Data storage verification method and device, equipment and medium

Abstract

The embodiment of the invention provides a data evidence storage verification method and device, equipment and a medium. The method comprises the steps of collecting to-be-stored data of various data sources, and performing preprocessing and primary processing on the data; receiving the primarily processed data and encrypting the data to obtain encrypted data and a key pair; adding a timestamp to the encrypted data to obtain encrypted evidence storage data with the timestamp, and carrying out evidence storage recording on the data; receiving an evidence storage verification request, performing verification and authorization management, routing the request to a corresponding verification execution channel according to a verification type, and providing a data access permission; calling encrypted evidence storage data with a timestamp according to the instruction, and performing integrity verification, time sequence verification and source verification on the data; a precise timestamp is obtained, reliable data backup is performed in combination with a burning technology, and data confidentiality is guaranteed by applying an encryption algorithm to ensure data authenticity and integrity.

Description

Technical Field

[0001] The present application relates to the field of data storage and verification technology, and more specifically, to a data storage and verification method, device, equipment and medium. Background Art

[0002] In today's digital society, the importance of data evidence is becoming increasingly prominent. However, traditional evidence storage methods face many problems, such as insufficient accuracy and authority of timestamps, easy tampering of network storage and cloud storage data, high risk of privacy leakage, and lack of credibility in the verification process. For some scenarios that require long-term data preservation, physical isolation backup, and higher security requirements, the authenticity and integrity of the data cannot be guaranteed. Summary of the invention

[0003] The purpose of the embodiments of the present application is to provide a data evidence verification method, device, equipment and medium to solve the problem that the authenticity and integrity of data cannot be guaranteed in the current data evidence verification method.

[0004] In a first aspect, an embodiment of the present application provides a data evidence verification method, including: Collect data to be stored from various data sources and pre-process and preliminarily process the data; receiving the data after preliminary processing and encrypting it to obtain encrypted data and a key pair; Add a timestamp to the encrypted data to obtain encrypted evidence data with a timestamp and burn the data for evidence storage; Receive evidence verification requests, perform verification and authorization management, route requests to the corresponding verification execution channel according to the verification type, and provide data access permissions; Retrieve encrypted evidence data with timestamps according to instructions, and perform integrity verification, timing verification, and source verification on the data; If all verifications pass, a successful verification report will be issued. If any verification fails, a warning verification failure report will be generated and the internal early warning process will be triggered.

[0005] In the above implementation process, the data to be stored from various data sources are collected and pre-processed and preliminarily processed; the data after preliminarily processing is received and encrypted to obtain encrypted data and key pairs; a timestamp is added to the encrypted data to obtain encrypted storage data with a timestamp and the data is burned for storage; a storage verification request is received, verification and authorization management are performed, and the request is routed to the corresponding verification execution channel according to the verification type, and data access rights are provided; the encrypted storage data with a timestamp is retrieved according to the instruction, and the data is verified for integrity, timing and source; if all verifications pass, a verification success report is issued, and if any verification fails, a warning verification failure report is generated and an internal early warning process is triggered; accurate timestamps are obtained, and reliable data backup is performed in combination with burning technology, and encryption algorithms are used to ensure data confidentiality and ensure data authenticity and integrity.

[0006] Furthermore, the data to be stored from various data sources is collected and pre-processed and preliminarily processed, including: Collect the data to be stored from various data sources and perform pre-processing operations such as format standardization, compression, and feature extraction; Feature extraction is performed on the preprocessed data to generate summary information and metadata of the data; wherein the summary information includes: attributes and hash values ​​calculated by hash functions, and the metadata includes: data source, data type, and creation time.

[0007] In the above implementation process, the data is preprocessed and then preliminarily processed for data screening to improve data quality and processing efficiency.

[0008] Further, the receiving of the initially processed data is encrypted to obtain encrypted data and a key pair, including: Use a symmetric encryption algorithm to quickly encrypt the data after preliminary processing, and then use an asymmetric encryption algorithm to encrypt the key of the symmetric encryption algorithm to generate encrypted data and a corresponding encryption key pair; Send the encrypted data to the BeiDou satellite timestamp module and store the private key.

[0009] In the above implementation process, a technology combining two encryption algorithms is used to ensure the confidentiality and security of data during transmission and storage; encrypted data and corresponding encryption key pairs are generated, and the private key is securely stored, and the public key is used for subsequent verification operations.

[0010] Furthermore, the adding of a timestamp to the encrypted data to obtain encrypted evidence data with a timestamp includes: Acquire nanosecond-level precision time information through the built-in high-precision Beidou satellite signal receiving device that synchronizes the clock with the Beidou satellite navigation system; Receive the encrypted data inflow and attach the Beidou satellite timestamp to it to obtain an encrypted data packet with a timestamp, where the timestamp records the moment when the data is encrypted and enters the evidence storage process.

