Data asset management method and system based on trusted data uploading

Abstract

The invention provides a data asset management method and system based on credible data uploading in the technical field of data management, and the method comprises the steps: S1, collecting operation data carrying an equipment serial number, a timestamp and a digital signature, and verifying the operation data based on the equipment serial number, the timestamp and the digital signature; s2, encrypting the verified operation data into encrypted data, setting a classification label of the encrypted data, and uploading the encrypted data to the block chain; s3, the block chain performs decentralized storage on the received encrypted data, and uploads the encrypted data to a data asset management server; s4, the data asset management server decrypts and verifies the received encrypted data to obtain operation data, and performs risk assessment on the operation data to obtain a risk assessment report; and S5, pushing the risk assessment report to a pre-associated management terminal in real time. The method has the advantage that the reliability of data asset management is greatly improved.

Description

Technical Field

[0001] The present invention relates to the technical field of data management, and in particular to a data asset management method and system based on trusted data uploading. Background Art

[0002] During the operation process, enterprises will generate a large amount of operation data, such as the operating data of production equipment, the process parameters set by production equipment, the proportion of raw materials put into the production process, etc. These operation data belong to the intangible assets of the enterprise, that is, the digital assets of the enterprise. If these data assets are leaked, it will cause immeasurable losses to the enterprise, so these data assets need to be managed.

[0003] In the process of data asset management, the authenticity and integrity of data are crucial to determine the ownership of intellectual property rights, value assessment, and resolve potential disputes. However, traditionally, enterprises’ management of data assets often lacks an effective data verification mechanism, which makes data easy to be tampered or forged, thus affecting the protection of intellectual property rights and decision-making.

[0004] Therefore, how to provide a data asset management method and system based on trusted data uploading to improve the reliability of data asset management has become a technical problem that needs to be solved urgently. Summary of the invention

[0005] The technical problem to be solved by the present invention is to provide a data asset management method and system based on trusted data uploading, so as to improve the reliability of data asset management.

[0006] In a first aspect, the present invention provides a data asset management method based on trusted data upload, comprising the following steps:

[0007] Step S1: collect operation data carrying device serial number, timestamp and digital signature, and verify the operation data based on the device serial number, timestamp and digital signature;

[0008] Step S2: Encrypt the verified operation data into encrypted data, set a classification label for the encrypted data, and upload the encrypted data to the blockchain;

[0009] Step S3: The blockchain stores the received encrypted data in a decentralized manner and uploads the encrypted data to a data asset management server;

[0010] Step S4: The data asset management server decrypts and verifies the received encrypted data to obtain operation data, and performs risk assessment on the operation data to obtain a risk assessment report;

[0011] Step S5: The data asset management server pushes the risk assessment report to the pre-associated management terminal in real time, and encrypts and stores the risk assessment report.

[0012] Furthermore, the step S1 is specifically as follows:

[0013] A data collection cycle is set, and operation data carrying a device serial number, a timestamp, and a digital signature are automatically collected from a database based on the data collection cycle; the digital signature is obtained by performing a hash calculation on the operation data;

[0014] The operation data is verified for integrity through the digital signature, the operation data is verified for timeliness through the timestamp, and finally the operation data is verified for legitimacy through the device serial number.

[0015] Furthermore, the step S2 is specifically as follows:

[0016] A pair of public keys and private keys are randomly created through a security chip, the verified operating data is encrypted through the private key to obtain first-level ciphertext data, the first-level ciphertext data and the public key are encrypted through the RC6 algorithm to obtain second-level ciphertext data, each character of the second-level ciphertext data is mapped based on a preset mapping rule to obtain third-level ciphertext data, the number 1 and the letter Q in the third-level ciphertext data are swapped, and the number 2 and the letter W are swapped to obtain fourth-level ciphertext data, the fourth-level ciphertext data is encrypted through the 3DES algorithm to obtain encrypted data, a classification label for the encrypted data is set, the classification label is added to the file name of the encrypted data, and the encrypted data is uploaded to the blockchain through the TLS protocol.

[0017] Furthermore, the step S3 is specifically as follows:

[0018] The blockchain stores the received encrypted data in blocks on different nodes through a distributed network and consensus mechanism, and uploads the encrypted data to the data asset management server through the SSL protocol;

[0019] The step S4 is specifically as follows:

[0020] The data asset management server receives the encrypted data in real time, decrypts the encrypted data through the 3DES algorithm to obtain level 4 ciphertext data, swaps the number 1 and the letter Q, and swaps the number 2 and the letter W in the level 4 ciphertext data to obtain level 3 ciphertext data, maps each character of the level 3 ciphertext data based on a preset mapping rule to obtain level 2 ciphertext data, decrypts the level 2 ciphertext data through the RC6 algorithm to obtain level 1 ciphertext data and a public key; decrypts the level 1 ciphertext data through the public key to obtain operation data, verifies the operation data through the device serial number, timestamp and digital signature carried by the operation data, and classifies and stores the verified operation data based on the classification label;

[0021] A risk assessment report is obtained by performing a risk assessment on the operational data through big data technology.

