A blockchain-based industrial data security storage method and system

Abstract

The present invention discloses a blockchain-based industrial data security storage method and system, comprising: clustering based on department type, assigning a blockchain network and server to each cluster, hashing the key fields of the industrial data to be operated, partitioning the hash slots and mapping them to a hash ring, obtaining an operation sequence, setting a lifecycle for the operation sequence, eliminating invalid historical operations in the operation sequence, designing a smart contract algorithm, utilizing the hash value information in the operation record, automatically backtracking to historical versions when data is missing, and then setting the permission update frequency, then applying a distributed coordination algorithm to the blockchain network server to form a blockchain network server cluster, and finally setting a dynamic key update mechanism. This method ensures the security of industrial data throughout its lifecycle through multi-link collaboration, improving data security, integrity, and availability, effectively addressing various potential risks, and having good interpretability.

Description

Technical Field

[0001] The present invention relates to the field of data security and privacy protection, and in particular to a blockchain-based industrial data security storage method and system. Background Art

[0002] In the industrial sector, with the acceleration of digital transformation, data is growing explosively and coming from a wide range of sources, covering production equipment operating parameters, process flow information, quality inspection data, and more. However, the secure storage of industrial data currently faces many severe challenges.

[0003] On the one hand, traditional centralized storage architectures present a single point of failure risk. Once a server is attacked or hardware fails, it can lead to massive data loss or leakage, severely impacting enterprise production operations. On the other hand, industrial data, during its transfer and storage, faces threats from unauthorized internal access and external cyberattacks, making it difficult to guarantee data integrity and confidentiality. Furthermore, the lack of efficient and reliable data sharing mechanisms across different industrial sectors hinders overall enterprise productivity.

[0004] Blockchain technology, with its decentralized, tamper-proof, and traceable characteristics, offers a solution. A blockchain-based method and system for secure industrial data storage can enhance data security and credibility, optimize data sharing processes, and enable intelligent and secure management of industrial data. Summary of the Invention

[0005] The purpose of the present invention is to provide a blockchain-based industrial data security storage method and system.

[0006] To achieve the above object, the present invention is implemented according to the following technical solutions:

[0007] The first aspect of the present invention provides a blockchain-based industrial data security storage method, comprising:

[0008] S100 clusters industrial data based on department type, assigns a blockchain network to each cluster, and configures servers for each blockchain network;

[0009] S200 hashes the key fields of the industrial data to be operated, partitions each hash into hash slots, and maps them to the corresponding hash ring of the blockchain network to obtain an operation sequence;

[0010] S300 eliminates invalid historical operations in the operation sequence and retains operation records within the life cycle;

[0011] S400 designs a smart contract algorithm that uses the hash value information in the operation record to automatically trace back to the historical version of the data for recovery when data is missing to obtain complete data;

[0012] S500 sets the permission update frequency based on the difference in key spaces between the same permission levels in the integrity data;

[0013] After updating permissions according to the permission update frequency, S600 applies a distributed coordination algorithm to servers of different blockchain networks based on data security assessment to form a blockchain network server cluster;

[0014] S700: If the blockchain server cluster is in an abnormal state, data access is interrupted and a dynamic key update mechanism is immediately triggered to achieve data security protection.

[0015] As a further method, the method of assigning a blockchain network to each cluster and configuring a server for each blockchain network includes:

[0016] Asymmetric encryption is used to generate a public-private key pair for the industrial data in each cluster. The private key is stored locally, and the public key is used for communication encryption and identity authentication between nodes to generate a blockchain network.

[0017] Determine the permissions of each node in the blockchain network based on job roles and data access requirements within the department;

[0018] For each assigned blockchain network, configure server resource size based on the amount of data it carries, including the number of servers, performance parameters, and storage capacity;

[0019] During the server configuration process, critical server components are backed up through redundant backup technology, and a dynamic adjustment mechanism for server resources is established based on actual data growth and processing load.

[0020] As a further method, the method of hashing the key fields of the industrial data to be operated includes:

[0021] Acquire industrial data that needs to be acted upon;

[0022] For the industrial data to be operated, select key fields based on the departmental relevance of the data. Specifically, analyze the business processes of each department and use the fields that reflect the department's business information as key fields.

[0023] Perform hashing on the key fields, where the hash function expression is:

[0024] ,

[0025] Among them, x represents the key field, n and m are the total number of key fields and the number of iterations respectively. is the weight coefficient of the sensitivity of the i-th key field data, for hashing algorithms, is the data value of the i-th key field, is the circular right shift function, r is the displacement value of the circular right shift, k is the security key, s is the random salt value, j is the current iteration number, Represents a modulo operation, where p is a large prime number that ensures that the function results are evenly distributed.

[0026] As a further method, the method of mapping each hash to the corresponding hash ring of the blockchain network after hash slot partitioning includes:

[0027] The total number of hash slots is determined based on the transaction processing efficiency of the blockchain network. The expression is:

[0028] ,

[0029] in, and are the average transaction volume per second and the standard deviation of transaction volume per second of the blockchain network, is the coefficient of fluctuation, is the redundancy coefficient, The average number of transactions that a single hash slot can process per second.

