each data hash value, and use the data hash value with the closest Euclidean distance as the target data hash value; According to the target storage address corresponding to the target data hash value in the distributed ledger, the target encrypted system internal data corresponding to the target data hash value is extracted.

[0011] Furthermore, the data tampering detection model includes N key dimension feature extraction modules built based on the GAN algorithm and a data tampering detection module built based on the MLP algorithm; The network interception detection model includes a network signal dynamic module and a network interception detection module built based on the BiLSTM algorithm. Furthermore, the Hfish honeypot chain network is used to collect the access behavior traffic of the data query terminal accessing the blockchain network, and the data tampering detection model is used to perform data tampering detection on the access behavior traffic to obtain the data tampering detection result, including the following steps: Use the traffic probe of Hfish Honeypot Chain Network to collect the access behavior traffic of the data query terminal accessing the blockchain network, and input the access behavior traffic into the data tampering detection model; Use the key dimension feature extraction module of the data tampering detection model to extract N key dimension features of access behavior traffic; Use the data tampering detection module of the data tampering detection model to fuse N key dimension features to obtain fused features; According to the fusion features, data tampering detection is performed to obtain data tampering detection results; If the data tampering detection result shows that data tampering has occurred, the firewall will be closed, the network channel will be disconnected, the data storage will be ended, and the data query terminal will be added to the blacklist. Otherwise, the data transmission step will be entered.

[0012] Furthermore, the target data hash value, the target encrypted system internal data and the corresponding target signature data are transmitted to the data query terminal, the network transmission data of the network channel is collected, and the network interception detection model is used to perform network interception detection on the network transmission data to obtain the network interception detection result, including the following steps: The target data hash value, the target encrypted system internal data and the corresponding target signature data are transmitted to the data query terminal through the corresponding network channel; Use a data probe set in the network channel to collect network transmission data of the network channel, and input the network transmission data into the network interception detection model; According to the network transmission data, the network signal dynamic module of the network interception detection model is used to generate network signal dynamic data; According to the network signal dynamic data, a network interception detection module of a network interception detection model is used to perform network interception detection to obtain a network interception detection result; If the network interception detection result shows that there is network interception behavior, the network channel will be disconnected and data transmission will be stopped. Otherwise, the signature verification step will be entered.

[0013] A blockchain-based integrated system tamper-proof system is used to implement an integrated system tamper-proof method. The integrated system tamper-proof system includes an integrated system, a trusted organization, and several data query terminals. The integrated system and the trusted organization are respectively communicatively connected to the several data query terminals, and the integrated system is communicatively connected to the trusted organization.

[0014] The beneficial effects of the present invention are: The present invention discloses an integrated system anti-tampering method and system based on blockchain, which introduces the characteristics of decentralization and data immutability of blockchain technology, and combines hash characteristic values ​​for integrity verification, thereby improving the practicability of anti-tampering technology; uses Hfish honeypot chain network and data tampering detection model to detect data tampering, and uses network interception detection model to perform network interception detection on network channels, thereby strengthening the security protection level of data storage and data transmission, and improving the reliability of storage and transmission; in the process of data transmission, combines digital identity signature technology and asymmetric encryption algorithm, transmits data in ciphertext form, and performs double encryption, thereby improving transmission security. Other beneficial effects of the present invention will be further described in the specific embodiments. BRIEF DESCRIPTION OF THE DRAWINGS

[0015] Figure 1 It is a flowchart of the integrated system anti-tampering method based on blockchain in the present invention.

[0016] Figure 2 It is a structural block diagram of the integrated system anti-tampering system based on blockchain in the present invention. DETAILED DESCRIPTION

[0017] The present invention will be further explained below in conjunction with the accompanying drawings and specific embodiments.

