Block chain-based information security data online processing method and processing system

Abstract

The invention discloses an information security data online processing method and processing system based on a block chain, and the method comprises the steps: obtaining information security data, carrying out the packaging of the information security data, obtaining key and non-key data packages, and splitting the key data package to obtain key sub-data packages; the key sub-data packets are linked in combination with other data packets; obtaining the data packets through a downlink, and analyzing the storage condition of the non-key data packets to judge whether backup is needed or not; if the data packet needs to be backed up, the non-key data packet is linked again; judging the key sub-data packets, and judging whether the data packets can be restored or not; if the key data packet cannot be restored, the backup data volume and the corresponding data invalid value are obtained for fitting analysis, the minimum backup volume is determined, the number of backup files of the key sub-data packet is adjusted, and the restoration capability of the key data packet is guaranteed. According to the method, the block chain technology is utilized to optimize data storage, integrity verification and backup optimization.

Description

Technical Field

[0001] The present invention relates to the field of information security technology, and in particular to an online processing method and processing system for information security data based on blockchain. Background Art

[0002] In today's digital age, the processing of information security data is crucial. Traditional data processing technology has many defects in data storage, transmission and management.

[0003] In the prior art, existing data processing methods also have deficiencies in the data backup process. The commonly used fixed backup strategy lacks flexibility and cannot be intelligently adjusted according to the importance, volatility and dynamic changes of the data storage environment. For example, some non-critical business data may be over-backed up, wasting storage resources; while for some important data, when facing a high-risk storage environment, it may be under-backed up, increasing the risk of data loss.

[0004] In terms of data storage in the existing technology, the use of centralized storage systems is prone to single point failure risks. Once the storage server has hardware failures, software vulnerabilities or is attacked, the data may be lost, leaked or tampered with. In addition, during the data transmission process, the traditional method relies on a centralized storage architecture, and the data is easily stolen or tampered with during transmission, making it difficult to ensure the integrity and confidentiality of the data.

[0005] To this end, the present invention provides an online processing method and system for information security data based on blockchain. Summary of the invention

[0006] The purpose of the present invention is to provide an online processing method and system for information security data based on blockchain to solve at least one of the above-mentioned prior art problems.

[0007] In a first aspect, the present invention provides a method for online processing of information security data based on blockchain, comprising: Step 1: Obtain information security data and perform comparison analysis and packaging processing to obtain key data packets and non-key data packets, build a data block model, split the key data packets, and obtain key sub-data packets; Step 2: Encrypt all key sub-data packets, back up the key sub-data packets, and upload the encrypted key sub-data packets, the backed-up key sub-data packets, and the non-key data packets to the chain; Step 3: Based on the data packets processed on the chain, obtain the data packets on the chain through the chain processing of the blockchain, mark the storage nodes of the data packets that cannot be obtained by the blockchain as volatile storage nodes, perform numerical analysis on the non-key data packets of the volatile storage nodes, obtain the non-repetitive backup value Bf, and determine whether the non-key data packets need to be backed up based on the non-repetitive backup value Bf; Step 4: If it is necessary to back up non-critical data packets, the unobtainable data packets of the volatile storage node and the backed-up non-critical data packets are uploaded to the chain again; Step 5: Perform a hash check on the key sub-data packet to determine whether the key sub-data packet has been tampered with. If the key sub-data packet has been tampered with, perform a numerical analysis on the tampered key sub-data packet to obtain a data invalid value Wx, and determine whether the key sub-data packet can be restored to the key data packet; Step 6: If the key sub-data packet cannot be restored to the key data packet, obtain the backup data volume of each key sub-data packet in the historical monitoring period, and the data invalid value Wx corresponding to the backup data volume, perform fitting analysis on the backup data volume and the data invalid value, and obtain the data backup volume that minimizes the data invalid value Wx. Based on the minimum backup volume, adjust the number of backup files of the blockchain key sub-data packet so that the key sub-data packet of the blockchain can be restored to the key data packet.

[0008] In a second aspect, the present invention provides an online information security data processing system based on blockchain, comprising: Data splitting module: obtains information security data and performs comparison analysis and packaging processing to obtain key data packets and non-key data packets, builds a data block model, splits the key data packets, and obtains key sub-data packets; Uplink calculation module: encrypts and numbers all key sub-data packets, backs up key sub-data packets, and uploads key sub-data packets, backed-up key sub-data packets, and non-key data packets to the chain; Downchain judgment module: Based on the data packets processed on the upchain, the downchain data packets are obtained through the downchain processing of the blockchain, and the storage nodes of the data packets that cannot be obtained by the blockchain are marked as volatile storage nodes. The non-key data packets of the volatile storage nodes are numerically analyzed to obtain the non-repetitive backup value Bf. Based on the non-repetitive backup value Bf, it is judged whether the non-key data packets need to be backed up; Secondary uplink module: if non-key data packets need to be backed up, the unobtainable data packets of the volatile storage node and the backed-up non-key data packets are uplinked again; Off-chain judgment module: off-chain processing is performed on the key sub-data packets in the distributed storage of the blockchain, and hash verification is performed on the key sub-data packets to determine whether the key sub-data packets have been tampered with. If the key sub-data packets have been tampered with, numerical analysis is performed on the tampered key sub-data packets to obtain the data invalid value Wx, and determine whether the key sub-data packets can be restored to the key data packets; Backup adjustment module: If the key sub-data package cannot be restored to the key data package, obtain the backup data volume of each key sub-data package in the historical monitoring period, and the data invalid value Wx corresponding to the backup data volume, perform fitting analysis on the backup data volume and the data invalid value, and obtain the data backup volume that minimizes the data invalid value Wx. Based on the minimum backup volume, adjust the number of backup files of the blockchain key sub-data package so that the key sub-data package of the blockchain can be restored to the key data package.

