Safe and credible electronic evidence management method based on block chain

Abstract

The invention discloses a safe and credible electronic evidence management method based on a block chain, and the method comprises the steps: enabling a user to complete the registration of a DID through a distributed credible digital identity authentication module, and generating the DID; the user submits the DID and the legal identity information to a third-party mechanism TA for identity verification and binding operation, and TDID is generated and bound with information for uplink; the user performs identity verification through an electronic evidence security storage module before uploading the evidence, and uploads the evidence to an IPFS (Internet Protocol File System) after the verification is passed to generate evidence meta-information; and uploading the evidence meta-information, performing evidence access and verification on the evidence meta-information, and performing updating operation on the evidence meta-information according to an access verification result. According to the invention, the security, reliability and persistent storage requirements of the electronic evidence are met, and the efficiency of evidence management and search is improved; and meanwhile, the privacy of the user is protected, sensitive information leakage is prevented, and the security and privacy of the electronic evidence are improved.

Description

Technical Field

[0001] The present invention relates to the technical field of blockchain electronic information management, and in particular to a secure and reliable electronic evidence management method based on blockchain. Background Art

[0002] Compared with paper evidence, electronic evidence has the advantages of high efficiency, convenience, variety of forms and space saving, but its authenticity and integrity are difficult to guarantee and rely on the stability of technology. The use of blockchain technology for evidence collection can ensure the authenticity and non-tamperability of the data, improve the efficiency of evidence collection and judicial recognition, and realize the transparency and automation of the evidence collection process. Therefore, the development of a secure and reliable electronic evidence management method based on blockchain is of great significance to improving the authenticity, legality and relevance of electronic evidence in the judicial field.

[0003] The existing patent number CN111445238A discloses an electronic evidence storage system based on blockchain, which includes an information fingerprint collection module, a data linearization packaging module, a blockchain system interaction module and a database module. The implementation process of the electronic evidence storage system based on blockchain proposed in the patent is as follows: the information fingerprint collection module collects the hash value of the user's evidence data, which is hash1, and the hash value is hash2 after adding a timestamp; the data linearization packaging module performs hash calculation on hash2 to generate a chain data structure, which is linearized based on the timeline, and the data chain is irreversible; the blockchain system interaction module submits transaction information to the blockchain, checks and confirms the transaction status, and stores the transaction records; the database module uses a centralized database for reading, writing and storing data content of other modules.

[0004] It has the following problems and defects:

[0005] The system has weak security, cannot cover the entire life cycle of electronic evidence, and cannot fully support the transparency and audit of the evidence flow process;

[0006] The system uses a centralized database, which has the risk of single point failure and only saves transaction records. It lacks control over the content of the original evidence. The reliability and availability of the data are highly dependent on the stability of the central node and are vulnerable to the threat of data leakage or unauthorized access. Summary of the invention

[0007] The purpose of this section is to summarize some aspects of the embodiments of the present invention and briefly introduce some preferred embodiments. Some simplifications or omissions may be made in this section and the abstract of the specification and the title of the invention of this application to avoid blurring the purpose of this section, the abstract of the specification and the title of the invention, and such simplifications or omissions cannot be used to limit the scope of the present invention.

[0008] In view of the above existing problems, the present invention is proposed.

[0009] Therefore, the technical problems solved by the present invention are: single point failure and data leakage problems of traditional centralized storage systems, user identity authentication and privacy protection problems, and high operation and maintenance costs and low efficiency of traditional centralized storage systems.

[0010] In order to solve the above technical problems, the present invention provides the following technical solutions: the user completes DID registration through a distributed trusted digital identity authentication module to generate a DID;

[0011] The user submits the DID and legal identity information to a third-party agency TA for identity authentication and binding operations, generates a TDID and binds the information to the chain;

[0012] Before uploading evidence, the user shall authenticate the identity through the electronic evidence security storage module. After passing the authentication, the user shall upload the evidence to IPFS to generate evidence meta-information.

[0013] The evidence meta-information is uploaded to the chain, and evidence access and verification are performed on it. According to the access and verification result, the evidence meta-information is updated.

[0014] As a preferred solution of the blockchain-based secure and reliable electronic evidence management method of the present invention, generating the DID includes:

[0015] The user requests to create a distributed digital identity DID on the blockchain electronic evidence storage platform;

[0016] The blockchain electronic evidence storage platform is successfully created and a digital identity DID is generated for the user, which is saved by the user.