[0022] Furthermore, the step S5 is specifically as follows:

[0023] The data asset management server pushes the risk assessment report to the pre-associated management terminal in real time through the Webhook mechanism;

[0024] The data asset management server encrypts the risk assessment report through the Twofish algorithm to obtain first ciphertext data, randomly generates a character string of specified length, adds the character string to the specified position of the first ciphertext data to obtain second ciphertext data, encrypts the second ciphertext data through the AES256 algorithm to obtain third ciphertext data, divides the third ciphertext data based on a preset division ratio and swaps the order to obtain fourth ciphertext data, encrypts the fourth ciphertext data through the XTEA algorithm to obtain an encrypted report, and stores and distributes the encrypted report.

[0025] In a second aspect, the present invention provides a data asset management system based on trusted data upload, comprising the following modules:

[0026] An operation data verification module, used to collect operation data carrying a device serial number, a timestamp, and a digital signature, and verify the operation data based on the device serial number, timestamp, and digital signature;

[0027] An operation data encryption and uploading module is used to encrypt the verified operation data into encrypted data, set a classification label for the encrypted data, and upload the encrypted data to the blockchain;

[0028] A decentralized storage module, used for blockchain to decentralize the storage of the received encrypted data and upload the encrypted data to a data asset management server;

[0029] A risk assessment module, used for the data asset management server to decrypt and verify the received encrypted data to obtain operation data, and to perform risk assessment on the operation data to obtain a risk assessment report;

[0030] The risk assessment report management module is used for the data asset management server to push the risk assessment report to the pre-associated management terminal in real time and encrypt and store the risk assessment report.

[0031] Furthermore, the operation data verification module is specifically used to:

[0032] A data collection cycle is set, and operation data carrying a device serial number, a timestamp, and a digital signature are automatically collected from a database based on the data collection cycle; the digital signature is obtained by performing a hash calculation on the operation data;

[0033] The operation data is verified for integrity through the digital signature, the operation data is verified for timeliness through the timestamp, and finally the operation data is verified for legitimacy through the device serial number.

[0034] Furthermore, the operation data encryption and chaining module is specifically used for:

[0035] A pair of public keys and private keys are randomly created through a security chip, the verified operating data is encrypted through the private key to obtain first-level ciphertext data, the first-level ciphertext data and the public key are encrypted through the RC6 algorithm to obtain second-level ciphertext data, each character of the second-level ciphertext data is mapped based on a preset mapping rule to obtain third-level ciphertext data, the number 1 and the letter Q in the third-level ciphertext data are swapped, and the number 2 and the letter W are swapped to obtain fourth-level ciphertext data, the fourth-level ciphertext data is encrypted through the 3DES algorithm to obtain encrypted data, a classification label for the encrypted data is set, the classification label is added to the file name of the encrypted data, and the encrypted data is uploaded to the blockchain through the TLS protocol.

[0036] Furthermore, the decentralized storage module is specifically used for:

[0037] The blockchain stores the received encrypted data in blocks on different nodes through a distributed network and consensus mechanism, and uploads the encrypted data to the data asset management server through the SSL protocol;

[0038] The risk assessment module is specifically used for:

[0039] The data asset management server receives the encrypted data in real time, decrypts the encrypted data through the 3DES algorithm to obtain level 4 ciphertext data, swaps the number 1 and the letter Q, and swaps the number 2 and the letter W in the level 4 ciphertext data to obtain level 3 ciphertext data, maps each character of the level 3 ciphertext data based on a preset mapping rule to obtain level 2 ciphertext data, decrypts the level 2 ciphertext data through the RC6 algorithm to obtain level 1 ciphertext data and a public key; decrypts the level 1 ciphertext data through the public key to obtain operation data, verifies the operation data through the device serial number, timestamp and digital signature carried by the operation data, and classifies and stores the verified operation data based on the classification label;

[0040] A risk assessment report is obtained by performing a risk assessment on the operational data through big data technology.

[0041] Furthermore, the risk assessment report management module is specifically used to:

[0042] The data asset management server pushes the risk assessment report to the pre-associated management terminal in real time through the Webhook mechanism;

[0043] The data asset management server encrypts the risk assessment report through the Twofish algorithm to obtain first ciphertext data, randomly generates a character string of specified length, adds the character string to the specified position of the first ciphertext data to obtain second ciphertext data, encrypts the second ciphertext data through the AES256 algorithm to obtain third ciphertext data, divides the third ciphertext data based on a preset division ratio and swaps the order to obtain fourth ciphertext data, encrypts the fourth ciphertext data through the XTEA algorithm to obtain an encrypted report, and stores and distributes the encrypted report.