[0009] Beneficial effects of the present invention: 1. Encrypt and verify the integrity of key sub-data packets with the help of encryption algorithms to ensure the integrity of data during data transmission and storage, or store data on blockchain nodes for a long time to reduce the possibility of external malicious tampering; through monitoring and analysis of blockchain storage nodes, identify volatile storage nodes, calculate non-re-backup values, and dynamically implement backup decision-making mechanisms to improve the ability to restore split key sub-data packets to key data packets; 2. For non-key data packets, flexibly adjust the backup strategy according to the actual risk situation. Under the premise of ensuring data security, reduce excessive occupation and waste of storage resources, which is conducive to improving the efficiency of data storage management. BRIEF DESCRIPTION OF THE DRAWINGS

[0010] In order to more clearly illustrate the technical solutions in the embodiments of the present invention, the following briefly introduces the drawings required for use in the description of the embodiments. Obviously, the drawings described below are only some embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without creative work.

[0011] Figure 1 is a flow chart of a data splitting and uplinking method provided in Embodiment 1 of the present invention; Figure 2 is a flow chart of a method for analyzing and optimizing key sub-data packets provided in Embodiment 2 of the present invention; Figure 3 This is a module diagram of an online information security data processing method and processing system based on blockchain provided by Embodiment 3 of the present invention; Figure 4 It is a structural diagram of a computer device provided in Embodiment 4 of the present invention. DETAILED DESCRIPTION

[0012] In order to enable those skilled in the art to better understand the scheme of the present invention, the technical scheme in the embodiments of the present invention will be clearly and completely described below in conjunction with the drawings in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work should fall within the scope of protection of the present invention.

[0013] Embodiment 1, Figure 1 The flowchart of the data splitting and chaining method provided in the first embodiment of the present invention is applicable to the case of data splitting and chaining. The data splitting and chaining method can be performed by an online information security data processing system based on blockchain. The online information security data processing system based on blockchain can be implemented by software and / or hardware. The online information security data processing system based on blockchain can be configured in a computer device. Optionally, the computer device can be an electronic device, which can be a notebook, a desktop computer, a smart tablet, etc., and the embodiment of the present invention does not limit this.

