Block chain-based power grid IT asset data management method and device, computer equipment, computer readable storage medium and computer program product

Abstract

The invention relates to a power grid IT asset data management method and device based on a block chain, computer equipment, a computer readable storage medium and a computer program product. The method comprises the following steps: realizing extraction of IT asset data of a multi-service system based on a data governance platform, and based on ring signature generation, when the IT asset data is chained, a block chain platform responds to a data chaining request of the data governance platform and verifies the ring signature, and when the verification is passed, the block chain platform and the data governance platform are linked and the IT asset data is chained and stored. In the signature verification mode before uplink, data uplink is performed based on a block chain buckle between a block chain platform and a data governance platform, and a ring tag is generated through shorthand selection, so that user privacy can be protected, data can be prevented from being tampered, the efficiency of ring signature in the mode can be guaranteed, and implementation of ring signature verification in a power grid scene can be facilitated. And the data governance efficiency under mass asset data management is improved.

Description

Technical Field

[0001] The present application relates to the technical field of power grid IT asset data management, and in particular to a blockchain-based power grid IT asset data management method, device, computer equipment, computer-readable storage medium and computer program product. Background Art

[0002] The amount of power grid IT asset management data is large, and the security and reliability of asset data is very important to ensure the safe operation of the power grid. Therefore, in this scenario, it is necessary to take into account both the management efficiency and reliability of power grid IT asset data. Summary of the invention

[0003] Based on this, it is necessary to provide a blockchain-based power grid IT asset data management method, device, computer equipment, computer-readable storage medium and computer program product that can take into account both power grid IT asset data management efficiency and data reliability in response to the above-mentioned technical problems.

[0004] In a first aspect, the present application provides a blockchain-based power grid IT asset data management method, which is applied to a power grid blockchain architecture, wherein the power grid blockchain architecture includes a business system, a data governance platform, and a blockchain platform, wherein the data governance platform communicates with the business system and the blockchain platform respectively, and the method includes:

[0005] The data governance platform extracts IT asset data of each business system connected to the data governance platform according to the system set time;

[0006] The data governance platform generates two ring signatures;

[0007] The blockchain platform verifies the ring signature in response to the data on-chain request from the data governance platform;

[0008] If the verification is successful, the blockchain platform and the data governance platform are linked, and the IT asset data is stored on the chain.

[0009] In one embodiment, the step of generating two ring signatures by the data governance platform includes:

[0010] Randomly select an integer t and calculate G'=tG; t∈ R [1, q-1], G is the base point on the elliptic curve over the finite field, and q is a prime number that meets the security requirements;

[0011] Randomly select an integer k and calculate kG=Ts=(xs,ys), k∈ R [1,q-1];

[0012] Randomly generate a sequence r i ∈R [1, q-1], i=s+1, s+2, L, n, 1, L, s-1;

[0013] Calculate C i =H(L, m, x i-1 , G'), (x i ,y i )=T i =r i G+c i pk i +G', where i = s+1, s+2, L, n, 1, L, s-1, and c1 = H (L, m, x n , G'), p and H are public parameters;

[0014] Calculate c s =H(L,m,x s-1 , G'), r s =k-dk s c s -t (modq);

[0015] Generate the first ring signature α1=(pk1,pk2,L,pk n , c1, r1, c2, L, G') and the second ring signature α2 = (pk1', pk2', L, pk n ', c1', r1', c2', L, G').

[0016] In one embodiment, the step of verifying the ring signature includes:

[0017] Extract the ring signature from the data upload request and calculate (x i ,y i ) and c i +1; where (x i ,y i )=T i =r i G+c i pk i +G',c i +1=H(L,m,x i , G'), i=1,2,L,n;

[0018] If c n+1 =c1, then the ring signature verification is secure;

[0019] Extracting element G' from the first ring signature and the second ring signature;

[0020] If the G' extracted from the two ring signatures is the same, it is determined that the two ring signatures are generated by the same signer and the verification succeeds.

[0021] In one embodiment, the method further comprises:

[0022] If the verification fails, the blockchain platform and the data governance platform are prohibited from linking.

[0023] In one embodiment, the method further comprises:

[0024] The business system receives IT asset data, which is IT asset data obtained by a user terminal in response to a code scanning operation for IT equipment. The IT asset data includes equipment classification, equipment name, asset status, brand, model, supplier, equipment location, using organization, using department, responsible person, and user.