[0018] Embodiment 1: like Figure 1 As shown, this embodiment provides an integrated system tamper-proof method based on blockchain, comprising the following steps: S1: Based on a trusted institution, key generation and identity registration are performed for the integrated system to obtain a public-private key pair and signature information of the integrated system, the private key and signature information in the public-private key pair are sent to the integrated system, and the public key in the public-private key pair is published to all data query terminals connected to the integrated system, including the following steps: S1-1: Initialize the key based on the trusted institution to obtain the public parameters, master key and initial key;

[0019] In the formula, is a public parameter; is the master key; is the initial key; Integer domain A random number; Both are target hash functions; Both are cyclic groups The random number of the generator; is a random number Bilinear mapping of ; S1-2: Collecting attribute information of integrated system , and use an asymmetric encryption algorithm to generate keys for the integrated system based on the attribute information, public parameters, master key and initial key to obtain the corresponding public-private key pair;

[0020] In the formula, For integrated systems The private key of Integer domain A random number; It is the private key parameter of the integrated system; Public parameters The target hash hash function; Indicator for the integrated system; is the master key; is the initial key; For integrated systems 's public key; Cyclic group The random number of the generator; For integrated systems Attribute information of S1-3: Based on public-private key pairs and integrated systems Entity ID ,Use the digital identity authentication method to register the identity and obtain the signature information of the integrated system; The formula is:

[0021] In the formula, is a random number; For integrated systems Registration parameters; For integrated systems Registration ID; and the corresponding Signature information ; Hash function for target hash; For integrated systems The entity ID of is a prime number order; It is the base point of the prime domain; S1-4: Send the private key and signature information in the public-private key pair to the integrated system, and publish the public key in the public-private key pair to all data query terminals connected to the integrated system; S2: Based on the integrated system, the data storage area is divided into an internal area and an external area. The blockchain network is deployed in the internal area, and the Hfish (a cross-platform multi-functional active induction open source honeypot framework system) honeypot chain network and data tampering detection model are deployed in the external area. According to the network channel connecting the integrated system and the data query terminal, a network interception detection model is deployed, including the following steps: S2-1: Based on the integrated system, the data storage area is divided into an internal area and an external area, and a firewall is set between the internal area and the external area; S2-2: In the internal area, several data servers are connected in a distributed manner, and the IPFS system and smart contracts are set up to deploy the blockchain network; S2-3: According to the system information of the data server, build the corresponding Hfish honeypot in the external area, deploy the Hfish honeypot management module, connect all Hfish honeypots, and deploy the Hfish honeypot chain network; S2-4: deploy a data tampering detection model in the Hfish honeypot management module, set a flow probe in each Hfish honeypot, and connect all flow probes to the data tampering detection model; The data tampering detection model includes N key dimension feature extraction modules based on the Generative Adversarial Network (GAN) algorithm and a data tampering detection module based on the Multilayer Perceptron (MLP) algorithm, where N is the total number of focus dimensions. The dimensions of interest include access frequency, access time, and access behavior; The GAN network includes a generator and a discriminator. The generator is responsible for generating traffic data features from the latent space, and the discriminator is responsible for judging the authenticity of the traffic data features. The discriminator is added with recognition of traffic data, so that it can not only judge the authenticity of traffic data, but also judge whether it conforms to the traffic data features. By extracting the features of traffic data from different dimensions, multi-angle analysis is achieved, which improves the comprehensiveness of data tampering detection. The MLP network fuses the traffic data features from multiple angles, improves the ability of traffic data features to represent data information, and improves the accuracy of data tampering detection. S2-5: deploy a network interception detection model in the external area, set up data probes in the network channel connecting the integrated system and the data query terminal, and connect all data probes to the network interception detection model; The network interception detection model includes a network signal dynamic module and a network interception detection module based on the Bidirectional Long Short-Term Memory (BiLSTM) algorithm. The network signal dynamic module includes a signal quality dynamic sub-model, a data transmission rate dynamic sub-model, a network delay dynamic sub-model and a network stability dynamic sub-model; The formula of the signal quality dynamic sub-model is:

[0022] In the formula, is the signal quality detection function; Calculate the function for signal quality; is the received signal strength value; The formula for the data transmission rate dynamic sub-model is:

[0023] In the formula, It is the data transmission detection function; The amount of data transferred; is the transmission time; The formula of the network delay dynamic sub-model is:

[0024] In the formula, It is the network delay detection function; is the sending time; is the signal propagation time; is the signal processing time; The formula of the dynamic sub-model of network stability is:

[0025] In the formula, is the network stability detection function; is the number of network interruptions; The total number of connection attempts; By collecting the network transmission data of the received signal strength value, transmission data volume, transmission time, sending time, signal propagation time, signal processing time, number of network interruptions and total number of connection attempts of the network channel, the above dynamic model is used to obtain the corresponding network signal dynamic data. The network signal dynamic data can characterize the network quality and signal strength of the network channel, and implies the deep information of the network interception situation. The BiLSTM network learns the characteristics of the network signal dynamic data through the deep structure, explores the potential connection between the data characteristics and the network interception situation, and realizes the detection and analysis of the network interception situation. S3: Generate a data hash value for the system's internal data, and encrypt and sign the system's internal data based on the data hash value, private key, and signature information to obtain the encrypted system's internal data and signature data, and use the blockchain network to store the encrypted system's internal data and data hash value on the chain, including the following steps: S3-1: Based on the external area, collect the system internal data and use the SHA-3 (Secure Hash Algorithm3, the third generation secure hash algorithm) algorithm to generate the data hash value of the system internal data; S3-2: Hash the data With private key Concatenate to get the mixed encryption key , and according to the mixed encryption key, use the asymmetric encryption algorithm to encrypt the internal data of the system to obtain the encrypted internal data of the system; The formula is:

[0026] In the formula, It is the encrypted internal data of the system; is an asymmetric encryption function; Internal data of the system; For integrated systems The private key of is the data hash value; is a hybrid encryption key; S3-3: Based on the signature information, use the digital identity signature technology to sign the internal data of the system to obtain the signature data of the encrypted internal data of the system;