[0011] In the above implementation process, the time obtained by the Beidou satellite navigation system is accurate, and the timestamp records in detail the precise moment when the data is encrypted and enters the evidence storage process, greatly enhancing the temporal credibility of the evidence data.

[0012] Furthermore, the recording of evidence includes: Burning encrypted data packets with time stamps to a write-once optical disc medium, and writing all relevant metadata to a specific location of the optical disc in accordance with a specific protocol and format; Among them, the relevant metadata includes: the data's global unique identifier in the system, Beidou satellite timestamp, user information, evidence data encryption algorithm information, data starting sector, data hash value, burning device information, device serial number, burning batch number, data writing strategy and data verification algorithm.

[0013] In the above implementation process, a physical mechanism is used to ensure that data cannot be deleted or modified once it is written, thereby ensuring the authenticity and reliability of the stored data.

[0014] Furthermore, the receiving of evidence verification requests, verification and authorization management, routing the requests to corresponding verification execution channels according to the verification type, and providing data access rights include: Receiving a proof verification request, wherein the verification request includes metadata information of the data to be verified, identity credentials of the requester, and verification information; Verify and authorize the requester's identity credentials, and confirm the legitimacy and scope of authority of the requester by comparing them with the pre-stored user identity information and authority list; The request is routed to the corresponding authentication execution module based on the authentication type and data access permissions are provided.

[0015] In the above implementation process, the identity of the requester is strictly verified and authorized. By comparing with the pre-stored user identity information and permission list, the legitimacy and scope of authority of the requester are confirmed to ensure authenticity.

[0016] Furthermore, the method of retrieving encrypted evidence data with a timestamp according to the instruction and performing integrity verification, timing verification and source verification on the data includes: Retrieving key data such as evidence data, timestamp, encryption key and hash value from the optical disk storage medium according to the instruction; With the help of encryption algorithm characteristics, the data hash value is recalculated and compared with the original fingerprint to verify the integrity; Use the accuracy of BeiDou satellite timestamps to check time series logic and determine whether there are any timing anomalies; Reversely verify the authenticity of the data source through the decryption process.

[0017] In the above implementation process, the optimized verification process can quickly and accurately determine the authenticity and integrity of the evidence data through multi-dimensional verification operations such as hash value comparison, timestamp confirmation, and CD data integrity check. The verification process is based on mature encryption technology and a strict time synchronization mechanism, with a high degree of credibility and authority, effectively improving the reliability and practicality of the evidence verification system.

[0018] Furthermore, if all the verifications are successful, a verification success report is issued; if any one of the verifications fails, a warning verification failure report is generated and an internal warning process is triggered, including: If all verification indicators meet the standards, a verification success report is generated, which includes verification step details, result judgment and technical application details; If any verification indicator is abnormal, the cause of failure will be recorded, a warning verification failure report will be generated to feedback the requester, and the internal early warning process will be triggered.

[0019] In the above implementation process, the verification request is responded accurately, and the verification results are fed back through detailed reports. Whether it is a successful confirmation or a failure warning, it provides users with a clear decision-making basis and improves the overall practicality of the system and user trust.

[0020] In a second aspect, an embodiment of the present application provides a data evidence verification device, including: The data processing module is used to collect the data to be stored from various data sources and perform pre-processing and preliminary processing on the data; A data encryption module is used to receive the data after preliminary processing and encrypt it to obtain encrypted data and a key pair; A time addition module is used to add a timestamp to the encrypted data, obtain the encrypted evidence data with the timestamp and burn the data for evidence; The verification and authorization module is used to receive evidence verification requests, perform verification and authorization management, route requests to the corresponding verification execution channel according to the verification type, and provide data access permissions; The data verification module is used to retrieve the encrypted evidence data with timestamp according to the instruction, and perform integrity verification, timing verification and source verification on the data; The verification result module is used to issue a verification success report if all verifications pass. If any verification fails, a warning verification failure report is generated and the internal early warning process is triggered.

[0021] In a third aspect, an embodiment of the present application provides an electronic device, including: A processor, a memory and a bus, wherein the processor is connected to the memory via the bus, and the memory stores computer-readable instructions. When the computer-readable instructions are executed by the processor, they are used to implement the data evidence verification method as described above.

[0022] In a fourth aspect, an embodiment of the present application provides a computer-readable storage medium, on which a computer program is stored. When the computer program is executed by a server, the data evidence verification method as described above is implemented. BRIEF DESCRIPTION OF THE DRAWINGS

[0023] In order to more clearly illustrate the technical solutions of the embodiments of the present application, the drawings required for use in the embodiments of the present application will be briefly introduced below. It should be understood that the following drawings only show certain embodiments of the present application and therefore should not be regarded as limiting the scope. For ordinary technicians in this field, other related drawings can be obtained based on these drawings without paying creative work.

[0024] Figure 1 A flowchart of a data evidence verification method provided in an embodiment of the present application; Figure 2 It is a structural diagram of a data evidence verification device provided in an embodiment of the present application; Figure 3 It is a structural schematic diagram of an electronic device provided in an embodiment of the present application. DETAILED DESCRIPTION

[0025] The technical solutions in the embodiments of the present application will be described below in conjunction with the drawings in the embodiments of the present application.