[0044] The advantages of the present invention are:

[0045] 1. By collecting operational data carrying device serial numbers, timestamps and digital signatures, the operational data is verified based on the device serial numbers, timestamps and digital signatures, the verified operational data is encrypted into encrypted data and a classification label is set, and then the encrypted data is uploaded to the blockchain; then the blockchain performs decentralized storage of the received encrypted data and uploads the encrypted data to the data asset management server; then the data asset management server decrypts and verifies the received encrypted data to obtain operational data, performs risk assessment on the operational data to obtain a risk assessment report, pushes the risk assessment report to the pre-associated management terminal in real time, and encrypts and stores the risk assessment report; that is, corresponding security measures are added to each link of the operational data. First, the collected operational data is multi-dimensionally verified, and the operational data that passes the verification is encrypted into encrypted data and uploaded to the blockchain, which is decentralized stored by the blockchain to avoid tampering and facilitate later traceability. Before the data asset management server performs risk assessment, it needs to decrypt and verify the encrypted data to avoid risk assessment based on erroneous operational data, which ultimately greatly improves the reliability of data asset management.

[0046] 2. Automatically collect operational data from the database through the data collection cycle, ensuring the timeliness of operational data collection, avoiding mistakes such as forgetfulness caused by manual collection, and further improving the reliability of data asset management.

[0047] 3. By setting the operation data to carry the device serial number, timestamp and digital signature, the device serial number, timestamp and digital signature can be used to perform legality verification, timeliness verification and integrity verification to ensure the reliability of the operation data.

[0048] 4. Create a pair of public and private keys through the security chip, encrypt the verified operation data with the private key to obtain the first-level ciphertext data, encrypt the first-level ciphertext data and the public key with the RC6 algorithm to obtain the second-level ciphertext data, map each character of the second-level ciphertext data based on the mapping rule to obtain the third-level ciphertext data, swap the number 1 and the letter Q in the third-level ciphertext data, and swap the number 2 and the letter W to obtain the fourth-level ciphertext data, encrypt the fourth-level ciphertext data with the 3DES algorithm to obtain encrypted data, set the classification label of the encrypted data, add the classification label to the file name of the encrypted data, and upload the encrypted data to the blockchain through the TLS protocol; since the data encrypted by the private key can only be decrypted by the public key, and the encryption process combines multiple encryption algorithms and data transformation rules, if the corresponding encryption algorithm or data transformation rule is not known, the encrypted data cannot be cracked, and the TLS protocol is a secure transmission protocol, at least 7 security measures are taken before and after (security chip, public and private keys, RC6 algorithm, mapping rules, number and letter swap, 3DES algorithm, TLS protocol), thereby greatly improving the security of operation data upload.

[0049] 5. Conduct risk assessment on operational data through big data technology to effectively improve the efficiency and reliability of risk assessment.

[0050] 6. Encrypt the risk assessment report by using the Twofish algorithm to obtain the first ciphertext data, randomly generate a character string of a specified length, add the character string to the specified position of the first ciphertext data to obtain the second ciphertext data, encrypt the second ciphertext data by using the AES256 algorithm to obtain the third ciphertext data, divide the third ciphertext data based on a preset division ratio and swap the order to obtain the fourth ciphertext data, encrypt the fourth ciphertext data by using the XTEA algorithm to obtain an encrypted report, store and distribute the encrypted report, and take at least 7 security measures (Twofish algorithm, character string, specified position, AES256 algorithm, division ratio, XTEA algorithm, distributed backup), thereby greatly improving the security of the storage of the risk assessment report. BRIEF DESCRIPTION OF THE DRAWINGS

[0051] The present invention will be further described below in conjunction with embodiments with reference to the accompanying drawings.

[0052] Figure 1 It is a flow chart of a data asset management method based on trusted data uploading of the present invention.

[0053] Figure 2 It is a structural schematic diagram of a data asset management system based on trusted data uploading of the present invention. DETAILED DESCRIPTION

[0054] The technical solution in the embodiments of the present application has the following overall idea: corresponding security measures are added to each link of the operation data. First, the collected operation data is subjected to multi-dimensional verification. The operation data that passes the verification is encrypted into encrypted data and uploaded to the blockchain. The blockchain performs decentralized storage to avoid tampering and facilitate later traceability. The data asset management server needs to decrypt and verify the encrypted data before performing risk assessment to avoid risk assessment based on erroneous operation data, so as to improve the reliability of data asset management.

[0055] Please refer to Figure 1 to Figure 2 As shown, a preferred embodiment of a data asset management method based on trusted data upload of the present invention includes the following steps:

[0056] Step S1: collect operation data carrying device serial number, timestamp and digital signature, and verify the operation data based on the device serial number, timestamp and digital signature;

[0057] Step S2: Encrypt the verified operation data into encrypted data, set a classification label for the encrypted data, and upload the encrypted data to the blockchain; in specific implementation, the classification label can be set based on the file format of the operation data, the device generating it, the application scenario, etc., and the classification storage and retrieval can be performed based on the classification label later;

[0058] Step S3: The blockchain stores the received encrypted data in a decentralized manner and uploads the encrypted data to a data asset management server;

[0059] Step S4: The data asset management server decrypts and verifies the received encrypted data to obtain operation data, and performs risk assessment on the operation data to obtain a risk assessment report;

[0060] Step S5: The data asset management server pushes the risk assessment report to the pre-associated management terminal in real time, and encrypts and stores the risk assessment report.

