Multi-satellite multi-user data right method based on blockchain in remote sensing intelligent scene

Abstract

The application is a multi-satellite multi-user data right confirmation method based on a blockchain in a remote sensing intelligent scene, and belongs to the technical field of remote sensing. The method comprises the following steps: creating a blockchain alliance according to the identity and organization information of data providers and users, and establishing different alliance chains for different businesses; the data providers store metadata into a data chain and obtain a storage number; a data right confirmation unit sends the identity of a data requester and a data storage number to an alliance chain, obtains metadata and performs a data right confirmation operation; a data user can view and operate a file with a successful right confirmation; any access, use or transfer operation record of remote sensing data is uploaded to an operation audit chain for traceability operation; and a data supervision platform is set up for real-time monitoring and management. The application improves the flexibility and configurability of data right confirmation business, and solves the problems of single business data category, poor user organization extension and high system development cost in the prior art.

Description

Technical Field

[0001] This invention relates to the fields of remote sensing technology, artificial intelligence, and blockchain technology, specifically to a blockchain-based method for confirming the ownership of multi-satellite, multi-user data in remote sensing intelligent application scenarios. Background Technology

[0002] With the rapid development of remote sensing technology, the amount of remote sensing data acquired by multiple satellites and sensors is becoming increasingly abundant, providing a massive data source for various intelligent applications. However, in the process of remote sensing data acquisition, transmission, processing, and application, the issue of data ownership is becoming increasingly prominent, becoming a significant factor restricting the realization of the value of remote sensing data. Data ownership confirmation is the process of determining the rights attributes of data, mainly including identifying the data rights holder and determining the content of the rights, i.e., what rights are enjoyed. Currently, remote sensing data ownership confirmation mainly relies on traditional legal systems, but in the complex environment of multiple satellites and multiple users, data ownership confirmation, traceability, and circulation face many security challenges. Remote sensing data ownership confirmation is conducive to promoting data circulation and solving the problem of data silos.

[0003] Blockchain technology, with its decentralized, immutable, and traceable characteristics, offers a new approach to solving the problem of remote sensing data ownership. While numerous blockchain-based solutions for data ownership exist, practical applications still face challenges such as limited data categories, poor scalability for user organizations, and high system development costs. Summary of the Invention

[0004] To address the aforementioned issues, this invention provides a blockchain-based method for confirming ownership of multi-satellite, multi-user remote sensing data in intelligent remote sensing scenarios. In such scenarios, blockchain technology is used to achieve ownership confirmation, traceability, and secure transfer of multi-satellite, multi-user remote sensing data.

[0005] The present invention provides a blockchain-based method for confirming ownership of multi-satellite, multi-user data in a remote sensing intelligent scenario, comprising the following steps:

[0006] Step 1: Construct a blockchain network for the organizational alliance. In a multi-star, multi-user scenario, an organizational alliance is formed based on the organizations to which users belong and the organizations to which constellations belong. Multiple blockchain networks are created within the organizational alliance to isolate data from different business operations. A separate blockchain network is created for each business operation within the organizational alliance. Each blockchain network contains two independent sub-blockchains: a data chain and an operation audit chain. The data chain stores metadata for remote sensing data files, while the operation audit chain stores data ownership confirmation and operation log information.

[0007] Step 2: The data acquisition interface collects the required remote sensing data and performs preprocessing based on the current business needs;

[0008] Step 3, Data Encoding and On-Chain Module: The preprocessed remote sensing data file is encoded to generate a digest ciphertext. The preprocessed raw remote sensing data file is then uploaded to the S3 object storage server to obtain the file storage address. Using blockchain technology, metadata such as the digest ciphertext, acquisition time, acquisition location, sensor type, and file storage address of the remote sensing data file are packaged into blocks and uploaded to the data chain of the corresponding business's blockchain network in chronological order. The operation log of uploading the blocks is also uploaded to the operation audit chain.

