Digital twin data sharing and authentication system based on block chain

Abstract

The invention discloses a digital twin data sharing and authentication system based on a block chain, and belongs to the technical field of digital twin, and the system comprises a data source layer which stores multi-source data into different databases according to data types; the data processing layer is used for preprocessing, fusing and associating the multi-source data to obtain an association relationship among the preprocessed data, and generating an encrypted value of the preprocessed data and a digital signature corresponding to the encrypted value; the block chain layer constructs an alliance chain network, verifies the legality and authority of a data provider uploading a digital signature and an encrypted value, analyzes the encrypted value to obtain preprocessed data and stores the preprocessed data after verification is passed, and automatically executes data sharing and authentication operation when an intelligent contract is triggered; and the application layer provides an interactive interface and a data authentication service, and is integrated with a data twinning application. According to the invention, the data sharing efficiency, the authentication transparency and the decision accuracy in the digital twinning application are improved, and the deep application of the digital twinning technology in multiple fields is promoted.

Description

Technical Field

[0001] The present invention relates to the field of digital twin technology, and in particular to a digital twin data sharing and authentication system based on blockchain. Background Art

[0002] As an emerging intelligent technology, digital twin technology is widely used in the fields of industry, urban management, energy and transportation. By establishing a virtual model of a physical entity, digital twins reflect the status, performance and operation data of the system in real time, supporting decision makers in predictive analysis, optimization control and problem diagnosis. In the digital twin system, data collection, sharing and authentication are the core links. Data sources include sensors, equipment, historical data and other forms, and require efficient, real-time and accurate data collection from various data sources to be transmitted to the digital twin model. With the continuous expansion of digital twin applications, especially in the fields of smart cities and smart manufacturing, how to ensure the authenticity, integrity and security of data has become one of the key issues in promoting the application of this technology.

[0003] In traditional digital twin systems, data is uploaded through a dedicated acquisition interface, and after being cleaned, converted, and stored, it is available for user query and analysis. These systems not only rely on a single data source, but are often stored and managed through centralized servers. However, centralized storage is prone to risks such as data tampering, lax access control, and data loss, and is prone to performance bottlenecks when processing large-scale, multi-source data; in terms of authentication, it relies on third-party organizations for verification, and the process is cumbersome and vulnerable to attacks. The authority and real-time nature of the authentication results are difficult to guarantee. In addition, traditional digital twin systems also lack cross-organizational and cross-industry data sharing mechanisms, which in turn limits the application of digital twin technology in large-scale, complex systems. Summary of the invention

[0004] The purpose of the present invention is to provide a digital twin data sharing and authentication system based on blockchain to solve the problems existing in the prior art of digital twin systems, such as single data source, high risk of tampering or loss of centralized storage data, difficulty in verification and sharing.

[0005] To achieve the above objectives, this application adopts the following technical solutions:

[0006] The present application discloses a digital twin data sharing and authentication system based on blockchain, including a data source layer, a data processing layer, a blockchain layer and an application layer, wherein:

[0007] The data source layer is used to collect multi-source data through a data acquisition interface and store the multi-source data in different databases according to data types;

[0008] The data processing layer is used to preprocess, fuse and associate the multi-source data to obtain the association relationship between the preprocessed data, generate the encrypted value of the preprocessed data and its corresponding digital signature, and upload the digital signature and encrypted value to the blockchain layer;

[0009] The blockchain layer is used to build a consortium chain network and deploy smart contracts. It verifies the legitimacy and authority of the data provider who uploads the digital signature and encrypted value through a pre-configured node access control and authority management mechanism. If the verification is passed, the encrypted value is parsed to obtain pre-processed data and stored. When the preset conditions occur, the smart contract is automatically triggered to perform data sharing and authentication operations;

[0010] The application layer includes a data sharing platform, which is used to provide an interactive interface, provide data authentication services based on blockchain data and the smart contract, and integrate with the data twin application to provide the required data for the data twin application in real time.

[0011] Preferably, the multi-source data includes a unique identifier, model, specification, core process data and real-time data of the equipment during the production process, and the real-time data includes equipment status information.