[0061] When a dispute arises over the intellectual property rights of the operational data, the data asset management server supports providing data verification, evidence submission and review services, as well as trusted data (encrypted data) on the blockchain as key evidence for dispute resolution.

[0062] The step S1 is specifically as follows:

[0063] A data collection cycle is set, and operation data carrying a device serial number, a timestamp, and a digital signature are automatically collected from a database based on the data collection cycle; the digital signature is obtained by performing a hash calculation on the operation data;

[0064] The operation data is verified for integrity through the digital signature, the operation data is verified for timeliness through the timestamp, and finally the operation data is verified for legitimacy through the device serial number.

[0065] Automatically collecting operational data from the database during the data collection cycle ensures the timeliness of operational data collection, avoids mistakes such as forgetfulness caused by manual collection, and further improves the reliability of data asset management.

[0066] By setting the operation data to carry the device serial number, timestamp and digital signature, the device serial number, timestamp and digital signature can be used to perform legality verification, timeliness verification and integrity verification to ensure the reliability of the operation data.

[0067] The step S2 is specifically as follows:

[0068] A pair of public keys and private keys are randomly created through a security chip, the verified operating data is encrypted through the private key to obtain first-level ciphertext data, the first-level ciphertext data and the public key are encrypted through the RC6 algorithm to obtain second-level ciphertext data, each character of the second-level ciphertext data is mapped based on a preset mapping rule to obtain third-level ciphertext data, the number 1 and the letter Q in the third-level ciphertext data are swapped, and the number 2 and the letter W are swapped to obtain fourth-level ciphertext data, the fourth-level ciphertext data is encrypted through the 3DES algorithm to obtain encrypted data, a classification label for the encrypted data is set, the classification label is added to the file name of the encrypted data, and the encrypted data is uploaded to the blockchain through the TLS protocol.

[0069] A pair of public and private keys are created through the security chip. The verified operation data is encrypted with the private key to obtain the first-level ciphertext data. The first-level ciphertext data and the public key are encrypted with the RC6 algorithm to obtain the second-level ciphertext data. Based on the mapping rule, each character of the second-level ciphertext data is mapped to obtain the third-level ciphertext data. The number 1 and the letter Q in the third-level ciphertext data are swapped, and the number 2 and the letter W are swapped to obtain the fourth-level ciphertext data. The fourth-level ciphertext data is encrypted with the 3DES algorithm to obtain encrypted data. A classification label for the encrypted data is set, and the classification label is added to the file name of the encrypted data. The encrypted data is uploaded to the blockchain through the TLS protocol. Since the data encrypted by the private key can only be decrypted by the public key, and the encryption process combines multiple encryption algorithms and data transformation rules, if the corresponding encryption algorithm or data transformation rule is not known, the encrypted data cannot be cracked. The TLS protocol is a secure transmission protocol, and at least 7 security measures are taken before and after (security chip, public and private keys, RC6 algorithm, mapping rules, number and letter swapping, 3DES algorithm, TLS protocol), thereby greatly improving the security of the operation data upload.

[0070] The step S3 is specifically as follows:

[0071] The blockchain stores the received encrypted data in blocks on different nodes through a distributed network and consensus mechanism, and uploads the encrypted data to the data asset management server through the SSL protocol;

[0072] The step S4 is specifically as follows:

[0073] The data asset management server receives the encrypted data in real time, decrypts the encrypted data through the 3DES algorithm to obtain level 4 ciphertext data, swaps the number 1 and the letter Q, and swaps the number 2 and the letter W in the level 4 ciphertext data to obtain level 3 ciphertext data, maps each character of the level 3 ciphertext data based on a preset mapping rule to obtain level 2 ciphertext data, decrypts the level 2 ciphertext data through the RC6 algorithm to obtain level 1 ciphertext data and a public key; decrypts the level 1 ciphertext data through the public key to obtain operation data, verifies the operation data through the device serial number, timestamp and digital signature carried by the operation data, and classifies and stores the verified operation data based on the classification label;

[0074] The risk assessment report is obtained by performing risk assessment on the operational data through big data technology, for example, analyzing missing data, erroneous data, or determining anomalies based on the time when the data was generated.

[0075] Conduct risk assessment on operational data through big data technology to effectively improve the efficiency and reliability of risk assessment.