[0030] Divide the hash value range evenly into hash slots to obtain hash slot partitions, and map each hash slot partition to the hash ring. The expression of the mapping function is:

[0031] ,

[0032] in, is the starting mapping position of the i-th partition on the hash ring, t is the current timestamp, T is the time window length, is the number of hash slots contained in the i-th partition, is the data feature hash value of the i-th partition, is the risk weight coefficient of the i-th partition, is the coefficient used to adjust the overall scaling and offset of the mapping, M is the total number of partitions, L is the number of equally spaced points on the hash ring, and C is the circumference of the hash ring.

[0033] As a further method, the method of eliminating invalid historical operations in the operation sequence and retaining operation records within the life cycle includes:

[0034] Set the lifecycle for each operation record in the operation sequence. The expression is:

[0035] ,

[0036] in, and They are time weight parameters used to adjust the impact of creation time and last access time on life cycle. is the current time, and They are the creation time and last access time of the operation record, is the normalization factor, H is the number of activity factors in the operation record, and are the weight and value of the hth activity factor, U is the total number of risk factors in the operation record, and are the weight and value of the j-th risk factor, respectively, and S is the total risk score of the operation record;

[0037] Traverse each operation record in the operation sequence, obtain its timestamp, and compare it with the life cycle of the operation record. If the life cycle of the operation record is exceeded, the operation record is judged to be an invalid operation;

[0038] The operation records judged to be invalid are deleted from the operation sequence, and only the operation records within the valid life cycle are retained.

[0039] As a further method, the method of designing a smart contract algorithm and automatically tracing back to a historical version of the data for recovery when data is missing by using the hash value information in the operation record includes:

[0040] If data is found to be missing, the smart contract will initiate a backtracking mechanism. Specifically, it will traverse the stored operation records, compare the hash values before and after the data modification, locate the most recent historical version record with complete data, and extract its corresponding data hash value.

[0041] According to the located hash value of the historical version data, the complete data of the historical version is retrieved and obtained from the storage layer in the blockchain network, and restored to the storage location of the current data to complete the data backtracking recovery operation.

[0042] As a further method, the method of setting the permission update frequency based on the difference in key spaces between the same permission levels in the integrity data includes:

[0043] Calculate the key space of each node in the blockchain network. The expression is:

[0044] ,

[0045] in, is the key space of the nth node, The number of data categories that the nth node is responsible for, is the business weight of the nth node for the i-th type of data, is the amount of data stored on the nth node for the i-th type of data, is the data sensitivity of the i-th type of data on the n-th node, is the data operation frequency of the i-th type of data on the n-th node, is the balance constant of the key space, is the number of external factors that affect the node key space, is the degree to which the i-th type of data on the n-th node is affected by the j-th external factor;

[0046] Obtain the key space difference between nodes of the same permission level, combine it with the node activity, and calculate the permission update frequency. The expression is:

[0047] ,

[0048] in, is the permission update frequency of the nth node, The frequency of updating the basic permissions of the node. is the average value of the key space difference between the nth node and the other nodes with the same permission level, is the sum of the average values of the key space differences between all nodes and other nodes of the same authority level, is the data interaction activity of the nth node, It is the sum of the data interaction activity of all nodes.

[0049] As a further method, the method of applying a distributed coordination algorithm to servers of different blockchain networks based on data security assessment to form a blockchain network server cluster includes:

[0050] Perform data security assessments on servers in different blockchain networks, clustering servers whose data security assessment value differences are less than a preset threshold to obtain multiple security groups.

[0051] A distributed coordination algorithm is used to establish secure associations within and between groups. Specifically, for servers within a group, encrypted communication connections are established through a secure channel protocol; a secure isolation mechanism is set up between groups to allow only authorized secure data exchange; and a response and collaboration mechanism is established between groups. When a security incident occurs in one group, the remaining groups can assist in data recovery or provide resources.

[0052] Multi-layer security protection layers are set up at the entrance and exit of the cluster, including firewalls, intrusion detection and data encryption gateways, to securely filter and encrypt data entering and leaving the cluster.

[0053] As a further method, if the blockchain server cluster is in an abnormal state, the method of interrupting data access and immediately triggering the dynamic key update mechanism includes:

[0054] Deploy a monitoring program in each security group in the blockchain server cluster. When the monitoring security group detects a local anomaly, it encapsulates the anomaly signal and broadcasts it to the remaining security groups in the cluster. The anomaly signal includes the anomaly type, node ID, and timestamp.

[0055] After the remaining security groups receive the abnormal signal, the nodes in the blockchain network within the security group interact with each other and start the consensus algorithm based on Byzantine fault tolerance. The consensus algorithm is expressed as:

[0056] ,

[0057] Among them, C is the consensus result, N is the number of nodes in the blockchain network within the security group, is the signature of the abnormal state by the i-th node, M is the number of nodes that receive the abnormal signal, The vote of the jth node on the abnormal state;

[0058] After reaching an exception consensus, all security groups in the cluster execute data access interruption operations, and the leader node elected by the consensus algorithm initiates a dynamic key update proposal, including new key generation parameters and update plan, and broadcasts it to the remaining nodes for consensus;

[0059] After reaching a consensus on key update, all nodes update keys according to the update plan based on the new key generation parameters, restore normal access to cluster data, and distribute new keys to authorized users.

