Financial digital employee safety management system based on block chain

Abstract

The invention relates to the technical field of intelligent financial management, and provides a financial digital employee safety management system based on a block chain, and the system comprises a system initialization module which is used for deploying block chain nodes, configuring safety parameters, registering digital employees, and making preparations for the operation of a financial digital system; the identity authentication and authorization module is used for the user to log in a personal account and limiting the access level of the user; the data encryption and storage module is used for data encryption, storage and backup; and the intelligent contract execution module is used for intelligently compiling and formulating the financial contract and monitoring the execution condition of the contract. The business rule is written into the smart contract in the form of the code, automatic execution of the transaction is realized, the transaction efficiency and accuracy are greatly improved, meanwhile, the non-tampering characteristic of the smart contract ensures the fairness and transparency of the transaction, the transaction risk is reduced, the execution process of the smart contract is audited, and the transaction efficiency is improved. And execution of the smart contract is ensured to accord with preset rules and laws and regulations.

Description

Technical Field

[0001] The present invention relates to the field of intelligent financial management technology, and in particular to a financial digital employee security management system based on blockchain. Background Art

[0002] In the financial sector, as the digitalization process continues to accelerate, traditional financial business models face many challenges. On the one hand, the complexity and frequency of financial transactions make manual processing inefficient and error-prone, making it difficult to meet the rapid development needs of the modern financial market. On the other hand, the security and compliance of financial data are crucial, and any data leakage or illegal operations may cause huge losses to financial institutions and customers.

[0003] Therefore, we made improvements to this and proposed a financial digital employee safety management system based on blockchain. Summary of the invention

[0004] (I) The technical problem to be solved by the present invention is: how to realize the automated execution of transactions and ensure that the execution of smart contracts complies with preset rules and laws and regulations.

[0005] (II) Technical solution In order to achieve the above-mentioned invention object, the present invention provides a financial digital employee safety management system based on blockchain, including: System initialization module, used to deploy blockchain nodes, configure security parameters, and register digital employees to prepare for the operation of financial digital systems; Identity authentication and authorization module, used for users to log in to their personal accounts and restrict user access levels; Data encryption and storage module, used for data encryption, storage and backup; Smart contract execution module, used to intelligently write and formulate financial contracts and monitor the execution of contracts; Security audit and monitoring module, used for real-time monitoring during contract execution and risk assessment; The emergency response and recovery module is used to handle risk events in an emergency.

[0006] Preferably, the system initialization module includes a blockchain node deployment unit, a security parameter configuration unit and a digital employee registration unit. The blockchain node deployment unit is used to deploy blockchain nodes on the server or cloud platform of the financial institution to ensure normal communication and data synchronization between nodes. The security parameter configuration unit is used to set the security parameters of the system to ensure the security and reliability of the system. The digital employee registration unit is used for the administrator of the financial institution to register the information of digital employees into the system to ensure that the identity of the digital employees is authentic and reliable.

[0007] Preferably, the identity authentication and authorization module includes a user login unit, a permission verification unit and an access control unit. The user login unit is used for the system to authenticate the identity of the user to ensure that the user's identity is authentic and reliable. The permission verification unit is used to verify whether the user has the permission to access specific resources or perform specific operations based on the user's identity information and permission level. The access control unit is used for the system to control the user's access based on the user's permission level.

[0008] Preferably, the data encryption and storage module includes a data encryption unit, a distributed storage unit and a data backup unit. The data encryption unit is used for the system to encrypt financial data to ensure the security of the data during transmission and storage. The distributed storage unit is used for the system to store the encrypted financial data in a distributed manner on blockchain nodes to ensure the security and reliability of the data. The data backup unit is used for the system to regularly back up financial data to ensure the security and reliability of the data.

[0009] Preferably, the smart contract execution module includes a contract template selection unit and a contract code selection unit, and the contract template selection unit and the contract code selection unit are both connected to the grammar checking unit through data transmission technology, so that the user can intelligently select the contract module and intelligently write after uploading the business, and check the written content. The grammar checking unit is connected to the smart contract deployment unit and the blockchain network deployment unit through data transmission technology, so as to upload the checked contract to the blockchain node to ensure that the contract can be executed by the system. The smart contract deployment unit and the blockchain network deployment unit are both connected to the contract generation and storage unit and the contract execution monitoring unit through data transmission technology, so as to store the contract and monitor the execution of the contract. The contract execution monitoring unit is connected to the execution result verification unit through data transmission technology, so as to verify the execution result of the contract.