[0012] Preferably, storing the multi-source data in different databases according to data types includes:

[0013] The structured data is stored in a MySQL database, and the key data is stored in a domestic database. The structured data includes the unique identifier, model and specifications of the equipment, and the key data includes the core process data and real-time data in the production process.

[0014] Preferably, the data source layer also performs timestamp correction, device status data supplementation and data time synchronization on the multi-source data.

[0015] Preferably, the data processing layer preprocesses the multi-source data, including removing invalid data, filling missing values, processing abnormal values, and unifying data formats and units.

[0016] Preferably, the fusion and association operations include:

[0017] The preprocessed data is matched and merged according to the timestamp and the unique identifier of the device to obtain the data set corresponding to each device, and the association relationship between the data in each set is extracted according to the pre-set association rules.

[0018] Preferably, the smart contract includes automated data sharing rules, data access permission control rules and data authentication rules.

[0019] Preferably, when a preset condition occurs, automatically triggering the smart contract to perform data sharing and authentication operations includes:

[0020] Receive a data access request from a data requester. If the data access request meets the preset conditions, the corresponding smart contract is triggered. The smart contract determines whether the data requester has the authority to access the target data and whether the target data complies with the preset authentication rules. If the data requester has the authority and the target data complies with the authentication rules, the target data is sent to the data requester, a corresponding transaction record is generated and the transaction record is stored in the blockchain. If the data requester has no authority or the target data does not comply with the authentication rules, the data access request is rejected and a corresponding exception log is generated.

[0021] Preferably, the blockchain layer also performs a hash operation on the unique identifier of the device, the timestamp of the device data, and the device data itself to generate an index value for the data stored in the blockchain for each device.

[0022] Preferably, the system also includes a performance optimization module, which is used to ensure the stable operation of the system through data caching mechanism, blockchain performance optimization technology, system architecture scalability design and system testing.

[0023] The present invention has the following beneficial effects:

[0024] This application provides a decentralized data management framework, which improves data sharing efficiency, authentication transparency and decision-making accuracy in digital twin applications through multi-data source integration, data cleaning and encryption, blockchain immutability and smart contract automated execution, and promotes the in-depth application of digital twin technology in multiple fields. BRIEF DESCRIPTION OF THE DRAWINGS

[0025] In order to more clearly illustrate the embodiments of the present application or the technical solutions in the prior art, the drawings required for use in the embodiments or the description of the prior art will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present application. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying creative labor.

[0026] Figure 1 It is a structural diagram of a blockchain-based digital twin data sharing and authentication system provided in an embodiment of the present application;

[0027] Figure 2 This is an architecture flow chart of a blockchain-based digital twin data sharing and authentication system provided in an embodiment of the present application;

[0028] Figure 3It is a flow chart of data encryption and signature in an embodiment of the present application. DETAILED DESCRIPTION

[0029] To make the technical solution of the present application clearer, the present invention is further described in detail below in conjunction with the accompanying drawings and specific embodiments. The terms "first", "second", etc. in the claims and specification of the present application are used to distinguish similar objects, and are not necessarily used to describe a specific order or sequence. It should be understood that the terms used in this way can be interchangeable under appropriate circumstances. This is only to describe the distinction method used when describing objects with the same attributes in the embodiments of the present application. In addition, the terms "including" and "having" and any of their variations are intended to cover non-exclusive inclusions, so that a process, method, system, product or device containing a series of units is not necessarily limited to those units, but may include other units that are not clearly listed or inherent to these processes, methods, products or devices.

[0030] like Figure 1 and Figure 2 As shown, this embodiment provides a digital twin data sharing and authentication system based on blockchain, including a data source layer, a data processing layer, a blockchain layer and an application layer.

[0031] Among them, the data source layer is used to collect multi-source data through the data acquisition interface and store the multi-source data in different databases according to the data type.

[0032] In the design of the data source layer, the key lies in how to efficiently collect information from different data sources and ensure that the data can provide support for the digital twin model accurately and timely.