[0076] The step S5 is specifically as follows:

[0077] The data asset management server pushes the risk assessment report to the pre-associated management terminal in real time through the Webhook mechanism;

[0078] The data asset management server encrypts the risk assessment report through the Twofish algorithm to obtain first ciphertext data, randomly generates a character string of specified length, adds the character string to the specified position of the first ciphertext data to obtain second ciphertext data, encrypts the second ciphertext data through the AES256 algorithm to obtain third ciphertext data, divides the third ciphertext data based on a preset division ratio and swaps the order to obtain fourth ciphertext data, encrypts the fourth ciphertext data through the XTEA algorithm to obtain an encrypted report, and stores and distributes the encrypted report.

[0079] The risk assessment report is encrypted by the Twofish algorithm to obtain the first ciphertext data, a character string of a specified length is randomly generated, the character string is added to the specified position of the first ciphertext data to obtain the second ciphertext data, the second ciphertext data is encrypted by the AES256 algorithm to obtain the third ciphertext data, the third ciphertext data is divided based on a preset division ratio and the order is swapped to obtain the fourth ciphertext data, the fourth ciphertext data is encrypted by the XTEA algorithm to obtain an encrypted report, the encrypted report is stored and distributedly backed up, and at least 7 security measures are taken before and after (Twofish algorithm, character string, specified position, AES256 algorithm, division ratio, XTEA algorithm, distributed backup), thereby greatly improving the security of the storage of the risk assessment report.

[0080] A preferred embodiment of a data asset management system based on trusted data upload of the present invention includes the following modules:

[0081] An operation data verification module, used to collect operation data carrying a device serial number, a timestamp, and a digital signature, and verify the operation data based on the device serial number, timestamp, and digital signature;

[0082] An operation data encryption and uploading module is used to encrypt the verified operation data into encrypted data, set a classification label for the encrypted data, and upload the encrypted data to the blockchain; in specific implementation, the classification label can be set based on the file format of the operation data, the device generating it, the application scenario, etc., and the classification storage and retrieval can be performed based on the classification label later;

[0083] A decentralized storage module, used for blockchain to decentralize the storage of the received encrypted data and upload the encrypted data to a data asset management server;

[0084] A risk assessment module, used for the data asset management server to decrypt and verify the received encrypted data to obtain operation data, and to perform risk assessment on the operation data to obtain a risk assessment report;

[0085] The risk assessment report management module is used for the data asset management server to push the risk assessment report to the pre-associated management terminal in real time and encrypt and store the risk assessment report.

[0086] When a dispute arises over the intellectual property rights of the operational data, the data asset management server supports providing data verification, evidence submission and review services, as well as trusted data (encrypted data) on the blockchain as key evidence for dispute resolution.

[0087] The operation data verification module is specifically used for:

[0088] A data collection cycle is set, and operation data carrying a device serial number, a timestamp, and a digital signature are automatically collected from a database based on the data collection cycle; the digital signature is obtained by performing a hash calculation on the operation data;

[0089] The operation data is verified for integrity through the digital signature, the operation data is verified for timeliness through the timestamp, and finally the operation data is verified for legitimacy through the device serial number.

[0090] Automatically collecting operational data from the database during the data collection cycle ensures the timeliness of operational data collection, avoids mistakes such as forgetfulness caused by manual collection, and further improves the reliability of data asset management.

[0091] By setting the operation data to carry the device serial number, timestamp and digital signature, the device serial number, timestamp and digital signature can be used to perform legality verification, timeliness verification and integrity verification to ensure the reliability of the operation data.

[0092] The operation data encryption and chaining module is specifically used for:

[0093] A pair of public keys and private keys are randomly created through a security chip, the verified operating data is encrypted through the private key to obtain first-level ciphertext data, the first-level ciphertext data and the public key are encrypted through the RC6 algorithm to obtain second-level ciphertext data, each character of the second-level ciphertext data is mapped based on a preset mapping rule to obtain third-level ciphertext data, the number 1 and the letter Q in the third-level ciphertext data are swapped, and the number 2 and the letter W are swapped to obtain fourth-level ciphertext data, the fourth-level ciphertext data is encrypted through the 3DES algorithm to obtain encrypted data, a classification label for the encrypted data is set, the classification label is added to the file name of the encrypted data, and the encrypted data is uploaded to the blockchain through the TLS protocol.

[0094] A pair of public and private keys are created through the security chip. The verified operation data is encrypted with the private key to obtain the first-level ciphertext data. The first-level ciphertext data and the public key are encrypted with the RC6 algorithm to obtain the second-level ciphertext data. Based on the mapping rule, each character of the second-level ciphertext data is mapped to obtain the third-level ciphertext data. The number 1 and the letter Q in the third-level ciphertext data are swapped, and the number 2 and the letter W are swapped to obtain the fourth-level ciphertext data. The fourth-level ciphertext data is encrypted with the 3DES algorithm to obtain encrypted data. A classification label for the encrypted data is set, and the classification label is added to the file name of the encrypted data. The encrypted data is uploaded to the blockchain through the TLS protocol. Since the data encrypted by the private key can only be decrypted by the public key, and the encryption process combines multiple encryption algorithms and data transformation rules, if the corresponding encryption algorithm or data transformation rule is not known, the encrypted data cannot be cracked. The TLS protocol is a secure transmission protocol, and at least 7 security measures are taken before and after (security chip, public and private keys, RC6 algorithm, mapping rules, number and letter swapping, 3DES algorithm, TLS protocol), thereby greatly improving the security of the operation data upload.