[0017] As a preferred solution of the secure and reliable electronic evidence management method based on blockchain described in the present invention, generating the TDID and binding the information to the chain includes:

[0018] The user submits legal identity information to the distributed trusted digital identity authentication module to the third-party organization TA for verification;

[0019] The third party agency TA verifies the legal identity information of the user through the government agency database;

[0020] If the legal identity information provided by the user matches the information in the government agency database and is verified, the third-party agency TA generates and issues the corresponding trusted digital identity TDID of the user, and binds it to the user's DID. The third-party agency TA generates a binding certificate, which contains the binding relationship between the DID and the TDID, and is signed and confirmed by the third-party agency TA;

[0021] Otherwise, the verification will fail and the TDID will not be issued.

[0022] As a preferred solution of the blockchain-based secure and reliable electronic evidence management method described in the present invention, the legal identity information includes but is not limited to identity card, passport or driver's license information.

[0023] As a preferred solution of the blockchain-based secure and trusted electronic evidence management method described in the present invention, the binding information of the TDID and DID includes at least the binding certificate ID, DID, TDID and timestamp.

[0024] As a preferred solution of the blockchain-based secure and reliable electronic evidence management method of the present invention, generating the evidence meta-information includes:

[0025] Perform hash calculation on the electronic evidence file, upload the original electronic evidence to the IPFS network, and obtain the IPFS address of the evidence;

[0026] The electronic evidence attribute information of the IPFS address and the evidence content hash value is assembled into evidence meta-information in JSON or XML format to facilitate structured storage and transmission of data;

[0027] The assembled evidence meta-information is hashed to generate a unique hash value, which is then recorded on the blockchain to ensure that the evidence meta-information cannot be tampered with.

[0028] As a preferred solution of the secure and reliable electronic evidence management method based on blockchain described in the present invention, the evidence access and verification includes:

[0029] Obtain the corresponding evidence metadata by querying the smart contract or database record on the blockchain;

[0030] Retrieve and obtain the evidence content directly from the IPFS network through the IPFS address in the evidence meta-information;

[0031] If the content of electronic evidence changes and needs to be updated, the new evidence content is uploaded to IPFS and the meta-information record on the blockchain is updated at the same time;

[0032] Track all historical versions of a certain evidence ID or hash value by querying transaction records or event logs on the blockchain;

[0033] After each update of the evidence, the new version of the metadata hash value is recorded in the blockchain and the version number is marked;

[0034] Among them, the timestamp and version number of the meta information are used to manage the evidence content of different versions, and the hash values ​​of different versions are compared to verify whether the evidence content remains consistent or has changed.

[0035] As a preferred solution of the blockchain-based secure and trusted electronic evidence management method described in the present invention, the results returned by the query include but are not limited to all meta-information of the IPFS address, hash value, and creation time of the evidence.

[0036] Beneficial effects of the present invention:

[0037] 1. By using IPFS for decentralized secure storage, the single point failure and data leakage problems of traditional centralized storage systems are solved, the security, reliability and persistent preservation requirements of electronic evidence are met, and the efficiency of evidence management and search is improved;

[0038] 2. By introducing a distributed trusted digital identity authentication module, the present invention solves the problems of user identity authentication and privacy protection, meets the requirement of ensuring the authenticity and trustworthiness of the identity of the electronic evidence submitter on the blockchain, and at the same time protects the user's privacy, prevents the leakage of sensitive information, and improves the security and privacy of electronic evidence;

[0039] 3. The combination of blockchain and IPFS solves the problems of high operation and maintenance costs and low efficiency of traditional centralized storage systems. By reducing dependence on centralized databases, operation and maintenance costs are reduced, and the efficiency of evidence management is improved through automated processes. BRIEF DESCRIPTION OF THE DRAWINGS

[0040] In order to more clearly illustrate the technical solutions of the embodiments of the present invention, the following briefly introduces the drawings required for describing the embodiments. Obviously, the drawings described below are only some embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without creative labor. Among them:

[0041] Figure 1 This is a flowchart of a secure and reliable electronic evidence management method based on blockchain shown in the present invention;

[0042] Figure 2 A schematic diagram of the user identity registration and authentication process of the distributed trusted digital identity authentication module shown in the present invention;

[0043] Figure 3 This is a schematic diagram of the network topology structure of the electronic evidence security storage module shown in the present invention. DETAILED DESCRIPTION

[0044] In order to make the above-mentioned objects, features and advantages of the present invention more obvious and easy to understand, the specific implementation methods of the present invention are described in detail below in conjunction with the drawings. It is obvious that the described embodiments are only part of the embodiments of the present invention, but not all of the embodiments.

