Positioning resolving data credible evidence storage method capable of realizing position authentication

Abstract

The invention belongs to the technical field of electronic data evidence, and particularly relates to a positioning calculation data credible evidence storage method capable of realizing position authentication, which comprises the following steps of: forming a processing system by software and hardware, and dividing the processing system into unit structures by function points, the system comprises a special positioning terminal, a data encryption module, a surveying and mapping data resolving unit, a data processing unit and a trusted time unit, and the spatial position storage authentication method based on network position resolving provided by the invention can enable a user to obtain real, trusted and authenticated spatial position information, encrypts and binds the information with an event, and improves the user experience. The electronic data including the spatial position data is prevented from being manually changed and lost, and finally the purpose of electronic evidence judicial validity is achieved.

Description

Technical Field

[0001] The present invention relates to the technical field of electronic data evidence, and in particular to a reliable evidence storage method for positioning solution data capable of realizing position authentication. Background Art

[0002] The location authentication method is to realize the location authenticity authentication of the positioning terminal. The location signal is sent or obtained between the positioning terminal and the surveying and mapping data solution unit through encryption. The surveying and mapping data solution unit obtains the location signal while including the satellite and navigation base station information, ensuring that the original location signal is accurate and cannot be tampered with, and realizing the reliable transmission of the location signal;

[0003] With the improvement of information security awareness and judicial progress in my country, electronic data has become the main carrier for recording people's life information at different stages of informatization and digitalization development. The state has issued a series of laws and regulations involving electronic data, which basically meet the current judicial trial requirements. However, with the rapid advancement and rapid iteration of technology, new judicial electronic data problems emerge in an endless stream, including cases involving reliable spatial locations. The implementation technology of trusted location information in current laws and regulations and various data application standards is worth studying;

[0004] There is an increasing demand for electronic data evidence collection involving crimes. Due to business needs, law enforcement departments, including the public security, procuratorate, customs, and industry and commerce, have developed rapidly in professional electronic data evidence collection institutions, and private judicial appraisal institutions have gradually provided electronic data evidence collection services. Within the public security organs, all types of police are equipped with electronic data evidence collection equipment and have trained evidence collection talents to meet the needs of electronic data evidence collection in their respective fields. Both the network security protection department and the criminal investigation department use laboratory institutions to conduct electronic data evidence collection. Ensuring the authenticity, accuracy, and completeness of evidence collection investigation data is related to spatial data. Electronic data location evidence collection methods are necessary from various perspectives, including the authenticity of spatial data parameters, the authenticity of the calculated location, and judicial fairness.

[0005] The development of the Internet and mobile Internet has brought new opportunities. Network evidence collection has become more and more convenient. However, the authenticity of electronic evidence cannot be guaranteed. Therefore, a large number of evidence storage methods have emerged, and the purpose of evidence collection and storage is achieved through trusted timestamps, blockchain, Internet notarization, judicial appraisal, etc. However, there is no unified and scientific method for location identification and authentication used by judicial evidence storage platforms. How to ensure that the location of evidence data is credible and achieve credible evidence requires research on trusted location authentication methods.

[0006] The rapid development of electronic data forensics has made digital spatial location data increasingly important as a basic dimension of data. Spatial location, as an important data marker, can become convincing evidence. Spatial location is the basis for other forensics, and determining spatial location is the first and indispensable link in electronic data forensics; spatial location itself is also important evidence. Spatial location stored in storage or electronic files can be used as evidence to determine behavior and consequences. Just like time in the real world, spatial location information in electronic data forensics is difficult to verify. Even experienced forensics personnel find it difficult to judge its accuracy and whether it has been tampered with. It requires a lot of knowledge and experience plus actual verification to obtain spatial location evidence that complies with judicial regulations.

[0007] The present application can ensure the accuracy of the spatial position through the trusted solution of the spatial position reference source, and ensure that the spatial position information is not changed through encryption means, making the spatial position information collection simple and easy in the electronic data forensics work. It is no longer necessary to verify or corroborate the location of the evidence collection after the evidence is collected, thereby improving the efficiency of judicial evidence collection and the technical level of judicial evidence collection work. Summary of the invention

[0008] The purpose of the present invention is to provide a method for credible storage of positioning solution data that can realize position authentication, so as to solve the problems raised in the above-mentioned background technology.