[0060] A second aspect of the present invention provides a blockchain-based industrial data security storage system, comprising:

[0061] The blockchain configuration module is used to cluster industrial data based on department type, assign a blockchain network to each cluster, and configure servers for each blockchain network;

[0062] A hash slot mapping module is used to hash the key fields of the industrial data to be operated, partition each hash into hash slots, and map them to the corresponding hash ring of the blockchain network to obtain an operation sequence;

[0063] An operation record cleaning module is used to eliminate invalid historical operations in the operation sequence and retain operation records within the life cycle;

[0064] A smart contract recovery module is used to design a smart contract algorithm and use the hash value information in the operation record to automatically trace back to the historical version of the data for recovery when data is missing to obtain complete data;

[0065] an authority frequency setting module, configured to set an authority update frequency based on a difference in key spaces between the same authority levels in the integrity data;

[0066] A security assessment cluster module is used to apply a distributed coordination algorithm to servers of different blockchain networks based on data security assessment after updating permissions according to the permission update frequency to form a blockchain network server cluster;

[0067] The abnormal security protection module is used to interrupt data access if the blockchain server cluster is in an abnormal state and immediately trigger the dynamic key update mechanism to achieve data security protection.

[0068] Compared with the prior art, the embodiments of the present invention have at least the following advantages or beneficial effects:

[0069] (1) The present invention clusters industrial data based on department type and allocates a dedicated blockchain network and server to each cluster. This can optimize resource allocation and data management based on the specific characteristics and usage frequency of different departments, and avoid mutual interference between different types of data.

[0070] (2) By setting the permission update frequency based on the difference in key spaces between the same permission levels of the integrity data, the present invention can dynamically adjust permissions according to the actual use of the data and security requirements, respond to data changes in a timely manner, and effectively prevent security vulnerabilities caused by fixed permissions;

[0071] (3) By building a server cluster, the present invention can achieve a reasonable configuration of server resources, form an efficient, stable and secure storage architecture, enhance the ability of the entire blockchain network to cope with various security threats, and ensure the reliable storage and access of industrial data in complex environments;

[0072] (4) The present invention immediately interrupts data access and triggers a dynamic key update mechanism when an abnormal state occurs in the blockchain server cluster. This rapid response mechanism can prevent potential data leakage risks in the first place, further enhancing the security of industrial data. BRIEF DESCRIPTION OF THE DRAWINGS

[0073] Figure 1 This is a flowchart of the steps of a blockchain-based industrial data security storage method in an embodiment of the present invention. DETAILED DESCRIPTION

[0074] The technical solutions in the embodiments of the present invention will be clearly and completely described below in conjunction with the drawings in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, rather than all the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without making creative work are within the scope of protection of the present invention.

[0075] Reference Figure 1 As shown, the present invention provides a blockchain-based industrial data security storage method, comprising:

[0076] S100 clusters industrial data based on department type, assigns a blockchain network to each cluster, and configures servers for each blockchain network;

[0077] Take a large steel production enterprise as an example. It covers multiple production departments including ironmaking, steelmaking, and steel rolling, as well as multiple business links such as procurement, sales, quality control, equipment maintenance, and financial management.

[0078] It should be explained that this step classifies and clusters industrial data according to its departmental source, assigns an independent blockchain network to each cluster, and then configures servers. This enables data from different departments to be stored and processed in a dedicated network and server environment, avoiding data confusion and chaotic access. At the same time, allocating resources based on departmental data characteristics and usage requirements can improve data processing efficiency, enhance data security and privacy, and lay the foundation for subsequent data operations.

[0079] In the actual evaluation, for the ironmaking workshop, blast furnace operation data, hot blast furnace data, raw material batching data, etc. are clustered together to generate public-private key pairs. The private key is stored in a local encrypted storage device, and the public key is used for encrypted communication and identity authentication between nodes. A blockchain network for the ironmaking workshop is built, and node permissions are set according to positions. Specifically, blast furnace operators can read real-time data such as blast furnace temperature and pressure, foremen can read and write some process parameter adjustment data, and workshop directors have higher management authority and can view all data and perform audit operations. Seven high-performance servers are configured, each equipped with a 32-core CPU, 64GB of memory and 4TB of storage capacity. RAID 5 redundancy technology is used to back up hard disk data, and a dynamic resource adjustment mechanism is set. When the data volume increases by more than 10% within 3 days or the CPU utilization rate exceeds 85% for 4 consecutive hours, 2 servers are automatically added for load balancing and the storage capacity is expanded to 6TB.