[0014] like Figure 1 As shown, the data splitting and chaining method provided by the embodiment of the present invention specifically includes the following steps: Step 1: Obtain information security data, perform comparison analysis and packaging processing, obtain key data packets and non-key data packets, build a data block model, split the key data packets, and obtain key sub-data packets; Obtain the business process generated by information security data, compare the business process with the key process library, and obtain key information data and non-key information data; It should be noted that the key process library is set by professional technicians in the field based on their experience; Among them, each business process will generate multiple information security data, and each information security data includes the timeliness of the data; For example, in the transfer business process, it includes processes such as customer information acquisition, balance confirmation, transfer application, risk assessment, transfer confirmation, bill receipt, etc. The key process library includes customer information acquisition, balance confirmation, transfer confirmation, etc.; If the business process generated by the information security data is in the business process included in the key process library, the information security data will be marked as key information data; If the business process generated by the information security data is not included in the business process included in the key process library, the information security data will be marked as non-key information data; Packing key information data and non-key information data through the transmission control protocol (TCP) to obtain key data packets and non-key data packets; Based on the content-defined chunking (CDC) protocol and the Rabin fingerprint algorithm, a data chunking model is established to chunk key data packets. The specific data partitioning model is established as follows: A1. Calculate the data packet file size of the key data packet, determine the file window size, read the key data packet according to the file window size, and use the Rabin fingerprint algorithm to calculate the hash value of the key data packet; For example, for a 2MB key data packet, the Rabin fingerprint algorithm is used to read and calculate the hash value of the file content with a 4KB file window size. Every time 4KB of data content is read, it is substituted into the Rabin polynomial hash function to calculate the hash value. After the hash calculation, a 32-bit hash value "0x12345678" is obtained for the 4KB data. A2. Move the file window and repeat A1 to calculate the remaining file size of the key data packet. When the end of the hash value reaches a preset value, the end of the file window with the preset value is used as the window boundary. A3, splitting the key data packet according to the window boundary to obtain multiple key sub-data packets; Exemplarily, when the 12KB position of the key data packet is calculated, the hash value is "0xabcdef00", and a preset value "00" appears at the end, and the end of the 12KB file window is used as the first window boundary; the file window is moved from the 12KB onwards, and the hash value of the file in the next file window is continued to be calculated, and when the 20KB position of the key data packet is calculated, the hash value is "0x11111100", and the preset value "00" appears at the end again, and the 20KB is used as the second window boundary, until the 8MB key data packet is processed, multiple window boundaries are determined, and the key data packet is split according to the window boundaries to obtain multiple key sub-data packets, and the key sub-data packets are described in the order of the byte size range of the file, and the file size range of the key sub-data packets of 0-20KB is: [0,12KB], [13KB,20KB]; Step 2: encrypt and number all key sub-data packets, back up the key sub-data packets, and upload the key sub-data packets, the backed-up key sub-data packets, and the non-key data packets to the chain; Encrypt each key sub-data packet using an asymmetric encryption algorithm (RSA), and number the asymmetric encrypted key sub-data packets according to the splitting order of the key data packets to obtain key splitting numbers; The key splitting number is stored at the starting end point of each encrypted key sub-data packet; The SHA-256 algorithm is used to calculate the hash value of each encrypted key sub-data packet, and the hash value is stored at the end of each key sub-data packet; It should be noted that the SHA-256 algorithm is used to calculate the hash value of the key sub-data packet for subsequent verification of data integrity; According to the order of packaging the key data packets and the non-key data packets by the transmission control protocol (TCP), the non-key data packets and the key sub-data packets are calculated and then numbered to obtain data restoration numbers, and the data restoration numbers are stored at the starting endpoints of the non-key data packets and the key sub-data packets; Backing up the encrypted key sub-data packets to generate backup files for each key sub-data packet; The key sub-data packets, the backup files of each key sub-data packet, and the non-key data packets that have been numbered and calculated with SHA-256 are stored on the distributed nodes of the blockchain using blockchain technology, that is, the key sub-data packets, the backup files of each key sub-data packet, and the non-key data packets are put on the chain; The technical solution of this embodiment is: obtaining information security data and performing comparative analysis and packaging processing to obtain key data packets and non-key data packets, constructing a data block model, splitting the key data packets to obtain key sub-data packets, encrypting and dividing and numbering all key sub-data packets, backing up the key sub-data packets, uploading the key sub-data packets, the backed-up key sub-data packets, and the non-key data packets to the chain, and reducing the degree of dependence on the centralized storage method of the data through the distributed storage technology of the blockchain.

[0015] Embodiment 2, as Figure 2 As shown, the method for analyzing and optimizing key sub-data packets provided in the second embodiment of the present invention includes the following steps: Step 3: Based on the data packets processed on the chain, obtain the data packets on the chain through the chain processing of the blockchain, mark the storage nodes of the data packets that cannot be obtained by the blockchain as volatile storage nodes, perform numerical analysis on the non-key data packets of the volatile storage nodes, obtain the non-repetitive backup value Bf, and determine whether the non-key data packets need to be backed up based on the non-repetitive backup value Bf; Based on the key sub-data packets processed on the upper chain, the data packets on the lower chain are obtained through the lower chain processing of the blockchain; The downlink data packets include: non-key data packets and key sub-data packets; If a data packet cannot be obtained on a distributed storage node of the blockchain, the storage node of the unobtainable data packet is marked as a volatile storage node; It should be noted that in the blockchain distributed storage environment, the stability of storage nodes varies. By marking the storage nodes that cannot obtain data packets as volatile storage nodes, it is possible to clearly identify specific nodes that are at risk of data loss.

