Smart campus information security management system based on block chain

Abstract

The invention discloses a smart campus information security management system based on a block chain, and relates to the technical field of campus information security management, the system comprises a block chain module, and the block chain module is connected with a processing query module; and the block chain module stores the encrypted campus data in a block chain network based on a distributed account book technology. According to the smart campus information security management system based on the block chain, on the basis of an authority management rule, setting of an access control rule is combined, so that system data pressure of a user during a campus information calling period is effectively avoided, random calling and abuse of campus data by the user are reduced, and a behavior of waste of campus data resources is avoided; through the process, the campus data can be effectively classified, different authority management and access control rules can be executed, unauthorized access and data abuse are effectively prevented, and the security and privacy of the campus data are ensured.

Description

Technical Field

[0001] The present invention relates to the technical field of campus information security management, and in particular to a blockchain-based smart campus information security management system. Background Art

[0002] With the rapid development of information technology, the construction of smart campus has become an important trend in the field of education. Smart campus integrates various advanced information technologies, such as the Internet of Things, big data, and artificial intelligence, and invests in research and development and application for the safe management of student personal information, teaching resources, scientific research results and other campus data, aiming to improve the quality of education and teaching, improve campus management efficiency, and provide more convenient services for teachers and students. However, in the development of smart campus, information security management issues have become increasingly prominent. In particular, based on the application of blockchain technology in the field of smart campus information security management, blockchain still has some performance bottlenecks in managing campus information security. On the one hand, the transaction processing speed of blockchain is relatively slow, which may not meet the real-time processing requirements of large amounts of data in the smart campus system. For example, in scenarios such as student attendance check-in, course registration, and online course selection, rapid response is required, and the blockchain may be delayed, blocked, or even paralyzed. Once this happens, campus data in the smart campus is prone to vulnerabilities and even network attacks, causing the risk of data leakage. On the other hand, as time goes by, the continuous accumulation of data on the blockchain may put tremendous pressure on the storage system, causing network vulnerabilities, resulting in the phenomenon that the security of campus data cannot be guaranteed. Summary of the invention

[0003] In order to solve the above technical problems, the present invention is implemented through the following technical solutions: a blockchain-based smart campus information security management system, comprising blockchain modules, each of which is connected to a processing query module; The blockchain module is based on distributed ledger technology, and stores encrypted campus data in the blockchain network to ensure the storage security and non-tamperability of all campus information. It also uses a smart contract mechanism to classify, verify and store campus data stored on the blockchain to obtain classified data packets, ensuring that each block can accurately record data transactions and status changes. It also supports the use of smart contract mechanisms to implement different permission management and access control rules for different types of classified data packets, ensuring that each user can only access data within their authority when querying or operating data, avoiding data leakage or unauthorized access; The processing query module is used to support query processing of campus data based on the decentralized structure of blockchain, and provides real-time processing query functions for various classified data packets in smart campuses, ensuring efficient and low-latency responses in campus application scenarios; in order to solve the bottleneck problem of blockchain technology in processing a large amount of concurrent data, the module has sharding technology, which is used to divide the nodes in the blockchain network into different data processing segments, and improve the transaction processing speed through parallel processing; in addition, the module also supports smart contract calls, which are used to dynamically generate and manage various classified data packet requests on campus to ensure the security and accuracy of data query and operation, among which campus application scenarios include student attendance check-in, course registration, and online course selection application scenarios; The blockchain module includes a data compression unit, which is used to regularly archive, compress and hierarchically store old data in the blockchain to form historical data, and hierarchically manage historical data and classified data packets to reduce the burden of long-term storage on the system, reduce the storage pressure of the blockchain, and ensure the efficient operation of the blockchain network; The processing query module includes a security monitoring unit, which is used to monitor data access and usage behavior within the system to ensure campus information security. Based on the log data in the blockchain, the module records and audits access behavior to all information, automatically detects abnormal access and potential security threats, and issues alarm notifications when risks occur. The module also supports dynamic adjustment of security policies, automatically updates and applies new data protection measures according to the security needs within the campus, including adjusting access rights, data encryption algorithms and audit rules.

[0004] Preferably, the process of obtaining the classified data packet is as follows: According to the actual encryption requirements of campus data, a symmetric encryption algorithm or an asymmetric encryption algorithm is selected to encrypt it. Based on the distributed ledger technology of blockchain, the encrypted campus data is stored in the blockchain network. The distributed ledger technology of blockchain ensures the decentralized storage of data and improves the security and reliability of data. The smart contract mechanism is activated to classify the campus data stored on the blockchain according to the type, source, purpose and validity period of the data to obtain the classification results. For example, students' personal information, grade data, and course information can be classified into different data packets. Based on the classification results, each classification result is marked with corresponding labels and description information to organize the campus data into different classified data packets. Each classified data packet contains a specific type of campus data and has corresponding labels and description information.