[0080] S200 hashes the key fields of the industrial data to be operated, partitions each hash into hash slots, and maps them to the corresponding hash ring of the blockchain network to obtain an operation sequence;

[0081] It should be explained that partitioning and mapping hash slots to hash rings helps to evenly distribute data storage and processing loads, improve the operational efficiency of the blockchain network, and enable subsequent data operations to be carried out in an orderly and efficient manner in the blockchain environment;

[0082] In the actual evaluation, for the ironmaking workshop, eight key fields were selected for blast furnace operation data: "blast furnace number", "molten iron temperature", "furnace top pressure", "coke addition amount", "ore grade", "limestone addition amount", "hot air temperature", and "blast temperature". The random salt value was 256 bits, the cyclic right shift value was 32, and the large prime number was 3001. The key fields were hashed using a hash function to obtain the hash value.

[0083] In the actual evaluation, the total number of hash slots was determined based on the transaction processing efficiency of the blockchain network in the ironmaking workshop. According to statistics, the average transaction processing volume per second was 47. When each hash slot was expected to process an average of 12 transactions per second, the total number of hash slots was calculated to be 64. The hash values were evenly divided into hash slots and then mapped to the hash ring to complete the mapping and obtain the operation sequence.

[0084] S300 eliminates invalid historical operations in the operation sequence and retains operation records within the life cycle;

[0085] It should be noted that as time passes and business progresses, a large amount of historical operations will accumulate in the operation sequence. Eliminating invalid operations and retaining records within the lifecycle can, on the one hand, prevent redundant invalid data from occupying storage resources, and on the other hand, ensure the timeliness and effectiveness of operation records, providing an accurate and reliable basis for subsequent analysis, tracing, and decision-making based on valid data.

[0086] In the actual evaluation, for the blockchain network of the ironmaking workshop, the operation records of the molten iron composition were calculated to have a life cycle of 5400 seconds. The operation sequence was traversed regularly, the timestamp and the life cycle were compared, invalid records were deleted, and valid records were retained to ensure data timeliness and efficiency. The operation records within the life cycle were finally obtained as follows: Operation record 1: Operation content: Adjust the silicon content in the molten iron to 1.2%, creation time: 1630000000 seconds, last access time: 1630003600 seconds; Operation record 2: Increase the manganese content in the molten iron to 0.8%, creation time: 1630000000 seconds, last access timestamp: 1630003600 seconds; Operation record 3: Adjust the molten iron desulfurization process parameters and increase the amount of lime added by 10%, creation time: 1630004200 seconds, last access time: 1630007000 seconds.

[0087] S400 designs a smart contract algorithm that uses the hash value information in the operation record to automatically trace back to the historical version of the data for recovery when data is missing to obtain complete data;

[0088] It is important to explain that, through the uniqueness and relevance of hash values, the historical data versions can be accurately located and restored, ensuring data integrity. This process effectively addresses risks such as data loss, damage, or tampering, maintains the reliability and availability of industrial data in the blockchain storage environment, and ensures that the entire system can continue to operate stably even in the face of data anomalies, without affecting the continuity and accuracy of related businesses.

[0089] During the actual assessment, due to a server failure in the ironmaking workshop, some blast furnace operation data was lost. The smart contract initiated backtracking, and by comparing the hash values before and after the data modification, it located the hash value of the complete data version from the previous day, retrieved and restored the data from the storage layer, and ensured that production was not affected.

[0090] S500 sets the permission update frequency based on the difference in key spaces between the same permission levels in the integrity data;

[0091] It should be explained that by analyzing the difference, the imbalance of data between nodes can be measured. The permission update frequency can be set based on this difference. By using dynamic permission management strategies, node permissions can be adjusted in a timely manner to prevent potential security vulnerabilities caused by long-term fixed permissions, such as permission abuse and data leakage risks. This will enhance the security and compliance of data access and adapt to the ever-changing security needs of industrial data.

[0092] In the actual evaluation, for a process engineer node in the ironmaking workshop, he is responsible for five types of data, namely: , with business weights of 0.3, 0.2, 0.15, 0.15 and 0.2, respectively, and storage capacities of 714MB, 540MB, 500MB, 861MB and 200MB, respectively. The operation frequencies are 12 times / day, 8 times / day, 20 times / day, 6 times / day and 15 times / day, respectively. The calculated key space of the node is 520; there are 8 nodes with the same authority level as the engineer, and the calculated authority update frequency is 1.3 times / day. The authority is updated to ensure data security.

[0093] After updating permissions according to the permission update frequency, S600 applies a distributed coordination algorithm to servers of different blockchain networks based on data security assessment to form a blockchain network server cluster;

[0094] It should be explained that the data security assessment based on the comprehensive consideration of all aspects of server security indicators, the use of distributed coordination algorithms to integrate servers of different blockchain networks can effectively coordinate resource allocation, optimize communication links, etc., prompting them to form clusters, enhance the overall fault tolerance, scalability and ability to resist external attacks, and build a more stable and efficient data storage architecture;

[0095] In the actual assessment, a security assessment was conducted on the blockchain servers of each department. The indicators included encryption, network protection, storage stability and backup capabilities. Servers with an assessment similarity of less than 24%, that is, an assessment value difference of less than 30 points, were grouped. Specifically, the ironmaking and steelmaking workshop servers were divided into one group, the quality control and equipment maintenance department servers were grouped into one group, and the finance department was grouped separately. An encrypted channel protocol was used for communication within the group, and an isolation mechanism was set up between groups, allowing only authorized interaction. A response and collaboration mechanism was established. When the ironmaking workshop group was attacked, the quality control group assisted in recovering data or providing resources. Multi-layer protection was set up at the entrance and exit of the cluster, including a high-performance firewall (98% intrusion prevention accuracy), an intelligent intrusion detection system (1% false positive rate) and a data encryption gateway (using AES-512 encryption) to ensure data security.