[0095] The decentralized storage module is specifically used for:

[0096] The blockchain stores the received encrypted data in blocks on different nodes through a distributed network and consensus mechanism, and uploads the encrypted data to the data asset management server through the SSL protocol;

[0097] The risk assessment module is specifically used for:

[0098] The data asset management server receives the encrypted data in real time, decrypts the encrypted data through the 3DES algorithm to obtain level 4 ciphertext data, swaps the number 1 and the letter Q, and swaps the number 2 and the letter W in the level 4 ciphertext data to obtain level 3 ciphertext data, maps each character of the level 3 ciphertext data based on a preset mapping rule to obtain level 2 ciphertext data, decrypts the level 2 ciphertext data through the RC6 algorithm to obtain level 1 ciphertext data and a public key; decrypts the level 1 ciphertext data through the public key to obtain operation data, verifies the operation data through the device serial number, timestamp and digital signature carried by the operation data, and classifies and stores the verified operation data based on the classification label;

[0099] The risk assessment report is obtained by performing risk assessment on the operational data through big data technology, for example, analyzing missing data, erroneous data, or determining anomalies based on the time when the data was generated.

[0100] Conduct risk assessment on operational data through big data technology to effectively improve the efficiency and reliability of risk assessment.

[0101] The risk assessment report management module is specifically used for:

[0102] The data asset management server pushes the risk assessment report to the pre-associated management terminal in real time through the Webhook mechanism;

[0103] The data asset management server encrypts the risk assessment report through the Twofish algorithm to obtain first ciphertext data, randomly generates a character string of specified length, adds the character string to the specified position of the first ciphertext data to obtain second ciphertext data, encrypts the second ciphertext data through the AES256 algorithm to obtain third ciphertext data, divides the third ciphertext data based on a preset division ratio and swaps the order to obtain fourth ciphertext data, encrypts the fourth ciphertext data through the XTEA algorithm to obtain an encrypted report, and stores and distributes the encrypted report.

[0104] The risk assessment report is encrypted by the Twofish algorithm to obtain the first ciphertext data, a character string of a specified length is randomly generated, the character string is added to the specified position of the first ciphertext data to obtain the second ciphertext data, the second ciphertext data is encrypted by the AES256 algorithm to obtain the third ciphertext data, the third ciphertext data is divided based on a preset division ratio and the order is swapped to obtain the fourth ciphertext data, the fourth ciphertext data is encrypted by the XTEA algorithm to obtain an encrypted report, the encrypted report is stored and distributedly backed up, and at least 7 security measures are taken before and after (Twofish algorithm, character string, specified position, AES256 algorithm, division ratio, XTEA algorithm, distributed backup), thereby greatly improving the security of the storage of the risk assessment report.

[0105] In summary, the advantages of the present invention are:

[0106] 1. By collecting operational data carrying device serial numbers, timestamps and digital signatures, the operational data is verified based on the device serial numbers, timestamps and digital signatures, the verified operational data is encrypted into encrypted data and a classification label is set, and then the encrypted data is uploaded to the blockchain; then the blockchain performs decentralized storage of the received encrypted data and uploads the encrypted data to the data asset management server; then the data asset management server decrypts and verifies the received encrypted data to obtain operational data, performs risk assessment on the operational data to obtain a risk assessment report, pushes the risk assessment report to the pre-associated management terminal in real time, and encrypts and stores the risk assessment report; that is, corresponding security measures are added to each link of the operational data. First, the collected operational data is multi-dimensionally verified, and the operational data that passes the verification is encrypted into encrypted data and uploaded to the blockchain, which is decentralized stored by the blockchain to avoid tampering and facilitate later traceability. Before the data asset management server performs risk assessment, it needs to decrypt and verify the encrypted data to avoid risk assessment based on erroneous operational data, which ultimately greatly improves the reliability of data asset management.

[0107] 2. Automatically collect operational data from the database through the data collection cycle, ensuring the timeliness of operational data collection, avoiding mistakes such as forgetfulness caused by manual collection, and further improving the reliability of data asset management.

[0108] 3. By setting the operation data to carry the device serial number, timestamp and digital signature, the device serial number, timestamp and digital signature can be used to perform legality verification, timeliness verification and integrity verification to ensure the reliability of the operation data.