[0016] Obtain the storage quantity of non-key data packets in the volatile storage node and the quantity of non-key data packets; The number of non-critical data packets stored in the volatile storage node is processed by ratio with the number of non-critical data packets to obtain a non-critical volatile ratio, and the non-critical volatile ratio is marked as Ys; Obtain the number of volatile storage nodes and the number of all distributed storage nodes, perform ratio processing on the number of volatile storage nodes and the number of all distributed nodes to obtain a volatile node ratio, and mark the volatile node ratio as Yj; Based on the non-repetitive volatile ratio Ys and the volatile node ratio Yj, the non-repetitive backup value Bf is calculated; By formula: Get the data backup value Bf, a=1.25, b=0.762; Compare the non-re-backup value Bf with the non-re-backup threshold to determine whether it is necessary to back up the non-key data; If the non-re-backup value Bf is higher than the non-re-backup threshold, it indicates that the number of non-key data packets lost exceeds expectations, and non-key data needs to be backed up; If the non-re-backup value Bf is lower than the non-re-backup threshold, it indicates that the number of non-key data packets lost is lower than expected, and there is no need to back up the non-key data. However, it is still necessary to continuously monitor the changes in the non-re-backup value Bf. It should be noted that the non-re-backup value Bf is compared with the non-re-backup threshold, and a flexible decision is made based on the actual risk situation whether to back up non-critical data. When the non-re-backup value Bf is higher than the threshold, it indicates that the number of data losses exceeds expectations, and timely backup can effectively prevent further data loss. Step 4: If it is necessary to back up non-key data packets, the unobtainable data packets of the volatile storage node and the backed-up non-key data packets are uploaded to the chain again; If non-critical data packets need to be backed up, the volatile storage nodes of the blockchain distributed storage nodes are removed to obtain storable nodes; By using the numbers of non-key data packets and key sub-data packets, non-key data packets, key sub-data packets, and backup non-key data packets that cannot be obtained by volatile storage nodes are placed in the storable nodes of the blockchain, that is, they are put on the chain again for processing; Step 5: Off-chain processing is performed on the key sub-data packets in the distributed storage of the blockchain, and hash verification is performed on the key sub-data packets to determine whether the key sub-data packets have been tampered with. If the key sub-data packets have been tampered with, numerical analysis is performed on the tampered key sub-data packets to obtain the data invalid value Wx, and determine whether the key sub-data packets can be restored to the key data packets; Obtaining key sub-data packets and non-key data packets of distributed storage of the blockchain, that is, performing off-chain processing on the data stored in the blockchain; Obtain the key sub-data packet processed by the downlink, read the SHA-256 hash value stored at the end endpoint of the key sub-data packet, perform hash verification on the key sub-data packet, and determine whether the key sub-data packet has been tampered with; Specifically, the hash verification process is as follows: S1, remove the serial number stored at the start endpoint and the hash value stored at the end endpoint of the key sub-data packet; S2. Calculate the hash value of the key sub-data packet of the encrypted part using the SHA-256 algorithm again; S3, comparing the recalculated hash value with the hash value stored at the end endpoint to determine whether the key sub-data packet has been tampered with; If the recalculated hash value is the same as the hash value stored at the end endpoint, it indicates that the key sub-data packet has not been tampered with; If the recalculated hash value is different from the hash value stored at the end endpoint, it indicates that the key sub-data packet has been tampered with, and the backup key sub-data packet is obtained; If both the key sub-data packet and the backup key sub-data packet are tampered with, the corresponding key sub-data packet is marked as an invalid data packet, and the number of invalid data packets is obtained; The number of all key data packets and the number of backed-up key sub-data are summed to obtain the total number of data packets; The number of invalid data packets is processed as a difference from the total number of data packets, and the calculated result is processed as a ratio with the total number of data packets to obtain an invalid data ratio, which is the invalid data ratio Pw; If one of the key sub-data packets or the backup key sub-data packets is tampered with, the corresponding key data packet is marked as a unilateral data packet; Obtain the number of all unilateral data packets, perform ratio processing on the number of unilateral data packets and the total number of data packets to obtain a unilateral data ratio, and mark the unilateral data ratio as Pd; Based on the invalid data ratio Pw and the one-sided data ratio Pd, the data invalid value Wx is calculated; By formula: Get the data invalid value Wx, where c=0.78, d=0.32; Compare the data invalid value Wx with the data invalid threshold to determine whether the key sub-data packet can be restored to the key data packet; If the data invalid value Wx is higher than the data invalid threshold, the key sub-data packet cannot be restored to the key data packet; If the data invalid value Wx is lower than the data invalid threshold, the key sub-data packet can be restored to the key data packet; Step 6: If the key sub-data packet cannot be restored to the key data packet, obtain the backup data volume of each key sub-data packet in the historical monitoring period, and the data invalid value Wx corresponding to the backup data volume, perform fitting analysis on the backup data volume and the data invalid value, and obtain the data backup volume that minimizes the data invalid value Wx. Based on the minimum backup volume, adjust the number of backup files of the key sub-data packet of the blockchain so that the key sub-data packet of the blockchain can be restored to the key data packet; If the key sub-data packet cannot be restored to the key data packet, obtain the backup data volume of each key sub-data packet of the blockchain during the historical monitoring period; The backup data volume of each key sub-data packet of the blockchain in each monitoring cycle is marked as Bs i , according to the backup data volume Bs i Construct the data sequence Bs of the backup data volume in ascending order i , Bs i =[Bs1,Bs2,...,Bs n ], where i is the number of the backup data, i=1,2,...,n, and n is the total number of numbers; Get the data invalid value Wx corresponding to the backup data volume, and construct the change sequence Wx of the data invalid value i , Wx i =[Wx1,Wx2,...,Wx n ]; Data sequence Bs based on backup data volume i , the changing sequence of invalid data values ​​Wx i , calculate the correlation coefficient By formula: Get the correlation coefficient , where x is the data sequence Bs of the backup data volume i , the changing sequence of invalid data values ​​Wx i The xth data point in the equation, x=1,2,...,n, ρ is the resolution coefficient, ρ=0.75, Represents the absolute value of the minimum difference between the two levels, Indicates the absolute value of the maximum difference between the two levels; It should be noted that the minimum difference between the two levels and the maximum difference between the two levels reflect the data sequence Bs of the backup data volume. i , the changing sequence of invalid data values ​​Wxi the degree of difference; By formula: Get the mean value S of the correlation coefficient, compare the mean value S of the correlation coefficient with the correlation coefficient threshold, and determine the data sequence Bs of the backup data volume i , the changing sequence of invalid data values ​​Wx i Is it relevant? It should be noted that the correlation coefficient threshold is set by professionals in this field based on experience; If the correlation coefficient mean S is higher than the correlation coefficient threshold, it indicates that the data sequence Bs of the backup data volume i , the changing sequence of invalid data values ​​Wx i The changes in Use the least squares method to calculate the data sequence Bs of the backup data volume i , the changing sequence of invalid data values ​​Wx i Perform fitting, in a two-dimensional rectangular coordinate system, with the backup data volume as the X-axis and the data invalid value as the Y-axis, and draw a fitting straight line between the backup data volume and the data invalid value; Calculate the goodness of fit R of the fitted line 2 , judge the goodness of fit R 2 Is it in the range of [0.75,1]? If the goodness of fit is in the range of [0.75,1], it is considered that the fitting effect of the fitting line meets expectations; Calculate the slope of the fitted line. If the slope of the fitted line is less than 0, the fitted line is in a linear downward trend. Calculate the intersection of the fitted line and the X-axis to obtain the minimum backup data volume that makes the data invalid value 0. If the correlation coefficient mean S is lower than the correlation coefficient threshold, the goodness of fit of the fitting line is not in the range of [0.75,1], and the slope of the fitting line is not less than 0; Get the change sequence Wx of invalid data value i Invalid value Wx in data i The data backup amount corresponding to the minimum value of is obtained to obtain the minimum backup amount; Based on the minimum backup amount, the number of backup files of the key sub-data package of the blockchain is increased so that the key sub-data package of the blockchain can be restored to the key data package; The technical solution of this embodiment is as follows: based on the data packets processed on the chain, the data packets on the chain are obtained through the down-chain processing of the blockchain, the storage nodes of the data packets that cannot be obtained by the blockchain are marked as volatile storage nodes, and the non-key data packets of the volatile storage nodes are numerically analyzed to obtain the non-repetitive backup value Bf. Based on the non-repetitive backup value Bf, it is determined whether the non-key data packets need to be backed up. If the non-key data packets need to be backed up, the data packets that cannot be obtained from the volatile storage node and the backed-up non-key data packets are processed on the chain again, the key sub-data packets of the distributed storage of the blockchain are processed on the chain, and the key sub-data packets are hashed to determine whether the key sub-data packets have been tampered with. If the key sub-data packets have been tampered with, the tampered key sub-data packets are tampered with. The sub-data packet is numerically analyzed to obtain the data invalid value Wx, and it is determined whether the key sub-data packet can be restored to the key data packet. If the key sub-data packet cannot be restored to the key data packet, the backup data volume of each key sub-data packet in the historical monitoring period and the data invalid value Wx corresponding to the backup data volume are obtained. The backup data volume and the data invalid value are fitted and analyzed to obtain the data backup volume that minimizes the data invalid value Wx. Based on the minimum backup volume, the number of backup files of the key sub-data packet of the blockchain is adjusted so that the key sub-data packet of the blockchain can be restored to the key data packet. The backup strategy is flexibly adjusted according to the actual risk situation. On the premise of ensuring data security, the excessive occupation and waste of storage resources are reduced, which is conducive to improving the efficiency of data storage management.