[0026] It should be noted that similar reference numerals and letters represent similar items in the following drawings, so once an item is defined in one drawing, it does not need to be further defined and explained in subsequent drawings. At the same time, in the description of this application, the terms "first", "second", etc. are only used to distinguish the description and cannot be understood as indicating or implying relative importance.

[0027] Please see Figure 1 , Figure 1 A flowchart of a data evidence verification method provided in an embodiment of the present application. The data evidence verification method includes: 100. Collect data to be stored from various data sources and pre-process and preliminarily process the data.

[0028] Specifically, the data to be stored is collected from various data sources and pre-processed by format standardization, compression, and feature extraction. Optionally, the various data sources include electronic documents, database records, image and audio files, etc. The formats of the data sources include jpg, pdf, word, and txt. After the data sources are collected, the formats of the data sources are standardized, and then feature extraction such as attributes and hash values ​​is performed.

[0029] Specifically, feature extraction is performed on the preprocessed data to generate summary information and metadata of the data to improve data quality and processing efficiency; wherein the summary information includes: attributes and hash values ​​calculated by hash functions, and the metadata includes: data source, data type, and creation time.

[0030] 200. Receive the data after preliminary processing and encrypt it to obtain encrypted data and a key pair.

[0031] Specifically, a symmetric encryption algorithm is used to quickly encrypt the data after preliminary processing, and then an asymmetric encryption algorithm is used to encrypt the key of the symmetric encryption algorithm to generate encrypted data and a corresponding encryption key pair; the encrypted data is sent to the Beidou satellite timestamp module and the private key is stored.

[0032] Exemplarily, an advanced encryption algorithm (a combination of the SM4 symmetric encryption algorithm and the SM2 asymmetric encryption algorithm) is used to encrypt the preprocessed data. First, the SM4 algorithm is used to quickly encrypt the data, and then the SM2 algorithm is used to encrypt the SM4 key to ensure the confidentiality and security of the data during transmission and storage. The encrypted data and the corresponding encryption key pair are generated, and the encrypted data is sent to the Beidou satellite timestamp module. At the same time, the private key is securely stored, and the public key is used for subsequent verification operations.

[0033] 300. Add a timestamp to the encrypted data to obtain encrypted evidence data with the timestamp and burn the data for evidence.

[0034] Specifically, nanosecond-level precision time information is acquired through a built-in high-precision Beidou satellite signal receiving device whose clock is synchronized with the Beidou satellite navigation system. The encrypted data stream is received and a Beidou satellite timestamp is attached to it to obtain an encrypted data packet with a timestamp, wherein the timestamp records the moment when the data is encrypted and enters the evidence storage process.

[0035] Exemplarily, after the encrypted data flows into the Beidou satellite timestamp module, subsequent operations are triggered; the Beidou satellite signal receiving device starts the clock synchronization verification process with the Beidou satellite system, and the Beidou satellite signal receiving device sends a request signal containing local clock information to the Beidou satellite. After receiving it, the Beidou satellite calculates and feeds back the clock deviation value of the two based on its own high-precision atomic clock. The Beidou satellite signal receiving device adjusts and calibrates the local clock within nanosecond time accuracy to ensure that the acquired time information is highly consistent with the Beidou satellite clock.

[0036] Exemplarily, the timestamp is embedded in the encrypted data: a field of fixed length is reserved at the header or tail of the encrypted data to store the timestamp, ensuring that the embedding of the timestamp will not destroy the original encryption integrity of the encrypted data, while ensuring that the timestamp can be accurately and conveniently extracted and identified during subsequent data processing and verification.

[0037] For example, the record update of the evidence storage process: With the successful embedding of the timestamp, the system synchronously updates the database of the evidence storage process record. A new record is added to the database to record in detail the operation information of adding the timestamp to the encrypted data, including the operation time (accurate to nanoseconds, synchronized with the Beidou satellite timestamp), the operator, the related data index, etc., to ensure the traceability and transparency of the entire evidence storage process.

[0038] As a result, the time acquired by the Beidou satellite navigation system is accurate, and the timestamp records in detail the precise moment when the data is encrypted and enters the evidence storage process, greatly enhancing the temporal credibility of the evidence data; relying on the high-precision time synchronization of the Beidou satellite, the evidence data is given an authoritative and unalterable time scale, and in scenarios such as legal disputes, intellectual property rights confirmation, and financial audits, the data generation and evidence storage nodes are accurately defined, which consolidates the effectiveness of evidence from the time dimension, eliminates the risk of disputes caused by time tampering, and provides strong support for safeguarding the rights and interests of all parties.

