Multi-satellite multi-user data right confirmation method based on block chain in remote sensing intelligent scene

Abstract

The invention relates to a multi-satellite multi-user data right confirmation method based on a block chain in a remote sensing intelligent scene, and belongs to the technical field of remote sensing. The method comprises the steps of creating a block chain alliance according to identity labels of a data provider and a user and information of organizations where the data provider and the user are located, and establishing different alliance chains for different services; the data provider stores the metadata in a data link and obtains a storage number; the data right confirmation unit sends the data to the alliance chain according to the identity label and the data storage number of the data requester, metadata is obtained, and data right confirmation operation is carried out; the data user can check and operate the file of which the right is confirmed successfully; any access, use or circulation operation records of the remote sensing data are uploaded to the operation auditing chain, so that traceability operation is facilitated; and a data supervision platform is arranged for real-time monitoring and management. According to the invention, the flexibility and configurability of the data right confirmation service are improved, and the problems of single service data category, poor expansibility of a user organization and high system development cost in the prior art are solved.

Description

Technical Field

[0001] The present invention relates to the fields of remote sensing technology, artificial intelligence and blockchain technology, and specifically to a blockchain-based multi-satellite and multi-user data rights confirmation method in remote sensing intelligent application scenarios. Background Art

[0002] With the rapid development of remote sensing technology, remote sensing data acquired by multiple satellites and multiple sensors are becoming increasingly abundant, providing a massive data source for various intelligent applications. However, in the process of collecting, transmitting, processing and applying remote sensing data, the issue of data ownership has become increasingly prominent, becoming an important factor restricting the value of remote sensing data. Data ownership is to determine the rights attributes of the data, mainly including determining the right subject of the data and determining the content of the rights, that is, what kind of rights are enjoyed. At present, the ownership of remote sensing data mainly relies on the traditional legal system, but in the complex environment of multiple satellites and multiple users, the ownership, traceability and circulation of data face many security challenges. Remote sensing data ownership is conducive to promoting data circulation and solving the problem of data silos.

[0003] Blockchain technology, with its decentralized, tamper-proof, and traceable nature, offers a new approach to addressing the issue of remote sensing data ownership. While numerous blockchain-based solutions exist for data ownership, practical applications still face challenges such as limited business data types, poor scalability within user organizations, and high system development costs. Summary of the Invention

[0004] In order to solve the above problems, the present invention provides a multi-satellite and multi-user data rights confirmation method based on blockchain in remote sensing intelligent scenarios. In remote sensing intelligent application scenarios, blockchain technology is used to realize the rights confirmation, traceability and secure circulation of multi-satellite and multi-user remote sensing data.

[0005] The present invention provides a blockchain-based multi-satellite multi-user data rights confirmation method in a remote sensing intelligent scenario, comprising the following steps:

[0006] Step 1: Build a blockchain network for the organizational alliance. In a multi-satellite, multi-user scenario, an organizational alliance is formed based on the user's organization and the organization to which the constellation belongs. Multiple blockchain networks are created within the organizational alliance to isolate data from different businesses. A blockchain network is created for each business within the organizational alliance. Each blockchain network contains two independent sub-blockchains: a data chain and an operation audit chain. The data chain is used to store metadata for remote sensing data files, and the operation audit chain stores data ownership and operation log information.

[0007] Step 2: The data acquisition interface collects the required remote sensing data and pre-processes it according to current business needs;

[0008] Step 3, Data Encoding and Uploading Module: Encode the pre-processed remote sensing data file, generate a summary ciphertext, and upload the pre-processed original remote sensing data file to the S3 object storage server. Obtain the file storage address, and use blockchain technology to package the remote sensing data file's summary ciphertext, acquisition time, acquisition location, sensor type, file storage address and other metadata into blocks. These blocks are uploaded to the data chain of the blockchain network of the corresponding business in chronological order; the operation log of the uploaded block is uploaded to the operation audit chain.