[0017] Embodiment 3, as Figure 3 As shown, an information security data online processing system based on blockchain includes: Data splitting module: obtains information security data and performs comparison analysis and packaging processing to obtain key data packets and non-key data packets, builds a data block model, splits the key data packets, and obtains key sub-data packets; Uplink calculation module: encrypts and numbers all key sub-data packets, backs up key sub-data packets, and uploads key sub-data packets, backed-up key sub-data packets, and non-key data packets to the chain; Downchain judgment module: Based on the data packets processed on the upchain, the downchain data packets are obtained through the downchain processing of the blockchain, and the storage nodes of the data packets that cannot be obtained by the blockchain are marked as volatile storage nodes. The non-key data packets of the volatile storage nodes are numerically analyzed to obtain the non-repetitive backup value Bf. Based on the non-repetitive backup value Bf, it is judged whether the non-key data packets need to be backed up; Secondary uplink module: if non-key data packets need to be backed up, the unobtainable data packets of the volatile storage node and the backed-up non-key data packets are uplinked again; Off-chain judgment module: off-chain processing is performed on the key sub-data packets in the distributed storage of the blockchain, and hash verification is performed on the key sub-data packets to determine whether the key sub-data packets have been tampered with. If the key sub-data packets have been tampered with, numerical analysis is performed on the tampered key sub-data packets to obtain the data invalid value Wx, and determine whether the key sub-data packets can be restored to the key data packets; Backup adjustment module: If the key sub-data package cannot be restored to the key data package, obtain the backup data volume of each key sub-data package in the historical monitoring period, and the data invalid value Wx corresponding to the backup data volume, perform fitting analysis on the backup data volume and the data invalid value, and obtain the data backup volume that minimizes the data invalid value Wx. Based on the minimum backup volume, adjust the number of backup files of the blockchain key sub-data package so that the key sub-data package of the blockchain can be restored to the key data package.