[0010] Preferably, the security audit and monitoring module includes a data classification collection unit and an audit log generation unit, the data classification collection unit and the audit log generation unit are connected to the rule setting unit through data transmission technology, and are used to collect various data of the contract, generate audit logs, and set audit rules. The rule setting unit is connected to the matching execution unit through data transmission technology, and is used to match and mark the set rules. The matching execution unit is connected to the real-time monitoring unit through data transmission technology, and is used to obtain indicator data and rule judgments in real time. The real-time monitoring units are connected to the audit analysis unit and the risk assessment unit through data transmission technology, and are used to perform contract audit analysis and contract execution risk assessment. The audit analysis unit and the risk assessment unit are connected to the data merging unit through data transmission technology, and the data merging unit is connected to the report generating unit through data transmission technology, and is used to merge the audit analysis and risk assessment data to generate an audit report.

[0011] Preferably, the data collected by the data classification and collection unit includes but is not limited to system log data, network data, blockchain node data, and operation data.

[0012] Preferably, the emergency response and recovery module includes an emergency plan formulation unit, an emergency response startup unit, a system and data recovery unit, and an event investigation and processing unit. The emergency plan formulation unit is used to formulate a complete emergency plan and clarify the emergency response process and measures. The emergency response startup unit is used when a security incident occurs in the system. The financial institution should immediately start the emergency plan and take corresponding emergency response measures. The system and data recovery unit is used during the emergency response process. The financial institution should restore damaged data and repair system failures as soon as possible. The event investigation and processing is used after the emergency response is completed. The financial institution should investigate and handle the security incident.

[0013] The blockchain-based financial digital employee safety management system provided by the present invention has the following beneficial effects: 1. By writing business rules into smart contracts in the form of code, the automated execution of transactions is achieved, greatly improving transaction efficiency and accuracy. At the same time, the tamper-proof nature of smart contracts ensures the fairness and transparency of transactions and reduces transaction risks.

[0014] 2. Through real-time monitoring and auditing of the system, potential security risks and illegal operations can be discovered in a timely manner, and corresponding measures can be taken to prevent and deal with them. In addition, the execution process of smart contracts can be audited to ensure that the execution of smart contracts complies with preset rules and laws and regulations. BRIEF DESCRIPTION OF THE DRAWINGS

[0015] In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the drawings required for use in the embodiments or the description of the prior art will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying creative work.

[0016] Figure 1 The overall system diagram of the blockchain-based financial digital employee security management system provided for this application; Figure 2 A schematic diagram of the system initialization module of the blockchain-based financial digital employee safety management system provided for this application; Figure 3 A schematic diagram of the identity authentication and authorization module system of the blockchain-based financial digital employee security management system provided for this application; Figure 4 A schematic diagram of the data encryption and storage module system of the blockchain-based financial digital employee security management system provided for this application; Figure 5 A schematic diagram of the smart contract execution module system of the blockchain-based financial digital employee safety management system provided for this application; Figure 6 A schematic diagram of the security audit and monitoring module system of the blockchain-based financial digital employee security management system provided for this application; Figure 7 System diagram of the emergency response and recovery module of the blockchain-based financial digital employee safety management system provided for this application.

[0017] In the figure: 1. System initialization module; 2. Identity authentication and authorization module; 3. Data encryption and storage module; 4. Smart contract execution module; 5. Security audit and monitoring module; 6. Emergency response and recovery module; 7. Blockchain node deployment unit; 8. Security parameter configuration unit; 9. Digital employee registration unit; 10. User login unit; 11. Permission verification unit; 12. Access control unit; 13. Data encryption unit; 14. Distributed storage unit; 15. Data backup unit; 16. Contract template selection unit; 17. Contract code selection unit; 18. Syntax check unit; 19. Smart contract deployment unit; 20. Blockchain network deployment unit; 21. Contract generation and preservation unit; 22. Contract execution monitoring unit; 23. Execution result verification unit; 24. Data classification and collection unit; 25. Audit log generation unit; 26. Rule setting unit; 27. Matching execution unit; 28. Real-time monitoring unit; 29. ​​Audit analysis unit; 30. Risk assessment unit; 31. Data merging unit; 32. Report generation unit; 33. Emergency plan formulation unit; 34. Emergency response initiation unit; 35. System and data recovery unit; 36. Incident investigation and processing. DETAILED DESCRIPTION

[0018] The specific implementation of the present invention is further described in detail below in conjunction with the accompanying drawings and examples of the specification. The following examples are only used to illustrate the present invention, but cannot be used to limit the scope of the present invention.