[0009] To achieve the above-mentioned purpose, the present invention provides the following technical solutions: a method for credible storage of positioning solution data that can realize position authentication, the method for credible storage of positioning solution data that can realize position authentication is composed of a processing system composed of software and hardware, and is divided into a unit structure by functional points, and the composition includes a dedicated positioning terminal, a data encryption module, a surveying and mapping data solution unit, a data processing unit, and a trusted time unit;

[0010] The specific steps of the method for credible storage of positioning solution data that can realize location authentication are as follows:

[0011] Step 1: The positioning terminal device receives satellite navigation messages, LBS base station locations, differential messages RTCM sent by differential base stations, and wireless AP signals through the RF antenna. The above signals must be collected in real time and encrypted;

[0012] Step 2: Send the encrypted position signal data to the surveying and mapping data solution unit for position data analysis and processing by calling the surveying and mapping data solution unit service interface, and send the position signal data and event data as the location evidence data of the event to the data processing unit for processing;

[0013] Step 3: The surveying and mapping data solution unit is composed of navigation data solution software, base station database, surveying and mapping map software and other operation modules, forming a unified unit service interface. The location signal data access interface generates real-time location data of the positioning terminal through a series of operations such as decryption, solution, analysis, and positioning. The data content includes positioning and navigation information such as altitude, longitude and latitude, speed, time, and geographic location;

[0014] Step 4: Feedback the above position data to the positioning terminal and send it to the data processing unit as evidence data, and send the satellite clock time data in the above position data to the trusted time unit for time credibility comparison;

[0015] Step 5: The data processing unit includes a data encryption module and functional modules such as data cleaning, data analysis, data packaging, and data storage. The unit performs validity analysis and structured storage on the input event data, original position signal data, and event position data parsed by the surveying and mapping data solution unit to form a proof data package, and instructs the call of the proof unit interface to form a credible proof.

[0016] Step 6: The digital identity certificate issued by the data encryption module certificate generator is stored and distributed, and used as an identity certificate for trusted location authentication to perform data security identity checks on the positioning terminal, mapping and solution unit, and trusted time unit;

[0017] Step 7: The data processing unit calls the timestamp service unit interface to store time credibility, ensuring that the time when the location evidence data is generated is credible. The timestamp file generated by the trusted time and timestamp operation is usually considered to be a credible timestamp file.

[0018] Step 8: The trusted time unit consists of a clock module, a timestamp module and a timestamp evidence management module. The clock module receives the star clock time analyzed by the surveying and mapping data solution unit to perform clock synchronization, and a high-performance crystal oscillator keeps the time consistent with the UTC time source. The clock module receives the message request transmitted by the timestamp module and sends the current time value to the timestamp module;

[0019] Step 9: The timestamp module receives the evidence data packet and performs a hash operation to encrypt and bind the data fingerprint with the time value, generate a timestamp file, and store it. The digital identity signature in the timestamp file is provided by the data encryption module in the data processing unit;

[0020] Step 10: After the evidence data packet is timestamped, it forms a trusted location authentication solution file, which includes a timestamp evidence file, an encrypted file consisting of event data, location signal data, and location data;

[0021] Step 11: The trusted location file verification consists of two verification channels: the trusted location authentication solution file can verify the credibility of the evidence time through the trusted time unit verification interface; the trusted location authentication solution file verifies the location data through the surveying and mapping data solution unit verification interface, and inputs the original location signal file in the evidence file for output location data comparison.

[0022] Preferably, the system is composed of a unit structure of software and hardware, wherein a dedicated positioning terminal inputs navigation signal messages and outputs them to a surveying and mapping data solving unit and a data processing unit.

[0023] Preferably, the surveying and mapping data solving unit inputs the decrypted navigation signal to solve the position, feeds back the position information to the positioning terminal, and simultaneously outputs the position information to the data processing unit.

[0024] Preferably, the data processing unit packages the navigation data, position solution data and event data through an encryption module to form an evidence data packet which is output to the trusted time unit.

[0025] Preferably, the trusted time unit calls a standard time source to authenticate the stored time and encrypts the stored time, binds the location information to the time, and forms a timestamp file. The data processing unit will eventually generate and output an electronic file of the trusted location solution data.