[0018] Example 4, refer to Figure 4 The embodiment of the present invention further provides a computer device 3, comprising: a memory 302 and a processor 301 and a computer program 303 stored in the memory 302. When the computer program 303 is executed on the processor 301, an online information security data processing method based on blockchain as described in any one of the above methods is implemented.

[0019] The computer device 3 may be a computing device such as a desktop computer, a notebook, a palm computer, a cloud server, etc. The computer device 3 may include, but is not limited to, a processor 301 and a memory 302. Those skilled in the art will understand.

[0020] Figure 4 It is only an example of computer device 3 and does not constitute a limitation on computer device 3. It may include more or fewer components than shown in the figure, or a combination of certain components, or different components, for example, it may also include input and output devices, network access devices, etc.

[0021] The processor 301 may be a central processing unit (CPU), or other general-purpose processors, digital signal processors (DSP), application-specific integrated circuits (ASIC), field-programmable gate arrays (FPGA) or other programmable logic devices, discrete gate or transistor logic devices, discrete hardware components, etc. A general-purpose processor may be a microprocessor or any conventional processor, etc.

[0022] In some embodiments, the memory 302 may be an internal storage unit of the computer device 3, such as a hard disk or memory of the computer device 3. In other embodiments, the memory 302 may also be an external storage device of the computer device 3, such as a plug-in hard disk, a smart media card (SMC), a secure digital (SD) card, a flash card, etc. equipped on the computer device 3. Further, the memory 302 may also include both an internal storage unit and an external storage device of the computer device 3. The memory 302 is used to store an operating system, an application program, a boot loader (BootLoader), data, and other programs, such as the program code of the computer program. The memory 302 may also be used to temporarily store data that has been output or is to be output.

[0023] Example 5. The embodiment of the present invention further provides a computer-readable storage medium on which a computer program is stored. When the computer program is executed by a processor, it implements a blockchain-based information security data online processing method as described in any of the above methods.

[0024] In this embodiment, if the integrated unit is implemented in the form of a software functional unit and sold or used as an independent product, it can be stored in a computer-readable storage medium. Based on this understanding, the present application implements all or part of the processes in the above-mentioned embodiment method, which can be completed by instructing the relevant hardware through a computer program. The computer program can be stored in a computer-readable storage medium. When the computer program is executed by the processor, the steps of the above-mentioned various method embodiments can be implemented. Among them, the computer program includes computer program code, and the computer program code can be in source code form, object code form, executable file or some intermediate form. The computer-readable medium can at least include: any entity or device that can carry the computer program code to the camera / terminal device, recording medium, computer memory, read-only memory (ROM, Read-Only Memory), random access memory (RAM, Random Access Memory), electric carrier signal, telecommunication signal and software distribution medium. For example, USB flash drive, mobile hard disk, disk or optical disk. In some jurisdictions, according to legislation and patent practice, computer-readable media cannot be electric carrier signals and telecommunication signals.

[0025] In the above embodiments, the description of each embodiment has its own emphasis. For parts that are not described or recorded in detail in a certain embodiment, reference can be made to the relevant descriptions of other embodiments.

[0026] Those of ordinary skill in the art will appreciate that the units and algorithm steps of each example described in conjunction with the embodiments disclosed herein can be implemented in electronic hardware, or a combination of computer software and electronic hardware. Whether these functions are performed in hardware or software depends on the specific application and design constraints of the technical solution. Professional and technical personnel can use different methods to implement the described functions for each specific application, but such implementation should not be considered to be beyond the scope of this application.

[0027] In the embodiments disclosed in the present application, it should be understood that the disclosed apparatus / terminal equipment and method can be implemented in other ways. For example, the apparatus / terminal equipment embodiments described above are merely illustrative. For example, the division of the modules or units is only a logical function division. There may be other division methods in actual implementation. For example, multiple units or components can be combined or integrated into another system, or some features can be ignored or not executed. One point, the mutual coupling or direct coupling or communication connection shown or discussed may be an indirect coupling or communication connection through some interface, device or unit, which may be electrical, mechanical or other forms.