[0027] In the formula, is a random number; is a prime number order; It is the base point of the prime domain; Hash function for target hash; Signature information Integrated system Registration parameters; Signature information Integrated system Registration ID; For integrated systems The entity ID of ; Integrated systems The signature parameters of S3-4: The encrypted system internal data and data hash value are transmitted to the internal area, and the encrypted system internal data and data hash value are stored on the blockchain network, including the following steps: S3-4-1: The encrypted system internal data and data hash value are transmitted to the internal area, the encrypted system internal data is stored in the Inter Planetary File System (IPFS) of the blockchain network, and a storage address and storage hash value are generated; S3-4-2: Perform tamper verification on the storage hash value and the data hash value. After the tamper verification passes, use the smart contract of the blockchain network to generate storage request and transaction data based on the data hash value and storage address; If the stored hash value is consistent with the data hash value, the tampering verification passes, otherwise, it fails; S3-4-3: Store the data hash value and the corresponding storage address in the distributed ledger, and publish the distributed ledger to the blockchain network; S3-4-4: Send the storage request and transaction data to several nodes in the blockchain network, use the Practical Byzantine Fault Tolerance (PBFT) consensus algorithm to reach a consensus on the storage request. After the consensus is reached, the transaction data is packaged into data blocks and linked to the chain, including the following steps: S3-4-4-1: Use a comprehensive layering mechanism to divide all nodes in the blockchain network into consensus layer, confirmation layer, and supervision layer; S3-4-4-2: Send the storage request and transaction data to several consensus nodes of the consensus layer, and use the consensus node that receives the storage request and transaction data as the master node; S3-4-4-3: Based on the master node, verify the correctness of the storage request. After the verification is successful, broadcast the pre-preparation message to other consensus nodes; S3-4-4-4: Based on the consensus node, verify the validity of the received pre-prepared message and record the pre-prepared message locally. If it reaches 2 f +1 number of pre-prepare messages, it enters the preparation phase and broadcasts the preparation message to other consensus nodes, indicating that the sequence number request is accepted; f is the number of Byzantine nodes; S3-4-4-5: Based on consensus nodes, if 2 f +1 number of prepare messages, it enters the commit phase and broadcasts the commit message to other consensus nodes to synchronize the status of all nodes in the consensus layer; S3-4-4-6: Based on consensus nodes, if 2 f +1 number of submission messages means the first consensus is successful and the next step is entered; otherwise, a consensus failure signal is returned and the consensus ends; S3-4-4-7: Based on the master node, broadcast the pre-prepared message to all nodes in the confirmation layer and conduct the second consensus process. If the second consensus succeeds, proceed to the next step. Otherwise, return a consensus failure signal and end the consensus. S3-4-4-8: Based on the master node, the transaction data is packaged into data blocks, and the data blocks are linked to the chain; S4: receiving the query information sent by the data query terminal, obtaining the query hash value of the query information, searching the blockchain network for the target data hash value that matches the query hash value, and extracting the target encrypted system internal data corresponding to the target data hash value, including the following steps: S4-1: Based on the data query terminal, the query information and the user login information are encrypted according to the public key of the integrated system, the encrypted query information and the encrypted user login information are obtained, and uploaded to the integrated system; S4-2: Based on the integrated system, the encrypted query information and the encrypted user login information are decrypted according to the private key to obtain the decrypted query information and the decrypted user login information; S4-3: Perform login verification on the decrypted user login information. After the login verification is passed, use the SHA-3 algorithm to obtain the query hash value of the query information; S4-4: perform search and matching in the distributed ledger of the blockchain network, obtain the Euclidean distance between the query hash value and each data hash value, and use the data hash value with the closest Euclidean distance as the target data hash value; S4-5: According to the target storage address corresponding to the target data hash value in the distributed ledger, extract the target encrypted system internal data corresponding to the target data hash value; S5: Use the Hfish honeypot chain network to collect the access behavior traffic of the data query terminal to the blockchain network, and use the data tampering detection model to perform data tampering detection on the access behavior traffic to obtain the data tampering detection results, including the following steps: S5-1: Use the traffic probe of Hfish Honeypot Chain Network to collect the access behavior traffic of the data query terminal accessing the blockchain network, and input the access behavior traffic into the data tampering detection model; S5-2: Use the key dimension feature extraction module of the data tampering detection model to extract N key dimension features of the access behavior traffic; S5-3: Use the data tampering detection module of the data tampering detection model to perform feature fusion on N key dimension features to obtain fused features; S5-4: Perform data tampering detection based on the fusion features to obtain data tampering detection results; S5-5: If the data tampering detection result shows that data tampering exists, the firewall is closed, the network channel is disconnected, the data storage is terminated, and the data query terminal is added to the blacklist. Otherwise, the data transmission step is entered; S6: transmitting the target data hash value, the target encrypted system internal data and the corresponding target signature data to the data query terminal, collecting the network transmission data of the network channel, and using the network interception detection model to perform network interception detection on the network transmission data to obtain the network interception detection result, including the following steps: S6-1: Transmit the target data hash value, the target encrypted system internal data and the corresponding target signature data to the data query terminal through the corresponding network channel; S6-2: using a data probe set in the network channel to collect network transmission data of the network channel, and inputting the network transmission data into the network interception detection model; S6-3: Generate network signal dynamic data using a network signal dynamic module of a network interception detection model according to the network transmission data; S6-4: Perform network interception detection using a network interception detection module of a network interception detection model according to the network signal dynamic data to obtain a network interception detection result; S6-5: If the network interception detection result is that there is network interception behavior, the network channel is disconnected and data transmission is stopped. Otherwise, the signature verification step is entered; S7: Based on the data query terminal, call the trusted agency to sign the target data Perform signature verification. After the signature verification is passed, the encrypted internal data of the target system is decrypted according to the target data hash value and the public key of the integrated system to obtain the decrypted internal data of the system; The formula is:

[0028] In the formula, For integrated systems The signature verification parameters; For integrated systems 's public key; if the left formula is equal to the right formula, the signature verification is successful; Encrypt the internal data of the target system;

[0029] In the formula, It is the internal data of the system after decryption; is an asymmetric decryption function; Encrypt the internal data of the target system; For integrated systems 's public key; is the hybrid decryption key; is the hash feature value; S8: Generate a decrypted data hash value of the decrypted system internal data, perform integrity verification on the decrypted data hash value and the target data hash value, and after the integrity verification passes, visualize the decrypted system internal data; If the decrypted data hash value is consistent with the target data hash value, the integrity verification passes, otherwise, it fails.