[0033] First, a dedicated data collection interface is configured in the data source layer, which will regularly capture data from different data sources according to business needs.

[0034] Secondly, in view of the characteristics of equipment and production systems in the industrial field, the data source layer combines the MySQL database and the domestic database. Preferably, the collected multi-source data is stored in different databases according to the data type. Among them, the MySQL database is mainly used to store the basic information of the equipment, such as the equipment's unique identifier (ID), model, specification and other structured data, while the domestic database is mainly used to store key information, such as core process data and real-time data in production engineering. Among them, the real-time data in the production process includes the status information of the equipment. Because when facing data security and anti-tampering needs, the domestic database can provide a higher level of data protection through encryption technology and permission control.

[0035] Furthermore, the data source layer also performs timestamp correction, device status data supplement and data time synchronization on multi-source data.

[0036] Before classifying and storing the collected multi-source data in the MySQL database and the domestic database, the data source layer will first perform preliminary processing on the data. Because data from different data sources on the same device may have timestamp deviations, the data source layer will use interpolation algorithms to correct timestamp differences.

[0037] At the same time, in the industrial field, the status information of equipment may be updated indirectly. The data source layer supplements the equipment status data through a weighted average method based on a time window to ensure the integrity of the equipment status in the data twin model.

[0038] In addition, the data source layer also introduces a weighted average value to synchronize data time. Assume that the status data of a device collected by the data source layer at different time points are The timestamps corresponding to these data are , where the timestamp There may be deviations due to network delays or different acquisition frequencies. If i=1, 2, ..., n, then:

[0039] .

[0040] in, represents the estimated value of the data at the target time point T, Indicates at a point in time The collected data values, Represents the weight coefficient. Usually the weight is related to the time difference. The larger the weight, the closer the timestamp of the data is to the target time point.

[0041] For example, the temperature data of the equipment is collected at T1, T2 and T3, where the temperature is 30 degrees Celsius at T1, 32 degrees Celsius at T2 and 33 degrees Celsius at T3. If the target timestamp is T2, the value calculated by weighted average reduces the impact of noise or inconsistency relative to the original value at T2. By calculating the weighted average, weighted merging and correction of inconsistent timestamp data can be achieved at the data source layer, so that heterogeneous data from different data sources can be reasonably integrated into a unified digital twin model.

[0042] The data source layer ensures real-time and accurate data collection through the data collection interface, ensuring the timeliness of data in the digital twin model.

[0043] Among them, the data processing layer is used to preprocess, fuse and associate multi-source data to obtain the association relationship between the preprocessed data, generate the encrypted value of the preprocessed data and its corresponding digital signature, and upload the digital signature and encrypted value to the blockchain layer.

[0044] The core task of the data processing layer is to preprocess, fuse and associate the multi-source data collected by the data source layer. This is to ensure the quality of the data and is the basis for the normal operation of the data twin application.

[0045] Preprocessing includes data cleaning and conversion. The main purpose of data cleaning is to remove invalid data, fill missing values, and handle outliers. Invalid data usually refers to values ​​that do not conform to the expected format, exceed a reasonable range, or cannot exist physically. For example, if the temperature value reported by the device sensor is a value that is not within the range, then the data should be considered invalid data; unlike the data supplementation of the device status at the data source layer, the missing values ​​supplemented in this embodiment refer to blank values ​​that are commonly caused by signal loss or sensor failure during device data collection, which can be completed by interpolation or other algorithms; outliers refer to data points in the data set that deviate significantly from other data points. For example, if the temperature value reported by the device sensor is much higher than the temperature of the actual device working environment, then the data should be considered abnormal data and deleted directly.

[0046] Conversion operations are mainly aimed at data formats and units. Since different devices and systems may use different measurement standards or data representation methods, the goal of data conversion is to unify all data into a standard format and measurement unit for subsequent processing and analysis. For example, some devices use Fahrenheit as the temperature unit, while other devices use Celsius. All temperature units need to be converted to a unified standard, either Fahrenheit or Celsius.