[0026] Compared with the prior art, the present invention has the following beneficial effects:

[0027] The spatial location evidence storage and authentication method based on network location solution provided by the present invention enables users to obtain real, reliable and verifiable spatial location information, and encrypt and bind it with events to prevent electronic data including spatial location data from being artificially changed or lost, ultimately achieving the purpose of judicial validity of electronic evidence. BRIEF DESCRIPTION OF THE DRAWINGS

[0028] Figure 1 This is a diagram illustrating the structure of the present invention. DETAILED DESCRIPTION

[0029] The following will be combined with the drawings in the embodiments of the present invention to clearly and completely describe the technical solutions in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0030] In the description of the present invention, it is necessary to understand that the terms "upper", "lower", "front", "back", "left", "right", "top", "bottom", "inside", "outside", etc., indicating the orientation or position relationship are based on the orientation or position relationship shown in the drawings, and are only for the convenience of describing the present invention and simplifying the description, rather than indicating or implying that the device or element referred to must have a specific orientation, be constructed and operated in a specific orientation, and therefore cannot be understood as a limitation on the present invention.

[0031] Example:

[0032] See also Figure 1 , the present invention provides a technical solution:

[0033] A trusted storage method for positioning solution data that can realize position authentication, the trusted storage method for positioning solution data that can realize position authentication is composed of a processing system composed of software and hardware, divided into a unit structure by functional points, and composed of a dedicated positioning terminal, a data encryption module, a surveying and mapping data solution unit, a data processing unit, and a trusted time unit;

[0034] The specific steps of the method for credible storage of positioning solution data that can realize location authentication are as follows:

[0035] Step 1: The positioning terminal device receives satellite navigation messages, LBS base station locations, differential messages RTCM sent by differential base stations, and wireless AP signals through the RF antenna. The above signals must be collected in real time and encrypted;

[0036] Step 2: Send the encrypted position signal data to the surveying and mapping data solution unit for position data analysis and processing by calling the surveying and mapping data solution unit service interface, and send the position signal data and event data as the location evidence data of the event to the data processing unit for processing;

[0037] Step 3: The surveying and mapping data solution unit is composed of navigation data solution software, base station database, surveying and mapping map software and other operation modules, forming a unified unit service interface. The location signal data access interface generates real-time location data of the positioning terminal through a series of operations such as decryption, solution, analysis, and positioning. The data content includes positioning and navigation information such as altitude, longitude and latitude, speed, time, and geographic location;

[0038] Step 4: Feedback the above position data to the positioning terminal and send it to the data processing unit as evidence data, and send the satellite clock time data in the above position data to the trusted time unit for time credibility comparison;

[0039] Step 5: The data processing unit includes a data encryption module and functional modules such as data cleaning, data analysis, data packaging, and data storage. The unit performs validity analysis and structured storage on the input event data, original position signal data, and event position data parsed by the surveying and mapping data solution unit to form a proof data package, and instructs the call of the proof unit interface to form a credible proof.

[0040] Step 6: The digital identity certificate issued by the data encryption module certificate generator is stored and distributed, and used as an identity certificate for trusted location authentication to perform data security identity checks on the positioning terminal, mapping and solution unit, and trusted time unit;

[0041] Step 7: The data processing unit calls the timestamp service unit interface to store time credibility, ensuring that the time when the location evidence data is generated is credible. The timestamp file generated by the trusted time and timestamp operation is usually considered to be a credible timestamp file.

[0042] Step 8: The trusted time unit consists of a clock module, a timestamp module and a timestamp evidence management module. The clock module receives the star clock time analyzed by the surveying and mapping data solution unit to perform clock synchronization, and a high-performance crystal oscillator keeps the time consistent with the UTC time source. The clock module receives the message request transmitted by the timestamp module and sends the current time value to the timestamp module;

[0043] Step 9: The timestamp module receives the evidence data packet and performs a hash operation to encrypt and bind the data fingerprint with the time value, generate a timestamp file, and store it. The digital identity signature in the timestamp file is provided by the data encryption module in the data processing unit;

[0044] Step 10: After the evidence data packet is timestamped, it forms a trusted location authentication solution file, which includes a timestamp evidence file, an encrypted file consisting of event data, location signal data, and location data;

[0045] Step 11: The trusted location file verification consists of two verification channels: the trusted location authentication solution file can verify the credibility of the evidence time through the trusted time unit verification interface; the trusted location authentication solution file verifies the location data through the surveying and mapping data solution unit verification interface, and inputs the original location signal file in the evidence file for output location data comparison.