[0005] Preferably, the process of labeling each classification result is as follows: First, according to the needs and data characteristics of the smart campus information security management system, a label system is determined, in which the labels include data type, data source, purpose, and validity period: For data types, set labels such as "student personal information", "grade data", and "course information"; for data sources, set labels such as "student information management system" and "teaching management system"; for purposes, set labels such as "teaching evaluation" and "student management"; for validity periods, set labels such as "short-term" and "long-term"; A detailed analysis is conducted on the classification results obtained through the smart contract mechanism to determine the specific characteristics of the campus data corresponding to each classification result and obtain the analysis results. If a classification result is a student's personal information data package, then the specific content of the personal information needs to be analyzed, including name, student number, ID number, contact information and home address. According to the analysis results, appropriate labels are selected from the determined label system, including for student personal information data packages, the "student personal information" label is selected as the data type label, the "student information management system" label is selected as the data source label, and the "student management" label is selected as the purpose label. If personal information needs to be kept for a long time, then the "long-term" label is selected as the validity period label. The selected labels are added to the corresponding classification results using smart contracts. The label information is added by storing it on the blockchain. The automatic verification program is used to check whether the labels are consistent with the actual situation of the classification results. If the labels are found to be inaccurate or incomplete, they are adjusted and supplemented in time. The accuracy and completeness of the labels are ensured by verifying the labeled classification results.

[0006] Preferably, after labeling each classification result accordingly based on the classification result, the simplified first letter is matched to each classification result labeled accordingly based on the classification result, and the process is as follows: Step 1: Formulate initial letter simplification rules: Use the initial letters of common data types and usage words as simplified identifiers, for example, "student personal information" is simplified to the initial letter "S", "grade data" is simplified to the initial letter "G", and "course information" is simplified to the initial letter "C". Based on the historical frequency of use of each classification result of the smart campus comprehensive system, and the importance of the information corresponding to the classification result, the digital identifier corresponding to the classification data packet is obtained; Among them, the smart campus comprehensive system includes: smart application system for student growth, smart application system for teacher professional development, smart application system for scientific research, smart application system for education management, smart application system for security monitoring, smart application system for logistics services, smart application system for social services, and smart application system for comprehensive evaluation; Step 2: Traverse the classification results: Traverse the labeled classification results one by one, read the label information of each classification result, and determine the type and usage characteristics of the classification result; Step 3: Matching the first letter: According to the label feature of the classification result, find the first letter corresponding to it according to the first letter simplification rule, bind the digital identifier corresponding to the classification result and the first letter of the simplified identifier, with the first letter in front and the digital identifier in the back, to form the call identifier of the classification result together. For example, the sequence of digital sorting based on the frequency of use and importance of "grade data" is 20, and based on its simplification to the first letter "G", the corresponding call identifier is recorded as "G20", which is also the initial call identifier; wherein, when a single first letter cannot uniquely mark the classification result, at this time, according to the campus information corresponding to the classification result, extract the first feature, the second feature, the third feature, the fourth feature, until the nth feature, respectively, to form the first, second, third and fourth keywords, until the call identifier of the combination of the first letters of the keywords corresponding to the above features and the initial call identifier is recorded as the extended board call identifier, which is unique in the classification result, then stop extracting the nth feature of the classification result, and record the obtained combined call identifier that makes the classification result unique as the unique identifier; Step 4: Record the first letter: Store the unique identifier by adding a field in the metadata of the classification result; Step 5: Verification and adjustment: Verify the classification results of the matched first letters to ensure the accuracy and consistency of the first letters; if it is found that the first letters do not match the classification results or there are errors, return to step 3 to re-match, or adjust the first letter simplification rules to adapt to special circumstances.

[0007] Preferably, the detailed process of executing different permission management is as follows: Step 1: Define permission levels. First, determine the permission levels required for different types of classified data packages based on the sensitivity of the data and the role of the user. For example, a higher permission level is required for student personal information, which can only be accessed by authorized teachers and administrators; while a lower permission level is required for course information, which can be viewed by both students and teachers. Step 2: Smart contract settings. Set the permission management rules for different classification data packets in the smart contract. The permission management rules include: access to data, the read, write, and modify operations that can be performed, and data access under specific conditions; Step 3: Authentication: When a user requests access to a classified data package, authentication is performed using a username and password, digital certificate, or biometrics to verify that the user's identity meets the required permission level to access the classified data package; Step 4: Permission granting and denial: If the user's identity authentication passes and his / her permission level meets the requirements, the system grants the user the corresponding access rights; if the user's identity authentication fails or the permission level is insufficient, the system denies the user's access request and returns a corresponding error message.

[0008] Preferably, during the identity authentication period, the system combines the user's identity and the permission level for accessing the corresponding classified data package, and sorts and pops up the classified data packages to be accessed based on the unique identifier through a fuzzy algorithm, and displays them on the interface operated by the user, so that the user can click to query according to his current needs. While responding to and speculating on the user's call for the classified data package, the classified data packages that may be called are prioritized according to importance and frequency of use, so as to facilitate the user to quickly complete the call query operation for the corresponding classified data package; During the response and speculation of the user calling the classified data package, if the user's identity authentication fails or the authority level is insufficient, the response and speculation process will no longer serve the current user, but will transfer the operation to call. If there are additional users calling the classified data package at the same time, the response and speculation process will be copied and backed up to the same process backup as the current user data in the form of a data loading process and directly participate in the response and speculation process of the classified data package call allocated to the current online user, avoiding waste of resources. At the same time, the processes that have not been called by other users will be allocated to other users for speed-up calling; If no additional user performs a classified data package call operation within the current timeline, the response and speculation process will be temporarily stored in a data loading process temporary package, which will be used to directly load the temporary package when the subsequent users have the same identity and permission level to access the corresponding classified data package, helping such users to quickly call the required classified data package resources; and in the form of a temporary package, it will be copied and backed up to the process backup that matches the current user's identity and permission data, and directly participate in the response and speculation process of the classified data package call assigned to the corresponding user who is currently online.