[0030] Embodiment 2: like Figure 2 As shown, this embodiment provides an integrated system tamper-proof system based on blockchain, which is used to implement an integrated system tamper-proof method. The integrated system tamper-proof system includes an integrated system, a trusted institution, and several data query terminals. The integrated system and the trusted institution are respectively connected to the several data query terminals in communication, and the integrated system is connected to the trusted institution in communication; The trusted institution is used to generate keys and register identities for the integrated system, obtain the public-private key pair and signature information of the integrated system, send the private key and signature information in the public-private key pair to the integrated system, and publish the public key in the public-private key pair to all data query terminals connected to the integrated system; The data query terminal is used to call a trusted institution to perform signature verification on the target signature data. After the signature verification is passed, the encrypted internal data of the target system is decrypted according to the target data hash value and the public key of the integrated system to obtain the decrypted internal data of the system; the decrypted data hash value of the decrypted internal data of the system is generated, and the integrity of the decrypted data hash value and the target data hash value is verified. After the integrity verification is passed, the decrypted internal data of the system is visualized; The integrated system includes an initialization unit, an on-chain storage unit, a data query unit, a data tampering detection unit, and a network interception detection unit connected in sequence; An initialization unit is used to divide the data storage area into an internal area and an external area, deploy a blockchain network in the internal area, deploy an Hfish honeypot chain network and a data tampering detection model in the external area, and deploy a network interception detection model according to the network channel connecting the integrated system and the data query terminal; The on-chain storage unit is used to generate a data hash value of the system's internal data, and encrypt and sign the system's internal data according to the data hash value, private key, and signature information to obtain the encrypted system's internal data and signature data, and use the blockchain network to store the encrypted system's internal data and data hash value on the chain; A data query unit is used to receive query information sent by a data query terminal, obtain a query hash value of the query information, retrieve a target data hash value that matches the query hash value in the blockchain network, and extract the target encrypted system internal data corresponding to the target data hash value; The data tampering detection unit is used to use the Hfish honeypot chain network to collect the access behavior traffic of the data query terminal to the blockchain network, and use the data tampering detection model to perform data tampering detection on the access behavior traffic to obtain the data tampering detection result; The network interception detection unit is used to transmit the target data hash value, the target encrypted system internal data and the corresponding target signature data to the data query terminal, collect the network transmission data of the network channel, and use the network interception detection model to perform network interception detection on the network transmission data to obtain the network interception detection result.

[0031] The present invention discloses an integrated system anti-tampering method and system based on blockchain, which introduces the characteristics of decentralization and data immutability of blockchain technology, and combines hash characteristic values ​​for integrity verification, thereby improving the practicability of anti-tampering technology; uses Hfish honeypot chain network and data tampering detection model to detect data tampering, and uses network interception detection model to perform network interception detection on network channels, thereby strengthening the security protection level of data storage and data transmission, and improving the reliability of storage and transmission; in the process of data transmission, combines digital identity signature technology and asymmetric encryption algorithm, transmits data in ciphertext form, and performs double encryption, thereby improving transmission security.

[0032] The present invention is not limited to the above optional implementations, and anyone can derive other various forms of products under the enlightenment of the present invention. The above specific implementations should not be understood as limiting the scope of protection of the present invention. The scope of protection of the present invention should be based on the definition in the claims, and the description can be used to interpret the claims.