[0045] Based on the embodiments of the present invention, all other embodiments obtained by ordinary persons in the art without making any creative work should fall within the scope of protection of the present invention.

[0046] In the following description, many specific details are set forth to facilitate a full understanding of the present invention, but the present invention may also be implemented in other ways different from those described herein, and those skilled in the art may make similar generalizations without violating the connotation of the present invention. Therefore, the present invention is not limited to the specific embodiments disclosed below.

[0047] According to an embodiment of the present invention, Figure 1 The flowchart shown is a secure and reliable electronic evidence management method based on blockchain, which specifically includes the following steps:

[0048] S1. The user completes DID registration through the distributed trusted digital identity authentication module and generates a DID;

[0049] S2. The user submits the DID and legal identity information to the third-party agency TA for identity authentication and binding operations, generates a TDID and binds the information to the chain;

[0050] S3. Before uploading evidence, the user needs to authenticate through the electronic evidence security storage module. After passing the authentication, the user needs to upload the evidence to IPFS to generate evidence metadata.

[0051] S4. The evidence meta-information is uploaded to the chain, and the evidence is accessed and verified. Based on the access and verification results, the evidence meta-information is updated.

[0052] It should be noted that all operations involving electronic evidence in the method of the present invention must first undergo identity verification to ensure the legitimacy and credibility of the operating subject. After the identity verification is passed, the user can upload the evidence and conduct subsequent management and access verification for it. Figure 1 The process of the method of the present invention is implemented through the application of an electronic evidence security storage module and a distributed trusted digital identity authentication module.

[0053] To ensure the credibility of electronic evidence, users must store electronic evidence on the blockchain based on their real identities. The embodiments of the present invention provide a decentralized and verifiable identity authentication mechanism that can be traced back to a specific actor with a real and credible identity. The following modules are used to improve the credibility of electronic evidence by securely binding the user's legal identity information with his or her digital identity on the blockchain.

[0054] Among them, in the distributed trusted digital identity authentication module, an authoritative trusted third-party agency (Trust Authority, TA) recognized by the regulatory agency is introduced to issue and verify trusted digital identities.

[0055] The core components of the distributed trusted digital identity authentication architecture are:

[0056] User: The end user of the blockchain electronic evidence platform, who needs to undergo digital identity authentication;

[0057] Authoritative Trusted Third Party Agency (TA): responsible for verifying the user's legal identity information and generating the corresponding TDID;

[0058] Blockchain Platform: Provides infrastructure for storing, verifying and querying digital identities;

[0059] Decentralized Identifiers (DID): an identity generated by a user on the blockchain;

[0060] Trusted Digital Identity (TDID): An authentication identifier generated by TA based on the user’s legal identity information.

[0061] Preferably, in order to fully ensure the security and availability of electronic evidence, the embodiments of the present invention use the InterPlanetary File System (IPFS) to store electronic evidence. As a decentralized storage system, IPFS reduces the risk of centralized server failure or censorship that electronic evidence may suffer, while ensuring that the evidence is persisted and difficult to tamper with.

[0062] Combine the following Figure 2 , Figure 3 The flowcharts shown and some preferred or optional examples of the present invention more specifically describe the implementation process and / or effects of certain examples of the present invention.

[0063] The electronic evidence security storage module stores the electronic evidence meta-information on the blockchain, and the original evidence is saved in a secure storage system. The blockchain is used to store the tamper-proof evidence meta-information, and IPFS is used to store the larger evidence files themselves.

[0064] As shown in Table 1 below, electronic evidence meta-information includes but is not limited to the unique identifier of the evidence, the type of evidence, the creation time, the identity of the parties involved, and a link to the storage location of the evidence in IPFS (IPFS address).