[0009] Preferably, the detailed process of executing access control rules: Step 1: Access control rule definition: Determine the access control rules for different types of classified data packets, including access time, access location, and access device. Sensitive data can only be accessed within a specified time period and from a specified device. Step 2: Dual contract setting: In the smart contract, access control rules are combined with permission management rules to jointly ensure data security and set access control rules for different classification data packets; Step 3: Access request detection: When a user initiates an access request, the system detects whether the request complies with the access control rules, including checking whether the request time is within the allowed access time range and whether the requested device meets the requirements; Step 4: Access control execution: If the access request complies with the access control rules, the system allows the user to access the classified data packet; if the access request does not comply with the access control rules, the system rejects the user's access request and returns a corresponding error message.

[0010] Preferably, the blockchain module further includes: The ledger unit is used to distribute and synchronize data between nodes in the blockchain network. Based on the distributed storage architecture of the blockchain, various types of data of the smart campus are distributed and stored between different nodes to ensure that the data is backed up on any node to avoid data loss due to single point failure. The security and consistency of the data in the ledger are also guaranteed based on the consensus mechanism, such as PoS or PoW. The index unit is used to improve the query efficiency of blockchain data and provide indexing technology. It supports indexing of data on the blockchain by time, data type and user identity, and performs data classification retrieval. It can support fast retrieval and query, especially when facing a large amount of data storage in a smart campus. It can significantly improve the response speed of data query, so that administrators and users can obtain the required data.

[0011] Preferably, the blockchain module further includes: The contract unit is connected to the ledger unit and is used to manage smart contracts on the blockchain. Smart contracts include predetermined contract conditions and preset conditions, which are used to set permission management rules for different types of data based on the predetermined contract conditions to ensure that each data writing and reading operation complies with the predetermined contract conditions. The contract unit also has an automatic execution function, which can trigger data storage and verification operations according to preset conditions to avoid security risks caused by manual intervention; The archiving unit is connected to the indexing unit and is used to compress and archive historical data. It adopts hierarchical storage technology to regularly compress historical data in the blockchain to reduce data storage space, and archives early historical data to a low-frequency access storage area to reduce the storage burden. Campus data is divided into current campus data and historical data in chronological order; historical data is divided into early, mid-term and recent periods, corresponding to low-frequency access storage areas, medium-frequency access storage areas, and medium-high frequency access storage areas, respectively, while current campus data is stored in high-frequency access storage areas.

[0012] Preferably, the query processing module includes: The data sharding unit is used to divide the nodes in the blockchain network into data processing segments, and perform sharding processing for different types of data tasks on campus, such as attendance, course registration, and grade management. The unit uses parallel computing technology and can perform dynamic sharding according to the data type and the complexity of the processing task, ensuring that each sharding node can independently and parallelly process data tasks, thereby improving the overall processing speed of the system; The cache acceleration unit is used to accelerate data processing in high-concurrency access situations. Based on cache technology, frequently accessed data is temporarily stored in the cache, reducing the time to obtain data from the blockchain, and dynamically adjusting the update frequency and content of the cached data to ensure that the system can still respond quickly when facing high loads. It also supports an automatic cleanup mechanism for cached data to avoid the accumulation of data in the cache and cause system performance to deteriorate.

[0013] The present invention provides a blockchain-based smart campus information security management system, which has the following beneficial effects: The blockchain-based smart campus information security management system effectively avoids the system data pressure during the user's call for campus information by combining the setting of access control rules on the basis of permission management rules, while also reducing the user's arbitrary call and abuse of campus data, and avoiding the waste of campus data resources; through the above process, campus data can be effectively classified, different permission management and access control rules can be implemented, effectively preventing unauthorized access and data abuse, and ensuring the security and privacy of campus data.

[0014] The blockchain-based smart campus information security management system divides the nodes in the blockchain network into different data processing segments through the sharding technology of the query module, improves the transaction processing speed through parallel processing, reduces the system response time, and meets the real-time processing needs in the smart campus. It combines labeling of classification results and matching of initials and unique identifiers to further improve the data identifiability and retrieval efficiency. Users can quickly and accurately find target data, and further combines the cache acceleration unit to accelerate data processing in high-concurrency access situations, temporarily store frequently accessed data in the cache, reduce the time to obtain data from the blockchain, and improve the system's response speed and performance.

[0015] During the identity authentication period, the blockchain-based smart campus information security management system combines the user identity and authority level, sorts and pops up the classified data packets through a fuzzy algorithm, and prioritizes them according to importance and frequency of use, so that users can quickly complete the call and query operations on the corresponding classified data packets, thereby improving the user experience. When the user identity authentication fails or the authority level is insufficient, the system reasonably transfers or temporarily stores the response and speculation process to avoid waste of resources, and at the same time provides a way for subsequent qualified users to quickly call resources, thereby improving the utilization of system resources and the convenience of user operations. BRIEF DESCRIPTION OF THE DRAWINGS

[0016] Figure 1 This is a flow chart of a blockchain-based smart campus information security management system of the present invention. DETAILED DESCRIPTION

[0017] The present invention is further described in detail below in conjunction with the accompanying drawings and specific embodiments. The embodiments of the present invention are provided for the purpose of illustration and description, and are not intended to be exhaustive or to limit the present invention to the disclosed forms. Many modifications and variations will be apparent to those of ordinary skill in the art. The embodiments are selected and described in order to better illustrate the principles and practical applications of the present invention, and to enable those of ordinary skill in the art to understand the present invention and thereby design various embodiments with various modifications suitable for specific uses.