[0096] S700: If the blockchain server cluster is in an abnormal state, data access is interrupted and a dynamic key update mechanism is immediately triggered to achieve data security protection.

[0097] It should be explained that when a blockchain server cluster experiences an abnormal state, such as a cyber attack, hardware failure, or software vulnerability exploitation, interrupting data access can quickly cut off potential security risk transmission channels, prevent data in the abnormal state from being stolen, tampered with, or destroyed, and immediately trigger the dynamic key update mechanism. By replacing the encryption key, the key obtained by the attacker is invalidated, thereby enhancing the confidentiality and integrity of the data and effectively resisting possible subsequent attacks, thereby ensuring that the industrial data security protection in the entire system can be continuously maintained at a reliable level, reducing the risk of data leakage and system damage, and ensuring that the continuity and stability of industrial production are not seriously affected;

[0098] In the actual evaluation, for the ironmaking workshop, the security group monitored and found that the server CPU utilization rate exceeded 98% for 20 minutes and a large amount of suspicious traffic appeared on the network. The abnormal signal (including type, node ID, and timestamp) was encapsulated and broadcast to other groups. After the other groups received the signal, the nodes in the group interacted and started the Byzantine fault-tolerant consensus algorithm. Among the 12 nodes in the group, 10 or more nodes received the signal, and more than 2 / 3 of the nodes voted in favor. The consensus result calculated according to the consensus algorithm was that an abnormal consensus was reached. After reaching a consensus, all groups interrupted data access, and the leading node initiated a key update proposal (using the elliptic curve cryptography system to generate a 2048-bit key pair, updated in stages within 40 minutes), broadcasted it to other nodes, and then the nodes updated the keys as planned. After the update was complete, data access was restored and the new keys were distributed to authorized users.

[0099] In this embodiment, the method of assigning a blockchain network to each cluster and configuring a server for each blockchain network includes:

[0100] Asymmetric encryption is used to generate a public-private key pair for the industrial data in each cluster. The private key is stored locally, and the public key is used for communication encryption and identity authentication between nodes to generate a blockchain network.

[0101] Determine the permissions of each node in the blockchain network based on job roles and data access requirements within the department;

[0102] For each assigned blockchain network, configure server resource size based on the amount of data it carries, including the number of servers, performance parameters, and storage capacity;

[0103] During the server configuration process, critical server components are backed up through redundant backup technology, and a dynamic adjustment mechanism for server resources is established based on actual data growth and processing load.

[0104] In this embodiment, the method for hashing the key fields of the industrial data to be operated includes:

[0105] Acquire industrial data that needs to be acted upon;

[0106] For the industrial data to be operated, select key fields based on the departmental relevance of the data. Specifically, analyze the business processes of each department and use the fields that reflect the department's business information as key fields.

[0107] Perform hashing on the key fields, where the hash function expression is:

[0108] ,

[0109] Among them, x represents the key field, n and m are the total number of key fields and the number of iterations respectively. is the weight coefficient of the sensitivity of the i-th key field data, for hashing algorithms, is the data value of the i-th key field, is the circular right shift function, r is the displacement value of the circular right shift, k is the security key, s is the random salt value, j is the current iteration number, Represents a modulo operation, where p is a large prime number that ensures that the function results are evenly distributed.

[0110] In this embodiment, the method of partitioning each hash into a hash slot and mapping it to the corresponding hash ring of the blockchain network includes:

[0111] The total number of hash slots is determined based on the transaction processing efficiency of the blockchain network. The expression is:

[0112] ,

[0113] in, and are the average transaction volume per second and the standard deviation of transaction volume per second of the blockchain network, is the coefficient of fluctuation, is the redundancy coefficient, The average number of transactions that a single hash slot can process per second.

[0114] Divide the hash value range evenly into hash slots to obtain hash slot partitions, and map each hash slot partition to the hash ring. The expression of the mapping function is:

[0115] ,

[0116] in, is the starting mapping position of the i-th partition on the hash ring, t is the current timestamp, T is the time window length, is the number of hash slots contained in the i-th partition, is the data feature hash value of the i-th partition, is the risk weight coefficient of the i-th partition, is the coefficient used to adjust the overall scaling and offset of the mapping, M is the total number of partitions, L is the number of equally spaced points on the hash ring, and C is the circumference of the hash ring.