[0039] In addition, evidence burning is performed, including: burning the encrypted data packet with a timestamp to a one-time write-once optical disc medium, and writing all relevant metadata to a specific location on the optical disc according to a specific protocol and format; wherein the relevant metadata include: the data's global unique identifier in the system, Beidou satellite timestamp, user information, evidence data encryption algorithm information, data starting sector, data hash value, burning device information, device serial number, burning batch number, data writing strategy and data verification algorithm.

[0040] Exemplarily, the embodiment of the present application is equipped with a professional-grade optical disc burning device, which burns the data processed by the above steps to a one-time write optical disc medium (such as BD-R, DVD-R optical disc), ensuring from a physical mechanism that the data cannot be deleted or modified once written, and ensuring the authenticity and reliability of the evidence data. When constructing the optical disc burning data, in addition to the evidence data itself, complete metadata information is also designed, which includes the data's unique identifier in the system global, Beidou satellite timestamp, user information, evidence data encryption algorithm information, data start sector and data hash value, as well as additional metadata such as burning device information, device serial number, burning batch number, data writing strategy, and data verification algorithm. The addition of this metadata is controlled by the burning software or burner firmware. The burner will write all these related metadata to a specific location of the optical disc according to a specific protocol and format while burning the data. In addition, in order to prevent data from being damaged due to accidental damage, a copy of the data can also be written to multiple optical discs at the same time as multiple copies, which can be mutually verified when reading to ensure the authenticity and reliability of the evidence data.

[0041] Exemplarily, all relevant metadata are written to a specific location of the optical disc in accordance with the UDF (Universal Optical Disc Format) protocol and format. UDF is a file system format widely used for optical disc storage, which stores metadata in a structured manner, with multiple logical units (file entry, file data area, metadata area, etc.). The evidence data itself is stored in the file data area, while the metadata is stored in a dedicated metadata area.

[0042] More specifically, metadata storage format: In the metadata area of ​​UDF, the data unique identifier is stored as a fixed-length character field, stored in UTF-8 encoding format, with a length of 32 bits, and stored at a specific offset position in the metadata area. This position is pre-defined by the burning software or firmware according to the UDF protocol. The Beidou satellite timestamp is stored as a composite data structure containing date and time. The date part is stored in the format of "year-month-day", and the time part is accurate to nanoseconds and stored in adjacent field positions in a specific time encoding format (Unix timestamp extended precision format).

[0043] 400. Receive evidence verification requests, perform verification and authorization management, route the requests to the corresponding verification execution channels according to the verification type, and provide data access rights.

[0044] 410. Receive a storage verification request, wherein the verification request includes metadata information of the data to be verified, identity credentials of the requester, and verification information.

[0045] 420. Verify and authorize the requester's identity credentials, and confirm the legitimacy and scope of authority of the requester by comparing them with pre-stored user identity information and authority lists.

[0046] 430. Routing the request to the corresponding authentication execution module according to the authentication type and providing data access permissions.

[0047] For example, identity information verification: extract the user name of the requester from the verification request, query the user table to see if there is a matching user, if not, directly determine that the requester's identity is illegal. Authority scope verification: check the authority the user has through the authority table associated with the user table. For example, if the request is to verify the integrity of financial transaction data, then it is necessary to check whether the user has the authority to verify the integrity of financial transaction data. If the authority does not match, it is determined that the requester has insufficient authority.

[0048] Thus, when receiving evidence verification requests from external users or systems, the identity of the requester is strictly verified and authorized. By comparing it with the pre-stored user identity information and permission list, the legitimacy and scope of authority of the requester are confirmed, thus ensuring authenticity.

[0049] 500. Retrieve encrypted evidence data with timestamp according to the instruction, and perform integrity verification, timing verification and source verification on the data.

[0050] 510. Retrieve key data including evidence data, timestamp, encryption key and hash value from the optical disk storage medium according to the instruction.

[0051] Specifically, key data such as evidence data, timestamp, encryption key and hash value are retrieved from the optical disk storage medium according to the instructions.

[0052] 520. With the help of encryption algorithm characteristics, the data hash value is recalculated and compared with the original fingerprint to verify integrity.

[0053] Exemplarily, the evidence data to be verified is accurately located and read from the optical disk storage medium, and the data is parsed and restored according to the original storage format and structure of the data; the hash value of the evidence data to be verified is recalculated; the hash fingerprint of the original data is simultaneously extracted from the optical disk storage medium (burned and saved together with the data when storing the evidence), and compared bit by bit with the recalculated hash value. If the two are exactly the same, it indicates that the data has not been tampered with during storage and its integrity is verified; if there is a difference, it is determined that the data integrity is damaged, and the hash value deviation is recorded as a basis for subsequent analysis of the cause of failure.

[0054] 530. Use the accuracy of Beidou satellite timestamps to verify time series logic and determine whether there are any timing anomalies.

[0055] Exemplary timestamp extraction and parsing: accurately read Beidou satellite timestamp information from a specific area of ​​the CD, parse it according to a preset timestamp format specification, and obtain the time value corresponding to the precise moment when the encryption of the evidence data recorded by the timestamp is completed and the evidence process is entered.