[0018] like Figure 1 As shown, the present invention provides a technical solution: a blockchain-based smart campus information security management system, including blockchain modules, each of which is connected to a processing query module; The blockchain module is based on distributed ledger technology, and stores encrypted campus data in the blockchain network to ensure the storage security and non-tamperability of all campus information. It also uses a smart contract mechanism to classify, verify and store campus data stored on the blockchain to obtain classified data packets, ensuring that each block can accurately record data transactions and status changes. It also supports the use of smart contract mechanisms to implement different permission management and access control rules for different types of classified data packets, ensuring that each user can only access data within their authority when querying or operating data, avoiding data leakage or unauthorized access; The query processing module is used for the decentralized structure based on blockchain, supports query processing of campus data, and provides real-time processing and query functions for various classified data packets in the smart campus, ensuring efficient and low-latency responses in campus application scenarios. In order to solve the bottleneck problem of blockchain technology in processing large amounts of concurrent data, the module has sharding technology, which is used to divide the nodes in the blockchain network into different data processing segments, and improve the transaction processing speed through parallel processing. In addition, the module also supports smart contract calls, which are used to dynamically generate and manage various classified data packet requests on campus to ensure the security and accuracy of data query and operation. Among them, campus application scenarios include student attendance check-in, course registration, and online course selection application scenarios. The blockchain module includes a data compression unit, which is used to regularly archive, compress and hierarchically store old data in the blockchain to form historical data, and to hierarchically manage historical data and classified data packets to reduce the burden of long-term storage on the system, reduce the storage pressure of the blockchain, ensure the efficient operation of the blockchain network, and avoid storage bottlenecks in the system due to data accumulation; The query processing module includes a security monitoring unit, which is used to monitor data access and usage behavior within the system to ensure campus information security. Based on the log data in the blockchain, this module records and audits access to all information, automatically detects abnormal access and potential security threats, and issues alarm notifications when risks occur. The module also supports dynamic adjustment of security policies, automatically updates and applies new data protection measures based on internal campus security requirements, including adjusting access rights, data encryption algorithms, and audit rules.

[0019] The process of obtaining classified data packets: According to the actual encryption requirements of campus data, a symmetric encryption algorithm or an asymmetric encryption algorithm is selected to encrypt it. Based on the distributed ledger technology of blockchain, the encrypted campus data is stored in the blockchain network. The distributed ledger technology of blockchain ensures the decentralized storage of data and improves the security and reliability of data. The smart contract mechanism is activated to classify the campus data stored on the blockchain according to the type, source, purpose and validity period of the data to obtain the classification results. For example, students' personal information, grade data, and course information can be classified into different data packets. Based on the classification results, each classification result is marked with corresponding labels and description information to organize the campus data into different classified data packets. Each classified data packet contains a specific type of campus data and has corresponding labels and description information.

[0020] It should be further explained that in the specific implementation process, distributed ledger technology ensures decentralized data storage and cannot be tampered with, which greatly improves the security of campus data; even if some nodes are attacked, it will not affect the data integrity of the entire system.

[0021] The process of labeling each classification result is as follows: First, according to the needs and data characteristics of the smart campus information security management system, a label system is determined, in which the labels include data type, data source, purpose, and validity period. Data is classified according to its type, source, purpose, and validity period to facilitate users to quickly locate and manage the required data: For data types, set labels such as "student personal information", "grade data", and "course information"; for data sources, set labels such as "student information management system" and "teaching management system"; for purposes, set labels such as "teaching evaluation" and "student management"; for validity periods, set labels such as "short-term" and "long-term"; A detailed analysis is conducted on the classification results obtained through the smart contract mechanism to determine the specific characteristics of the campus data corresponding to each classification result and obtain the analysis results. If a classification result is a student's personal information data package, then the specific content of the personal information needs to be analyzed, including name, student number, ID number, contact information and home address. According to the analysis results, appropriate labels are selected from the determined label system, including for student personal information data packages, the "student personal information" label is selected as the data type label, the "student information management system" label is selected as the data source label, and the "student management" label is selected as the purpose label. If personal information needs to be kept for a long time, then the "long-term" label is selected as the validity period label. The selected labels are added to the corresponding classification results using smart contracts. The label information is added by storing it on the blockchain. The automatic verification program is used to check whether the labels are consistent with the actual situation of the classification results. If the labels are found to be inaccurate or incomplete, they are adjusted and supplemented in time. The accuracy and completeness of the labels are ensured by verifying the labeled classification results.