[0028] The units described as separate components may or may not be physically separated, and the components shown as units may or may not be physical units, that is, they may be located in one place or distributed on multiple network units. Some or all of the units may be selected according to actual needs to achieve the purpose of the solution of this embodiment.

[0029] The above formulas are all dimensionless and numerical calculations. The formula is a formula for the most recent real situation obtained by collecting a large amount of data and performing software simulation. The preset parameters in the formula are set by technicians in this field according to actual conditions.

[0030] The above is a detailed description of an embodiment of the present invention, but the content is only a preferred embodiment of the present invention and cannot be considered to limit the scope of implementation of the present invention. All equivalent changes and improvements made within the scope of the present invention should still fall within the scope of the patent coverage of the present invention.

Claims

1. A method for online processing of information security data based on blockchain, characterized in that: The following steps are involved: Step 1: Obtain information security data and conduct comparative analysis to obtain key data packets and non-key data packets, build a data block model, and obtain key sub-data packets; Step 2: Encrypt and back up all key sub-data packets, and upload the encrypted key sub-data packets, the backed-up key sub-data packets, and the non-key data packets to the chain; Step 3: Based on the data packets processed on the chain, obtain the data packets on the chain, mark the storage nodes of the data packets that the blockchain cannot obtain as volatile storage nodes, perform numerical analysis on the non-key data packets of the volatile storage nodes, obtain the non-re-backup value Bf, and determine whether the non-key data packets need to be backed up; Step 4: If it is necessary to back up non-critical data packets, the unobtainable data packets of the volatile storage node and the backed-up non-critical data packets are uploaded to the chain again; Step 5: Perform a hash check on the key sub-data packet to determine whether the key sub-data packet has been tampered with. If the key sub-data packet has been tampered with, perform a numerical analysis on the tampered key sub-data packet to obtain a data invalid value Wx, and determine whether the key sub-data packet can be restored to the key data packet; Step 6: If the key sub-data packet cannot be restored to the key data packet, obtain the backup data volume of each key sub-data packet in the historical monitoring period, and the data invalidity value Wx corresponding to the backup data volume, perform fitting analysis on the backup data volume and the data invalidity value, and adjust the number of backup files of the blockchain key sub-data packet so that the key sub-data packet of the blockchain can be restored to the key data packet.

2. According to the method of online processing of information security data based on blockchain in claim 1, it is characterized in that: The key sub-data packet is obtained in the following manner: Obtain the business process generated by information security data, compare the business process with the key process library, and obtain key information data and non-key information data; If the business process generated by the information security data is in the business process included in the key process library, the information security data is marked as key information data, otherwise, it is marked as non-key information data; Packing key information data and non-key information data to obtain key data packets and non-key data packets; Construct a data block model to split the key data packets to obtain multiple key sub-data packets.

3. According to the blockchain-based information security data online processing method of claim 1, it is characterized in that: The method for determining whether to perform backup processing on non-key data packets is as follows: Numerical analysis is performed on non-critical data packets of volatile storage nodes to obtain the non-critical volatile ratio Ys and volatile node ratio Yj; Based on the non-repetitive volatile ratio Ys and the volatile node ratio Yj, the non-repetitive backup value Bf is calculated; By formula: Get the data backup value Bf, where a and b are preset proportional coefficients; If the non-re-backup value Bf is higher than the non-re-backup threshold, non-critical data needs to be backed up.

4. According to claim 3, a method for online processing of information security data based on blockchain is characterized in that: The non-volatile ratio Ys is obtained as follows: Obtain the data packet from the blockchain. If the data packet cannot be obtained on the distributed storage node of the blockchain, the storage node of the data packet that cannot be obtained is marked as a volatile storage node. Obtain the storage quantity of non-key data packets in the volatile storage node and the quantity of non-key data packets; The number of non-critical data packets stored in the volatile storage node is processed by ratio with the number of non-critical data packets to obtain a non-critical volatile ratio, and the non-critical volatile ratio is marked as Ys; The number of volatile storage nodes and the number of all distributed storage nodes are obtained, and the number of volatile storage nodes is ratioed to the number of all distributed nodes to obtain a volatile node ratio, which is marked as Yj.

5. According to the blockchain-based information security data online processing method of claim 1, it is characterized in that: Whether the key sub-data packet can be restored to the key data packet is determined in the following manner: Numerical analysis is performed on the tampered key sub-data packets to obtain the invalid data ratio Pw and the unilateral data ratio Pd; Based on the invalid data ratio Pw and the one-sided data ratio Pd, the data invalid value Wx is calculated; By formula: Get the data invalid value Wx, where c and d are preset proportional coefficients; If the data invalid value Wx is higher than the data invalid threshold, the key sub-data packet cannot be restored to the key data packet.

