Double-key encryption module based on block chain technology and computer system

Abstract

The invention provides a double-key encryption module based on a block chain technology and a computer system, the encryption module comprises a private key module, an uplink and downlink data interface, a public key module and an encryption mainboard, the private key module is used for generating a private key; the uplink and downlink data interface receives data uploaded and downloaded by the data interaction equipment; the encryption mainboard receives a data operation record sent by the uplink and downlink data interface and generates block data of the data operation record; the public key module is used for storing block data of the data operation record. The computer system is based on the encryption module, the encryption mainboard obtains data operation records accessed to the service computer through the uplink and downlink data interfaces and generates a hash header and block data, the hash header is sent to the management computer, and the block data is stored in the public key and sent to the management computer through the public key; and the management computer compares the Hash table header with the Hash table header in the block data, and judges the correctness of the data operation record.

Description

Technical Field

[0001] The present invention belongs to the field of computer hardware technology, and in particular to a double-key encryption computer and system based on blockchain technology, which is used to improve the data security of a computer system. Background Art

[0002] With the rapid development of information technology, computer systems have become the key infrastructure supporting the operation of modern society. However, with the popularization of computers, security incidents such as hacker attacks, malware, internal leaks, and data theft have occurred frequently, causing significant losses to personal privacy and corporate secrets. Especially in the new technology environment such as cloud computing and big data, the mobility and openness of data have further increased. Existing technologies lock attackers through data tracking. Only on the basis of ensuring the security of tracking data can attackers be found quickly and accurately. Summary of the invention

[0003] In view of this, the present invention proposes a dual-key encryption module and computer system based on blockchain technology, which can effectively track the flow of upstream and downstream data of encrypted computer files, and then identify the thief and the carrier used in the first time, effectively deter the occurrence of thieves and protect sensitive data in the computer system from being stolen.

[0004] To achieve the above object, the present invention adopts the following technical solutions:

[0005] A dual-key encryption module based on blockchain technology includes a private key module, an uplink and downlink data interface, a public key module and an encryption mainboard, wherein the private key module is used to generate a private key; the uplink and downlink data interface receives data uploaded and downloaded by a data interaction device; the encryption mainboard receives data operation records sent by the uplink and downlink data interfaces, and generates block data of the data operation records; the public key module is used to store block data of the data operation records.

[0006] Furthermore, the process of generating block data of the data operation record is that the encryption mainboard takes a data block of a set size from the data operation record, obtains a hash header using a hash algorithm, and synthesizes the hash header and the data block to obtain the block data.

[0007] Furthermore, the hash header generation process is that the encryption mainboard uses a hash algorithm to encrypt the current block data and generate a hash header for the next data block, which is used to implement chain operations to ensure the continuity between blocks; the hash header of the genesis block is generated externally.

[0008] Furthermore, the hash algorithm adopts the SHA256 algorithm.

[0009] Furthermore, the data operation record includes the device number that generates the uplink and downlink data, the operation time, the file type, the file size and the data content.

[0010] Furthermore, when the encryption mainboard does not detect the insertion of the public key, the encryption mainboard is in a locked state.

[0011] A computer system with a double-key encryption module based on blockchain technology, based on the above encryption module, includes a business computer and a management computer. The business computer is responsible for daily office business and has an encryption module; the encryption mainboard obtains the data operation record of the business computer accessed through the upstream and downstream data interfaces through the upstream and downstream data interfaces, and generates a hash header and block data, the hash header is sent to the management computer, the block data is saved in the public key, and sent to the management computer by the public key; the management computer compares the hash header with the hash header in the block data, and judges the correctness of the data operation record through the comparison result, thereby ensuring the validity of the data operation record; the private key is a necessary tool for starting the business computer system, and the system startup of the business computer can be realized in conjunction with the power-on password.

[0012] Compared with the prior art, the present invention has the following beneficial effects:

[0013] 1) The encryption module provided by the present invention realizes the operation record of data;

[0014] 2) The encryption structure provided by the present invention is simple and easy to use, and can be used in conjunction with other systems;

[0015] 3) The computer system provided by the present invention is based on blockchain technology. Compared with the existing method of encrypting computer ledger records, it realizes the automatic recording of computer upload and download data, which is more convenient;

[0016] 4) The combination of public key and encryption system blockchain can effectively ensure that data operation records are not tampered with; when encrypted computer data is stolen, the attacker can be quickly identified based on accurate data operation records;

[0017] 5) The separation of public and private keys ensures that when the computer is not uploading or downloading files, it can be used only with the private key, which improves the flexibility of computer use and facilitates business development and operation; BRIEF DESCRIPTION OF THE DRAWINGS

[0018] Figure 1 , a system block diagram of a computer system with a double-key encryption module based on blockchain technology according to the present invention;

[0019] Figure 2 , single block logic diagram;

[0020] Figure 3 , block chain logic diagram; DETAILED DESCRIPTION

[0021] The double-key encryption computer system of the present invention is mainly composed of two parts: a business computer and a management computer. In the system, one management computer can manage multiple business computers at the same time; the business computer is mainly responsible for daily office business and is the operation object that needs to encrypt and protect the upload and download of record files;

[0022] The encryption module of the business computer is mainly composed of a private key, an uplink and downlink data interface, a public key and an encryption mainboard. The functions of each module are as follows:

[0023] Private key (encryption dongle): a necessary tool for starting the business computer system. Together with the boot password, the business computer system can be started;

