Data asset safety box based on LBS positioning and block chain verification

Abstract

The invention discloses a data asset safety box based on LBS positioning and block chain verification, and belongs to the field of data safety storage. The equipment comprises a main control module, a multi-mode communication unit, an LBS positioning module and a block chain verification unit, and is characterized in that a five-layer protection system of physical protection, space verification and authority management is constructed. The hardware layer adopts a titanium alloy composite shell and a self-destructive storage structure, and supports 6U-42U cabinet deployment and home wireless access; the space verification layer establishes a dynamic geofence through a three-mode positioning system, and a graded fusing mechanism is triggered when displacement exceeds the standard; the authority layer adopts a double-track verification system, single-person biological recognition is carried out in conventional operation, double-person combined living body verification is needed for equipment migration / resetting, and all operation logs are subjected to uplink storage evidence through a PBFT consensus algorithm. The equipment solves the problems that a traditional safety box cannot protect digital assets and small and medium-sized enterprises lack high-cost-performance schemes, and is suitable for long-term protection of sensitive information such as financial data and intellectual property.

Description

Technical Field

[0001] The present invention relates to the technical field of data security storage devices, and in particular to a universal data asset safe integrating geographic positioning (LBS), blockchain authority verification and modular design, which is suitable for data asset protection in small and medium-sized enterprises and home scenarios. Background Art

[0002] The existing technology has the following problems: traditional safes cannot adapt to the needs of digital asset storage; small and medium-sized enterprises lack cost-controlled enterprise-level data protection solutions; home scenarios lack data storage devices with physical-digital composite verification; existing equipment cannot meet the needs of cabinet deployment and smart home linkage at the same time. Summary of the invention

[0003] The present invention provides a data asset safe based on LBS positioning and blockchain verification, which realizes cross-scenario data security protection through a five-layer protection system, namely hardware architecture layer, space verification layer, permission management layer, physical protection layer and energy management layer.

[0004] The hardware architecture layer includes the main control module, storage array, and communication unit. The main control module: adopts the ARM Cortex-A72+ FPGA dual-core architecture, in which the FPGA chip is dedicated to real-time encryption operations (supporting the national encryption SM4 / AES-256 algorithm); storage array: configured with pluggable dual-channel SSD (supporting up to 4×8TB NVMe solid-state drives), and achieves a read and write speed of 2.5GB / s under RAID 5 redundant design; enterprise-level communication unit: SFP+ optical module (10Gbps) and RJ45 gigabit electrical port dual backup, home-level communication unit: Wi-Fi 6E (6GHz band) and Bluetooth 5.3 dual-mode wireless transmission.

[0005] The spatial verification layer includes the LBS positioning module and the displacement response mechanism. LBS positioning module: integrated with the three-mode positioning system (GPS / Beidou / Galileo), supported static mode: binding fixed coordinates (accuracy ±0.3 meters), supported dynamic mode: synchronizing offset with the vehicle / ship positioning system (threshold ≤5 meters); displacement response mechanism: first-level alarm (displacement ≥1 meter): triggering the local buzzer, second-level alarm (displacement ≥3 meters): remotely pushing the alarm to the bound device, third-level alarm (displacement ≥5 meters): starting data self-locking and erasing the temporary key.

[0006] The permission management layer includes two parts: dual-track verification system and blockchain evidence storage. The conventional operation of the dual-track verification system: single-person biometric identification (3D structured light face / fingerprint), the global operation of the dual-track verification system: two-person dynamic verification (iris scanning and voiceprint recognition must be completed at the same time); blockchain evidence storage: using a modified version of the PBFT consensus algorithm, processing 80-100 permission change records per second; the custodian list is stored in a Merkle tree structure, and a zero-knowledge proof is generated for each change.

[0007] The physical protection layer consists of a composite shell structure and an anti-tampering mechanism. The outer layer of the composite shell structure: 1.5mm titanium alloy impact-resistant layer (passing IK10 protection level), middle layer: nano-ceramic electromagnetic shielding layer (shielding effectiveness ≥ 90dB), inner layer: phase change material temperature control layer (working temperature -20℃~60℃); anti-tampering mechanism: pressure sensing network (triggering alarm when external force of more than 5N is detected), self-destruct circuit (fusing storage chip power supply when illegally opened).