[0047] Furthermore, the preprocessed data is matched and merged according to the timestamp and the unique identifier of the device to obtain a data set corresponding to each device, and the association relationship between the data in each set is extracted according to the preset association rules.

[0048] Fusion and association operations integrate data from different sources and explore their inherent correlations to provide a basis for subsequent data analysis and decision-making. Taking industrial production as an example, the design parameters, manufacturing processes, operating status, and environmental data of equipment may come from different data sources. By associating these different data, it is possible to monitor the operating status of the equipment in real time during the production process and analyze whether the production process has achieved the expected results, thereby providing strong support for product quality traceability and optimization. At this point, the goal of association analysis is to determine the dependencies between different data sources, such as the correlation between temperature and pressure during equipment operation, so as to provide support for locating production problems during product quality backtracking.

[0049] Specifically, first identify the data features and key identifiers of different data sources, and perform preliminary matching on the data based on key identifiers such as the data's timestamp or device ID to obtain the data set associated with each device. Then use the pre-set association rules to mine the associations between different data and establish an association model to complete data integration. The association rules are user-defined based on the data's own characteristics and industrial production logic, and can be changed according to business needs.

[0050] In order to ensure the confidentiality, integrity and non-repudiation of data during data transmission and storage, the data processing layer also introduces encryption and signature technology. Encryption technology can prevent data from being stolen or tampered with by a third party during transmission, ensuring the confidentiality of data; signature technology generates a unique digital signature for encrypted data, ensuring the integrity and non-tamperability of encrypted data during storage and transmission, and preventing data from being tampered with or forged.

[0051] Specifically, the data processing layer can use symmetric encryption or asymmetric encryption technology to encrypt the pre-processed data. For critical data, asymmetric encryption can ensure that even if the data is intercepted, only the party with the private key can decrypt it; while digital signature technology ensures that each encrypted data has a unique identifier, and any tampering with the data will cause the signature to become invalid, thereby ensuring the integrity and non-repudiation of the data.

[0052] It should be noted here that the emphasis on key data is because different data have different confidentiality requirements. At the data processing layer, although security must be guaranteed as a whole, the leakage or tampering of some data will have serious consequences. For example, key data such as industrial core process data and key information of financial transactions involve commercial secrets, privacy or major interests, and have extremely high requirements for confidentiality, integrity and non-repudiation. Asymmetric encryption is used to specifically process key data. Even if the data is intercepted in a complex network environment, its security can be guaranteed by private keys, highlighting the strong protection intention for key data, which is in line with the concept of precise security control of system stratification and grading, ensuring the security of high-risk data, and building a key defense line for the stable and reliable operation of digital twin applications, improving the security and credibility of overall data management, preventing serious consequences caused by the loss of confidentiality of key data, and ensuring the safe operation of the system in various application scenarios.

[0053] Exemplarily, the data after fusion and association operations are obtained , where each piece of data Contains information such as device ID, sensor readings, timestamps, etc. The data is encrypted as follows:

[0054] .

[0055] in, Indicates encrypted data. Indicates the public key of the data provider used Data Encryption is performed.

[0056] Regenerate the digital signature of the encrypted data :

[0057] .

[0058] in, Indicates the use of the data provider's private key Encrypted data Digital signature. When data is transmitted, the data requester uses the public key of the data provider. To verify the integrity of the data, any tampering with the data will cause the signature verification to fail, thus preventing data forgery and tampering.

[0059] The data processing layer uses encryption and signature technology to ensure that the data remains confidential throughout the entire transmission and storage process, and also ensures that the data has not been tampered with. This not only enhances data security, but also provides reliable protection for subsequent blockchain layer data storage, allowing the entire digital twin system to effectively prevent various security threats when facing data sharing and authentication, and ensure the authenticity and reliability of the data.

[0060] The blockchain layer is used to build a consortium chain network and deploy smart contracts. It verifies the legitimacy and authority of the data provider who uploads the digital signature and encrypted value through the pre-configured node access control and permission management mechanism. Once the verification is passed, the encrypted value is parsed to obtain the pre-processed data and store it. When the preset conditions occur, the smart contract is automatically triggered to perform data sharing and authentication operations.