[0024] Uplink and downlink data interface: installed on the chassis of the business computer, it can accept data exchange devices such as optical drives and USB flash drives for data upload and download; at the same time, data operation behavior is supervised by the public key. When the encryption mainboard does not detect the insertion of the public key, the encryption mainboard will be in a locked state and cannot perform upload and download operations through the uplink and downlink data interfaces; the uplink and downlink data operation records are uploaded to the encryption mainboard;

[0025] Public key (encryption dongle): Block data that stores data operation records of the business computer's uplink and downlink data interfaces (including but not limited to data uplink and downlink device numbers, operation time, file type, file size and data, etc.);

[0026] Encryption motherboard: uses high-performance chips produced domestically and is installed in the chassis of business computers;

[0027] The encryption motherboard receives data operation records on the uplink and downlink data interfaces (including but not limited to data uplink and downlink device numbers, operation time, file type, file size and data, etc.). When the block data is equal to 50M, the encryption motherboard combines the hash table header and operation records into block data (such as Figure 2 As shown in the figure, the first 256 bits of the block data are fixed as the hash table header, and the packaged block data will be saved in the public key;

[0028] The encryption motherboard will encrypt the packaged block data uniformly using the SHA256 algorithm to generate the hash header of the next block, thereby realizing chain operations to ensure the continuity between blocks. After generating the hash header, the encryption motherboard will upload the hash header to the management computer for storage;

[0029] The management computer in the dual-key encryption computer system has the following functions: reading the data of the business computer's public key, and by comparing the hash value stored in itself with the hash value on the public key, it can verify whether the data of the business computer's public key has been tampered with;

[0030] The management computer randomly generates a hash header of the blockchain genesis block and sends it to the encryption motherboard.

[0031] In order to make the technical means, creative features, objectives and effects achieved by the present invention easy to understand, the present invention is further explained below based on the working process.

[0032] The administrator first generates a 256-bit binary random value through the management computer, and then uses the generated random value as the hash header of the genesis block. Only then can the public key be used on the business computer;

[0033] When no file upload or download is performed, the encryption computer only needs to use the private key to start the system; but when file upload or download is performed, the business computer must use the public key, otherwise the uplink and downlink interfaces of the encryption computer will be locked and data upload and download functions cannot be used;

[0034] When the business computer uploads or downloads files, the encryption motherboard combines the hash header and data operation records (including but not limited to data uplink and downlink device numbers, operation time, file type, file size and data, etc.) into block data; when the block data is equal to 50M, the encryption motherboard encrypts the block data uniformly using the SHA256 algorithm to generate the hash header of the next block, and then uploads the hash header to the business computer; the blockchain data is iterated in sequence;

[0035] The management computer reads the data of the public key and compares the hash value uploaded by the encryption motherboard with the hash value on the public key to find out whether the operation record has been modified.

[0036] The above shows and describes the basic principles and main features of the present invention and the advantages of the present invention. It should be understood by those skilled in the art that the present invention is not limited to the above embodiments. The above embodiments and descriptions are only for explaining the principles of the present invention. Without departing from the spirit and scope of the present invention, the present invention may have various changes and improvements, which fall within the scope of the present invention to be protected. The scope of protection of the present invention is defined by the attached claims and their equivalents.

Claims

1. A dual-key encryption module based on blockchain technology, characterized in that: It includes a private key module, an uplink and downlink data interface, a public key module and an encryption mainboard, wherein the private key module is used to generate a private key; the uplink and downlink data interface receives data uploaded and downloaded by a data interaction device; the encryption mainboard receives data operation records sent by the uplink and downlink data interfaces, and generates block data of the data operation records; the public key module is used to store block data of the data operation records.

2. A dual-key encryption module based on blockchain technology according to claim 1, characterized in that: The process of generating block data of data operation records is that the encryption mainboard takes a data block of a set size from the data operation record, obtains a hash header using a hash algorithm, and synthesizes the hash header and the data block to obtain the block data.

3. A dual-key encryption module based on blockchain technology according to claim 1, characterized in that: The process of generating the hash header is that the encryption mainboard uses the hash algorithm to encrypt the current block data and generate the hash header of the next data block, which is used to implement chain operations to ensure the continuity between blocks; the hash header of the genesis block is generated externally.

4. A dual-key encryption module based on blockchain technology according to claim 2 or 3, characterized in that: The hash algorithm uses the SHA256 algorithm.

5. A dual-key encryption module based on blockchain technology according to any one of claims 1 to 3, characterized in that: The data operation record includes the device number that generates the uplink and downlink data, the operation time, the file type, the file size and the data content.

6. A dual-key encryption module based on blockchain technology according to any one of claims 1 to 3, characterized in that: When the encryption motherboard does not detect the insertion of the public key, the encryption motherboard is in a locked state.

7. A computer system with a dual-key encryption module based on blockchain technology, based on the above encryption module, characterized in that: It includes business computers and management computers. The business computers are responsible for daily office business and have encryption modules. The encryption mainboard obtains data operation records of the business computers connected to the uplink and downlink data interfaces through the uplink and downlink data interfaces, and generates hash headers and block data. The hash headers are sent to the management computer, and the block data are saved in the public key and sent to the management computer by the public key. The management computer compares the hash header with the hash header in the block data, and determines the correctness of the data operation record based on the comparison result, thereby ensuring the validity of the data operation record; the private key is a necessary tool for starting the business computer system, and it can be used with the power-on password to start the business computer system.

Images