[0025] In one embodiment, the method further comprises:

[0026] The blockchain platform obtains user login information through the data governance platform in response to the IT asset data adjustment operation;

[0027] If it is detected that the user login information does not match the using organization, using department, user and responsible person in the IT asset data, modification of the IT asset data on the chain is prohibited.

[0028] In a second aspect, a blockchain-based power grid IT asset data management device is provided, which is applied to a power grid blockchain architecture, wherein the power grid blockchain architecture includes a business system, a data governance platform, and a blockchain platform, wherein the data governance platform communicates with the business system and the blockchain platform respectively, and the device includes:

[0029] A data extraction module, used to extract IT asset data of each business system connected to the data governance platform according to the system set time;

[0030] Ring signature generation module, used to generate two ring signatures;

[0031] A verification module, used to verify the ring signature in response to the data on-chain request of the data governance platform;

[0032] The on-chain execution module is used to link the blockchain platform and the data governance platform if the verification is passed, and store the IT asset data on the chain.

[0033] In a third aspect, a computer device is provided, including a memory and a processor, wherein the memory stores a computer program, and the processor implements the steps of the above-mentioned blockchain-based power grid IT asset data management method when executing the computer program.

[0034] In a fourth aspect, a computer-readable storage medium is provided, on which a computer program is stored, and when the computer program is executed by a processor, the steps of the above-mentioned blockchain-based power grid IT asset data management method are implemented.

[0035] In a fifth aspect, a computer program product is provided, comprising a computer program, which, when executed by a processor, implements the steps of the above-mentioned blockchain-based power grid IT asset data management method.

[0036] The above-mentioned blockchain-based power grid IT asset data management method, device, computer equipment, computer-readable storage medium and computer program product have at least the following beneficial effects:

[0037] Based on the data governance platform, the IT asset data of each business system connected to the data governance platform is extracted according to the system set time, and the IT asset data of multiple business systems is extracted. Based on the ring signature generation, when the IT asset data is uploaded to the chain, the blockchain platform responds to the data upload request of the data governance platform and verifies the ring signature. When the verification is passed, the blockchain platform and the data governance platform are linked to store the IT asset data on the chain. In this signature verification method before the chain is uploaded, the data is uploaded to the chain based on the blockchain buckle between the blockchain platform and the data governance platform. The ring label is generated through the shorthand selection, which can protect user privacy and prevent data from being tampered with. In addition, the efficiency of the ring signature in this method can also be guaranteed, which is conducive to achieving data governance efficiency under the management of massive asset data in the power grid scenario. BRIEF DESCRIPTION OF THE DRAWINGS

[0038] In order to more clearly illustrate the technical solutions in the embodiments of the present application or related technologies, the drawings required for use in the embodiments of the present application or related technical descriptions will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present application. For ordinary technicians in this field, other related drawings can be obtained based on these drawings without paying creative work.

[0039] Figure 1 An application environment diagram of a power grid IT asset data management method based on blockchain in one embodiment;

[0040] Figure 2 A flowchart of a method for managing power grid IT asset data based on blockchain in one embodiment;

[0041] Figure 3 A flowchart of steps for a data governance platform to generate two ring signatures in one embodiment;

[0042] Figure 4 A schematic diagram of a flow chart of steps for verifying a ring signature in one embodiment;

[0043] Figure 5 An internal structure diagram of a computer device in one embodiment

[0044] Figure 6 FIG. 4 is a diagram showing the internal structure of a computer device in another embodiment. DETAILED DESCRIPTION

[0045] In order to make the purpose, technical solution and advantages of the present application more clearly understood, the present application is further described in detail below in conjunction with the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are only used to explain the present application and are not used to limit the present application.

[0046] During the entire cycle of the power grid IT asset data, it will be entered into the asset management system, updated by the IT asset operation and maintenance management mobile system, and maintained by the financial system. The data of the relevant business systems (asset management system, IT asset operation and maintenance management mobile system, and financial system) will be extracted and integrated through the data governance platform to extract the power grid IT asset data. The extracted data of the data governance platform will then be uploaded to the chain through the integrated blockchain to ensure that the data cannot be tampered with.

[0047] In the early stage of data governance platform construction, it is necessary to extract the power grid IT asset data from the asset management system, financial system, and IT asset operation and maintenance management mobile system. The asset management system and the financial system will push the IT asset data involving power grid IT assets to the data governance platform through the data operation system. The data governance platform will upload all data table structures and data batches to the blockchain system.