[0061] The core goal of the blockchain layer is to ensure the security and privacy of data sharing through access control and permission management of the alliance chain network, and to achieve automated data sharing and authentication through smart contracts deployed on the alliance chain.

[0062] A consortium chain is a blockchain formed by multiple organizations or institutions in the form of a consortium, which has a partially decentralized feature. Its advantage is that it avoids the potential risks brought by anonymity in the public chain by limiting the number of participating nodes and identity authentication. In the consortium chain, the nodes that wish to join the consortium chain are authenticated and their permissions are reviewed through access control and permission management mechanisms. Specifically, the access control rules are used to strictly authenticate each node that wishes to join the consortium chain network, and the permission management rules are used to manage and control the access rights of users or nodes in the system, which determines which resources the user or node can access, which operations can be performed, and the access rights to the data. Each node needs to undergo strict identity authentication when joining the network, and only nodes with corresponding permissions can access specific data, which can effectively prevent unauthorized data leakage while ensuring data transparency and traceability. In this embodiment, the identity of the data provider who uploads the digital signature and encrypted value is first verified for legitimacy. After the verification is passed, its permissions are verified. After all verifications are passed, the uploaded digital signature and encrypted value are parsed to obtain the pre-processed data, and it is securely stored on the distributed ledger of the blockchain.

[0063] Furthermore, a data access request is received from a data requester. If the data access request meets the preset conditions, the corresponding smart contract is triggered. The smart contract determines whether the data requester has the authority to access the target data and whether the target data complies with the preset authentication rules. If the data requester has the authority and the target data complies with the authentication rules, the target data is sent to the data requester, a corresponding transaction record is generated and the transaction record is stored in the blockchain. If the data requester has no authority or the target data does not comply with the authentication rules, the data access request is rejected and a corresponding exception log is generated.

[0064] A smart contract is an automatically executed program deployed on a consortium chain. It contains specific business logic and rules. Developers can use specific programming languages ​​(such as Solidity, Go, etc.) to write smart contracts and deploy them to the chain through the consortium chain interface. During the deployment process, the smart contract usually needs to be compiled, packaged, and signed to ensure its security and reliability.

[0065] When certain conditions occur (such as transaction triggering, time arrival, etc.), the smart contract will automatically execute the corresponding operation. The execution process of the smart contract is guaranteed by the consensus mechanism of the alliance chain, ensuring that all nodes reach a consensus on the execution results of the smart contract. At the same time, the execution results of the smart contract will be recorded in the ledger of the alliance chain for all nodes to query and verify.

[0066] In this embodiment, in order to ensure the security and transparency of data access, the smart contract in the blockchain network can automatically perform data sharing and authentication operations, that is, the smart contract contains automated data sharing rules, data access permission control rules and data authentication rules, wherein the data sharing rules are used to determine whether the data requester has the authority to obtain the target data, the data access permission control rules are used to determine whether the data requester has the authority to access the target data, and the data authentication rules are used to verify whether the target data meets the specified authentication requirements. Therefore, the smart contract can not only determine the data access rights, but also automatically execute the data verification process. For example, when querying device data, the smart contract will first determine whether the data requester has the authority to access the relevant data and whether the data meets the specified authentication requirements. If the data requester has the authority and the data verification is passed, the smart contract will generate the corresponding transaction record and store it in the blockchain to ensure that the data cannot be tampered with. If the data is sensitive information, the smart contract can also encrypt the transaction record through encryption technology and then store it on the blockchain to further enhance the privacy protection of the data; if the verification fails, the smart contract will deny data access and generate a corresponding abnormal log.

[0067] In addition, the blockchain layer also improves the efficiency of data query and retrieval through an indexing mechanism.

[0068] Assuming that the device data stored in a blockchain includes information such as device ID, data collection timestamp, and data content, the hash value of the data is:

[0069] .