[0117] In this embodiment, the method of eliminating invalid historical operations in the operation sequence and retaining operation records within the life cycle includes:

[0118] Set the lifecycle for each operation record in the operation sequence. The expression is:

[0119] ,

[0120] in, and They are time weight parameters used to adjust the impact of creation time and last access time on life cycle. is the current time, and They are the creation time and last access time of the operation record, is the normalization factor, H is the number of activity factors in the operation record, and are the weight and value of the hth activity factor, U is the total number of risk factors in the operation record, and are the weight and value of the j-th risk factor, respectively, and S is the total risk score of the operation record;

[0121] Traverse each operation record in the operation sequence, obtain its timestamp, and compare it with the life cycle of the operation record. If the life cycle of the operation record is exceeded, the operation record is judged to be an invalid operation;

[0122] The operation records judged to be invalid are deleted from the operation sequence, and only the operation records within the valid life cycle are retained.

[0123] In this embodiment, the method of designing a smart contract algorithm and automatically tracing back to a historical version of data for recovery when data is missing by using the hash value information in the operation record includes:

[0124] If data is found to be missing, the smart contract will initiate a backtracking mechanism. Specifically, it will traverse the stored operation records, compare the hash values before and after the data modification, locate the most recent historical version record with complete data, and extract its corresponding data hash value.

[0125] According to the located hash value of the historical version data, the complete data of the historical version is retrieved and obtained from the storage layer in the blockchain network, and restored to the storage location of the current data to complete the data backtracking recovery operation.

[0126] In this embodiment, the method for setting the permission update frequency based on the difference in key spaces between the same permission levels in the integrity data includes:

[0127] Calculate the key space of each node in the blockchain network. The expression is:

[0128] ,

[0129] in, is the key space of the nth node, The number of data categories that the nth node is responsible for, is the business weight of the nth node for the i-th type of data, is the amount of data stored on the nth node for the i-th type of data, is the data sensitivity of the i-th type of data on the n-th node, is the data operation frequency of the i-th type of data on the n-th node, is the balance constant of the key space, is the number of external factors that affect the node key space, is the degree to which the i-th type of data on the n-th node is affected by the j-th external factor;

[0130] Obtain the key space difference between nodes of the same permission level, combine it with the node activity, and calculate the permission update frequency. The expression is:

[0131] ,

[0132] in, is the permission update frequency of the nth node, The frequency of updating the basic permissions of the node. is the average value of the key space difference between the nth node and the other nodes with the same permission level, is the sum of the average values of the key space differences between all nodes and other nodes of the same authority level, is the data interaction activity of the nth node, It is the sum of the data interaction activity of all nodes.

[0133] In this embodiment, the method for forming a blockchain network server cluster by applying a distributed coordination algorithm to servers of different blockchain networks based on data security assessment includes:

[0134] Perform data security assessments on servers in different blockchain networks, clustering servers whose data security assessment value differences are less than a preset threshold to obtain multiple security groups.

[0135] A distributed coordination algorithm is used to establish secure associations within and between groups. Specifically, for servers within a group, encrypted communication connections are established through a secure channel protocol; a secure isolation mechanism is set up between groups to allow only authorized secure data exchange; and a response and collaboration mechanism is established between groups. When a security incident occurs in one group, the remaining groups can assist in data recovery or provide resources.

[0136] Multi-layer security protection layers are set up at the entrance and exit of the cluster, including firewalls, intrusion detection and data encryption gateways, to securely filter and encrypt data entering and leaving the cluster.

[0137] In this embodiment, if the blockchain server cluster is in an abnormal state, the method of interrupting data access and immediately triggering the dynamic key update mechanism includes:

[0138] Deploy a monitoring program in each security group in the blockchain server cluster. When the monitoring security group detects a local anomaly, it encapsulates the anomaly signal and broadcasts it to the remaining security groups in the cluster. The anomaly signal includes the anomaly type, node ID, and timestamp.

[0139] After the remaining security groups receive the abnormal signal, the nodes in the blockchain network within the security group interact with each other and start the consensus algorithm based on Byzantine fault tolerance. The consensus algorithm is expressed as:

[0140] ,

[0141] Among them, C is the consensus result, N is the number of nodes in the blockchain network within the security group, is the signature of the abnormal state by the i-th node, M is the number of nodes that receive the abnormal signal, The vote of the jth node on the abnormal state;

[0142] After reaching an exception consensus, all security groups in the cluster execute data access interruption operations, and the leader node elected by the consensus algorithm initiates a dynamic key update proposal, including new key generation parameters and update plan, and broadcasts it to the remaining nodes for consensus;

[0143] After reaching a consensus on key update, all nodes update keys according to the update plan based on the new key generation parameters, restore normal access to cluster data, and distribute new keys to authorized users.

[0144] The second aspect of the present invention further provides a blockchain-based industrial data security storage system, comprising:

[0145] The blockchain configuration module is used to cluster industrial data based on department type, assign a blockchain network to each cluster, and configure servers for each blockchain network;

[0146] A hash slot mapping module is used to hash the key fields of the industrial data to be operated, partition each hash into hash slots, and map them to the corresponding hash ring of the blockchain network to obtain an operation sequence;

[0147] An operation record cleaning module is used to eliminate invalid historical operations in the operation sequence and retain operation records within the life cycle;

[0148] A smart contract recovery module is used to design a smart contract algorithm and use the hash value information in the operation record to automatically trace back to the historical version of the data for recovery when data is missing to obtain complete data;

[0149] an authority frequency setting module, configured to set an authority update frequency based on a difference in key spaces between the same authority levels in the integrity data;

[0150] A security assessment cluster module is used to apply a distributed coordination algorithm to servers of different blockchain networks based on data security assessment after updating permissions according to the permission update frequency to form a blockchain network server cluster;

[0151] The abnormal security protection module is used to interrupt data access if the blockchain server cluster is in an abnormal state and immediately trigger the dynamic key update mechanism to achieve data security protection.

