Portable data asset fuse box based on dynamic LBS binding

Abstract

The invention discloses a portable data asset fuse box based on dynamic LBS binding, and belongs to the technical field of mobile data security. The equipment comprises an RISC-V security processor, an encrypted SSD storage unit, a multi-mode positioning module and a block chain verification system, and is characterized in that a cooperative security system of hardware protection, space binding and authority control is constructed. The hardware layer adopts a titanium alloy explosion-proof shell and a fusing type self-destruction circuit, and supports IP68 water resistance and 1.5 m drop resistance; the space verification layer establishes a dynamic electronic fence through GPS / Bluetooth fusion positioning, and keeps real-time distance measurement with a binding device in a mobile scene; and the authority management layer adopts an ERC-1155 protocol to realize safe transfer of ownership, and supports three-area data hierarchical protection. The equipment solves the problems that the mobile storage equipment is easy to lose, the transfer of data ownership is unsafe and the like, and is suitable for scenes such as business confidential documents, family digital heritage and field data acquisition.

Description

Technical Field

[0001] The present invention relates to the technical field of mobile data security storage, and particularly to a portable data asset insurance box that integrates dynamic geofencing (LBS), biometric verification, and cross-device collaborative protection, which is applicable to the protection of high-value digital assets in mobile scenarios for personal and enterprise users. Background Art

[0002] Pain points of the prior art: Traditional mobile hard drives lack an active protection mechanism and are vulnerable to physical theft; cloud storage services cannot meet the data security requirements in an offline environment; existing portable devices cannot dynamically adapt to fixed / mobile hybrid usage scenarios; there is a lack of a comprehensive solution for secure ownership transfer and trajectory tracking. Summary of the Invention

[0003] The present invention provides a portable data asset insurance box based on dynamic LBS binding, which realizes the security control of data assets in mobile scenarios through a four-dimensional protection architecture. The four-dimensional protection architecture includes a hardware architecture layer, a security protection layer, a data management layer, and a software system layer.

[0004] The hardware architecture layer consists of a main control module, a storage unit, and a communication module. Main control module: It is equipped with a RISC-V 64-bit secure processor (embedded with a TEE trusted execution environment) and integrates a hardware encryption engine (supporting national cryptographic SM4 / AES-256 / ECC-384 algorithms); Storage unit: It uses an encrypted SSD with 3D NAND particles (the capacity can be selected from 1TB to 4TB, and the read and write speed is 1050MB / s), and is built-in with a fuse-type self-destruction circuit (erases the key within 2ms after being triggered); The communication module includes dual-mode wireless: Wi-Fi 6E (6GHz band, theoretical rate 9.6Gbps) + Bluetooth 5.3 (supporting AoA / AoD indoor positioning), and a wired interface: USB4 Type-C (compatible with Thunderbolt 4 protocol, supporting 40Gbps transmission).

[0005] The security protection layer includes a dynamic LBS fence and an anti-disassembly mechanism. Fixed mode of the dynamic LBS fence: Bind static geographical coordinates (GPS / Beidou dual-mode positioning, accuracy ±0.3 meters); Mobile mode of the dynamic LBS fence: Maintain Bluetooth ranging (RSSI accuracy ±0.5 meters) with the bound device (mobile phone / vehicle terminal), and support a speed adaptive threshold (automatically adjusts between 1 - 50 meters in walking / vehicle scenarios). Anti-disassembly mechanism: A capacitive contact network is embedded in the titanium alloy shell (triggers an alarm when a deformation of 0.1mm is detected); Releases nano-conductive ink during disassembly (permanently damages the storage chip circuit).

[0006] The data management layer includes an ownership transfer protocol and a hierarchical storage policy. There are three ownership transfer protocols: (1) the original owner's face verification (3D structured light liveness detection), (2) the new owner's mobile phone NFC touch binding (ECDSA key exchange), and (3) the generation of ERC-1155 standard digital vouchers (including time stamps and biometric hashes); Open area in the hierarchical storage policy: direct access without verification (capacity limit 20%), protected area: dynamic LBS + biometric two-factor verification, security area: the bound device must be present and the distance < 1 meter.