[0048] However, in the application scenario of massive data in power grid, it is necessary to provide a method suitable for massive data management of power grid.

[0049] The blockchain-based power grid IT asset data management method provided in the embodiment of the present application can be applied to Figure 1 In the application environment shown. Among them, the business system 102 communicates with the data governance platform 104 through the network. The data storage system can store the IT asset data extracted by the data governance platform 104. The data storage system can be integrated on the data governance platform 104, and the data governance platform 104 can be a cloud server or other network server. Among them, the business system 102 can be, but is not limited to, various personal computers, servers, laptops, Internet of Things devices, etc.

[0050] In one embodiment, the present application provides a blockchain-based power grid IT asset data management method, which is applied to a power grid blockchain architecture. The power grid blockchain architecture includes a business system, a data governance platform, and a blockchain platform. The data governance platform communicates with the business system and the blockchain platform respectively. Figure 2 As shown, the method includes:

[0051] The data governance platform extracts IT asset data from each business system connected to the data governance platform at a system-set time. Among them, the data governance platform is a system that centrally manages and maintains IT asset data quality and IT asset data security. The data governance platform can automatically extract IT asset data from the business systems connected to it at a preset time (such as daily, weekly or monthly). The data governance platform can perform pre-processing steps such as data cleaning and formatting on the extracted data to ensure the accuracy and consistency of the data. In addition, the data governance platform may also have a data change monitoring function that can detect changes in IT assets in the business system in real time or regularly, and update the extracted data accordingly.

[0052] The data governance platform generates two ring signatures. Ring signatures allow a member to anonymously sign a message in a group while ensuring that the signature cannot be forged. The data governance platform generates two ring signatures for the IT asset data to be uploaded to the chain, which can be used for data integrity and source authentication respectively. When generating a ring signature, the data governance platform can select other blockchain nodes as members of the ring to ensure the anonymity and security of the signature.

[0053] The blockchain platform verifies the ring signature in response to the data on-chain request from the data governance platform. When the data governance platform is ready to upload IT asset data to the blockchain, it sends a data on-chain request to the blockchain platform, which can carry the previously generated ring signature. After receiving the request, the blockchain platform will first verify the validity of the ring signature.

[0054] The process of verifying the ring signature includes checking the format of the signature, verifying whether the signature is generated by the same member, and confirming that the data bound to the signature has not been tampered with during transmission, which is the key to ensuring the security and integrity of data on the chain.

[0055] If the verification is successful, the blockchain platform and the data governance platform will be linked, and the IT asset data will be stored on the chain. If the blockchain platform successfully verifies the validity of the ring signature, it will consider the data governance platform to be a trusted entity and establish a link with it. Subsequently, the blockchain platform will store the IT asset data on the chain, making it part of the blockchain, ensuring the data is tamper-proof and traceable.

[0056] The process of storing IT asset data on the chain can be to divide the data into small blocks (such as through sharding technology) to optimize storage efficiency and security, which is conducive to improving the efficiency of storing massive IT asset data on the chain in power grid scenarios.

[0057] Specifically, the IT asset data of each business system connected to the data governance platform is extracted based on the system set time, and the IT asset data of multiple business systems is extracted. Based on the ring signature generation, when the IT asset data is uploaded to the chain, the blockchain platform responds to the data upload request of the data governance platform and verifies the ring signature. When the verification is passed, the blockchain platform and the data governance platform are linked to store the IT asset data on the chain. In this signature verification method before the chain is uploaded, the data is uploaded to the chain based on the blockchain buckle between the blockchain platform and the data governance platform. The ring label is generated through the shorthand selection, which can protect user privacy and prevent data from being tampered with. In addition, the efficiency of the ring signature in this method can also be guaranteed, which is conducive to achieving data governance efficiency under the management of massive asset data in the power grid scenario.

[0058] In one embodiment, the data governance platform generates two ring signatures, such as Figure 3 As shown, including:

[0059] S301, randomly select an integer t and calculate G'=tG to create a base point transformation; t∈ R [1, q-1], G is the base point on the elliptic curve over the finite field, and q is a prime number that meets the security requirements.

[0060] t∈ R [1, q-1] means t is a random integer between 1 and q-1, and q is a prime number that meets security requirements. This range ensures the randomness and security of t.