[0152] The above content is merely an example and explanation of the structure of the present invention. Those skilled in the art may make various modifications or additions to the described specific embodiments or replace them in a similar manner. As long as they do not deviate from the structure of the invention or exceed the scope defined by the claims, they should all fall within the scope of protection of the present invention.

Claims

1. A blockchain-based industrial data security storage method, characterized in that: The following steps are involved: Cluster industrial data based on department type, assign a blockchain network to each cluster, and configure servers for each blockchain network; Hash the key fields of the industrial data to be operated, partition each hash into hash slots, and map them to the corresponding hash ring of the blockchain network to obtain an operation sequence; Eliminate invalid historical operations in the operation sequence and retain operation records within the life cycle; Design a smart contract algorithm that uses the hash value information in the operation record to automatically trace back to the historical version of the data for recovery when data is missing to obtain complete data; Setting the permission update frequency based on the difference in key spaces between the same permission levels in the integrity data; After updating permissions according to the permission update frequency, based on data security assessment, a distributed coordination algorithm is applied to servers of different blockchain networks to form a blockchain network server cluster; If the blockchain server cluster is in an abnormal state, data access will be interrupted and the dynamic key update mechanism will be triggered immediately to achieve data security protection.

2. The method for secure storage of industrial data based on blockchain according to claim 1, characterized in that: The method of allocating a blockchain network to each cluster and configuring a server for each blockchain network includes: Asymmetric encryption is used to generate a public-private key pair for the industrial data in each cluster. The private key is stored locally, and the public key is used for communication encryption and identity authentication between nodes to generate a blockchain network. Determine the permissions of each node in the blockchain network based on job roles and data access requirements within the department; For each assigned blockchain network, configure server resource size based on the amount of data it carries, including the number of servers, performance parameters, and storage capacity; During the server configuration process, key server components are backed up through redundant backup technology, and a dynamic adjustment mechanism for server resources is established to handle load conditions based on actual data growth.

3. The method for secure storage of industrial data based on blockchain according to claim 1, characterized in that: The method for hashing key fields of industrial data to be operated includes: Acquire industrial data that needs to be acted upon; For the industrial data to be operated, select key fields based on the departmental relevance of the data. Specifically, analyze the business processes of each department and use the fields that reflect the department's business information as key fields. Perform hashing on the key fields, where the hash function expression is: ， Among them, x represents the key field, n and m are the total number of key fields and the number of iterations respectively. is the weight coefficient of the sensitivity of the i-th key field data, for hashing algorithms, is the data value of the i-th key field, is the circular right shift function, r is the displacement value of the circular right shift, k is the security key, s is the random salt value, j is the current iteration number, Represents a modulo operation, where p is a large prime number that ensures that the function results are evenly distributed.

4. The method for secure storage of industrial data based on blockchain according to claim 1, characterized in that: The method of mapping each hash to the corresponding hash ring of the blockchain network after hash slot partitioning includes: The total number of hash slots is determined based on the transaction processing efficiency of the blockchain network. The expression is: ， in, and are the average transaction volume per second and the standard deviation of transaction volume per second of the blockchain network, is the coefficient of fluctuation, is the redundancy coefficient, The average number of transactions that a single hash slot can process per second. Divide the hash value range evenly into hash slots to obtain hash slot partitions, and map each hash slot partition to the hash ring. The expression of the mapping function is: ， in, is the starting mapping position of the i-th partition on the hash ring, t is the current timestamp, T is the time window length, is the number of hash slots contained in the i-th partition, is the data feature hash value of the i-th partition, is the risk weight coefficient of the i-th partition, is the coefficient used to adjust the overall scaling and offset of the mapping, M is the total number of partitions, L is the number of equally spaced points on the hash ring, and C is the circumference of the hash ring.

5. The method for secure storage of industrial data based on blockchain according to claim 1, characterized in that: The method of eliminating invalid historical operations in the operation sequence and retaining operation records within the life cycle includes: Set the lifecycle for each operation record in the operation sequence. The expression is: ， in, and They are time weight parameters used to adjust the impact of creation time and last access time on life cycle. is the current time, and They are the creation time and last access time of the operation record, is the normalization factor, H is the number of activity factors in the operation record, and are the weight and value of the hth activity factor, U is the total number of risk factors in the operation record, and are the weight and value of the j-th risk factor, respectively, and S is the total risk score of the operation record; Traverse each operation record in the operation sequence, obtain its timestamp, and compare it with the life cycle of the operation record. If the life cycle of the operation record is exceeded, the operation record is judged to be an invalid operation; The operation records judged to be invalid are deleted from the operation sequence, and only the operation records within the valid life cycle are retained.