[0007] The software system layer includes the functions of the mobile phone APP and an alarm linkage mechanism. Mobile App functions: real-time trajectory heat map (supporting 10-year historical record backtracking), permission graph visualization (displaying current / historical ownership relationships), intelligent fence setting wizard (automatically identifying home / office / vehicle scenarios); The alarm linkage mechanism includes local alarm, remote notification, and emergency fusing. Local alarm: 105dB buzzer + strong light flashing (visible distance at night is 30 meters), remote notification: encrypted SMS / email / App push three-level warning, emergency fusing: data locking is initiated after 30 seconds beyond the safe distance.

[0008] The innovation points of the present invention are: First, it is the first to create a speed-adaptive LBS fence algorithm to dynamically adjust the security threshold to adapt to walking / vehicle / aviation scenarios; Second, it develops a nano-level anti-destruction device that integrates a contact induction and a circuit destruction mechanism in a 2 cm³ space; Third, it designs a lightweight blockchain evidence storage solution to achieve more than 300 permission verifications per second on the ARM architecture. This device solves problems such as the easy loss of mobile storage devices and the insecurity of data ownership transfer, and is applicable to scenarios such as business confidential documents, family digital heritage, and on-site collected data. Brief Description of the Drawings

[0009] Figure 1 : Hardware structure decomposition diagram of the portable data asset insurance box Figure 2 : System architecture diagram of the portable data asset insurance box Figure 3 : Ownership transfer flow chart Figure 4 : Blockchain data model Detailed Implementation Modes

[0010] Embodiment 1: Business traveler protection. Usage scenario: Fix the insurance box in the hotel safe (set a static fence radius of 2 meters); If the insurance box is taken out of the room, it will be regarded as an abnormal response, triggering the following actions: First, the insurance box body emits a 105dB alarm, then sends an encrypted geographical location to the bound mobile phone, and then automatically uploads the video of the destruction evidence to the blockchain.

[0011] Example 2: On-site protection of film and television materials. Workflow: In the first step, the drone shoots 4K materials and stores them in the insurance box in real time. In the second step, it is transmitted back to the editing vehicle server at high speed through the millimeter-wave link. In the third step, it is bound to the GPS system of the editing vehicle (the moving fence radius is 50 meters) after work every day.

[0012] Example 3: Digital inheritance of family heritage. Transfer of ownership: In Process 1, the original owner's face verification starts the transfer. In Process 2, the heir's mobile phone receives a dynamic verification code. In Process 3, the notary blockchain node witnesses the transaction. In Process 4, the new geographical fence is automatically set as the heir's residence.

Claims

1. A portable data asset safe box based on dynamic LBS binding, characterized in that Includes: main control unit (RISC-V processor + security encryption chip), multi-mode positioning module (GPS / Beidou / Bluetooth 5.3 RSSI ranging), detachable lithium battery pack (supports PD fast charging), pressure-sensitive anti-disassembly layer (covering the storage chip area).

2. The portable data asset safe box according to claim 1 is characterized in that Ownership transfer method: The original owner initiates the transfer process through facial verification. The new owner's mobile phone touches NFC to complete device binding and generate a blockchain ownership certificate (including digital signatures of both parties).

3. According to the portable data asset safe box of claim 1, the LBS protection method comprises: In fixed mode, static geo-fences (accuracy ±0.5 meters) are set; in mobile vehicle mode, vehicle GPS / ship AIS signals are bound; dynamic fence thresholds are adaptively adjusted with speed (walking / vehicle / aviation scenarios).

4. According to the portable data asset safety box of claim 1, the physical protection design includes: waterproof structure (IP68 protection level), electronic seal device (disassembly triggers data self-destruction), and anti-static interface protection circuit.

5. According to the portable data asset fuse box of claim 1, the data channel design includes: Type-C 3.2 interface (supporting USB4 protocol), millimeter wave wireless transmission module (60GHz frequency band), and light-sensitive data fuse (cutting off the circuit when exposed to strong light).

6. According to the portable data asset safe box of claim 1, the supporting software system comprises: Trajectory heat map generation module, permission map visualization engine, and security event timeline tracing function.

7. According to the portable data asset safety box of claim 1, the alarm mechanism includes: graded vibration alarm (realized by the motor of the safety box body), mobile phone App push encrypted early warning message, and automatic dialing function of emergency contacts.

8. According to the portable data asset safe box of claim 1, the storage architecture includes: multi-layer encrypted storage area (public area / personal area / security area), self-repairing RAID 1 mirror, and cold storage chip (data is retained for 30 years after power failure).

Images