[0109] 4. Create a pair of public and private keys through the security chip, encrypt the verified operation data with the private key to obtain the first-level ciphertext data, encrypt the first-level ciphertext data and the public key with the RC6 algorithm to obtain the second-level ciphertext data, map each character of the second-level ciphertext data based on the mapping rule to obtain the third-level ciphertext data, swap the number 1 and the letter Q in the third-level ciphertext data, and swap the number 2 and the letter W to obtain the fourth-level ciphertext data, encrypt the fourth-level ciphertext data with the 3DES algorithm to obtain encrypted data, set the classification label of the encrypted data, add the classification label to the file name of the encrypted data, and upload the encrypted data to the blockchain through the TLS protocol; since the data encrypted by the private key can only be decrypted by the public key, and the encryption process combines multiple encryption algorithms and data transformation rules, if the corresponding encryption algorithm or data transformation rule is not known, the encrypted data cannot be cracked, and the TLS protocol is a secure transmission protocol, at least 7 security measures are taken before and after (security chip, public and private keys, RC6 algorithm, mapping rules, number and letter swap, 3DES algorithm, TLS protocol), thereby greatly improving the security of operation data upload.

[0110] 5. Conduct risk assessment on operational data through big data technology to effectively improve the efficiency and reliability of risk assessment.

[0111] 6. Encrypt the risk assessment report by using the Twofish algorithm to obtain the first ciphertext data, randomly generate a character string of a specified length, add the character string to the specified position of the first ciphertext data to obtain the second ciphertext data, encrypt the second ciphertext data by using the AES256 algorithm to obtain the third ciphertext data, divide the third ciphertext data based on a preset division ratio and swap the order to obtain the fourth ciphertext data, encrypt the fourth ciphertext data by using the XTEA algorithm to obtain an encrypted report, store and distribute the encrypted report, and take at least 7 security measures (Twofish algorithm, character string, specified position, AES256 algorithm, division ratio, XTEA algorithm, distributed backup), thereby greatly improving the security of the storage of the risk assessment report.

[0112] Although the specific implementation modes of the present invention are described above, those skilled in the art should understand that the specific implementation modes described are only illustrative and are not intended to limit the scope of the present invention. Equivalent modifications and changes made by those skilled in the art in accordance with the spirit of the present invention should be included in the scope of protection of the claims of the present invention.

Claims

1. A data asset management method based on trusted data upload, characterized in that: The steps include: Step S1: collect operation data carrying device serial number, timestamp and digital signature, and verify the operation data based on the device serial number, timestamp and digital signature; Step S2: Encrypt the verified operation data into encrypted data, set a classification label for the encrypted data, and upload the encrypted data to the blockchain; Step S3: The blockchain stores the received encrypted data in a decentralized manner and uploads the encrypted data to a data asset management server; Step S4: The data asset management server decrypts and verifies the received encrypted data to obtain operation data, and performs risk assessment on the operation data to obtain a risk assessment report; Step S5: The data asset management server pushes the risk assessment report to the pre-associated management terminal in real time, and encrypts and stores the risk assessment report.

2. A data asset management method based on trusted data upload as claimed in claim 1, characterized in that: The step S1 is specifically as follows: A data collection cycle is set, and operation data carrying a device serial number, a timestamp, and a digital signature are automatically collected from a database based on the data collection cycle; the digital signature is obtained by performing a hash calculation on the operation data; The operation data is verified for integrity through the digital signature, the operation data is verified for timeliness through the timestamp, and finally the operation data is verified for legitimacy through the device serial number.

3. A data asset management method based on trusted data upload as claimed in claim 1, characterized in that: The step S2 is specifically as follows: A pair of public keys and private keys are randomly created through a security chip, the verified operating data is encrypted through the private key to obtain first-level ciphertext data, the first-level ciphertext data and the public key are encrypted through the RC6 algorithm to obtain second-level ciphertext data, each character of the second-level ciphertext data is mapped based on a preset mapping rule to obtain third-level ciphertext data, the number 1 and the letter Q in the third-level ciphertext data are swapped, and the number 2 and the letter W are swapped to obtain fourth-level ciphertext data, the fourth-level ciphertext data is encrypted through the 3DES algorithm to obtain encrypted data, a classification label for the encrypted data is set, the classification label is added to the file name of the encrypted data, and the encrypted data is uploaded to the blockchain through the TLS protocol.

4. A data asset management method based on trusted data upload as claimed in claim 1, characterized in that: The step S3 is specifically as follows: The blockchain stores the received encrypted data in blocks on different nodes through a distributed network and consensus mechanism, and uploads the encrypted data to the data asset management server through the SSL protocol; The step S4 is specifically as follows: The data asset management server receives the encrypted data in real time, decrypts the encrypted data using the 3DES algorithm to obtain level 4 ciphertext data, swaps the number 1 and the letter Q, and swaps the number 2 and the letter W in the level 4 ciphertext data to obtain level 3 ciphertext data, maps each character of the level 3 ciphertext data based on a preset mapping rule to obtain level 2 ciphertext data, and decrypts the level 2 ciphertext data using the RC6 algorithm to obtain level 1 ciphertext data and a public key; Decrypting the first-level ciphertext data by the public key to obtain the operation data, verifying the operation data by the device serial number, timestamp and digital signature carried by the operation data, and classifying and storing the verified operation data based on the classification label; A risk assessment report is obtained by performing risk assessment on the operational data through big data technology.