[0019] like Figure 1-Figure 7 As shown, this embodiment proposes a financial digital employee security management system based on blockchain, including: System initialization module 1 is used to deploy blockchain nodes. Deploy blockchain nodes on the server or cloud platform of the financial institution to ensure normal communication and data synchronization between nodes, configure security parameters such as encryption algorithms, access control policies, smart contract rules, etc., and register digital employees to prepare for the operation of the financial digital system, including employee identity information, authority level, job responsibilities, etc., to ensure that the identity of digital employees is authentic and reliable; Identity authentication and authorization module 2 is used for users to log in to their personal accounts and to restrict user access levels. It uses a variety of authentication methods, such as passwords, fingerprints, facial recognition, digital certificates, etc., to ensure that the identity of digital employees is authentic and reliable. For example, digital employees in different positions may have different access rights to customer information, transaction data, etc. If the user does not have the corresponding authority, the system will deny the user's access request. For example, users with high-level authority can access sensitive data and perform important operations, while users with ordinary authority can only access general data and perform ordinary operations; Data encryption and storage module 3, used for data encryption, storage and backup. The system encrypts financial data to ensure the security of data during transmission and storage. Symmetric encryption and asymmetric encryption can be combined to improve the strength of encryption. The distributed storage technology of blockchain can prevent data loss and tampering, and can also improve data availability and scalability. It can also combine local backup and cloud backup to improve data backup efficiency and security. Smart contract execution module 4 is used to intelligently write and formulate financial contracts and monitor the execution of contracts. Business personnel of financial institutions write smart contracts according to business needs to standardize the operation process and authority scope of digital employees. Smart contracts can be written in programming languages ​​such as Solidity. The deployment process of smart contracts needs to undergo strict security review and testing to ensure the security and reliability of the contracts. When digital employees perform specific business operations, the system will automatically trigger the corresponding smart contracts. Smart contracts will automatically execute the corresponding operations according to preset rules and conditions to ensure the security and reliability of business operations. Security audit and monitoring module 5 is used for real-time monitoring during the execution of the contract and for risk assessment. The system will automatically record the operation logs of digital employees and the operation logs of the system for security audit and monitoring. The audit logs may include information such as the user's login time, operation content, and operation results to ensure the comprehensiveness and accuracy of the audit. At the same time, the system will set a series of monitoring indicators, such as system response time, transaction throughput, resource utilization, etc., to monitor the operating status and security of the system in real time. In addition, the system will monitor the operation behavior of digital employees and the operating status of the system in real time, and will immediately issue an alarm when an abnormality is found. The alarm can be sent to relevant personnel via email, SMS, system notification, etc., so that timely response measures can be taken. Finally, the system will regularly generate security audit reports to conduct a comprehensive audit and analysis of the operation behavior of digital employees and the operating status of the system. The audit report may include the scope, purpose, method, results, problems found, and suggestions of the audit, so that the management can understand the security status and compliance of the system; Emergency response and recovery module 6 is used to deal with risk events in an emergency. The emergency plan should include data backup and recovery, system troubleshooting, security incident handling and other aspects to ensure that response measures can be taken quickly when a security incident occurs. Emergency response measures may include cutting off network connections, suspending business operations, starting data backup and recovery, etc., to ensure the security and reliability of the system, and investigate the causes and impacts of security incidents, and take appropriate measures to prevent similar incidents from happening again. At the same time, the person responsible for the security incident will be investigated and dealt with to ensure the security and reliability of the system.

[0020] In this embodiment, the system initialization module 1 includes a blockchain node deployment unit 7, a security parameter configuration unit 8 and a digital employee registration unit 9. The blockchain node deployment unit 7 is used to deploy blockchain nodes on the server or cloud platform of the financial institution to ensure that the nodes can communicate and synchronize data normally. The security parameter configuration unit 8 is used to set the security parameters of the system to ensure the security and reliability of the system. The digital employee registration unit 9 is used by the administrator of the financial institution to register the information of digital employees into the system to ensure that the identity of the digital employees is authentic and reliable.

[0021] In this embodiment, the identity authentication and authorization module 2 includes a user login unit 10, a permission verification unit 11 and an access control unit 12. The user login unit 10 is used by the system to authenticate the user's identity to ensure that the user's identity is authentic and reliable. The permission verification unit 11 is used to verify whether the user has the permission to access specific resources or perform specific operations based on the user's identity information and permission level. The access control unit 12 is used by the system to control the user's access based on the user's permission level.