[0009] After the data encoding and on-chain module uploads the block to the data chain, it sends a request for confirmation and authentication to the blockchain network. This request contains the metadata of the remote sensing data file. If the request is successful, the blockchain service generates a certificate number and returns it to the data encoding and on-chain module. The data encoding and on-chain module associates and saves the certificate number with the storage address of the remote sensing data file.

[0010] Step 4: The blockchain service performs data ownership confirmation and authorization: Each block uploaded to the data chain is assigned a unique ownership identifier, which is returned to the user as a notarization code. The ownership and usage rights of the block data are clarified according to the data usage agreement, and the validity period of the block notarization number is set. The user uploads the log of the ownership confirmation and authentication operation to the operation audit chain.

[0011] When a user requests a remote sensing data file, the local server first checks if the file has an associated certificate number. If so, it sends the user's identity and the data's certificate number to the data ownership confirmation unit. The data ownership confirmation unit then sends a query request to the blockchain service and performs data usage ownership confirmation operations on the returned query results. After completing the data usage ownership confirmation operations, the corresponding operation log is uploaded to the operation audit chain.

[0012] Step 5: Upload any records of access, use, or transfer of remote sensing data to the operation audit chain to achieve traceability and transfer of remote sensing data, ensuring data traceability and security.

[0013] Step 6: Establish a data supervision platform to monitor and manage remote sensing data on the blockchain network of the organization alliance in real time, monitor the access, use and flow of data in real time, detect and handle abnormal behavior in a timely manner, and ensure the security and compliance of data.

[0014] Compared with the prior art, the advantages and positive effects of the present invention are as follows:

[0015] (1) The method of the present invention is designed for multi-star and multi-user scenarios. By creating multiple consortium chains through multiple organizations and consortium institutions, it can realize the confirmation of rights and authorized access of different business data by users of different organizations and institutions, which improves the flexibility and configurability of data confirmation business. In addition, the business data categories are diverse in actual applications. The method of the present invention realizes blockchain storage and data confirmation for different businesses, which solves the existing problems such as single business data categories and poor scalability of user organizations.

[0016] (2) The method of the present invention provides a highly encapsulated unified interface to enable existing data business systems to quickly and conveniently integrate data ownership services, efficiently complete the data on-chain process, reduce development and implementation costs, and solve the problem of high development costs of existing systems.

[0017] (3) The method of the present invention can effectively monitor and manage the storage of remote sensing data on the blockchain in real time through the data monitoring and management platform established, so as to ensure the security and compliance of the data. Attached Figure Description

[0018] Figure 1 This is an overall architecture diagram of the blockchain-based multi-satellite, multi-user data ownership confirmation method in a remote sensing intelligent application scenario according to an embodiment of the present invention;

[0019] Figure 2 This is a flowchart illustrating the upload and ownership confirmation process for remote sensing data files according to an embodiment of the present invention.

[0020] Figure 3 This is a flowchart illustrating the download and ownership confirmation process for remote sensing data files according to an embodiment of the present invention. Detailed Implementation

[0021] To make the objectives, technical solutions, and advantages of this invention clearer, the invention will be further described in detail below with reference to the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are merely illustrative of the invention and do not limit the scope of protection of the invention.

[0022] like Figure 1As shown in the embodiment of the present invention, a multi-satellite, multi-user data ownership confirmation method based on blockchain in a remote sensing intelligent application scenario includes three steps: creating an organizational consortium blockchain, uploading and downloading ownership confirmation data, and tracking data usage. Specifically, in a multi-satellite, multi-user scenario, an organizational consortium is established based on the information of the respective organizations, and a consortium blockchain is created. Users upload the MD5 digest information and file description information of remote sensing data files or AI model files within their respective permission scope to the blockchain. Utilizing the immutability of the blockchain, it is extremely difficult to tamper with the metadata information of remote sensing data files or AI model files. Utilizing S3 distributed storage, the security of the files is greatly improved. Only members of the consortium organization can write blocks to the blockchain; other nodes can only read blocks. The implementation of each step is described below.

[0023] Step 1: Create an organizational alliance and build its blockchain network. This involves grouping the organizational information of data providers and users into an organizational alliance and creating a consortium blockchain network.