[0065] Table 1. Example of electronic evidence meta information table

[0066]

[0067] Reference Figure 2 ,The process of user identity registration and authentication includes the following steps:

[0068] (1) The user requests to create a distributed digital identity DID on the blockchain electronic evidence storage platform;

[0069] (2) The blockchain electronic evidence storage platform is successfully created and generates a digital identity DID for the user, which is saved by the user;

[0070] (3) The user submits legal identity information to the distributed trusted digital identity authentication module and sends it to a third-party agency TA for verification;

[0071] (4) The third-party agency TA verifies the user's legal identity information through the government agency database;

[0072] (5) If the legal identity information provided by the user matches the information in the government agency database and is verified, the third-party agency TA generates and issues the user's corresponding trusted digital identity TDID and binds it to the user's DID. The third-party agency TA generates a binding certificate, which contains the binding relationship between the DID and TDID, and is signed and confirmed by the third-party agency TA;

[0073] (6) Otherwise, the verification fails and the TDID will not be issued.

[0074] By way of example, legal identification information includes, but is not limited to, identification card, passport, or driver's license information.

[0075] As an example, the binding information of TDID and DID includes at least the binding certificate ID, DID, TDID and timestamp, ensuring that it cannot be tampered with and is verifiable.

[0076] As an example, users prove their identity by using a TDID while retaining the privacy and control of a DID.

[0077] In an optional implementation, the verification process in the distributed trusted digital identity authentication module includes: when a user performs identity-sensitive operations on the blockchain electronic evidence platform, the system requires him / her to authenticate his / her identity through TDID; the user presents his / her TDID, and the system verifies the authenticity and validity of the user's identity by comparing it with the records on the blockchain of the distributed trusted digital identity authentication module.

[0078] It should be noted that in the embodiment of the present invention, TA is the authoritative entity responsible for verifying the user's legal identity information, usually an organization recognized by the government or other trusted institutions. The role of TA is to ensure that the user's digital identity (DID) on the blockchain has a legal association with his or her legal identity.

[0079] After receiving the legal identity information submitted by the user, TA will conduct multiple verification processes to ensure that the submitted identity information is authentic and legal.

[0080] As an example, a sign of successful verification is the successful generation and issuance of a trusted digital identity (TDID).

[0081] Preferably, the embodiment of the present invention reduces the risk of centralized storage and enhances personal privacy protection by allowing users to keep their own digital identities. At the same time, TA's intervention ensures the authenticity of identity information, while the application of blockchain technology protects the immutability and transparency of information. TDID also provides a reliable means of identity authentication.

[0082] Reference Figure 3 The process of uploading electronic evidence includes the following steps:

[0083] (1) Perform hash calculation on the electronic evidence file, upload the original electronic evidence to the IPFS network, and obtain the IPFS address of the evidence;

[0084] (2) Use JSON or XML format to assemble the electronic evidence attribute information of the IPFS address and the evidence content hash value into evidence metadata to facilitate structured storage and transmission of data;

[0085] (3) The assembled evidence meta-information is hashed to generate a unique hash value, which is then recorded on the blockchain to ensure that the evidence meta-information cannot be tampered with.

[0086] In an optional implementation, the access verification process of electronic evidence includes the following steps:

[0087] (1) Obtain corresponding evidence metadata by querying smart contracts or database records on the blockchain;

[0088] Through the IPFS address in the evidence meta-information, directly retrieve and obtain the evidence content from the IPFS network;

[0089] (2) If the content of the electronic evidence changes and needs to be updated, the new evidence content is uploaded to IPFS and the metadata record on the blockchain is updated at the same time;

[0090] (3) Track all historical versions of a certain evidence ID or hash value by querying transaction records or event logs on the blockchain;

[0091] (4) Each time the evidence is updated, the new version of the metadata hash value is recorded in the blockchain and the version number is marked;

[0092] Among them, the timestamp and version number of the meta information are used to manage the evidence content of different versions, and the hash values ​​of different versions are compared to verify whether the evidence content remains consistent or has changed.

[0093] As an example, the results returned by the query include but are not limited to all meta information of the IPFS address, hash value, and creation time of the evidence.

[0094] As an example, if the content of electronic evidence changes, such as a new file version, supplementary materials, the evidence needs to be updated.