6. According to claim 5, a method for online processing of information security data based on blockchain is characterized in that: The invalid data ratio Pw is obtained as follows: If both the key sub-data packet and the backup key sub-data packet are tampered with, the corresponding key sub-data packet is marked as an invalid data packet, and the number of invalid data packets is obtained; The number of all key data packets and the number of backed-up key sub-data are summed to obtain the total number of data packets; The number of invalid data packets is processed as a difference from the total number of data packets, and the calculated result is processed as a ratio with the total number of data packets to obtain an invalid data ratio, which is the invalid data ratio Pw; The unilateral data ratio Pd is obtained as follows: If one of the key sub-data packets or the backup key sub-data packets is tampered with, the corresponding key data packet is marked as a unilateral data packet; The number of all unilateral data packets is obtained, and the ratio of the number of unilateral data packets to the total number of data packets is processed to obtain a unilateral data ratio, which is marked as Pd.

7. According to claim 6, a method for online processing of information security data based on blockchain is characterized in that: The method for determining whether the key sub-data packet has been tampered with is as follows: Obtain the key sub-data packet processed by the downlink, read the hash value stored at the end point of the key sub-data packet, perform hash verification on the key sub-data packet, and determine whether the key sub-data packet has been tampered with.

8. According to the method of online processing of information security data based on blockchain in claim 1, it is characterized in that: The method of fitting and analyzing the backup data volume and the invalid data value is as follows: If the key sub-data packet cannot be restored to the key data packet, obtain the backup data volume of each key sub-data packet of the blockchain during the historical monitoring period; The backup data volume of each key sub-data packet of the blockchain in each monitoring cycle is marked as Bs i , construct the data sequence Bs of the backup data volume i , where i is the number of the backup data, i=1,2,...,n, and n is the total number of numbers; Get the data invalid value Wx corresponding to the backup data volume, and construct the change sequence Wx of the data invalid value i ; Data sequence Bs based on backup data volume i , the changing sequence of invalid data values ​​Wx i , calculate the correlation coefficient By formula: Get the correlation coefficient , where x is the data sequence Bs of the backup data volume i , the changing sequence of invalid data values ​​Wx i The xth data point in the equation, x=1,2,...,n, ρ is the resolution coefficient, ρ=0.75, Represents the absolute value of the minimum difference between the two levels, Indicates the absolute value of the maximum difference between the two levels; By formula: Get the mean value S of the correlation coefficient; If the correlation coefficient mean S is higher than the correlation coefficient threshold, it indicates that the data sequence Bs of the backup data volume i , the changing sequence of invalid data values ​​Wx i The changes in Use the least squares method to calculate the data sequence Bs of the backup data volume i , the changing sequence of invalid data values ​​Wx i Perform fitting and draw a fitting straight line of backup data volume - invalid data value.

9. According to the method of claim 1, the method is characterized in that: The method for adjusting the number of backup files of the key sub-data packets of the blockchain is as follows: Calculate the goodness of fit of the fitted line. If the goodness of fit is within a preset range, calculate the slope of the fitted line. If the slope of the fitted line is less than 0, calculate the intersection of the fitted line and the X-axis to obtain the minimum backup data volume that makes the data invalid value 0. If the correlation coefficient mean S is lower than the correlation coefficient threshold, the goodness of fit of the fitting line is not within the preset range, and the slope of the fitting line is not less than 0; Get the change sequence Wx of invalid data value i Invalid data value Wx i The data backup amount corresponding to the minimum value of is obtained to obtain the minimum backup amount; Based on the minimum backup amount, the number of backup files of the key sub-data packets of the blockchain is increased, and the data invalid value Wx is reduced, so that the key sub-data packets of the blockchain can be restored to the key data packets.

10. An information security data online processing system based on blockchain, characterized in that: Data splitting module: obtains information security data and performs comparison analysis and packaging processing to obtain key data packets and non-key data packets, builds a data block model, and obtains key sub-data packets; Uplink calculation module: encrypt and back up all key sub-data packets, and uplink key sub-data packets, backed-up key sub-data packets, and non-key data packets; Downchain judgment module: obtains the data packets of the downchain, marks the storage nodes of the data packets that cannot be obtained by the blockchain as volatile storage nodes, performs numerical analysis on the non-key data packets of the volatile storage nodes, and determines whether the non-key data packets need to be backed up; Secondary uplink module: if non-key data packets need to be backed up, the unobtainable data packets of the volatile storage node and the backed-up non-key data packets are uplinked again; Downlink judgment module: determine whether the key sub-data packet has been tampered with. If the key sub-data packet has been tampered with, perform numerical analysis on the tampered key sub-data packet to determine whether the key sub-data packet can be restored to the key data packet; Backup adjustment module: If the key sub-data package cannot be restored to the key data package, obtain the backup data volume and the corresponding data invalid value Wx of each key sub-data package during the historical monitoring period, perform fitting analysis on the backup data volume and the data invalid value, and adjust the number of backup files of the blockchain key sub-data package so that the key sub-data package of the blockchain can be restored to the key data package.

Images