Claims

1. A blockchain-based integrated system tamper-proof method, characterized by: The steps include: Based on the trusted institution, the integrated system is key-generated and identity-registered to obtain the public-private key pair and signature information of the integrated system, the private key and signature information in the public-private key pair are sent to the integrated system, and the public key in the public-private key pair is published to all data query terminals connected to the integrated system; Based on the integrated system, the data storage area is divided into internal and external areas. The blockchain network is deployed in the internal area, and the Hfish honeypot chain network and data tampering detection model are deployed in the external area. In addition, the network interception detection model is deployed according to the network channel connecting the integrated system and the data query terminal. Generate a data hash value for the system's internal data, and encrypt and sign the system's internal data based on the data hash value, private key, and signature information to obtain the encrypted system's internal data and signature data, and use the blockchain network to store the encrypted system's internal data and data hash value on the chain; Receive the query information sent by the data query terminal, obtain the query hash value of the query information, retrieve the corresponding target data hash value in the blockchain network according to the query hash value, and extract the target encrypted system internal data corresponding to the target data hash value; Use Hfish honeypot chain network to collect data query terminal access behavior traffic of blockchain network, and use data tampering detection model to perform data tampering detection on access behavior traffic to obtain data tampering detection results; The target data hash value, the target encrypted system internal data and the corresponding target signature data are transmitted to the data query terminal, the network transmission data of the network channel is collected, and the network interception detection model is used to perform network interception detection on the network transmission data to obtain the network interception detection result; Based on the data query terminal, the trusted institution is called to perform signature verification on the target signature data. After the signature verification is passed, the encrypted internal data of the target system is decrypted according to the target data hash value and the public key of the integrated system to obtain the decrypted internal data of the system; Generate a decrypted data hash value for the decrypted system internal data, perform integrity verification on the decrypted data hash value and the target data hash value, and after the integrity verification passes, visualize the decrypted system internal data.

2. The blockchain-based integrated system tamper-proof method according to claim 1, characterized in that: Based on the integrated system, the data storage area is divided into an internal area and an external area. The blockchain network is deployed in the internal area, and the Hfish honeypot chain network and data tampering detection model are deployed in the external area. According to the network channel connecting the integrated system and the data query terminal, the network interception detection model is deployed, including the following steps: Based on the integrated system, the data storage area is divided into an internal area and an external area, and a firewall is set between the internal area and the external area; In the internal area, several data servers are connected in a distributed manner, and the IPFS system and smart contracts are set up to deploy the blockchain network; According to the system information of the data server, build the corresponding Hfish honeypot in the external area, deploy the Hfish honeypot management module, connect all Hfish honeypots, and deploy the Hfish honeypot chain network; Deploy a data tampering detection model in the Hfish honeypot management module, set up a flow probe in each Hfish honeypot, and connect all flow probes to the data tampering detection model; A network interception detection model is deployed in the external area, data probes are set in the network channel connecting the integrated system and the data query terminal, and all data probes are connected to the network interception detection model.

3. The blockchain-based integrated system tamper-proof method according to claim 1, characterized in that: Generate a data hash value for the system's internal data, and encrypt and sign the system's internal data based on the data hash value, private key, and signature information to obtain the encrypted system's internal data and signature data, and use the blockchain network to store the encrypted system's internal data and data hash value on the chain, including the following steps: Based on the external area, collect the internal data of the system and use the SHA-3 algorithm to generate the data hash value of the internal data of the system; The data hash value is concatenated with the private key to obtain a mixed encryption key, and the internal data of the system is encrypted using an asymmetric encryption algorithm based on the mixed encryption key to obtain the encrypted internal data of the system; According to the signature information, the digital identity signature technology is used to sign the internal data of the system to obtain the signature data of the encrypted internal data of the system; The encrypted system internal data and data hash values ​​are transmitted to the internal area, and the encrypted system internal data and data hash values ​​are stored on the chain using the blockchain network.

4. The blockchain-based integrated system tamper-proof method according to claim 3, characterized in that: The encrypted system internal data and data hash values ​​are transmitted to the internal area, and the encrypted system internal data and data hash values ​​are stored on the chain using the blockchain network, including the following steps: The encrypted system internal data and data hash value are transmitted to the internal area, the encrypted system internal data is stored in the IPFS system of the blockchain network, and a storage address and storage hash value are generated; The storage hash value and the data hash value are tamper-verified. After the tamper-verification is passed, the smart contract of the blockchain network is used to generate storage requests and transaction data based on the data hash value and storage address; Store the data hash value and the corresponding storage address in a distributed ledger, and publish the distributed ledger to the blockchain network; The storage request and transaction data are sent to several nodes in the blockchain network to reach a consensus on the storage request. After the consensus is passed, the transaction data is packaged into data blocks and linked to the chain.