[0061] G is a base point on the elliptic curve over a finite field: G is a fixed point on the elliptic curve and is used to generate a public key L and a private key pair.

[0062] S302, randomly select an integer k and calculate kG=Ts=(xs, ys), k∈ R [1, q-1].

[0063] k∈R[1,q-1] means k is a random integer between 1 and q-1. Ts=(xs,ys) means that k is multiplied by the base point G through the point multiplication operation on the elliptic curve to obtain a point Ts on the elliptic curve, which is used as a temporary public key. Therefore, a temporary public key kG is generated after step S302.

[0064] S303, randomly generate a sequence r i ∈ R [1, q-1], i=s+1, s+2, L, n, 1, L, s-1.

[0065] This sequence r iFor subsequent ring signature calculations, i traverses from s+1 to n, and then returns to 1 to s-1, n is the number of public keys, and s is the index of the current public key (i.e., Ts). ri∈R[1,q-1] represents each r i is a random integer between 1 and q-1.

[0066] S304, calculate C i =H(L, m, x i-1 , G'), (x i ,y i )=T i =r i G+c i pk i +G', where i = s+1, s+2, L, n, 1, L, s-1, and c1 = H (L, m, x n , G') to generate the challenge value c corresponding to each public key i , p and H are public parameters.

[0067] Among them, (x i ,y i )=T i =r i G +c i pk i +G' means that for each i (excluding s), calculate T i As a point on the elliptic curve, this point is based on r i 、c i , k i and a linear combination of G'. i =H(L, m, x i-1 , G') represents the challenge value c i It is calculated by a hash function H, and the input includes the public key list L, the message m, and the x coordinate x of the previous point. i-1 and the transformed base point G'. c1 is the challenge value at the beginning of the sequence, c i is the x-coordinate of the last point n Calculated.

[0068] S305, calculate c s =H(L,m,x s-1 , G'), r s =k-dk s c s -t (modq). For s (the index of the current public key), the challenge value c s is the x-coordinate of the previous point x s-1 Calculated.

[0069] S306, generate the first ring signature α1=(pk1, pk2, L, pk n , c1, r1, c2, L, G') and the second ring signature α2 = (pk1', pk2', L, pk n ', c1', r1', c2', L, G').

[0070] The two ring signatures contain a list of public keys (pk1, pk2, ..., pk n and pk1', pk2', ..., pk n '), challenge value sequence (c1, c2, ..., c n and c1', c2', ..., c n '), a part of a random sequence (r1, r2, ..., r n and r1', r2', ..., r n ') and the transformed base point G'. Therefore, when verifying the two ring signatures generated by this step, not only the security can be verified, but also whether they are generated by the same signer, which improves user privacy and prevents data tampering.

[0071] In one embodiment, Figure 4 As shown, the step of performing the ring signature verification includes:

[0072] S401, extract the ring signature from the data upload request and calculate (x i ,y i ) and c i +1; where (x i ,y i )=T i =r i G+c i pk i +G',c i+1 =H(L, m, x i , G'), i=1, 2, L, n.

[0073] Ring signatures usually contain a series of public keys, challenge values ​​(or hash values), random numbers, and points on the elliptic curve. By parsing the data upload request, the ring signature can be extracted. Calculate the point on the elliptic curve corresponding to each public key (x i ,y i ) and the next challenge value c i+1 Calculate c i+1 When using the hash function H, the input includes the public key list L, the message m, the x-coordinate xi of the current point, and the transformed base point G'. That is, c i+1 =H(L, m, x i , G').

[0074] S402, if c n+1 =c1, the ring signature verification is secure.

[0075] By checking the last challenge value c n+1 Is it equal to the first challenge value c1? If so, it means the ring is closed and the ring signature is considered valid.

[0076] S403: Extract an element G' from the first ring signature and the second ring signature.

[0077] S404: If G' extracted from the two ring signatures is the same, it is determined that the two ring signatures are generated by the same signer and the verification is successful.

[0078] Extract the element G' from the first ring signature and the second ring signature, and compare the G' extracted from the two ring signatures. If they are the same, it can be determined that the two ring signatures are generated by the same signer, because the generation of G' depends on the signer's private key (but the private key is not disclosed to protect user privacy). Through this verification process, the double verification of the signature validity and the signer can be guaranteed, improving the security of IT asset data storage.