[0070] Among them, H(D) represents the hash value of data D, that is, the index value, Hash() represents the hash operation, ID is the device ID, Timestamp is the data collection timestamp, and Data is the device data itself, that is, all the data associated with the device. By connecting these fields and calculating the hash value, a unique index value H(D) can be generated. This hash value serves as the index of the data in the blockchain, and can quickly locate the data record of a specific device at a certain point in time when querying.

[0071] Assume that during a certain equipment maintenance process, the user needs to query the temperature data of device A at 15:30 on October 10, 2024. Through the index mechanism, the user can quickly find the hash value of the corresponding device ID and timestamp, and directly locate the relevant data on the blockchain. This hash index method not only ensures the efficiency of data query, but also ensures the uniqueness and consistency of the data through the hash algorithm, avoiding query errors caused by data tampering.

[0072] The blockchain layer not only ensures the security, immutability and efficiency of data, but also reduces the complexity caused by manual intervention and management through the automated execution of smart contracts. At the same time, in the process of data sharing and authentication, smart contracts can realize automatic data verification and permission control, so that the system can still ensure information security and user privacy while providing convenient services. These features make the blockchain-based digital twin data sharing system highly credible and can be widely used in industries, finance and other fields.

[0073] The application layer includes a data sharing platform, which is used to provide an interactive interface, provide data authentication services based on blockchain data and smart contracts, and integrate with data twin applications to provide the required data for the data twin applications in real time.

[0074] At the application layer, the data sharing platform is designed to improve the efficiency and convenience of data circulation. The platform provides an interactive interface for both data supply and demand parties, simplifying the process of data access. Data providers can upload data to the blockchain through the platform to ensure the authenticity and security of the data; data requesters can query and download the required data through the platform, and automatically verify the access rights and integrity of the data through smart contracts. In this way, the data sharing platform not only promotes the circulation of data, but also strengthens the management and control of data to ensure that only authorized users can access key data. This convenient interactive method makes the flow of data more efficient, while avoiding intermediaries and cumbersome operating procedures in the traditional data sharing process.

[0075] Data authentication service is also one of the core tasks of the application layer, which mainly provides authoritative authentication for data based on blockchain data and smart contracts. The immutability of blockchain and the automated execution mechanism of smart contracts can ensure the credibility of data during sharing. During data transmission, smart contracts will automatically verify whether the data complies with predetermined rules, including the source, integrity, and encryption protection of the data. The authentication results can be generated and made public on the blockchain, and all authentication information can be traced to ensure that the data authentication process is transparent and verifiable. The data sharing rules, data access rights control rules, and data authentication rules in smart contracts can also be dynamically adjusted according to actual needs, thereby providing flexible and reliable authentication services.

[0076] In specific digital twin applications, especially in urban digital twin management systems, the integration of data sharing platforms and digital twin systems enables the entire digital twin system to obtain more reliable real-time data. For example, in urban digital twin management systems, these data will include traffic flow, environmental monitoring data, etc., which can provide support for accurate simulation of the model; in traffic flow simulation, through integrated data, the digital twin model can be dynamically adjusted according to the real-time traffic status, providing a decision-making basis for urban traffic management; environmental monitoring and analysis also rely on this reliable data. Through real-time environmental data such as air quality, temperature, and humidity, the digital twin model can accurately reflect the environmental conditions of the city and help policy makers make scientific decisions.

[0077] Furthermore, the system also includes a performance optimization module, which is used to ensure the stable operation of the system through data caching mechanism, blockchain performance optimization technology, system architecture scalability design and system testing.

[0078] In system design, performance optimization is the key to ensuring the efficient operation of the digital twin data sharing and authentication system, especially in the context of the gradual increase in data volume and number of users.

[0079] When a large number of query requests are generated at the data source layer, data processing layer or blockchain layer, it will take a long time to query the data of each request directly from the storage system. Therefore, the system also introduces a data cache mechanism. By caching hot data or frequently queried data into memory, the number of accesses to the backend database or blockchain is reduced, thereby reducing query latency. In actual applications, data that needs to be decentralized, tamper-proof and traceable, such as data involving multi-party trust and key business processes, can be stored in the blockchain, while data with extremely high real-time requirements and no need for tamper-proof characteristics can be stored in memory. The cache content can be dynamically adjusted according to the frequency of data access. For example, the LRU (Least Recently Used) cache elimination algorithm is used to remove the longest unused data from the cache.