[0022] In this embodiment, the data encryption and storage module 3 includes a data encryption unit 13, a distributed storage unit 14 and a data backup unit 15. The data encryption unit 13 is used for the system to encrypt financial data to ensure the security of the data during transmission and storage. The distributed storage unit 14 is used for the system to distribute and store the encrypted financial data on the blockchain nodes to ensure the security and reliability of the data. The data backup unit 15 is used for the system to regularly back up the financial data to ensure the security and reliability of the data.

[0023] In this embodiment, the smart contract execution module 4 includes a contract template selection unit 16 and a contract code selection unit 17. The contract template selection unit 16 and the contract code selection unit 17 are connected to the grammar checking unit 18 through data transmission technology, so that the user can intelligently select the contract module and intelligently write after uploading the business, and check the written content. The grammar checking unit 18 is connected to the smart contract deployment unit 19 and the blockchain network deployment unit 20 through data transmission technology, so as to upload the checked contract to the blockchain node to ensure that the contract can be executed by the system. The smart contract deployment unit 19 and the blockchain network deployment unit 20 are connected to the contract generation and storage unit 21 and the contract execution monitoring unit 22 through data transmission technology, so as to save the contract and monitor the execution of the contract. The contract execution monitoring unit 22 is connected to the execution result verification unit 23 through data transmission technology, so as to verify the execution result of the contract.

[0024] Specifically, by writing business rules into smart contracts in the form of code, the automated execution of transactions is achieved, greatly improving transaction efficiency and accuracy. At the same time, the tamper-proof nature of smart contracts ensures the fairness and transparency of transactions and reduces transaction risks.

[0025] In this embodiment, the security audit and monitoring module 5 includes a data classification collection unit 24 and an audit log generation unit 25. The data classification collection unit 24 and the audit log generation unit 25 are connected to the rule setting unit 26 through data transmission technology, and are used to collect various data of the contract, generate audit logs, and set audit rules. The rule setting unit 26 is connected to the matching execution unit 27 through data transmission technology, and is used to match and mark the set rules. The matching execution unit 27 is connected to the real-time monitoring unit 28 through data transmission technology, and is used to obtain indicator data and rule judgments in real time. The real-time monitoring unit 28 is connected to the audit analysis unit 29 and the risk assessment unit 30 through data transmission technology, and is used to perform contract audit analysis and contract execution risk assessment. The audit analysis unit 29 and the risk assessment unit 30 are connected to the data merging unit 31 through data transmission technology, and the data merging unit 31 is connected to the report generating unit 32 through data transmission technology, and is used to merge the audit analysis and risk assessment data to generate an audit report.

[0026] In this embodiment, the data collected by the data classification and collection unit 24 includes but is not limited to system log data, network data, blockchain node data, and operation data.

[0027] In this embodiment, the emergency response and recovery module 6 includes an emergency plan formulation unit 33, an emergency response startup unit 34, a system and data recovery unit 35 and an event investigation and processing 36. The emergency plan formulation unit 33 is used to formulate a complete emergency plan and clarify the emergency response process and measures. The emergency response startup unit 34 is used when a security incident occurs in the system. The financial institution should immediately start the emergency plan and take corresponding emergency response measures. The system and data recovery unit 35 is used during the emergency response process. The financial institution should restore the damaged data and repair the system failure as soon as possible. The event investigation and processing 36 is used after the emergency response is completed. The financial institution should investigate and handle the security incident.

[0028] Specifically, through real-time monitoring and auditing of the system, potential security risks and illegal operations can be discovered in a timely manner, and corresponding measures can be taken to prevent and deal with them. In addition, the execution process of smart contracts can be audited to ensure that the execution of smart contracts complies with preset rules and laws and regulations.

[0029] The above embodiments are only used to illustrate the present invention, but not to limit the present invention. Although the present invention is described in detail with reference to the embodiments, it should be understood by those skilled in the art that various combinations, modifications or equivalent substitutions of the technical solutions of the present invention do not depart from the spirit and scope of the technical solutions of the present invention, and should be included in the scope of the claims of the present invention.

Claims

1. A financial digital employee security management system based on blockchain, characterized by: include: System initialization module (1), used to deploy blockchain nodes, configure security parameters, and register digital employees to prepare for the operation of the financial digital system; Identity authentication and authorization module (2), used for users to log in to their personal accounts and to restrict user access levels; A data encryption and storage module (3), used for data encryption, storage and backup; Smart contract execution module (4), used to intelligently write and formulate financial contracts and monitor the execution of contracts; Security audit and monitoring module (5), used for real-time monitoring during contract execution and risk assessment; The emergency response and recovery module (6) is used to handle risk events in an emergency manner when encountering risk events.