[0022] After labeling each classification result accordingly based on the classification result, the simplified first letter is matched to each classification result labeled accordingly based on the classification result. The process is as follows: Step 1: Formulate initial letter simplification rules: Use the initial letters of common data types and usage words as simplified identifiers, for example, "student personal information" is simplified to the initial letter "S", "grade data" is simplified to the initial letter "G", and "course information" is simplified to the initial letter "C". Based on the historical frequency of use of each classification result of the smart campus comprehensive system, and the importance of the information corresponding to the classification result, the digital identifier corresponding to the classification data packet is obtained; Among them, the smart campus comprehensive system includes: smart application system for student growth, smart application system for teacher professional development, smart application system for scientific research, smart application system for education management, smart application system for security monitoring, smart application system for logistics services, smart application system for social services, and smart application system for comprehensive evaluation; Step 2: Traverse the classification results: Traverse the labeled classification results one by one, read the label information of each classification result, and determine the type and usage characteristics of the classification result; Step 3: Matching the first letter: According to the label feature of the classification result, find the first letter corresponding to it according to the first letter simplification rule, bind the digital identifier corresponding to the classification result and the first letter of the simplified identifier, with the first letter in front and the digital identifier in the back, to form the call identifier of the classification result together. For example, the sequence of digital sorting based on the frequency of use and importance of "grade data" is 20, and based on its simplification to the first letter "G", the corresponding call identifier is recorded as "G20", which is also the initial call identifier; wherein, when a single first letter cannot uniquely mark the classification result, at this time, according to the campus information corresponding to the classification result, extract the first feature, the second feature, the third feature, the fourth feature, until the nth feature, respectively, to form the first, second, third and fourth keywords, until the call identifier of the combination of the first letters of the keywords corresponding to the above features and the initial call identifier is recorded as the extended board call identifier, which is unique in the classification result, then stop extracting the nth feature of the classification result, and record the obtained combined call identifier that makes the classification result unique as the unique identifier; Step 4: Record the first letter: Store the unique identifier by adding a field in the metadata of the classification result; Step 5: Verification and adjustment: Verify the classification results of the matched first letters to ensure the accuracy and consistency of the first letters; if it is found that the first letters do not match the classification results or there is an error, return to step 3 to rematch, or adjust the first letter simplification rules to adapt to special situations; Through the above process, simplified initials can be matched for each labeled classification result, which facilitates the rapid identification and management of different types of campus data; on the basis of matching the corresponding representative initials for the labels on the corresponding classification results, a unique identifier is further matched to serve as a quick resource retrieval and identification method for subsequent retrieval, calling and modification of such campus data.

[0023] Detailed process of executing different permission management: Step 1: Define permission levels. First, determine the permission levels required for different types of classified data packages based on the sensitivity of the data and the role of the user. For example, a higher permission level is required for student personal information, which can only be accessed by authorized teachers and administrators; while a lower permission level is required for course information, which can be viewed by both students and teachers. Step 2: Smart contract settings. Set the permission management rules for different classification data packages in the smart contract. The permission management rules include: access to data, the read, write, and modify operations that can be performed, and data access under specific conditions, including but not limited to: For student personal information data packages, the authority management rules are as follows: School administrators can read, write, and modify student information when it changes, but they must record a modification log for each modification; Teachers can read students' names, classes, and contact information under specific conditions of organizing class activities and understanding students' situations for better teaching, but cannot write or modify them. Students can read and modify some personal information, including contact information and home address, but some key information, including ID number and student ID number, can only be viewed but not modified; For student performance data, only teachers can write and modify it, and students can only view their own performance; For course information data packages, the permission management rules are as follows: Teaching administrators can write, modify, adjust course schedules and read new course information; Teachers can read detailed information about the course, including the syllabus and teaching plan, and can modify the relevant information of the course they teach by adjusting the submission time of the assignment; Students can read basic information about a course, including the course name, instructor, class time and location, but cannot write or modify it. For library loan information data packages, the rights management rules are as follows: Library managers can read, write and record borrowing information and modify and handle abnormal borrowing situations; Students can read their own borrowing records, but cannot write or modify them. Teachers can read some of the summarized borrowing information under certain conditions, including when they need to understand the borrowing status of books for academic research, but cannot write or modify them. For campus activity information data packages, the rights management rules are as follows: Student organization managers can write and publish activity information, modify and adjust activity time and location, and read operations; Students and teachers can read campus activity information, but cannot write or modify it unless they are authorized to participate in the organization of the activity; For scientific research results information data packages, the authority management rules are as follows: Scientific research management personnel can read, write and record scientific research results information and modify and update the results status; Teachers and students who participate in scientific research projects can read and modify scientific research information related to themselves within a certain range, including submitting research progress reports; other teachers and students can only read public scientific research information and cannot write or modify it; Step 3: Authentication: When a user requests access to a classified data package, authentication is performed using a username and password, digital certificate, or biometrics to verify that the user's identity meets the required permission level to access the classified data package; Step 4: Permission granting and denial: If the user's identity authentication passes and his / her permission level meets the requirements, the system grants the user the corresponding access rights; if the user's identity authentication fails or the permission level is insufficient, the system denies the user's access request and returns a corresponding error message.