6. The method for secure storage of industrial data based on blockchain according to claim 1, characterized in that: The method of designing a smart contract algorithm and automatically tracing back to a historical version of data for recovery when data is missing by using the hash value information in the operation record includes: If data is found to be missing, the smart contract will initiate a backtracking mechanism. Specifically, it will traverse the stored operation records, compare the hash values before and after the data modification, locate the most recent historical version record with complete data, and extract its corresponding data hash value. According to the located hash value of the historical version data, the complete data of the historical version is retrieved and obtained from the storage layer in the blockchain network, and restored to the storage location of the current data to complete the data backtracking recovery operation.

7. The method for secure storage of industrial data based on blockchain according to claim 1, characterized in that: The method for setting the permission update frequency based on the difference in key spaces between the same permission levels in the integrity data includes: Calculate the key space of each node in the blockchain network. The expression is: ， in, is the key space of the nth node, The number of data categories that the nth node is responsible for, is the business weight of the nth node for the i-th type of data, is the amount of data stored on the nth node for the i-th type of data, is the data sensitivity of the i-th type of data on the n-th node, is the data operation frequency of the i-th type of data on the n-th node, is the balance constant of the key space, is the number of external factors that affect the node key space, is the degree to which the i-th type of data on the n-th node is affected by the j-th external factor; Obtain the key space difference between nodes of the same permission level, combine it with the node activity, and calculate the permission update frequency. The expression is: ， in, is the permission update frequency of the nth node, The frequency of updating the basic permissions of the node. is the average value of the key space difference between the nth node and the other nodes with the same authority level, is the sum of the average values of the key space differences between all nodes and other nodes of the same authority level, is the data interaction activity of the nth node, It is the sum of the data interaction activity of all nodes.

8. The method for secure storage of industrial data based on blockchain according to claim 1, characterized in that: The method of forming a blockchain network server cluster by applying a distributed coordination algorithm to servers of different blockchain networks based on data security assessment includes: Perform data security assessments on servers in different blockchain networks, clustering servers whose data security assessment value differences are less than a preset threshold to obtain multiple security groups. A distributed coordination algorithm is used to establish secure relationships within and between groups. Specifically, servers within a group are connected using encrypted communication protocols. A secure isolation mechanism is set up between groups to allow only authorized secure data exchange. A response and collaboration mechanism is established between groups so that when a security incident occurs in one group, other groups can assist in recovering data or providing resources. Multi-layer security protection layers are set up at the entrance and exit of the cluster, including firewalls, intrusion detection and data encryption gateways, to securely filter and encrypt data entering and leaving the cluster.

9. The method for secure storage of industrial data based on blockchain according to claim 1, characterized in that: The method of interrupting data access and immediately triggering a dynamic key update mechanism if an abnormal state occurs in the blockchain server cluster includes: Deploy a monitoring program in each security group in the blockchain server cluster. When the monitoring security group detects a local anomaly, it encapsulates the anomaly signal and broadcasts it to the remaining security groups in the cluster. The anomaly signal includes the anomaly type, node ID, and timestamp. After the remaining security groups receive the abnormal signal, the nodes in the blockchain network within the security group interact with each other and start the consensus algorithm based on Byzantine fault tolerance. The consensus algorithm is expressed as: ， Among them, C is the consensus result, N is the number of nodes in the blockchain network within the security group, is the signature of the abnormal state by the i-th node, M is the number of nodes that receive the abnormal signal, The vote of the jth node on the abnormal state; After reaching an exception consensus, all security groups in the cluster execute data access interruption operations, and the leader node elected by the consensus algorithm initiates a dynamic key update proposal, including new key generation parameters and update plan, and broadcasts it to the remaining nodes for consensus; After reaching a consensus on key update, all nodes update keys according to the update plan based on the new key generation parameters, restore normal access to cluster data, and distribute new keys to authorized users.

10. A blockchain-based industrial data security storage system, used to execute the blockchain-based industrial data security storage method according to any one of claims 1 to 9, characterized in that: The system comprises: The blockchain configuration module is used to cluster industrial data based on department type, assign a blockchain network to each cluster, and configure servers for each blockchain network; A hash slot mapping module is used to hash the key fields of the industrial data to be operated, partition each hash into hash slots, and map them to the corresponding hash ring of the blockchain network to obtain an operation sequence; An operation record cleaning module is used to eliminate invalid historical operations in the operation sequence and retain operation records within the life cycle; A smart contract recovery module is used to design a smart contract algorithm and use the hash value information in the operation record to automatically trace back to the historical version of the data for recovery when data is missing to obtain complete data; an authority frequency setting module, configured to set an authority update frequency based on a difference in key spaces between the same authority levels in the integrity data; A security assessment cluster module is used to apply a distributed coordination algorithm to servers of different blockchain networks based on data security assessment after updating permissions according to the permission update frequency to form a blockchain network server cluster; The abnormal security protection module is used to interrupt data access if the blockchain server cluster is in an abnormal state and immediately trigger the dynamic key update mechanism to achieve data security protection.

Images