[0009] After the data encoding and chain module uploads the block to the data chain, it sends a request for ownership verification to the blockchain network. The request contains the metadata of the remote sensing data file. If the request is successful, the blockchain service generates a certificate number and returns it to the data encoding and chain module. The data encoding and chain module associates the certificate number with the storage address of the remote sensing data file and saves it;

[0010] Step 4: The blockchain service performs data ownership confirmation and authorization: a unique ownership identifier is assigned to each block uploaded to the data chain and returned to the user as a proof code. The ownership and usage rights of the block data are clarified according to the data usage agreement, and the validity period of the block proof number is set. The user uploads the log of the ownership confirmation operation to the operation audit chain.

[0011] When a user requests a remote sensing data file, the local server first checks whether the file has an associated evidence number. If so, it sends the user identity and the data evidence number to the data rights confirmation unit. The data rights confirmation unit then sends a query request to the blockchain service and performs a data usage rights confirmation operation on the returned query results. After completing the data usage rights confirmation operation, the corresponding operation log is uploaded to the operation audit chain.

[0012] Step 5: Upload any records of access, use, or transfer of remote sensing data to the operation audit chain to achieve traceability and transfer of remote sensing data and ensure data traceability and security.

[0013] Step 6: Establish a data supervision platform to monitor and manage remote sensing data on the blockchain network of the organization alliance in real time, monitor data access, use and circulation in real time, detect and handle abnormal behavior in a timely manner, and ensure data security and compliance.

[0014] Compared with the prior art, the advantages and positive effects of the present invention are:

[0015] (1) The method of the present invention is aimed at multi-satellite and multi-user scenarios. By creating multiple alliance chains through multi-organization alliance institutions, it can realize the confirmation and authorized access of different business data by users of different organizations, thereby improving the flexibility and configurability of data confirmation services. In addition, in actual applications, business data categories are diverse. The method of the present invention realizes blockchain storage and data confirmation for different businesses, solving the existing problems of single business data categories and poor scalability of user organizations.

[0016] (2) By providing a highly encapsulated unified interface to the outside world, the method of the present invention can enable the existing data business system to implement fast and convenient integrated data rights confirmation services, efficiently complete the data chain process, reduce development and implementation costs, and solve the problem of high development costs of existing systems.

[0017] (3) The method of the present invention can effectively monitor and manage the storage of remote sensing data on the blockchain in real time through the established data monitoring and management platform, ensuring the security and compliance of the data. BRIEF DESCRIPTION OF THE DRAWINGS

[0018] Figure 1 This is an overall architecture diagram of a multi-satellite multi-user data rights confirmation method based on blockchain in a remote sensing intelligent application scenario according to an embodiment of the present invention;

[0019] Figure 2 This is a flowchart of uploading and confirming ownership of remote sensing data files according to an embodiment of the present invention;

[0020] Figure 3 This is a flowchart of downloading and confirming the ownership of remote sensing data files according to an embodiment of the present invention. DETAILED DESCRIPTION

[0021] To make the purpose, technical solutions and advantages of the present invention more clearly understood, the present invention is further described in detail below with reference to the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are only used to explain the present invention and do not limit the scope of protection of the present invention.

[0022] like Figure 1As shown, a multi-satellite and multi-user data rights confirmation method based on blockchain in a remote sensing intelligent application scenario according to an embodiment of the present invention includes three steps: creating an organizational alliance chain, uploading and downloading the rights confirmation data, and tracking the data usage. Specifically, in a multi-satellite and multi-user scenario, an organizational alliance and an alliance chain are established based on the organizational information to which each user belongs. Users upload the MD5 summary information and file description information of the remote sensing data files or AI model files within their respective authority scope to the blockchain. By utilizing the immutability of the blockchain, it is very difficult to tamper with the metadata information of the remote sensing data files or AI model files. By utilizing S3 distributed storage, the security of the files is greatly improved. Only members of the alliance organization can write blocks to the blockchain, and other nodes can only read blocks. The implementation of each step is described below.

[0023] Step 1: Create an organizational alliance and build a blockchain network for the organizational alliance. Combine the organizational information of the data provider and user to form an organizational alliance and create a consortium blockchain network.