[0080] To measure cache efficiency, the following cache hit rate formula is used:

[0081] .

[0082] Among them, H rate represents the cache hit rate, C hit Indicates the number of cache hits, C mins Indicates the number of cache misses. The cache hit rate can be used to evaluate the quality of the cache eviction algorithm. If the hit rate is low, adjust the cache eviction algorithm, such as using the LRU algorithm to remove the longest unused data from the cache to optimize the cache content and improve the hit rate, thereby reducing access to the backend storage and improving the overall system performance.

[0083] At the blockchain layer, as the amount of data increases, the blockchain storage and processing capabilities may be limited. In order to optimize the performance of the blockchain, the system needs to balance the contradiction between storage and processing. On the one hand, the storage of the blockchain needs to record a large amount of transactions and data, and on the other hand, too much data writing may cause the transaction confirmation time to become longer. In order to solve this problem, this embodiment adopts sharding technology, that is, the blockchain is divided into multiple independent sub-chains, each sub-chain is responsible for different data types or data areas, and when data is stored, it is stored in different sub-chains according to the data type or data area. For example, in the city digital twin system, traffic flow data can be stored in one sub-chain and environmental monitoring data can be stored in another sub-chain. In this way, the processing capacity of each sub-chain can be expanded independently, avoiding the performance bottleneck of the entire blockchain network.

[0084] The system also needs to have good architectural scalability to cope with the growing amount of data and users. In the early stage, when the amount of data is small, the system can be deployed through a single node or limited nodes, but as the scope of use of the system and the number of users increase, the system architecture should be able to expand flexibly to support more nodes and higher processing power. This embodiment adopts a microservice architecture, divides the system functional modules into independent services, and uses containerization technology and automated deployment tools to facilitate the dynamic expansion of the system according to the load. This architecture can dynamically increase computing resources when the number of users surges to ensure that system performance is not affected.

[0085] During the performance testing phase, the system can evaluate its performance in a high-concurrency environment by simulating different data loads, query frequencies, and user access volumes. For example, when the data query pressure is high, the system's cache hit rate can be tested to verify the effectiveness of the cache mechanism; when the number of users increases dramatically, the system's scalability can be tested to evaluate whether the system can guarantee stable operation after expansion.

[0086] Security testing is also an important part of system design. The data sharing and authentication system processes high-value digital twin data, and its security must be guaranteed. Through multiple identity authentication, encryption technology, and smart contract verification, the system can effectively prevent malicious attacks and data leaks. In security testing, simulating possible attack scenarios, such as denial of service attacks and data tampering, can verify whether the system has sufficient protection capabilities, thereby ensuring the integrity and confidentiality of data during transmission and storage.

[0087] Through comprehensive functional testing, performance testing and security testing, we can ensure that the system can maintain efficient, stable and safe operation in the face of different workloads and attack scenarios. For example, in urban traffic management, the system can support high-frequency data updates of real-time traffic flow through performance optimization, and ensure the immutability of data through blockchain technology; under extreme conditions, such as peak traffic hours, the system can dynamically expand the architecture to ensure the smooth operation of functions such as traffic flow simulation and environmental monitoring and analysis, provide accurate data support for decision makers, and avoid decision-making errors caused by system crashes or delays.

[0088] The performance optimization module enables the system to effectively respond to the performance challenges faced in digital twin data sharing and authentication through data caching mechanism, blockchain performance optimization, architecture scalability and comprehensive system testing, and promotes the in-depth application and development of digital twin technology in various industries.

[0089] This embodiment provides a decentralized data management framework, which improves data sharing efficiency, authentication transparency, and decision-making accuracy in digital twin applications through multi-data source integration, data cleaning and encryption, blockchain immutability, and automated execution of smart contracts, and promotes the in-depth application of digital twin technology in multiple fields.