[0024] In multi-satellite, multi-user scenarios, an organizational alliance is formed based on the organizations to which users belong and the organizations to which the constellations belong. This embodiment of the invention, based on the organizational information of all current users and satellite information, selects organizations that provide remote sensing data and those that use the data to create an alliance organization according to business needs. After the alliance is created, two blockchain sub-chains, a data chain and an operation audit chain, are created to form the entire blockchain network infrastructure. The data chain stores the metadata of the remote sensing data files. The operation audit chain stores data ownership and operation log information for data traceability.

[0025] like Figure 1 As shown, Organization A and Organization B belong to the same organizational consortium. For a specific category of business data, a blockchain network, or consortium blockchain, is built within this consortium. Any number of organizations within the consortium can create one consortium blockchain, and multiple consortium blockchains can be created within a single consortium. A consortium blockchain consists of a data chain and an operational audit chain. The data chain and the operational audit chain are two independent sub-blockchains, and their data is physically isolated from each other. Different consortium blockchain networks are created for different business operations within the organizational consortium. The data in different blockchain networks is isolated from each other and cannot be shared.

[0026] Step 2: The data acquisition interface collects remote sensing data for the blockchain network to be built and preprocesses the collected data. To meet current business needs, multi-satellite, multi-sensor remote sensing data is acquired, and computer vision and image processing technologies are used for preprocessing. Preprocessing includes noise removal, radiometric correction, and geometric correction to improve the quality and accuracy of the remote sensing data.

[0027] Step 3: Data Encoding and On-Chain Module Execution: The preprocessed remote sensing data files are encoded to generate a unique digest ciphertext, such as by calculating the hash value of the data. The original preprocessed remote sensing data files are uploaded to the S3 object storage server, and the file address of the object storage is obtained. Using blockchain technology, metadata information such as the remote sensing data's identifier, acquisition time, acquisition location, sensor type, and storage address are packaged into blocks and uploaded to the data chain of the corresponding business's blockchain network in chronological order to ensure the immutability and traceability of the data. The operation log information of the uploaded blocks is stored in the operation audit chain.

[0028] like Figure 1 As shown in the embodiment of the present invention, the MD5 value of the remote sensing data file generated by organization A or B encoding is used as the digest ciphertext. The metadata information such as the digest ciphertext, acquisition time, acquisition location, sensor type and file storage address are packaged into a block, uploaded to the data chain through a smart contract, and the certificate number is received. Then, the certificate number is associated with the directory information of the remote sensing data file and saved.

[0029] Step 4: The blockchain service performs data ownership verification and authorization, assigning a unique ownership identifier to each uploaded data block as a data storage number, which is returned to the user. The ownership and usage rights of the data blocks are clarified according to the data usage agreement, and the validity period of the block storage number is set. The data usage agreement is pre-stored in the blockchain service. This agreement defines the data storage format of the entire data chain, including fields such as the purpose, scope, duration, data owner, and security measures to ensure the legal use of the data.

[0030] In this embodiment of the invention, a unique hash value is generated for each uploaded sub-block on the data block sub-chain. This hash value is used to identify the uniqueness of the block and to ensure the immutability of the data. The hash value is used as the evidence number.

[0031] Users logging into the remote sensing data file access system can see the directory of remote sensing data files within the scope of their current organization's permissions. When a user needs to view a remote sensing data file, the local system checks for associated certificate number information based on the file directory information selected by the user. If found, the system sends the user's identity identifier and certificate number to the data ownership confirmation unit. The data ownership confirmation unit then sends a query request to the blockchain service based on the certificate number information to check for results. If a result is found, it indicates that the remote sensing data file has completed the data ownership confirmation process. If the return result is empty, it indicates that the certificate number has expired and the data ownership confirmation authentication process needs to be repeated. During the data ownership confirmation process, the certificate number is set with an expiration date according to the data usage agreement. When data access exceeds the expiration date, the certificate number becomes invalid, and the data ownership confirmation authentication process needs to be repeated.