[0024] In a multi-satellite, multi-user scenario, an organizational alliance is formed based on the user organizations and constellation organizations. This embodiment of the present invention selects organizations that provide and consume remote sensing data based on business needs, based on the organizational information of all current users and satellite information. After the alliance is created, two blockchain subchains, the data chain and the operation audit chain, are created, forming the entire blockchain network infrastructure. The data chain stores metadata for remote sensing data files. The operation audit chain stores data ownership confirmation and operation log information for data traceability.

[0025] like Figure 1 As shown in the figure, organizations A and B belong to the same organizational alliance. Within this alliance, a blockchain network, known as a consortium chain, is built for a specific type of business data. Any number of organizations within the alliance can create a consortium chain, and a single alliance can create multiple consortium chains. A consortium chain consists of a data chain and an operational audit chain. The data chain and operational audit chain are two independent sub-blockchains, with data physically isolated from each other. Separate consortium blockchain networks are created for different businesses within the organizational alliance. Data in these different blockchain networks is isolated and cannot be communicated with each other.

[0026] Step 2: The data acquisition interface collects remote sensing data from the blockchain network to be built and preprocesses the collected remote sensing data. To meet current business needs, multiple satellite sensors are used to acquire the required remote sensing data. Computer vision and image processing technologies are then used to preprocess the data. Preprocessing includes noise removal, radiometric correction, and geometric correction to improve the quality and accuracy of the remote sensing data.

[0027] Step 3: Data Encoding and Uploading Module Execution: Encode the pre-processed remote sensing data file and generate a unique digest ciphertext for the data, such as by calculating the data's hash value. Upload the pre-processed original remote sensing data file to the S3 object storage server and obtain the object storage file address. Using blockchain technology, package the remote sensing data's identification code, acquisition time, acquisition location, sensor type, and storage address, and other metadata into blocks. These blocks are then uploaded to the corresponding business's blockchain network in chronological order to ensure data immutability and traceability. Operational logs for uploaded blocks are stored in the operation audit chain.

[0028] like Figure 1 As shown, in an embodiment of the present invention, organization A or B encodes and generates the MD5 value of the remote sensing data file as a digest ciphertext, packages the digest ciphertext, acquisition time, acquisition location, sensor type, file storage address and other metadata information into a block, uploads it to the data chain through a smart contract, and receives a proof number, and then associates the proof number with the directory information of the remote sensing data file and saves it.

[0029] Step 4: The blockchain service confirms and authorizes data ownership, assigning a unique ownership identifier to each uploaded data block. This identifier is returned to the user as a data proof number. The data usage agreement clarifies ownership and usage rights for the data block and sets a validity period for the block proof number. The data usage agreement is pre-stored in the blockchain service. It defines the data storage format for the entire data chain, including fields such as the purpose, scope, duration, owner, and security measures of the data, to ensure legal use of the data.

[0030] In an embodiment of the present invention, a unique hash value is generated for each uploaded sub-block on the data block sub-chain. The hash value is used to identify the uniqueness of the block and ensure the non-tamperability of the data. The hash value is used as the evidence number.

[0031] When a user logs into the remote sensing data file access system, they can see the remote sensing data file directory within the authority of the current user's institution. When the user needs to view the remote sensing data file, the local system queries whether there is associated evidence number information based on the file directory information selected by the current user. If so, the user identity and evidence number are sent to the data rights confirmation unit. The data rights confirmation unit sends a query request to the blockchain service based on the evidence number information to check whether there is a result. If there is a result, it indicates that the remote sensing data file has completed the data rights confirmation operation. If the return result is empty, it indicates that the evidence number has expired and the data rights confirmation authentication operation needs to be performed again. When the data is confirmed, the data evidence number will be set with an expiration date according to the data usage agreement. When the data access exceeds the expiration date, the evidence number becomes invalid and the data rights confirmation authentication operation needs to be performed again.