[0079] In one embodiment, the blockchain-based power grid IT asset data management method further includes:

[0080] If the verification fails, the blockchain platform and the data governance platform are prohibited from linking.

[0081] When the verification fails, it indicates that there is a risk in the request to upload IT asset data to the chain. At this time, the blockchain platform and the data governance platform cannot be linked to avoid uploading unreliable data or data security issues caused by attacks from other devices.

[0082] In one embodiment, the blockchain-based power grid IT asset data management method further includes:

[0083] The business system receives IT asset data, which is IT asset data obtained by a user terminal in response to a code scanning operation for IT equipment. The IT asset data includes equipment classification, equipment name, asset status, brand, model, supplier, equipment location, using organization, using department, responsible person, and user.

[0084] A QR code or barcode can be attached to IT equipment, and the code carries IT asset data. On this basis, it supports scanning the code to enter the product serial number. The product serial number is unique. If it is scanned, the "IT asset data" carried by the QR code can be accessed.

[0085] In one embodiment, the blockchain-based power grid IT asset data management method further includes:

[0086] The blockchain platform obtains user login information through the data governance platform in response to the IT asset data adjustment operation;

[0087] If it is detected that the user login information does not match the using organization, using department, user and responsible person in the IT asset data, modification of the IT asset data on the chain is prohibited.

[0088] After the asset information is stored on the chain, when the IT asset data is subsequently modified or deleted, it can be determined whether the user is qualified to adjust the IT asset data based on whether the logged-in user matches the responsible person, user, etc. If they do not match, they are not allowed to modify or delete the IT asset data.

[0089] In one embodiment, if an early warning is found to be necessary based on the comparison of IT asset data on the chain, the early warning information is sent to the corresponding "responsible person" and "user" to ensure that the relevant technical personnel are informed of the news in the first place and arrange subsequent data security work.

[0090] In one embodiment, the IT asset operation and maintenance management mobile application system mobilizes the data governance platform interface to synchronize newly added IT asset data before saving the IT asset data to the database.

[0091] It should be understood that, although the various steps in the flowcharts involved in the above-mentioned embodiments are displayed in sequence according to the indication of the arrows, these steps are not necessarily executed in sequence according to the order indicated by the arrows. Unless there is a clear explanation in this article, the execution of these steps does not have a strict order restriction, and these steps can be executed in other orders. Moreover, at least a part of the steps in the flowcharts involved in the above-mentioned embodiments can include multiple steps or multiple stages, and these steps or stages are not necessarily executed at the same time, but can be executed at different times, and the execution order of these steps or stages is not necessarily to be carried out in sequence, but can be executed in turn or alternately with other steps or at least a part of the steps or stages in other steps.

[0092] Based on the same inventive concept, the embodiment of the present application also provides a blockchain-based power grid IT asset data management device for implementing the blockchain-based power grid IT asset data management method involved above. The implementation scheme for solving the problem provided by the device is similar to the implementation scheme recorded in the above method, so the specific limitations in one or more blockchain-based power grid IT asset data management device embodiments provided below can refer to the limitations of the blockchain-based power grid IT asset data management method above, and will not be repeated here.

[0093] In an exemplary embodiment, a blockchain architecture applied to a power grid is provided, wherein the power grid blockchain architecture includes a business system, a data governance platform, and a blockchain platform, wherein the data governance platform communicates with the business system and the blockchain platform respectively, and the device includes:

[0094] A data extraction module, used to extract IT asset data of each business system connected to the data governance platform according to the system set time;

[0095] Ring signature generation module, used to generate two ring signatures;

[0096] A verification module, used to verify the ring signature in response to the data on-chain request of the data governance platform;

[0097] The on-chain execution module is used to link the blockchain platform and the data governance platform if the verification is passed, and store the IT asset data on the chain.

[0098] Each module in the above-mentioned blockchain-based power grid IT asset data management device can be implemented in whole or in part by software, hardware, and a combination thereof. Each of the above-mentioned modules can be embedded in or independent of the processor in the computer device in the form of hardware, or can be stored in the memory in the computer device in the form of software, so that the processor can call and execute the operations corresponding to each of the above modules. Other units or modules may also be included to perform other steps in the above-mentioned method embodiment, which will not be repeated here.