[0024] During the identity authentication period, the system combines the user's identity and the permission level for accessing the corresponding classified data package, and sorts and pops up the classified data packages to be accessed based on the unique identifier through a fuzzy algorithm, and displays them on the user's interface, so that the user can click to query according to their current needs. While responding to and speculating on the user's call for the classified data package, the classified data packages that may be called are prioritized according to importance and frequency of use, so that the user can quickly complete the call query operation for the corresponding classified data package; During the response and speculation of the user calling the classified data package, if the user's identity authentication fails or the authority level is insufficient, the response and speculation process will no longer serve the current user, but will transfer the operation to call. If there are additional users calling the classified data package at the same time, the response and speculation process will be copied and backed up to the same process backup as the current user data in the form of a data loading process and directly participate in the response and speculation process of the classified data package call allocated to the current online user, avoiding waste of resources. At the same time, the processes that have not been called by other users will be allocated to other users for speed-up calling; If there is no additional user performing a classified data package call operation within the current timeline, the response and speculation process will be temporarily stored in a data loading process temporary package, which will be used to directly load the temporary package when the subsequent user has the same identity and permission level to access the corresponding classified data package, helping such users to quickly call the required classified data package resources; and in the form of a temporary package, it will be equally copied and backed up to a process backup that matches the current user's identity and permission data, and directly participate in the response and speculation process of the classified data package call allocated to the corresponding user currently online, avoiding the unnecessary waste of the resource call process occupied by the previous user, and the data loading process generated in the system for users who failed to successfully call the corresponding resources will be used in the form of a cache package for subsequent recycling and use by users who meet the permissions and identities, thereby improving the operational experience of subsequent users who meet the conditions for calling the classified data package and avoiding the waste of historical resource call processes.

[0025] It should be further explained that, in the specific implementation process, during the identity authentication, the system combines the user identity and authority level, sorts and pops up the classified data packets through a fuzzy algorithm, and prioritizes them according to importance and frequency of use, so that users can quickly complete the call and query operations of the corresponding classified data packets, thereby improving the user experience; when the user identity authentication fails or the authority level is insufficient, the system reasonably transfers or temporarily stores the response and speculation process to avoid waste of resources, and at the same time provides subsequent qualified users with a way to quickly call resources, thereby improving the utilization of system resources and the convenience of user operations.

[0026] Detailed process of implementing access control rules: Step 1: Access control rule definition: Determine the access control rules for different types of classified data packets, including access time, access location, and access device. Sensitive data can only be accessed within a specified time period and from a specified device. Step 2: Dual contract setting: In the smart contract, access control rules are combined with permission management rules to jointly ensure data security and set access control rules for different classification data packets; Step 3: Access request detection: When a user initiates an access request, the system detects whether the request complies with the access control rules, including checking whether the request time is within the allowed access time range and whether the requested device meets the requirements; Step 4: Access control execution: If the access request complies with the access control rules, the system allows the user to access the classified data packet; if the access request does not comply with the access control rules, the system rejects the user's access request and returns a corresponding error message; By combining the setting of access control rules with the permission management rules, the system data pressure during the user's call for campus information can be effectively avoided, while also reducing the user's arbitrary call and abuse of campus data, avoiding the waste of campus data resources; through the above process, campus data can be effectively classified, different permission management and access control rules can be implemented, effectively preventing unauthorized access and data abuse, and ensuring the security and privacy of campus data.

[0027] It should be further explained that, in the specific implementation process, the nodes in the blockchain network are divided into different data processing segments through the sharding technology of the query module, and the transaction processing speed is improved through parallel processing, which reduces the system response time and meets the real-time processing needs in the smart campus. The classification results are labeled and matched with the first letter and the unique identifier, which further improves the identifiability and retrieval efficiency of the data. Users can quickly and accurately find the target data, and further combine with the cache acceleration unit to accelerate data processing in high-concurrency access conditions, temporarily store frequently accessed data in the cache, reduce the time to obtain data from the blockchain, and improve the response speed and performance of the system.

[0028] The blockchain module also includes: The ledger unit is used to distribute and synchronize data between nodes in the blockchain network. Based on the distributed storage architecture of the blockchain, various types of data of the smart campus are distributed and stored between different nodes to ensure that the data is backed up on any node to avoid data loss due to single point failure. The security and consistency of the data in the ledger are also guaranteed based on the consensus mechanism, such as PoS or PoW. The index unit is used to improve the query efficiency of blockchain data and provide indexing technology. It supports indexing of data on the blockchain by time, data type and user identity, and performs data classification retrieval. It can support fast retrieval and query, especially when facing a large amount of data storage in a smart campus. It can significantly improve the response speed of data query, so that administrators and users can obtain the required data.

[0029] It needs to be further explained that, in the specific implementation process, data is distributed and synchronized among the nodes of the blockchain network through the ledger unit to achieve distributed storage and avoid single point failure. At the same time, the consensus mechanism ensures data consistency and improves the reliability of data management. The index unit provides indexing technology and supports data classification and retrieval by time, data type and user identity, which greatly improves the efficiency of data query.

[0030] The blockchain module also includes: The contract unit is connected to the ledger unit and is used to manage smart contracts on the blockchain. Smart contracts include predetermined contract conditions and preset conditions, which are used to set permission management rules for different types of data based on the predetermined contract conditions to ensure that each data writing and reading operation complies with the predetermined contract conditions. The contract unit also has an automatic execution function, which can trigger data storage and verification operations according to preset conditions to avoid security risks caused by manual intervention; The archiving unit is connected to the indexing unit and is used to compress and archive historical data. It adopts hierarchical storage technology to regularly compress historical data in the blockchain to reduce data storage space, and archives early historical data to a low-frequency access storage area to reduce the storage burden. Campus data is divided into current campus data and historical data in chronological order; historical data is divided into early, mid-term and recent periods, corresponding to low-frequency access storage areas, medium-frequency access storage areas, and medium-high frequency access storage areas, respectively, while current campus data is stored in high-frequency access storage areas.