[0032] (1) The authentication process for data upload and data rights confirmation is as follows: Figure 2 As shown in the figure, when a user logs into the data access system, a permission check is performed. The scope of the data directories accessible to the user is checked and filtered. Only after passing the permission check can the user upload and access the data. When the user uploads remote sensing data, the hash value of the remote sensing data file is calculated locally. That is, the MD5 operation is performed on the byte stream of the remote sensing data file to obtain a 64-bit digest ciphertext. At the same time, the remote sensing data file is uploaded to the file storage address information in the S3 object storage service. The remote sensing data file metadata is organized and uploaded to the data chain. Then, a request for authentication is issued to the blockchain service. This request contains the metadata of the remote sensing data file. If the request is successful, the blockchain service automatically generates a unique number for the block through the smart contract as the evidence number for the requested data. The requester stores the evidence number, completing the data authentication operation. At the same time, the blockchain (consortium chain) participants will receive the evidence number and add it to their own blocks. At the next consensus moment, their own block information will be broadcast to the entire data blockchain, achieving data consistency across the entire data blockchain. After completing the data rights authentication operation, the user or the data encoding and chain module sends the log data of this rights authentication operation to the blockchain service through the smart contract and uploads it to the operation audit chain for subsequent traceability operations.

[0033] (2) The data usage rights confirmation process is as follows: Figure 3As shown, the data rights confirmation unit sends a query request to the blockchain service based on the remote sensing data file's evidence number. The blockchain service sends the evidence number to the smart contract in the blockchain, which intelligently synthesizes the data query operation, queries the block from the data chain based on the evidence number, and returns the query result to the data rights confirmation unit. If the corresponding block is found, the query result returned is the metadata of the remote sensing data file, including the MD5 digest ciphertext of the remote sensing data file, data file size, acquisition time, acquisition location, file download address, and other information. The data rights confirmation unit then checks the authorization data of the current data requester and the queried block, namely the ownership and usage rights of the data block, to determine whether the user's data access rights are qualified. If the permissions do not match, the test fails, and the user is notified that the file rights confirmation has failed. If the data access rights match and the check passes, the rights confirmation service will then complete the download of the data file from the S3 server based on the file download address. The downloaded file will first be stored in a temporary directory on the local server. The MD5 value of the remote sensing data file will then be calculated, and the hash value of the file (i.e., the calculated MD5 value) will be compared with the MD5 summary information in the metadata returned by the data chain. If the two MD5 values ​​are consistent, it means that the remote sensing data file is complete and secure, thus completing the data usage rights confirmation operation. At this time, the user can download the file normally for viewing or use. If the two MD5 values ​​are inconsistent, the user will be prompted that the file rights confirmation failed. After the data usage rights confirmation operation is completed, the log data of this operation will be sent to the blockchain service, and the operation record will be uploaded to the operation audit chain through the smart contract for subsequent traceability operations.

[0034] Step 5: Data traceability and transfer. Blockchain technology enables the traceability and transfer of remote sensing data. Any access, use, or transfer of data is recorded on the blockchain, ensuring data traceability and security. Furthermore, smart contract technology enables automated authorization and transfer of data, reducing transaction costs and improving data utilization efficiency.

[0035] In this embodiment of the present invention, during the data ownership verification process for remote sensing data files, log information for file upload and download operations is stored in the operation audit chain. Tracking the use of any data file allows detailed queries of access records for the data file through the data supervision platform. All access records are distributedly stored in the operation audit chain, making them difficult to tamper with, thereby ensuring the security of the access information log data.

[0036] Step 6: Establish a data supervision platform to monitor and manage remote sensing data on the blockchain in real time. The platform can monitor data access, use, and circulation in real time, detect and address abnormal behavior in a timely manner, and ensure data security and compliance.

[0037] Except for the technical features described in the specification, all other technical features are known to those skilled in the art. The present invention omits descriptions of well-known components and well-known technologies to avoid redundancy and unnecessary limitation of the present invention. The implementation methods described in the above embodiments do not represent all implementation methods consistent with the present application. Based on the technical solution of the present invention, various modifications or variations that can be made by those skilled in the art without creative effort are still within the scope of protection of the present invention.