[0056] Constructing time series: In combination with the business logic of the evidence storage system, the time series of data evidence storage is constructed based on the Beidou satellite timestamp. The time information of the pre-operations and subsequent process nodes related to the data to be verified (data collection time, preprocessing completion time, encryption start time, etc., which are also recorded and saved in the corresponding position of the CD during evidence storage) is included to form a complete time context, clearly showing the sequence of each stage from data generation to evidence storage.

[0057] Timing logic verification: Based on the time series, use the time series to check whether the logical relationship between each time node is reasonable. For example, verify that the data collection time must be earlier than the preprocessing time, and the preprocessing time is earlier than the encryption time. The encryption time is closely connected with the Beidou satellite timestamp record's entry into the evidence storage process and is in line with the expected time range of the system processing process. If it is found that the order of two adjacent time nodes is reversed, or the time interval exceeds a reasonable threshold (based on the normal processing time range derived from historical data statistical analysis), it is determined that there is a timing anomaly, and the abnormal time node pairs and their deviation duration are recorded in detail, and the links that may cause timing problems are preliminarily speculated, such as system clock failure, data processing process interruption and restart, etc.

[0058] 540. Reversely verify the authenticity of the data source through the decryption process.

[0059] Exemplarily, extract the SM2 private key, decrypt the decrypted SM4 key, restore the encrypted SM4 key, use the key to decrypt the encrypted data to obtain the original data; after decryption, perform format and feature checks on the restored original data, and compare the data source feature information pre-recorded by the system.

[0060] In the above implementation process, the optimized verification process can quickly and accurately determine the authenticity and integrity of the evidence data through multi-dimensional verification operations such as hash value comparison, timestamp confirmation, and CD data integrity check. The verification process is based on mature encryption technology and a strict time synchronization mechanism, with a high degree of credibility and authority, effectively improving the reliability and practicality of the evidence verification system.

[0061] 600. If all verifications are passed, a successful verification report will be issued. If any verification fails, a warning verification failure report will be generated and the internal early warning process will be triggered.

[0062] Specifically, if all verification indicators meet the standards, a verification success report will be generated, which includes details of the verification steps, result judgment and technical application details; if any verification indicator is abnormal, the cause of failure will be recorded (such as hash value deviation, signs of timestamp tampering, reasons for decryption failure), and a warning verification failure report will be generated to feedback to the requester, and the internal early warning process will be triggered to facilitate in-depth investigation and repair of the stored evidence data.

[0063] For example, during integrity verification (hash value comparison), if the recalculated data hash value is exactly the same as the original hash value retrieved from the disc, this indicates that the data has not been tampered with during storage, the data integrity is normal, and the verification is successful. If the hash values ​​are inconsistent, it indicates that the data integrity is abnormal and the verification fails.

[0064] Exemplarily, when the time series logic verifies normal and abnormal situations, the normal situation is: 1. The normal time sequence is reasonable: the order between the Beidou satellite timestamp read from the CD and other relevant time information (data collection time, preprocessing time, encryption time, etc.) conforms to the logic of the data storage process. For example, the data collection time is earlier than the preprocessing time, the preprocessing time is earlier than the encryption time, the encryption completion time is closely connected with the Beidou satellite timestamp record entering the storage process time, and each time interval is within a reasonable system processing time range. 2. Time accuracy matching: The accuracy of the Beidou satellite timestamp matches the accuracy of other time information recorded by the system, and there is no logical contradiction caused by inconsistent time accuracy. For example, the Beidou satellite timestamp is accurate to nanoseconds, and other relevant time information can also be accurate to similar time accuracy, and is coherent and reasonable in time progression.

[0065] Abnormal situations: 1. Reversed time sequence: It is found that the order of two adjacent time nodes does not conform to the normal evidence storage process, such as the encryption time is earlier than the preprocessing time. This is obviously illogical and may be caused by time recording errors or malicious data tampering. 2. Abnormal time interval: The interval between timestamps exceeds the normal system processing time range. For example, the time interval from the completion of data encryption to the recording of the Beidou satellite timestamp to enter the evidence storage process is too long or too short, which exceeds the reasonable range based on historical data statistics or system design expectations. This may indicate that there is an abnormality in data processing or that time information has been tampered with. 3. Timestamp accuracy is inconsistent or the format is wrong: The accuracy of the Beidou satellite timestamp does not meet expectations. For example, it should be accurate to nanoseconds but only has second-level accuracy, or the format of the timestamp does not conform to the format specified by the system (such as the date and time format is wrong). This may be a sign of data storage errors or timestamp tampering.