[0046] The system is composed of a unit structure of software and hardware, wherein a dedicated positioning terminal inputs navigation signal messages and outputs them to a surveying and mapping data solving unit and a data processing unit.

[0047] The surveying and mapping data solving unit inputs the decrypted navigation signal to solve the position, feeds back the position information to the positioning terminal, and outputs the position information to the data processing unit at the same time.

[0048] The data processing unit packages the navigation data, position solution data and event data through an encryption module to form an evidence data packet which is output to the trusted time unit.

[0049] The trusted time unit calls the standard time source to verify the trustworthiness of the evidence time and encrypts the evidence, binds the location information with the time to form a timestamp file, and the data processing unit will eventually generate and output an electronic file of the trusted location solution data.

[0050] This patented technology is realized by network RTK technology, LBS positioning technology, cryptography technology, and trusted time technology in GNSS;

[0051] RTK (Real Time Kinematic) is a real-time dynamic measurement technology. RTK positioning technology is a real-time dynamic positioning technology based on carrier phase observation values. It can provide the three-dimensional positioning results of the measuring station in the specified coordinate system in real time and achieve centimeter-level accuracy.

[0052] RTCM: The Radio Technical Commission for Maritime Services (RTCM) established the SC-104 Special Committee in November 1983 to promote differential GPS services worldwide and formulate various data format standards. The most commonly used differential message formats are RTCM SC-104.

[0053] LBS base station positioning (Location Based Servic) is a positioning method based on the signal tower of the communication operator. It obtains the latitude and longitude information of the mobile phone SIM card through the signal tower, and displays the location point on the map through calculation and docking with the electronic map API to achieve the purpose of positioning. At the same time, LBS base station positioning is mandatory, and the base station positioning server actively initiates positioning to the terminal, which plays an important role in regulatory services;

[0054] Trusted time: Trusted time is based on the national standard Beijing time. It meets the requirements of information management in terms of time transmission, timekeeping accuracy, and application certification, and is authoritative, accurate, trusted, and certified time information with legal effect. Trusted time has five major characteristics: authoritative, accurate, reliable, controllable, and traceable.

[0055] Trusted timestamp: A trusted timestamp is an electronic certificate issued by a timestamp server and can prove that a data message (electronic file) existed, is complete, verifiable, and has legal effect at a certain point in time. This time point can also be proven to be unalterable.

[0056] Description of the technical method principle used by the present invention to solve its technical problem

[0057] 1. The position solution process in the present invention refers to the positioning receiving terminal receiving navigation messages, base station position signals, and differential signals. The reference position source may be a GPS satellite, a mobile base station, a high-precision positioning differential station, or other positioning reference stations. After receiving the reference position signal, it is sent to the surveying and mapping solution unit through the network, and the position signal is used to perform multivariate position solution;

[0058] 2. The present invention is based on the standard time of the trusted time unit. The trusted time unit is a secure timing system based on authoritative timing. It combines the authoritative time source (National Time Service Center time source, Beidou time source, etc.) and the system security encryption certificate to perform information-based timing.

[0059] 3. The general principle of base station positioning of the present invention is: base station positioning is to obtain the location information of mobile terminal users through the networks of China Telecom, China Mobile and China Unicom operators. The mobile phone measures the downlink pilot signals of different base stations to obtain the TOA (Time of Arrival) or TDOA (Time Difference of Arrival) of the downlink pilot signals of different base stations. According to the measurement results and combined with the coordinates of the base station, a triangulation formula estimation algorithm is generally used to calculate the location of the mobile phone.

[0060] The above shows and describes the basic principles and main features of the present invention and the advantages of the present invention. For those skilled in the art, it is obvious that the present invention is not limited to the details of the above exemplary embodiments, and the present invention can be implemented in other specific forms without departing from the spirit or basic features of the present invention; therefore, no matter from which point of view, the embodiments should be regarded as exemplary and non-restrictive. The scope of the present invention is limited by the attached claims rather than the above description. Therefore, it is intended to include all changes within the meaning and scope of the equivalent elements of the claims in the present invention, and any figure marks in the claims should not be regarded as limiting the claims involved.

[0061] Although embodiments of the present invention have been shown and described, it will be appreciated by those skilled in the art that various changes, modifications, substitutions and variations may be made to the embodiments without departing from the principles and spirit of the present invention, and that the scope of the present invention is defined by the appended claims and their equivalents.