2. The blockchain-based financial digital employee security management system according to claim 1 is characterized in that: The system initialization module (1) comprises a blockchain node deployment unit (7), a security parameter configuration unit (8) and a digital employee registration unit (9); the blockchain node deployment unit (7) is used to deploy blockchain nodes on a server or cloud platform of a financial institution to ensure that the nodes can communicate and synchronize data normally; the security parameter configuration unit (8) is used to set the security parameters of the system to ensure the security and reliability of the system; and the digital employee registration unit (9) is used by the administrator of the financial institution to register the information of digital employees into the system to ensure that the identity of the digital employees is authentic and reliable.

3. The blockchain-based financial digital employee security management system according to claim 1 is characterized in that: The identity authentication and authorization module (2) comprises a user login unit (10), a permission verification unit (11) and an access control unit (12); the user login unit (10) is used by the system to authenticate the identity of the user to ensure that the identity of the user is authentic and reliable; the permission verification unit (11) is used to verify whether the user has the permission to access specific resources or perform specific operations based on the user's identity information and permission level; and the access control unit (12) is used by the system to control the user's access based on the user's permission level.

4. The blockchain-based financial digital employee security management system according to claim 1 is characterized in that: The data encryption and storage module (3) comprises a data encryption unit (13), a distributed storage unit (14) and a data backup unit (15); the data encryption unit (13) is used by the system to encrypt financial data to ensure the security of the data during transmission and storage; the distributed storage unit (14) is used by the system to store the encrypted financial data in a distributed manner on blockchain nodes to ensure the security and reliability of the data; the data backup unit (15) is used by the system to regularly back up the financial data to ensure the security and reliability of the data.

5. The blockchain-based financial digital employee security management system according to claim 1 is characterized in that: The smart contract execution module (4) includes a contract template selection unit (16) and a contract code selection unit (17). The contract template selection unit (16) and the contract code selection unit (17) are both connected to a grammar checking unit (18) through data transmission technology, and are used for the user to intelligently select a contract module and intelligently write after uploading the business, and to check the written content. The grammar checking unit (18) is connected to a smart contract deployment unit (19) and a blockchain network deployment unit (20) through data transmission technology, and is used to upload the checked contract to the blockchain node to ensure that the contract can be executed by the system. The smart contract deployment unit (19) and the blockchain network deployment unit (20) are both connected to a contract generation and storage unit (21) and a contract execution monitoring unit (22) through data transmission technology, and are used to store the contract and monitor the execution of the contract. The contract execution monitoring unit (22) is connected to an execution result verification unit (23) through data transmission technology, and is used to verify the execution result of the contract.

6. The blockchain-based financial digital employee safety management system according to claim 1 is characterized in that: The security audit and monitoring module (5) comprises a data classification collection unit (24) and an audit log generation unit (25). The data classification collection unit (24) and the audit log generation unit (25) are both connected to a rule setting unit (26) through data transmission technology, and are used to collect various data of the contract, generate audit logs, and set audit rules. The rule setting unit (26) is connected to a matching execution unit (27) through data transmission technology, and is used to match and mark the set rules. The matching execution unit (27) is connected to a real-time monitoring unit (28) through data transmission technology, and is used to obtain indicator data and rule judgment in real time. The real-time monitoring unit (28) is connected to an audit analysis unit (29) and a risk assessment unit (30) through data transmission technology, and is used to perform contract audit analysis and contract execution risk assessment. The audit analysis unit (29) and the risk assessment unit (30) are both connected to a data merging unit (31) through data transmission technology. The data merging unit (31) is connected to a report generation unit (32) through data transmission technology, and is used to merge audit analysis and risk assessment data to generate an audit report.

7. The blockchain-based financial digital employee security management system according to claim 6 is characterized in that: The data collected by the data classification collection unit (24) includes, but is not limited to, system log data, network data, blockchain node data, and operation data.

8. The blockchain-based financial digital employee security management system according to claim 1 is characterized in that: The emergency response and recovery module (6) includes an emergency plan formulation unit (33), an emergency response initiation unit (34), a system and data recovery unit (35) and an incident investigation and processing unit (36). The emergency plan formulation unit (33) is used to formulate a complete emergency plan and clarify the emergency response process and measures. The emergency response initiation unit (34) is used when a security incident occurs in the system. The financial institution should immediately initiate the emergency plan and take corresponding emergency response measures. The system and data recovery unit (35) is used during the emergency response process. The financial institution should restore damaged data and repair system failures as soon as possible. The incident investigation and processing (36) is used after the emergency response is completed. The financial institution should investigate and handle the security incident.

Images