[0066] For example, when the data source authenticity verification (decryption process) is normal or abnormal, the normal situation is: decryption is successful and data features match: the original data can be successfully restored through the decryption process, and the decrypted data format and content features are completely matched with the data source feature information pre-recorded by the system. For example, for a text file, the decrypted text encoding method, file structure, and value range of key business fields are consistent with the data source information recorded when the evidence was stored. Abnormal situation: 1. Reasons for decryption failure or doubts about the source of data Decryption error: errors occur during the decryption process, such as key mismatch, decryption algorithm execution error, data ciphertext damage, etc., resulting in the inability to correctly restore the original data. For example, the wrong private key is used for decryption, or the encrypted data is damaged during the storage process, making the decryption process unable to proceed normally. 2. Data format does not match: the format of the original data after decryption does not match the expectation, such as file type error, inconsistent data encoding method, etc. This may be caused by data source errors or data tampering during transmission and storage.

[0067] Therefore, it can accurately respond to verification requests and provide verification results through detailed reports. Whether it is a success confirmation or a failure warning, it can provide users with a clear basis for decision-making and improve the overall practicality of the system and user trust.

[0068] As described above, the embodiments of the present application collect the data to be stored from various data sources and perform pre-processing and preliminary processing on the data; receive the data after preliminary processing and encrypt it to obtain encrypted data and a key pair; attach a timestamp to the encrypted data to obtain encrypted storage data with a timestamp and burn the data for storage; receive a storage verification request, perform verification and authorization management, route the request to the corresponding verification execution channel according to the verification type, and provide data access rights; retrieve the encrypted storage data with a timestamp according to the instruction, and perform integrity verification, timing verification and source verification on the data; if all verifications pass, a verification success report is issued, and if any one of the verifications fails, a warning verification failure report is generated and an internal early warning process is triggered; obtain accurate timestamps, combine burning technology to perform reliable data backup, and use encryption algorithms to ensure data confidentiality and ensure data authenticity and integrity.

[0069] The above steps are not to be performed in a strict order as described in the numbers, but should be understood as an overall solution.

[0070] In the second aspect, based on the above embodiments, Figure 2 A schematic diagram of the structure of a data evidence verification device provided in an embodiment of the present application. Figure 2The data evidence verification device provided in this embodiment specifically includes: a data processing module 201, a data encryption module 202, a time addition module 203, a verification authorization module 204, a data verification module 205 and a verification result module 206.

[0071] Among them, the data processing module 201 is used to collect the data to be stored from various data sources and pre-process and initially process the data; the data encryption module 202 is used to receive the data after initial processing and encrypt it to obtain encrypted data and a key pair; the time attachment module 203 is used to attach a timestamp to the encrypted data, obtain encrypted evidence data with a timestamp and burn the data for evidence storage; the verification and authorization module 204 is used to receive evidence verification requests, perform verification and authorization management, route the request to the corresponding verification execution channel according to the verification type, and provide data access rights; the data verification module 205 is used to retrieve the encrypted evidence data with a timestamp according to the instructions, and perform integrity verification, timing verification and source verification on the data; the verification result module 206 is used to issue a verification success report if all verifications are passed, and if any verification fails, a warning verification failure report is generated and an internal early warning process is triggered.

[0072] As described above, the embodiments of the present application collect the data to be stored from various data sources and perform pre-processing and preliminary processing on the data; receive the data after preliminary processing and encrypt it to obtain encrypted data and a key pair; attach a timestamp to the encrypted data to obtain encrypted storage data with a timestamp and burn the data for storage; receive a storage verification request, perform verification and authorization management, route the request to the corresponding verification execution channel according to the verification type, and provide data access rights; retrieve the encrypted storage data with a timestamp according to the instruction, and perform integrity verification, timing verification and source verification on the data; if all verifications pass, a verification success report is issued, and if any one of the verifications fails, a warning verification failure report is generated and an internal early warning process is triggered; obtain accurate timestamps, combine burning technology to perform reliable data backup, and use encryption algorithms to ensure data confidentiality and ensure data authenticity and integrity.

[0073] The data evidence verification device provided in the embodiment of the present application can be used to execute the data evidence verification method provided in the above embodiment, and has corresponding functions and beneficial effects.

[0074] In a third aspect, an embodiment of the present application further provides an electronic device, which can integrate the data evidence verification device provided by an embodiment of the present application. Figure 3 Schematic diagram of the structure of an electronic device provided by an embodiment of the present application. Figure 3The electronic device includes: an input device 33, an output device 34, a memory 32 and one or more processors 31; the memory 32 is used to store one or more programs; when the one or more programs are executed by the one or more processors 31, the one or more processors 31 implement the data evidence verification method provided in the above embodiment. The input device 33, the output device 34, the memory 32 and the processor 31 can be connected by a bus or other means. Figure 3 The example of connecting through bus is taken in the following.

[0075] The processor 31 executes various functional applications and data processing of the device by running the software programs, instructions and modules stored in the memory 32, that is, implements the above-mentioned data evidence verification method.

[0076] The electronic device provided above can be used to execute the data evidence verification method provided in the above embodiment, and has corresponding functions and beneficial effects.

[0077] In a fourth aspect, an embodiment of the present application also provides a computer-readable storage medium, which includes a stored computer program; wherein, when the computer program is running, the device where the computer-readable storage medium is located is controlled to execute the data evidence verification method as described above, and can achieve the same beneficial effects.