5. The blockchain-based integrated system tamper-proof method according to claim 4, characterized in that: The storage request and transaction data are sent to several nodes in the blockchain network. The PBFT consensus algorithm is used to reach a consensus on the storage request. After the consensus is passed, the transaction data is packaged into data blocks and linked to the chain.

6. The blockchain-based integrated system tamper-proof method according to claim 4, characterized in that: Receive the query information sent by the data query terminal, obtain the query hash value of the query information, retrieve the corresponding target data hash value in the blockchain network according to the query hash value, and extract the target encrypted system internal data corresponding to the target data hash value, including the following steps: Based on the data query terminal, the query information and the user login information are encrypted according to the public key of the integrated system, the encrypted query information and the encrypted user login information are obtained, and uploaded to the integrated system; Based on the integrated system, the encrypted query information and the encrypted user login information are decrypted according to the private key to obtain the decrypted query information and the decrypted user login information; Perform login verification on the decrypted user login information. After the login verification is passed, use the SHA-3 algorithm to obtain the query hash value of the query information; Perform search and matching in the distributed ledger of the blockchain network, obtain the Euclidean distance between the query hash value and each data hash value, and use the data hash value with the closest Euclidean distance as the target data hash value; According to the target storage address corresponding to the target data hash value in the distributed ledger, the target encrypted system internal data corresponding to the target data hash value is extracted.

7. The blockchain-based integrated system tamper-proof method according to claim 2, characterized in that: The data tampering detection model includes N key dimension feature extraction modules built based on the GAN algorithm and a data tampering detection module built based on the MLP algorithm; The network interception detection model includes a network signal dynamic module and a network interception detection module built based on the BiLSTM algorithm.

8. The blockchain-based integrated system tamper-proof method according to claim 7, characterized in that: Use the Hfish honeypot chain network to collect the access behavior traffic of the data query terminal to the blockchain network, and use the data tampering detection model to perform data tampering detection on the access behavior traffic to obtain the data tampering detection results, including the following steps: Use the traffic probe of Hfish Honeypot Chain Network to collect the access behavior traffic of the data query terminal accessing the blockchain network, and input the access behavior traffic into the data tampering detection model; Use the key dimension feature extraction module of the data tampering detection model to extract N key dimension features of access behavior traffic; Use the data tampering detection module of the data tampering detection model to fuse N key dimension features to obtain fused features; According to the fusion features, data tampering detection is performed to obtain data tampering detection results; If the data tampering detection result shows that data tampering has occurred, the firewall will be closed, the network channel will be disconnected, the data storage will be ended, and the data query terminal will be added to the blacklist. Otherwise, the data transmission step will be entered.

9. The blockchain-based integrated system tamper-proof method according to claim 7, characterized in that: The target data hash value, the target encrypted system internal data and the corresponding target signature data are transmitted to the data query terminal, the network transmission data of the network channel is collected, and the network interception detection model is used to perform network interception detection on the network transmission data to obtain the network interception detection result, including the following steps: The target data hash value, the target encrypted system internal data and the corresponding target signature data are transmitted to the data query terminal through the corresponding network channel; Use a data probe set in the network channel to collect network transmission data of the network channel, and input the network transmission data into the network interception detection model; According to the network transmission data, the network signal dynamic module of the network interception detection model is used to generate network signal dynamic data; According to the network signal dynamic data, a network interception detection module of a network interception detection model is used to perform network interception detection to obtain a network interception detection result; If the network interception detection result shows that there is network interception behavior, the network channel will be disconnected and data transmission will be stopped. Otherwise, the signature verification step will be entered.

10. A blockchain-based integrated system tamper-proof system, used to implement the integrated system tamper-proof method according to any one of claims 1 to 9, characterized in that: The integrated system anti-tampering system comprises an integrated system, a trusted institution and a plurality of data query terminals. The integrated system and the trusted institution are respectively connected in communication with the plurality of data query terminals, and the integrated system is connected in communication with the trusted institution.

Images