[0090] The above-mentioned embodiments only express several implementation methods of the present invention, and the description thereof is relatively specific and detailed, but it cannot be understood as limiting the scope of the patent of the present invention. It should be pointed out that, for ordinary technicians in this field, several variations and improvements can be made without departing from the concept of the present invention, which all belong to the protection scope of the present invention. Therefore, the protection scope of the patent of the present invention shall be subject to the attached claims.

Claims

1. A digital twin data sharing and authentication system based on blockchain, characterized in that: It includes data source layer, data processing layer, blockchain layer and application layer, among which: The data source layer is used to collect multi-source data through a data acquisition interface and store the multi-source data in different databases according to data types; The data processing layer is used to preprocess, fuse and associate the multi-source data to obtain the association relationship between the preprocessed data, generate the encrypted value of the preprocessed data and its corresponding digital signature, and upload the digital signature and encrypted value to the blockchain layer; The blockchain layer is used to build a consortium chain network and deploy smart contracts. It verifies the legitimacy and authority of the data provider who uploads the digital signature and encrypted value through a pre-configured node access control and authority management mechanism. If the verification is passed, the encrypted value is parsed to obtain pre-processed data and stored. When the preset conditions occur, the smart contract is automatically triggered to perform data sharing and authentication operations; The application layer includes a data sharing platform, which is used to provide an interactive interface, provide data authentication services based on blockchain data and the smart contract, and integrate with the data twin application to provide the required data for the data twin application in real time.

2. According to a blockchain-based digital twin data sharing and authentication system according to claim 1, it is characterized in that: The multi-source data includes a unique identifier, model, specification, core process data, and real-time data during the production process of the equipment, wherein the real-time data includes equipment status information.

3. According to a blockchain-based digital twin data sharing and authentication system according to claim 2, it is characterized in that: Storing the multi-source data in different databases according to data types includes: The structured data is stored in a MySQL database, and the key data is stored in a domestic database. The structured data includes the unique identifier, model and specifications of the equipment, and the key data includes the core process data and real-time data in the production process.

4. According to a blockchain-based digital twin data sharing and authentication system according to claim 2, it is characterized in that: The data source layer also performs timestamp correction, device status data supplementation and data time synchronization on the multi-source data.

5. According to a blockchain-based digital twin data sharing and authentication system according to claim 2, it is characterized in that: The data processing layer pre-processes the multi-source data, including removing invalid data, filling missing values, processing abnormal values, and unifying data formats and units.

6. According to a blockchain-based digital twin data sharing and authentication system according to claim 5, it is characterized in that: The fusion and association operations include: The preprocessed data is matched and merged according to the timestamp and the unique identifier of the device to obtain the data set corresponding to each device, and the association relationship between the data in each set is extracted according to the pre-set association rules.

7. According to a blockchain-based digital twin data sharing and authentication system according to claim 1, it is characterized in that: The smart contract includes automated data sharing rules, data access permission control rules and data authentication rules.

8. According to the blockchain-based digital twin data sharing and authentication system of claim 7, it is characterized in that: When the preset conditions occur, the smart contract is automatically triggered to perform data sharing and authentication operations, including: Receive a data access request from a data requester. If the data access request meets the preset conditions, the corresponding smart contract is triggered. The smart contract determines whether the data requester has the authority to access the target data and whether the target data complies with the preset authentication rules. If the data requester has the authority and the target data complies with the authentication rules, the target data is sent to the data requester, a corresponding transaction record is generated and the transaction record is stored in the blockchain. If the data requester has no authority or the target data does not comply with the authentication rules, the data access request is rejected and a corresponding exception log is generated.

9. According to a blockchain-based digital twin data sharing and authentication system according to claim 2, it is characterized in that: The blockchain layer also hashes the device’s unique identifier, the timestamp of the device data, and the device data itself to generate an index value for each device’s data stored in the blockchain.

10. The digital twin data sharing and authentication system based on blockchain according to claim 1 is characterized in that: The system also includes a performance optimization module, which is used to ensure the stable operation of the system through data caching mechanism, blockchain performance optimization technology, system architecture scalability design and system testing.

Images