[0078] Of course, the storage medium containing computer executable instructions provided in the embodiment of the present application, whose computer executable instructions are not limited to the data evidence verification method described above, can also execute related operations in the data evidence verification method provided in any embodiment of the present application.

[0079] In a fifth aspect, the embodiments of the present application also provide a computer program product, and the methods described in the various embodiments of the present application can be implemented in whole or in part by software, hardware, firmware, or any combination thereof. When implemented using software, it can be implemented in whole or in part in the form of a computer program product. The computer program product includes one or more computer programs or instructions. When the computer program or instruction is loaded and executed on a computer, the processes or functions described in the various embodiments of the present application are executed in whole or in part. The computer can be a general-purpose computer, a special-purpose computer, a computer network, a network device, a user device, a core network device, an OAM (Open Application Model) or other programmable device.

[0080] The computer program or instructions may be stored in a computer-readable storage medium, or transmitted from one computer-readable storage medium to another computer-readable storage medium, for example, the computer program or instructions may be transmitted from one website, computer, server or data center to another website, computer, server or data center by wired or wireless means. The computer-readable storage medium may be any available medium that can be accessed by a computer or a data storage device such as a server or data center that integrates one or more available media. The available medium may be a magnetic medium, such as a floppy disk, a hard disk, or a magnetic tape; it may also be an optical medium, such as a digital video disk; it may also be a semiconductor medium, such as a solid-state drive. The computer-readable storage medium may be a volatile or non-volatile storage medium, or may include both volatile and non-volatile types of storage media.

[0081] In several embodiments provided in the present application, it should be understood that the disclosed devices and methods can also be implemented in other ways. The device embodiments described above are merely schematic. For example, the flowcharts and block diagrams in the accompanying drawings show the possible architecture, functions and operations of the devices, methods and computer program products according to multiple embodiments of the present application. In this regard, each box in the flowchart or block diagram can represent a module, a program segment or a part of a code, and the module, a program segment or a part of a code contains one or more executable instructions for implementing the specified logical function. It should also be noted that in some alternative implementations, the functions marked in the box can also occur in a different order from the order marked in the accompanying drawings. For example, two consecutive boxes can actually be executed substantially in parallel, and they can sometimes be executed in the opposite order, depending on the functions involved. It should also be noted that each box in the block diagram and / or flowchart, and the combination of boxes in the block diagram and / or flowchart can be implemented with a dedicated hardware-based system that performs a specified function or action, or can be implemented with a combination of dedicated hardware and computer instructions.

[0082] In addition, the functional modules in the various embodiments of the present application may be integrated together to form an independent part, or each module may exist separately, or two or more modules may be integrated to form an independent part.

[0083] If the function is implemented in the form of a software function module and sold or used as an independent product, it can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of the present application can be essentially or partly embodied in the form of a software product that contributes to the prior art. The computer software product is stored in a storage medium and includes several instructions for enabling an electronic device (which can be a personal computer, server, or network device, etc.) to perform all or part of the steps of the method described in each embodiment of the present application. The aforementioned storage medium includes: U disk, mobile hard disk, read-only memory (ROM, Read-Only Memory), random access memory (RAM, Random Access Memory), disk or optical disk, and other media that can store program codes.

[0084] The above description is only an embodiment of the present application and is not intended to limit the scope of protection of the present application. For those skilled in the art, the present application may have various changes and variations. Any modifications, equivalent substitutions, improvements, etc. made within the spirit and principles of the present application should be included in the scope of protection of the present application. It should be noted that similar reference numerals and letters represent similar items in the following drawings, so once an item is defined in one drawing, it does not need to be further defined and explained in the subsequent drawings.

[0085] The above is only a specific implementation of the present application, but the protection scope of the present application is not limited thereto. Any technician familiar with the technical field can easily think of changes or substitutions within the technical scope disclosed in the present application, which should be included in the protection scope of the present application. Therefore, the protection scope of the present application should be based on the protection scope of the claims.

[0086] It should be noted that, in this article, relational terms such as first and second, etc. are only used to distinguish one entity or operation from another entity or operation, and do not necessarily require or imply any such actual relationship or order between these entities or operations. Moreover, the terms "include", "comprise" or any other variants thereof are intended to cover non-exclusive inclusion, so that a process, method, article or device including a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, method, article or device. In the absence of further restrictions, the elements defined by the sentence "comprise a ..." do not exclude the existence of other identical elements in the process, method, article or device including the elements.

Claims

1. A data evidence verification method, characterized in that: The method comprises: Collect data to be stored from various data sources and pre-process and preliminarily process the data; receiving the data after preliminary processing and encrypting it to obtain encrypted data and a key pair; Add a timestamp to the encrypted data to obtain encrypted evidence data with a timestamp and burn the data for evidence storage; Receive evidence verification requests, perform verification and authorization management, route requests to the corresponding verification execution channel according to the verification type, and provide data access permissions; Retrieve encrypted evidence data with timestamps according to instructions, and perform integrity verification, timing verification, and source verification on the data; If all verifications pass, a successful verification report will be issued. If any verification fails, a warning verification failure report will be generated and the internal early warning process will be triggered.