Claims

1. A reliable evidence storage method for positioning solution data that can realize location authentication, characterized in that: The method for storing reliable evidence of positioning solution data that can realize location authentication is composed of a processing system composed of software and hardware, which is divided into a unit structure by functional points, and is composed of a dedicated positioning terminal, a data encryption module, a surveying and mapping data solution unit, a data processing unit, and a trusted time unit; The specific steps of the method for credible storage of positioning solution data that can realize location authentication are as follows: Step 1: The positioning terminal device receives satellite navigation messages, LBS base station locations, differential messages RTCM sent by differential base stations, and wireless AP signals through the RF antenna. The above signals must be collected in real time and encrypted; Step 2: Send the encrypted position signal data to the surveying and mapping data solution unit for position data analysis and processing by calling the surveying and mapping data solution unit service interface, and send the position signal data and event data as the location evidence data of the event to the data processing unit for processing; Step 3: The surveying and mapping data solution unit is composed of navigation data solution software, base station database, surveying and mapping map software and other operation modules, forming a unified unit service interface. The location signal data access interface generates real-time location data of the positioning terminal through a series of operations such as decryption, solution, analysis, and positioning. The data content includes positioning and navigation information such as altitude, longitude and latitude, speed, time, and geographic location; Step 4: Feedback the above position data to the positioning terminal and send it to the data processing unit as evidence data, and send the satellite clock time data in the above position data to the trusted time unit for time credibility comparison; Step 5: The data processing unit includes a data encryption module and functional modules such as data cleaning, data analysis, data packaging, and data storage. The unit performs validity analysis and structured storage on the input event data, original position signal data, and event position data parsed by the surveying and mapping data solution unit to form a proof data package, and instructs the call of the proof unit interface to form a credible proof. Step 6: The digital identity certificate issued by the data encryption module certificate generator is stored and distributed, and used as an identity certificate for trusted location authentication to perform data security identity checks on the positioning terminal, mapping and solution unit, and trusted time unit; Step 7: The data processing unit calls the timestamp service unit interface to store time credibility, ensuring that the time when the location evidence data is generated is credible. The timestamp file generated by the trusted time and timestamp operation is usually considered to be a credible timestamp file. Step 8: The trusted time unit consists of a clock module, a timestamp module and a timestamp evidence management module. The clock module receives the star clock time analyzed by the surveying and mapping data solution unit to perform clock synchronization, and a high-performance crystal oscillator keeps the time consistent with the UTC time source. The clock module receives the message request transmitted by the timestamp module and sends the current time value to the timestamp module; Step 9: The timestamp module receives the evidence data packet and performs a hash operation to encrypt and bind the data fingerprint with the time value, generate a timestamp file, and store it. The digital identity signature in the timestamp file is provided by the data encryption module in the data processing unit; Step 10: After the evidence data packet is timestamped, it forms a trusted location authentication solution file, which includes a timestamp evidence file, an encrypted file consisting of event data, location signal data, and location data; Step 11: The trusted location file verification consists of two verification channels: the trusted location authentication solution file can verify the credibility of the evidence time through the trusted time unit verification interface; The trusted position authentication solution file verifies the position data through the surveying and mapping data solution unit verification interface, and inputs the original position signal file in the evidence file for output position data comparison.

2. According to claim 1, a method for storing reliable evidence of positioning solution data capable of realizing position authentication is characterized in that: The system is composed of a unit structure of software and hardware, wherein a dedicated positioning terminal inputs navigation signal messages and outputs them to a surveying and mapping data solving unit and a data processing unit.

3. According to claim 1, a method for storing reliable evidence of positioning solution data capable of realizing position authentication is characterized in that: The surveying and mapping data solving unit inputs the decrypted navigation signal to solve the position, feeds back the position information to the positioning terminal, and outputs the position information to the data processing unit at the same time.

4. According to claim 1, a method for storing reliable evidence of positioning solution data capable of realizing position authentication is characterized in that: The data processing unit packages the navigation data, position solution data and event data through an encryption module to form an evidence data packet which is output to the trusted time unit.

5. According to claim 1, a method for storing reliable evidence of positioning solution data capable of realizing position authentication is characterized in that: The trusted time unit calls the standard time source to verify the trustworthiness of the evidence time and encrypts the evidence, binds the location information with the time to form a timestamp file, and the data processing unit will eventually generate and output an electronic file of the trusted location solution data.

Images