[0099] In an exemplary embodiment, a computer device is provided. The computer device may be a server, and its internal structure diagram may be as shown in FIG. Figure 5 As shown. The computer device includes a processor, a memory, an input / output interface (Input / Output, referred to as I / O) and a communication interface. The processor, the memory and the input / output interface are connected through a system bus, and the communication interface is connected to the system bus through the input / output interface. The processor of the computer device is used to provide computing and control capabilities. The memory of the computer device includes a non-volatile storage medium and an internal memory. The non-volatile storage medium stores an operating system, a computer program and a database. The internal memory provides an environment for the operation of the operating system and the computer program in the non-volatile storage medium. The input / output interface of the computer device is used to exchange information between the processor and an external device. The communication interface of the computer device is used to communicate with an external terminal through a network connection. When the computer program is executed by the processor, the above method is implemented.

[0100] In an exemplary embodiment, a computer device is provided. The computer device may be a terminal, and its internal structure diagram may be as shown in FIG. Figure 6 As shown. The computer device includes a processor, a memory, an input / output interface, a communication interface, a display unit and an input device. The processor, the memory and the input / output interface are connected through a system bus, and the communication interface, the display unit and the input device are connected to the system bus through the input / output interface. The processor of the computer device is used to provide computing and control capabilities. The memory of the computer device includes a non-volatile storage medium and an internal memory. The non-volatile storage medium stores an operating system and a computer program. The internal memory provides an environment for the operation of the operating system and the computer program in the non-volatile storage medium. The input / output interface of the computer device is used to exchange information between the processor and an external device. The communication interface of the computer device is used to communicate with an external terminal in a wired or wireless manner, and the wireless manner can be implemented through WIFI, a mobile cellular network, near field communication (NFC) or other technologies. When the computer program is executed by the processor, the above method is implemented.

[0101] Those skilled in the art will understand that Figure 5-Figure 6 The structure shown in the figure is only a block diagram of a part of the structure related to the solution of the present application, and does not constitute a limitation on the computer device to which the solution of the present application is applied. The specific computer device may include more or fewer components than those shown in the figure, or combine certain components, or have a different arrangement of components.

[0102] In an exemplary embodiment, a computer device is provided, including a memory and a processor, wherein a computer program is stored in the memory, and when the processor executes the computer program, the steps of the above method are implemented and corresponding beneficial effects are achieved.

[0103] In one embodiment, a computer-readable storage medium is provided, on which a computer program is stored. When the computer program is executed by a processor, the steps of the above method are implemented and corresponding beneficial effects are achieved.

[0104] In one embodiment, a computer program product is provided, including a computer program, which implements the steps of the above method when executed by a processor and achieves corresponding beneficial effects.

[0105] A person of ordinary skill in the art can understand that all or part of the processes in the above-mentioned embodiment method can be completed by instructing the relevant hardware through a computer program, and the computer program can be stored in a non-volatile computer-readable storage medium. When the computer program is executed, it can include the processes of the embodiments of the above-mentioned methods. Among them, any reference to the memory, database or other medium used in the embodiments provided in the present application can include at least one of non-volatile memory and volatile memory. Non-volatile memory can include read-only memory (ROM), magnetic tape, floppy disk, flash memory, optical memory, high-density embedded non-volatile memory, resistive random access memory (ReRAM), magnetic random access memory (MRAM), ferroelectric random access memory (FRAM), phase change memory (PCM), graphene memory, etc. Volatile memory can include random access memory (RAM) or external cache memory, etc. As an illustration and not limitation, RAM can be in various forms, such as static random access memory (SRAM) or dynamic random access memory (DRAM). The database involved in each embodiment provided in this application may include at least one of a relational database and a non-relational database. Non-relational databases may include distributed databases based on blockchains, etc., but are not limited to this. The processor involved in each embodiment provided in this application may be a general-purpose processor, a central processing unit, a graphics processor, a digital signal processor, a programmable logic device, a data processing logic device based on quantum computing, an artificial intelligence (AI) processor, etc., but are not limited to this.

[0106] The technical features of the above embodiments may be combined arbitrarily. To make the description concise, not all possible combinations of the technical features in the above embodiments are described. However, as long as there is no contradiction in the combination of these technical features, they should be considered to be within the scope of this application.