[0008] The energy management layer includes a dual-mode power supply system and intelligent heat dissipation design. The dual-mode power supply system has a main power supply of 100-240V AC wide input, a backup power supply of hot-swappable 18650 battery pack (4×3500mAh, 72 hours of battery life), and an intelligent heat dissipation design of brushless fan array (noise ≤28dB), a graphene heat conductive sheet covering the main control chip, and a temperature gradient control algorithm (temperature difference within ±2°C).

[0009] The innovation of the data asset safe based on LBS positioning and blockchain verification is mainly reflected in: first, realizing seamless switching between enterprise and home scenarios: compatible with different environments through modular hardware design; second, creating a lightweight blockchain verification system: realizing efficient permission management on resource-constrained devices; third, a dynamic security policy engine: automatically switching the protection level (enterprise mode / home mode) according to the LBS location. BRIEF DESCRIPTION OF THE DRAWINGS

[0010] Figure 1 : Data asset safe hardware structure breakdown diagram.

[0011] Figure 2 : Data asset safe system architecture diagram.

[0012] Figure 3 : Ownership transfer flow chart.

[0013] Figure 4 :Blockchain data model DETAILED DESCRIPTION

[0014] Example 1: Financial data protection for small and medium-sized enterprises. Deployment method: Installed in a 42U cabinet, connected to the financial server via optical fiber; Authority setting: Financial director (single-person operation daily backup) + IT director (joint verification system migration); Security policy: Automatic backup at 3 am every day, LBS fence radius set to the office building range.

[0015] Example 2: Family photo library protection. Deployment method: Place in the home network cabinet, synchronize mobile phone albums to the safe; linkage function: displacement alarm triggers the smart door lock to automatically lock; data recovery: generate a one-time download link after two-person verification (valid for 10 minutes).

[0016] Example 3: Law firm litigation evidence library. Implementation background: A large law firm needs to centrally manage electronic evidence of sensitive cases (including recordings / emails / scans, etc.) to ensure compliance with the "Rules for Judicial Identification of Electronic Evidence". Deployment method during implementation: Installed in a 19-inch network cabinet in the law firm's archive room, connected to the internal document management system through a dual-link 10G optical fiber, and configured with an independent VLAN to isolate other office networks; permission settings during implementation: case leader (single-person biometric authentication to access evidence), senior partner (two-person dynamic password authorization evidence export), blockchain records the time and space stamp of each retrieval operation; security strategy during implementation: evidence files automatically add invisible digital watermarks (including operator ID + time hash), and off-site backup data uses Shamir's secret sharing algorithm to store in three safes.

Claims

1. A data asset safe based on LBS positioning and blockchain verification, characterized by Includes: main control module (ARMCortex-A72 + FPGA encryption chip); dual-mode communication unit (enterprise-level Ethernet + home-level wireless module); LBS positioning module (GPS / Beidou / base station three-mode positioning); blockchain verification unit (storage permission smart contract).

2. The system according to claim 1, characterized in that Permission management method: Routine operations use single-person biometric verification (fingerprint / facial recognition); device migration requires two-person joint liveness verification (iris + voiceprint); permission changes are recorded in a lightweight blockchain (10-100 transactions per second).

3. According to the system described in claim 1, the physical structure includes: an adjustable cabinet mounting bracket (supporting 6U-42U height); a multi-layer composite protective shell (outer ABS fireproof layer + inner electromagnetic shielding layer); an intelligent ventilation system (temperature-triggered brushless fan array).

4. According to the system of claim 1, the blockchain application includes: The permission certificate uses the BLS signature algorithm; the operation log generates a Merkle Proof for storage; Smart contracts automatically enforce device locking policies.

5. According to the system of claim 1, the power supply system includes: a main power supply (using 100-240V AC adaptive input), a backup power supply (replaceable 18650 lithium battery pack (battery life ≥ 72 hours)), and a power switching circuit (switching delay <10ms).

6. According to the system of claim 1, the data channel design includes: an enterprise-level SFP+ optical module (supporting 10 Gbps transmission), a home-level USB 3.2 Gen2 Type-C interface, and a safety fuse (physical disconnection when current is overloaded).

7. According to the system of claim 1, the alarm linkage method comprises: When the LBS displacement exceeds the threshold, it triggers the smart home alarm (light / sound), illegal operation attempts are simultaneously pushed to the preset emergency contacts, and the blockchain generates NFT evidence of the security event.

8. According to the system of claim 1, the heat dissipation design includes: a honeycomb heat dissipation hole array (IP54 protection level), a graphene thermal conductive gasket (covering the surface of the storage chip), and an intelligent temperature control strategy (three-level wind speed adjustment).

Images