[0031] The query processing modules include: The data sharding unit is used to divide the nodes in the blockchain network into data processing segments, and perform sharding processing for different types of data tasks on campus, such as attendance, course registration, and grade management. The unit uses parallel computing technology and can perform dynamic sharding according to the data type and the complexity of the processing task, ensuring that each sharding node can independently and parallelly process data tasks, thereby improving the overall processing speed of the system; The data sharding unit performs dynamic sharding according to data type and task complexity, which improves the system's parallel processing capability and flexibility and adapts to different business needs.

[0032] The cache acceleration unit is used to accelerate data processing in high-concurrency access situations. Based on cache technology, frequently accessed data is temporarily stored in the cache, reducing the time to obtain data from the blockchain, and dynamically adjusting the update frequency and content of the cached data to ensure that the system can still respond quickly when facing high loads. It also supports an automatic cleanup mechanism for cached data to avoid the accumulation of data in the cache and cause system performance to deteriorate.

[0033] Obviously, the described embodiments are only some embodiments of the present invention, not all embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field and related fields without creative work should fall within the scope of protection of the present invention. The structures, devices and operating methods not specifically described and explained in the present invention are implemented according to the conventional means in the field unless otherwise specified and limited.

Claims

1. A blockchain-based smart campus information security management system, characterized by: A blockchain module is included, wherein the blockchain module is connected to a query processing module; The blockchain module is based on distributed ledger technology, stores encrypted campus data in the blockchain network, and uses a smart contract mechanism to classify, verify and store the campus data stored on the blockchain to obtain classified data packets. It also supports the execution of different permission management and access control rules for different types of classified data packets through a smart contract mechanism; The processing query module is used to support query processing of campus data based on the decentralized structure of blockchain, and provides real-time processing query functions for various classified data packets in the smart campus. The module has sharding technology, which is used to divide the nodes in the blockchain network into different data processing segments, and improve the transaction processing speed through parallel processing; in addition, the module also supports smart contract calls, which are used to dynamically generate and manage various classified data packet requests on campus; The blockchain module includes a data compression unit, which is used to regularly archive, compress and hierarchically store old data in the blockchain to form historical data, and hierarchically manage historical data and classified data packets; The processing query module includes a security monitoring unit, which is used to monitor data access and usage behavior within the system. Based on the log data in the blockchain, the module records and audits access behavior to all information, automatically detects abnormal access and potential security threats, and issues alarm notifications when risks occur. The module also supports dynamic adjustment of security policies, automatically updates and applies new data protection measures according to the security needs within the campus, including adjusting access rights, data encryption algorithms and audit rules.

2. According to a blockchain-based smart campus information security management system according to claim 1, it is characterized by: The process of obtaining classified data packets: According to the actual encryption requirements of campus data, select symmetric encryption algorithm or asymmetric encryption algorithm to encrypt it. Based on the distributed ledger technology of blockchain, the encrypted campus data is stored in the blockchain network, and the smart contract mechanism is started. According to the type, source, purpose and validity period of the data, the campus data stored on the blockchain is classified to obtain the classification results. Based on the classification results, each classification result is marked with corresponding labels and descriptive information to organize the campus data into different classified data packets.

3. According to a blockchain-based smart campus information security management system according to claim 2, it is characterized by: The process of labeling each classification result is as follows: First, according to the needs and data characteristics of the smart campus information security management system, a label system is determined, in which the labels include data type, data source, purpose, and validity period: For data types, set labels such as "student personal information", "grade data", and "course information"; for data sources, set labels such as "student information management system" and "teaching management system"; for purposes, set labels such as "teaching evaluation" and "student management"; for validity periods, set labels such as "short-term" and "long-term"; A detailed analysis is conducted on the classification results obtained through the smart contract mechanism to determine the specific characteristics of the campus data corresponding to each classification result and obtain the analysis results. According to the analysis results, appropriate labels are selected from the determined label system, including for student personal information data packets, the "student personal information" label is selected as the data type label, the "student information management system" label is selected as the data source label, and the "student management" label is selected as the purpose label. If personal information needs to be kept for a long time, then the "long-term" label is selected as the validity period label. The selected labels are added to the corresponding classification results using smart contracts. The label information is added by storing it on the blockchain. The automatic verification program is used to check whether the labels are consistent with the actual situation of the classification results. If the labels are found to be inaccurate or incomplete, they are adjusted and supplemented in a timely manner.

4. According to a blockchain-based smart campus information security management system according to claim 3, it is characterized by: After labeling each classification result accordingly based on the classification result, the simplified first letter is matched to each classification result labeled accordingly based on the classification result. The process is as follows: Step 1: Formulate initial letter simplification rules: Use the initial letters of common data types and usage words as simplified identifiers, and sort the historical usage frequency of each classification result based on the smart campus integrated system, and the importance of the information corresponding to the classification result to obtain the digital identifier corresponding to the classification data package; Step 2: Traverse the classification results: Traverse the labeled classification results one by one, read the label information of each classification result, and determine the type and usage characteristics of the classification result; Step 3: Matching the first letter: According to the label features of the classification results, find the corresponding first letter according to the first letter simplification rules, bind the digital identifier corresponding to the classification result and the first letter of the simplified identifier, with the first letter in front and the digital identifier in the back, to form a call identifier of the classification result. When a single first letter cannot uniquely mark the classification result, then, according to the campus information corresponding to the classification result, extract the first feature, the second feature, the third feature, the fourth feature, until the nth feature, to form the first, second, third and fourth keywords respectively, until the call identifier composed of the first letters of the keywords corresponding to the above features and the initial call identifier is recorded as the extended board call identifier, which is unique in the classification result, then stop extracting the nth feature of the classification result, and record the combined call identifier that makes the classification result unique as the unique identifier; Step 4: Record the first letter: Store the unique identifier by adding a field in the metadata of the classification result; Step 5: Verification and adjustment: Verify the classification results of the matched first letters to ensure the accuracy and consistency of the first letters; if it is found that the first letters do not match the classification results or there are errors, return to step 3 to re-match, or adjust the first letter simplification rules to adapt to special circumstances.