[0032] (1) The authentication process for data upload and data ownership confirmation is as follows: Figure 2 As shown, when a user logs into the data access system, a permission check is performed. The system checks and filters the range of data directories the user can access. Only after passing the permission check can the user upload and access data. When a user uploads remote sensing data, the system calculates the hash value of the remote sensing data file locally, i.e., performs an MD5 operation on the byte stream of the remote sensing data file to obtain a 64-bit digest ciphertext. Simultaneously, the system uploads the remote sensing data file to the S3 object storage service, stores the file's storage address information, organizes the metadata of the remote sensing data file, and uploads it to the data chain. Then, it sends a request for ownership verification to the blockchain service. This request includes the metadata of the remote sensing data file. If the request is successful, the blockchain service automatically generates a unique number for the block through a smart contract as the data storage number for this request. The requesting party stores the storage number to complete the data ownership verification operation. At the same time, blockchain (consortium blockchain) participants receive the storage number and add it to their own blocks. At the next consensus moment, they broadcast their block information to the entire data blockchain, achieving data consistency across the entire data blockchain. After the data ownership verification operation is completed, the user or the data encoding and on-chain module will send the log data of this ownership verification operation to the blockchain service through a smart contract and upload it to the operation audit chain for subsequent traceability operations.

[0033] (2) The process for confirming the rights to use data is as follows: Figure 3As shown, the data ownership confirmation unit sends a query request to the blockchain service based on the certificate number of the remote sensing data file. The blockchain service sends the certificate number to the smart contract in the blockchain, and the smart contract completes the data query operation. Based on the certificate number, it queries the data chain for a block and returns the query result to the data ownership confirmation unit. If a corresponding block is found, the returned query result is the metadata of the remote sensing data file, including the MD5 digest of the remote sensing data file, the data file size, the acquisition time, the acquisition location, and the file download address. The data ownership confirmation unit then checks the authorization data between the current data requester and the queried block, i.e., the ownership and usage rights of the data block, to determine if the user's data access permissions are valid. If the permissions do not match, the check fails, and the user is prompted that the file ownership confirmation has failed. If the data access permissions match and the check passes, the rights confirmation service downloads the data file from the S3 server according to the file download address. The downloaded file is first stored in a temporary directory on the local server. Then, the MD5 value of the remote sensing data file is calculated, and the hash value of the file (i.e., the calculated MD5 value) is compared with the MD5 digest information in the metadata returned by the data chain. If the two MD5 values ​​match, it means that the remote sensing data file is complete and secure, thus completing the rights confirmation operation for data use. At this time, the user can download the file normally for viewing or use. If the two MD5 values ​​do not match, the user is prompted that the file rights confirmation has failed. After completing the rights confirmation operation for data use, the log data of this operation is sent to the blockchain service, and the operation record is uploaded to the operation audit chain through a smart contract for subsequent traceability operations.

[0034] Step 5: Data Traceability and Flow. Blockchain technology enables the traceability and flow of remote sensing data. Any access, use, or flow of data will be recorded on the blockchain, ensuring data traceability and security. Simultaneously, based on smart contract technology, automatic data authorization and flow are achieved, reducing transaction costs and improving data utilization efficiency.

[0035] In this embodiment of the invention, during the data ownership confirmation process for remote sensing data files, log information of file upload or download operations has been stored in the operation audit chain. The use of any data file can be tracked through a data monitoring platform, allowing for detailed queries of access records. All access records are stored in a distributed manner within the operation audit chain, making them difficult to tamper with and thus ensuring the security of the access log data.

[0036] Step 6: Establish a data supervision platform to monitor and manage remote sensing data on the data blockchain in real time. The platform can monitor data access, usage, and flow in real time, promptly detect and handle abnormal behavior, and ensure data security and compliance.

[0037] Except for the technical features described in the specification, all other technologies are known to those skilled in the art. Descriptions of well-known components and technologies are omitted in this invention to avoid redundancy and unnecessary limitation. The embodiments described above do not represent all embodiments consistent with this application. Various modifications or variations that can be made by those skilled in the art without creative effort based on the technical solutions of this invention are still within the protection scope of this invention.