2. The data evidence verification method according to claim 1 is characterized in that: The collection of data to be stored from various data sources and pre-processing and preliminary processing of the data include: Collect the data to be stored from various data sources and perform pre-processing operations such as format standardization, compression, and feature extraction; Feature extraction is performed on the preprocessed data to generate summary information and metadata of the data; wherein the summary information includes: attributes and hash values ​​calculated by hash functions, and the metadata includes: data source, data type, and creation time.

3. The data evidence verification method according to claim 1 is characterized in that: The receiving of the initially processed data is encrypted to obtain encrypted data and a key pair, including: Use a symmetric encryption algorithm to quickly encrypt the data after preliminary processing, and then use an asymmetric encryption algorithm to encrypt the key of the symmetric encryption algorithm to generate encrypted data and a corresponding encryption key pair; Send the encrypted data to the BeiDou satellite timestamp module and store the private key.

4. The data evidence verification method according to claim 1 is characterized in that: The method of adding a timestamp to the encrypted data to obtain encrypted evidence data with a timestamp includes: Acquire nanosecond-level precision time information through the built-in high-precision Beidou satellite signal receiving device that synchronizes the clock with the Beidou satellite navigation system; Receive the encrypted data inflow and attach the Beidou satellite timestamp to it to obtain an encrypted data packet with a timestamp, where the timestamp records the moment when the data is encrypted and enters the evidence storage process.

5. The data evidence verification method according to claim 1 is characterized in that: The said recording of evidence includes: Burning encrypted data packets with time stamps to a write-once optical disc medium, and writing all relevant metadata to a specific location of the optical disc in accordance with a specific protocol and format; Among them, the relevant metadata includes: the data's global unique identifier in the system, Beidou satellite timestamp, user information, evidence data encryption algorithm information, data starting sector, data hash value, burning device information, device serial number, burning batch number, data writing strategy and data verification algorithm.

6. The data evidence verification method according to claim 1 is characterized in that: The receiving of evidence verification requests, verification and authorization management, routing the requests to the corresponding verification execution channels according to the verification type, and providing data access rights include: Receiving a proof verification request, wherein the verification request includes metadata information of the data to be verified, identity credentials of the requester, and verification information; Verify and authorize the requester's identity credentials, and confirm the legitimacy and scope of authority of the requester by comparing them with the pre-stored user identity information and authority list; The request is routed to the corresponding authentication execution module based on the authentication type and data access permissions are provided.

7. The data evidence verification method according to claim 1 is characterized in that: The method of retrieving encrypted evidence data with a timestamp according to the instruction and performing integrity verification, timing verification and source verification on the data includes: Retrieving key data such as evidence data, timestamp, encryption key and hash value from the optical disk storage medium according to the instruction; With the help of encryption algorithm characteristics, the data hash value is recalculated and compared with the original fingerprint to verify the integrity; Use the accuracy of BeiDou satellite timestamps to check time series logic and determine whether there are any timing anomalies; Reversely verify the authenticity of the data source through the decryption process.

8. The data evidence verification method according to claim 1 is characterized in that: If all the above verifications are passed, a verification success report will be issued. If any verification fails, a warning verification failure report will be generated and the internal early warning process will be triggered, including: If all verification indicators meet the standards, a verification success report is generated, which includes verification step details, result judgment and technical application details; If any verification indicator is abnormal, the cause of failure will be recorded, a warning verification failure report will be generated to feedback the requester, and the internal early warning process will be triggered.

9. A data evidence verification device, characterized in that: include: The data processing module is used to collect the data to be stored from various data sources and perform pre-processing and preliminary processing on the data; A data encryption module is used to receive the data after preliminary processing and encrypt it to obtain encrypted data and a key pair; A time addition module is used to add a timestamp to the encrypted data, obtain the encrypted evidence data with the timestamp and burn the data for evidence; The verification and authorization module is used to receive evidence verification requests, perform verification and authorization management, route requests to the corresponding verification execution channel according to the verification type, and provide data access permissions; The data verification module is used to retrieve the encrypted evidence data with timestamp according to the instruction, and perform integrity verification, timing verification and source verification on the data; The verification result module is used to issue a verification success report if all verifications pass. If any verification fails, a warning verification failure report is generated and the internal early warning process is triggered.

10. An electronic device, characterized in that: include: A processor, a memory and a bus, wherein the processor is connected to the memory via the bus, and the memory stores computer-readable instructions. When the computer-readable instructions are executed by the processor, they are used to implement the data evidence verification method as described in any one of claims 1 to 8.

11. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores a computer program, which, when executed by a server, implements the data evidence verification method as described in any one of claims 1-8.

Images