5. A data asset management method based on trusted data upload as claimed in claim 1, characterized in that: The step S5 is specifically as follows: The data asset management server pushes the risk assessment report to the pre-associated management terminal in real time through the Webhook mechanism; The data asset management server encrypts the risk assessment report through the Twofish algorithm to obtain first ciphertext data, randomly generates a character string of specified length, adds the character string to the specified position of the first ciphertext data to obtain second ciphertext data, encrypts the second ciphertext data through the AES256 algorithm to obtain third ciphertext data, divides the third ciphertext data based on a preset division ratio and swaps the order to obtain fourth ciphertext data, encrypts the fourth ciphertext data through the XTEA algorithm to obtain an encrypted report, and stores and distributes the encrypted report.

6. A data asset management system based on trusted data upload, characterized in that: Includes the following modules: An operation data verification module, used to collect operation data carrying a device serial number, a timestamp, and a digital signature, and verify the operation data based on the device serial number, timestamp, and digital signature; An operation data encryption and uploading module is used to encrypt the verified operation data into encrypted data, set a classification label for the encrypted data, and upload the encrypted data to the blockchain; A decentralized storage module, used for blockchain to decentralize the storage of the received encrypted data and upload the encrypted data to a data asset management server; A risk assessment module, used for the data asset management server to decrypt and verify the received encrypted data to obtain operation data, and to perform risk assessment on the operation data to obtain a risk assessment report; The risk assessment report management module is used for the data asset management server to push the risk assessment report to the pre-associated management terminal in real time and encrypt and store the risk assessment report.

7. A data asset management system based on trusted data upload as claimed in claim 6, characterized in that: The operation data verification module is specifically used for: A data collection cycle is set, and operation data carrying a device serial number, a timestamp, and a digital signature are automatically collected from a database based on the data collection cycle; the digital signature is obtained by performing a hash calculation on the operation data; The operation data is verified for integrity through the digital signature, the operation data is verified for timeliness through the timestamp, and finally the operation data is verified for legitimacy through the device serial number.

8. A data asset management system based on trusted data upload as claimed in claim 6, characterized in that: The operation data encryption and chaining module is specifically used for: A pair of public keys and private keys are randomly created through a security chip, the verified operating data is encrypted through the private key to obtain first-level ciphertext data, the first-level ciphertext data and the public key are encrypted through the RC6 algorithm to obtain second-level ciphertext data, each character of the second-level ciphertext data is mapped based on a preset mapping rule to obtain third-level ciphertext data, the number 1 and the letter Q in the third-level ciphertext data are swapped, and the number 2 and the letter W are swapped to obtain fourth-level ciphertext data, the fourth-level ciphertext data is encrypted through the 3DES algorithm to obtain encrypted data, a classification label for the encrypted data is set, the classification label is added to the file name of the encrypted data, and the encrypted data is uploaded to the blockchain through the TLS protocol.

9. A data asset management system based on trusted data upload as claimed in claim 6, characterized in that: The decentralized storage module is specifically used for: The blockchain stores the received encrypted data in blocks on different nodes through a distributed network and consensus mechanism, and uploads the encrypted data to the data asset management server through the SSL protocol; The risk assessment module is specifically used for: The data asset management server receives the encrypted data in real time, decrypts the encrypted data using the 3DES algorithm to obtain level 4 ciphertext data, swaps the number 1 and the letter Q, and swaps the number 2 and the letter W in the level 4 ciphertext data to obtain level 3 ciphertext data, maps each character of the level 3 ciphertext data based on a preset mapping rule to obtain level 2 ciphertext data, and decrypts the level 2 ciphertext data using the RC6 algorithm to obtain level 1 ciphertext data and a public key; Decrypting the first-level ciphertext data by the public key to obtain the operation data, verifying the operation data by the device serial number, timestamp and digital signature carried by the operation data, and classifying and storing the verified operation data based on the classification label; A risk assessment report is obtained by performing risk assessment on the operational data through big data technology.

10. A data asset management system based on trusted data upload as claimed in claim 6, characterized in that: The risk assessment report management module is specifically used for: The data asset management server pushes the risk assessment report to the pre-associated management terminal in real time through the Webhook mechanism; The data asset management server encrypts the risk assessment report through the Twofish algorithm to obtain first ciphertext data, randomly generates a character string of specified length, adds the character string to the specified position of the first ciphertext data to obtain second ciphertext data, encrypts the second ciphertext data through the AES256 algorithm to obtain third ciphertext data, divides the third ciphertext data based on a preset division ratio and swaps the order to obtain fourth ciphertext data, encrypts the fourth ciphertext data through the XTEA algorithm to obtain an encrypted report, and stores and distributes the encrypted report.

Images