Claims

1. A multi-satellite multi-user data rights confirmation method based on blockchain in remote sensing intelligent scenarios, characterized in that: The steps include: Step 1: Build a blockchain network of the organizational alliance. According to the user's organization and the organization to which the constellation belongs, jointly form an organizational alliance, and create a blockchain network for different businesses within the organizational alliance. Each blockchain network contains two independent sub-blockchains: a data chain and an operation audit chain. The data chain stores metadata of remote sensing data files, and the operation audit chain stores data rights confirmation and operation log information; Step 2: The data acquisition interface collects the required remote sensing data and performs preprocessing according to the current business needs; Step 3: The data encoding and uplink module encodes the preprocessed remote sensing data file to generate a summary ciphertext, uploads the remote sensing data file to the S3 object storage server and obtains the file storage address, packages the metadata of the remote sensing data file into blocks, and uploads them to the data chain of the blockchain network of the corresponding business in chronological order, and uploads the operation log of the uploaded block to the operation audit chain; the metadata includes the summary ciphertext of the remote sensing data file, the acquisition time, the acquisition location, the sensor type and the file storage address; Step 4: The blockchain service confirms and authorizes the data ownership of each block uploaded to the data chain, assigns a unique ownership identifier to each block, and returns it to the user as a proof number. The ownership and use rights of the block data are clarified according to the data use agreement, and the validity period of the block proof number is set; The user uploads the log of the authentication operation to the operation audit chain; When a user requests a remote sensing data file, the local server first queries whether the file has an associated evidence number. If so, the user identity and evidence number are sent to the data rights confirmation unit. The data rights confirmation unit sends a query request to the blockchain service and performs a data usage rights confirmation operation on the returned query results. After completing the data usage rights confirmation operation, the corresponding operation log is uploaded to the operation audit chain. Step 5: Upload any logs of access, use or transfer of remote sensing data files to the operation audit chain; Step 6: Establish a data supervision platform to monitor and manage remote sensing data files on the blockchain network of the organization alliance in real time, monitor the access, use and circulation of data in real time, and promptly detect and handle abnormal behavior.

2. The method according to claim 1, characterized in that In step 4, the data usage agreement defines the storage format of the data blocks in the data chain, wherein the defined information fields include the purpose, scope, duration, data owner and security measures of the data.

3. The method according to claim 1, characterized in that In step 3, when the user logs in to the remote sensing data file access system, a permission check will be performed to check and filter the data directory range that the user can access. Only after passing the permission check can the user upload and view the data.

4. The method according to claim 1, characterized in that: In the step 3, after the data encoding and chain module uploads the block to the data chain, it sends a request for data authentication to the blockchain network, which contains the metadata of the remote sensing data file. If the request is successful, the blockchain service generates a certificate number and returns it to the data encoding and chain module. The data encoding and chain module associates the certificate number with the directory information of the remote sensing data file and saves it.

5. The method according to claim 1 or 4, characterized in that: In the step 4, when the validity period of the evidence number associated with the remote sensing data file expires, the data encoding and chain module re-sends a request for data ownership authentication to the blockchain service to perform data ownership authentication.

6. The method according to claim 1, characterized in that In the step 4, the data confirmation unit sends a query request to the blockchain service according to the evidence number, queries the block from the data chain, and returns the metadata of the remote sensing data file when the corresponding block is queried; the data confirmation unit performs data usage confirmation operations: checks whether the current user's data access rights match the data ownership and usage rights of the corresponding block. If they match, the remote sensing data file is downloaded from the S3 object storage server to the temporary directory of the local server according to the file download address in the metadata. If they do not match, the user is prompted that the file confirmation fails; the summary ciphertext of the remote sensing data file downloaded to the temporary directory is calculated, and compared with the summary ciphertext in the metadata. If the two are inconsistent, the user is prompted that the file confirmation fails, otherwise it means that the file is complete and safe, and the user can download the file normally for viewing or use.

Images