Claims

1. A blockchain-based method for confirming ownership of multi-satellite, multi-user data in a remote sensing intelligent scenario, characterized in that... Includes the following steps: Step 1: Construct a blockchain network for the organizational alliance; An organizational alliance is jointly formed based on the user's organization and the organization to which the constellation belongs. A separate blockchain network is created for different business operations within the alliance. Each blockchain network contains two independent sub-blockchains: a data chain and an operation audit chain. The data chain stores metadata for remote sensing data files, while the operation audit chain stores data ownership confirmation and operation log information. The data in the data chain and the operation audit chain are physically isolated from each other. Step 2: The data acquisition interface collects the required remote sensing data and performs preprocessing based on the current business needs; Step 3: The data encoding and on-chain module encodes the preprocessed remote sensing data file to generate a digest ciphertext, uploads the remote sensing data file to the S3 object storage server and obtains the file storage address, packages the metadata of the remote sensing data file into blocks, and uploads them to the data chain of the blockchain network of the corresponding business in chronological order. The operation log of uploading the blocks is uploaded to the operation audit chain. The metadata includes the digest ciphertext of the remote sensing data file, the acquisition time, the acquisition location, the sensor type, and the file storage address. Step 4: The blockchain service confirms and authorizes the data ownership of each block uploaded to the data chain, assigns a unique ownership identifier to each block as a certificate number and returns it to the user, clarifies the ownership and usage rights of the block data according to the data usage agreement, and sets the validity period of the block certificate number. Users upload the logs of the rights confirmation and authentication operation to the operation audit chain; When a user requests a remote sensing data file, the local server first checks if the file has an associated certificate number. If so, it sends the user's identity and certificate number to the data ownership confirmation unit. The data ownership confirmation unit then sends a query request to the blockchain service and performs data usage ownership confirmation operations on the returned query results. After completing the data usage ownership confirmation operations, the corresponding operation log is uploaded to the operation audit chain. When the validity period of the certificate number associated with the remote sensing data file expires, the data encoding and on-chain module resends a data ownership confirmation and authentication request to the blockchain service to perform data ownership confirmation and authentication. The data ownership confirmation unit sends a query request to the blockchain service based on the evidence storage number, queries the data chain for blocks, and returns the metadata of the remote sensing data file when the corresponding block is found. The data ownership confirmation unit performs data usage ownership confirmation operations: it checks whether the current user's data access permissions match the data ownership and usage rights of the corresponding block. If they match, it downloads the remote sensing data file from the S3 object storage server to the temporary directory of the local server according to the file download address in the metadata. If they do not match, it prompts the user that the file ownership confirmation has failed. It calculates the digest ciphertext of the remote sensing data file downloaded to the temporary directory and compares it with the digest ciphertext in the metadata. If the two do not match, it prompts the user that the file ownership confirmation has failed; otherwise, it means that the file is complete and secure, and the user can download the file normally for viewing or use. Step 5: Upload logs of any access, use, or transfer of remote sensing data files to the operation audit chain; Step 6: Establish a data supervision platform to monitor and manage remote sensing data files on the blockchain network of the organization alliance in real time, monitor the access, use and flow of data in real time, and promptly detect and handle abnormal behavior.

2. The method according to claim 1, characterized in that, In step 4, the data usage protocol defines the storage format of data blocks in the data chain, and the defined information fields include the purpose, scope, duration, data owner, and security measures of the data.

3. The method according to claim 1, characterized in that, In step 3, when a user logs into the remote sensing data file access system, a permission check will be performed to check and filter the range of data directories that the user can access. Only after passing the permission check can the user upload and view data.

4. The method according to claim 1, characterized in that, In step 3, after the data encoding and on-chain module uploads the block to the data chain, it sends a request for data ownership verification to the blockchain network. This request contains the metadata of the remote sensing data file. If the request is successful, the blockchain service generates a certificate number and returns it to the data encoding and on-chain module. The data encoding and on-chain module associates and saves the certificate number with the directory information of the remote sensing data file.

Images