5. According to the blockchain-based smart campus information security management system of claim 4, it is characterized by: Detailed process of executing different permission management: Step 1: Define permission levels. First, determine the permission levels required for different types of classified data packages based on the sensitivity of the data and the role of the user. For example, a higher permission level is required for student personal information, which can only be accessed by authorized teachers and administrators; while a lower permission level is required for course information, which can be viewed by both students and teachers. Step 2: Smart contract settings. Set the permission management rules for different classification data packets in the smart contract. The permission management rules include: access to data, the read, write, and modify operations that can be performed, and data access under specific conditions; Step 3: Authentication: When a user requests access to a classified data package, authentication is performed using a username and password, digital certificate, or biometrics to verify that the user's identity meets the required permission level to access the classified data package; Step 4: Permission granting and denial: If the user's identity authentication passes and his / her permission level meets the requirements, the system grants the user the corresponding access rights; if the user's identity authentication fails or the permission level is insufficient, the system denies the user's access request and returns a corresponding error message.

6. According to claim 5, a blockchain-based smart campus information security management system is characterized by: During the identity authentication period, the system combines the user's identity and the permission level for accessing the corresponding classified data package, and sorts and pops up the classified data packages to be accessed based on the unique identifier through a fuzzy algorithm. While responding to and guessing the user's call for the classified data package, the classified data packages that may be called are prioritized according to importance and frequency of use, so that users can quickly complete the call query operation for the corresponding classified data package; During the response and speculation user calling the classified data package, if the user's identity authentication fails or the permission level is insufficient, the response and speculation process will no longer serve the current user, but will transfer the operation to call. If there are additional users calling the classified data package at the same time, the response and speculation process will be copied and backed up to the same process backup as the current user data in the form of a data loading process and directly participate in the response and speculation process of the classified data package call assigned to the current online user; If no additional user performs a classified data package call operation within the current timeline, the response and speculation process will be temporarily stored in a data loading process temporary package, which will be used to directly load the temporary package when the subsequent users have the same identity and permission level to access the corresponding classified data package, helping such users to quickly call the required classified data package resources; and in the form of a temporary package, it will be copied and backed up to the process backup that matches the current user's identity and permission data, and directly participate in the response and speculation process of the classified data package call assigned to the corresponding user who is currently online.

7. According to claim 6, a blockchain-based smart campus information security management system is characterized by: Detailed process of implementing access control rules: Step 1: Access control rule definition: Determine the access control rules for different types of classified data packets, including access time, access location, and access device. Sensitive data can only be accessed within a specified time period and from a specified device. Step 2: Dual contract setting: In the smart contract, access control rules are combined with permission management rules to set access control rules for different classification data packets; Step 3: Access request detection: When a user initiates an access request, the system detects whether the request complies with the access control rules, including checking whether the request time is within the allowed access time range and whether the requested device meets the requirements; Step 4: Access control execution: If the access request complies with the access control rules, the system allows the user to access the classified data packet; if the access request does not comply with the access control rules, the system rejects the user's access request and returns a corresponding error message.

8. According to claim 7, a blockchain-based smart campus information security management system is characterized by: The blockchain module also includes: The ledger unit is used to distribute and synchronize data between nodes in the blockchain network. Based on the distributed storage architecture of the blockchain, various types of data of the smart campus are distributed and stored between different nodes. The security and consistency of the data in the ledger are also guaranteed based on the consensus mechanism. The index unit is used to provide indexing technology, support indexing of data on the blockchain by time, data type and user identity, and perform data classification retrieval.

9. According to claim 8, a blockchain-based smart campus information security management system is characterized by: The blockchain module also includes: The contract unit is connected to the ledger unit and is used to manage smart contracts on the blockchain. Smart contracts include predetermined contract conditions and preset conditions, which are used to set permission management rules for different types of data based on the predetermined contract conditions. The contract unit also has an automatic execution function, which can trigger data storage and verification operations according to preset conditions; The archiving unit is connected to the indexing unit and is used to compress and archive historical data. It adopts hierarchical storage technology to regularly compress historical data in the blockchain and archive early historical data to a low-frequency access storage area. Campus data is divided into current campus data and historical data in chronological order. Historical data is divided into early, mid-term and recent periods, corresponding to low-frequency access storage areas, medium-frequency access storage areas, and medium-high frequency access storage areas, respectively. Current campus data is stored in high-frequency access storage areas.

10. A blockchain-based smart campus information security management system according to claim 9, characterized in that: The query processing module includes: Data sharding unit, used to divide the nodes in the blockchain network into data processing segments, and perform sharding processing for different types of data tasks on campus; The cache acceleration unit is used to accelerate data processing in high-concurrency access situations. Based on cache technology, frequently accessed data is temporarily stored in the cache, reducing the time to obtain data from the blockchain, and dynamically adjusting the update frequency and content of the cached data. It also supports an automatic cleanup mechanism for cached data.

Images