[0095] It is not difficult to understand that every time the evidence is updated, new metadata will be recorded on the blockchain. This information is tamper-proof and traceable. Each record on the blockchain will carry a timestamp and transaction hash value. This information can be used to construct a time series to track version changes of evidence.

[0096] The aforementioned hash value calculation method and information binding and chaining method can be performed using methods and means in the prior art and will not be described in detail in this example.

[0097] It should be noted that the above embodiments are only used to illustrate the technical solutions of the present invention rather than to limit it. Although the present invention has been described in detail with reference to the preferred embodiments, those skilled in the art should understand that the technical solutions of the present invention may be modified or replaced by equivalents without departing from the spirit and scope of the technical solutions of the present invention, which should all be included in the scope of the claims of the present invention.

Claims

1. A secure and reliable electronic evidence management method based on blockchain, characterized in that: include: Users complete DID registration and generate DID through the distributed trusted digital identity authentication module; The user submits the DID and legal identity information to a third-party agency TA for identity authentication and binding operations, generates a TDID and binds the information to the chain; Before uploading evidence, the user shall authenticate the identity through the electronic evidence security storage module. After passing the authentication, the user shall upload the evidence to IPFS to generate evidence meta-information. The evidence meta-information is uploaded to the chain, and evidence access and verification are performed on it. According to the access and verification result, the evidence meta-information is updated.

2. The secure and reliable electronic evidence management method based on blockchain according to claim 1 is characterized in that: Generating the DID includes: The user requests to create a distributed digital identity DID on the blockchain electronic evidence storage platform; The blockchain electronic evidence storage platform is successfully created and a digital identity DID is generated for the user, which is saved by the user.

3. The secure and reliable electronic evidence management method based on blockchain according to claim 1 is characterized in that: Generate the TDID and bind the information to the chain, including: The user submits legal identity information to the distributed trusted digital identity authentication module to the third-party organization TA for verification; The third party agency TA verifies the legal identity information of the user through the government agency database; If the legal identity information provided by the user matches the information in the government agency database and is verified, the third-party agency TA generates and issues the corresponding trusted digital identity TDID of the user, and binds it to the user's DID. The third-party agency TA generates a binding certificate, which contains the binding relationship between the DID and the TDID, and is signed and confirmed by the third-party agency TA; Otherwise, the verification will fail and the TDID will not be issued.

4. The secure and reliable electronic evidence management method based on blockchain according to claim 3 is characterized in that: The legal identity information includes but is not limited to identity card, passport or driver's license information.

5. The secure and reliable electronic evidence management method based on blockchain according to claim 3 is characterized in that: The binding information of the TDID and the DID includes at least a binding certificate ID, a DID, a TDID and a timestamp.

6. The secure and reliable electronic evidence management method based on blockchain according to claim 1 is characterized in that: Generating the evidence meta information includes: Perform hash calculation on the electronic evidence file, upload the original electronic evidence to the IPFS network, and obtain the IPFS address of the evidence; The electronic evidence attribute information of the IPFS address and the evidence content hash value is assembled into evidence meta-information in JSON or XML format to facilitate structured storage and transmission of data; The assembled evidence meta-information is hashed to generate a unique hash value, which is then recorded on the blockchain to ensure that the evidence meta-information cannot be tampered with.

7. The secure and reliable electronic evidence management method based on blockchain according to claim 1 is characterized in that: The access and verification of evidence includes: Obtain the corresponding evidence metadata by querying the smart contract or database record on the blockchain; Retrieve and obtain the evidence content directly from the IPFS network through the IPFS address in the evidence meta-information; If the content of electronic evidence changes and needs to be updated, the new evidence content is uploaded to IPFS and the meta-information record on the blockchain is updated at the same time; Track all historical versions of a certain evidence ID or hash value by querying transaction records or event logs on the blockchain; After each update of the evidence, the new version of the metadata hash value is recorded in the blockchain and the version number is marked; Among them, the timestamp and version number of the meta information are used to manage the evidence content of different versions, and the hash values ​​of different versions are compared to verify whether the evidence content remains consistent or has changed.

8. The secure and reliable electronic evidence management method based on blockchain according to claim 7 is characterized in that: The results returned by the query include but are not limited to the IPFS address, hash value, and all meta information of the creation time of the evidence.

Images