[0107] The above-described embodiments only express several implementation methods of the present application, and the descriptions thereof are relatively specific and detailed, but they cannot be understood as limiting the scope of the present application. It should be pointed out that, for a person of ordinary skill in the art, several variations and improvements can be made without departing from the concept of the present application, and these all belong to the protection scope of the present application. Therefore, the protection scope of the present application shall be subject to the attached claims.

Claims

1. A method for managing power grid IT asset data based on blockchain, characterized in that: Applied to the power grid blockchain architecture, the power grid blockchain architecture includes a business system, a data governance platform, and a blockchain platform. The data governance platform communicates with the business system and the blockchain platform respectively. The method includes: The data governance platform extracts IT asset data of each business system connected to the data governance platform according to the system set time; The data governance platform generates two ring signatures; The blockchain platform verifies the ring signature in response to the data on-chain request from the data governance platform; If the verification is successful, the blockchain platform and the data governance platform are linked, and the IT asset data is stored on the chain.

2. The method according to claim 1, characterized in that The steps of generating two ring signatures by the data governance platform include: Randomly select an integer t and calculate G'=tG; t∈ R [1, q-1], G is the base point on the elliptic curve over the finite field, and q is a prime number that meets the security requirements; Randomly select an integer k and calculate kG=Ts=(xs,ys), k∈ R [1,q-1]; Randomly generate a sequence r i ∈ R [1, q-1], i=s+1, s+2, L, n, 1, L, s-1; Calculate C i =H(L, m, x i-1 , G'), (x i ,y i )=T i =r i G+c i pk i +G', where i = s+1, s+2, L, n, 1, L, s-1, and c1 = H (L, m, x n , G'), p and H are public parameters; Calculate c s =H(L,m,x s-1 , G'), r s =k-dk s c s -t (modq); Generate the first ring signature α1=(pk1,pk2,L,pk n , c1, r1, c2, L, G') and the second ring signature α2 = (pk1', pk2', L, pk n ', c1', r1', c2', L, G').

3. The method according to claim 2, characterized in that The step of verifying the ring signature includes: Extract the ring signature from the data upload request and calculate (x i ,y i ) and c i +1; where (x i ,y i )=T i =r i G+c i pk i +G',c i +1=H(L,m,x i , G'), i=1,2,L,n; If c n+1 =c1, then the ring signature verification is secure; Extracting element G' from the first ring signature and the second ring signature; If the G' extracted from the two ring signatures is the same, it is determined that the two ring signatures are generated by the same signer and the verification succeeds.

4. The method according to any one of claims 1 to 3, characterized in that: The method further comprises: If the verification fails, the blockchain platform and the data governance platform are prohibited from linking.

5. The method according to any one of claims 1 to 3, characterized in that: The method further comprises: The business system receives IT asset data, which is IT asset data obtained by a user terminal in response to a code scanning operation for IT equipment. The IT asset data includes equipment classification, equipment name, asset status, brand, model, supplier, equipment location, using organization, using department, responsible person, and user.

6. The method according to claim 5, characterized in that The method further comprises: The blockchain platform obtains user login information through the data governance platform in response to the IT asset data adjustment operation; If it is detected that the user login information does not match the using organization, using department, user and responsible person in the IT asset data, modification of the IT asset data on the chain is prohibited.

7. A blockchain-based power grid IT asset data management device, characterized in that: Applied to the power grid blockchain architecture, the power grid blockchain architecture includes a business system, a data governance platform, and a blockchain platform. The data governance platform communicates with the business system and the blockchain platform respectively. The device includes: A data extraction module, used to extract IT asset data of each business system connected to the data governance platform according to the system set time; Ring signature generation module, used to generate two ring signatures; A verification module, used to verify the ring signature in response to the data on-chain request of the data governance platform; The on-chain execution module is used to link the blockchain platform and the data governance platform if the verification is passed, and store the IT asset data on the chain.

8. A computer device comprising a memory and a processor, wherein the memory stores a computer program, wherein: When the processor executes the computer program, the steps of the blockchain-based power grid IT asset data management method described in any one of claims 1 to 6 are implemented.

9. A computer-readable storage medium having a computer program stored thereon, characterized in that: When the computer program is executed by a processor, the steps of the blockchain-based power grid IT asset data management method described in any one of claims 1 to 6 are implemented.

10. A computer program product, comprising a computer program, characterized in that When the computer program is executed by a processor, the steps of the blockchain-based power grid IT asset data management method described in any one of claims 1 to 6 are implemented.

Images