Resource Unified Identification and Resolution Calculation Method Based on Trusted Data Space

Abstract

The present invention relates to the field of trusted computing technology. Specifically, it relates to a unified resource identification and resolution calculation method based on a trusted data space. It includes the following steps: generating a composite structure of resource identifiers according to the multi-source characteristics of resources, and dynamically adjusting the generation strategy of resource identifiers by using a distributed hash algorithm and multi-factor analysis; using a blockchain to store the encrypted resource identifiers, and triggering a smart contract to verify whether the resource identifiers are legal whenever the resource identifiers are updated or verified; after the resource identifiers are verified to be passed, the system allocates the resolution tasks of the resource identifiers to each distributed node according to the load balancing algorithm. By introducing a state weight mechanism, the generated identifiers can not only represent the basic characteristics of resources, but also reflect the current state of resources. In addition, it helps to simplify the query logic and eliminates the need for additional query operations to determine the state of resources.

Description

Technical Field

[0001] The present invention relates to the technical field of trusted computing, and more specifically, to a unified resource identification and resolution calculation method based on a trusted data space. Background Art

[0002] With the continuous development of information technology, the management of data resources has become increasingly complex. Especially in large-scale distributed systems, there are a wide variety of resources and they are widely distributed. How to efficiently and accurately manage and access these resources, especially in the context of massive data and high concurrent requests, has become an important and urgent challenge. Traditional resource management methods often rely on centralized databases or static identifier systems, and this approach is often difficult to meet the requirements of dynamic environments and distributed systems. Therefore, the resource management system not only needs to be able to handle the basic information of resources, but also be able to reflect the status of resources in real time, and optimize the query and resource scheduling processes.

[0003] In traditional resource management systems, the identifier of a resource and the status of the resource are usually separated. The status of the resource is usually determined through additional query operations, which leads to the need for additional logic or database queries to match the identifier and the status, increasing the complexity and maintenance cost of the system. Therefore, a unified resource identification and resolution calculation method based on a trusted data space is designed. Summary of the Invention

[0004] The purpose of the present invention is to provide a unified resource identification and resolution calculation method based on a trusted data space to solve the problem that in the above-mentioned background art, the identifier of a resource and the status of the resource are usually separated, and the status of the resource is usually determined through additional query operations, which leads to the need for additional logic or database queries to match the identifier and the status, increasing the complexity and maintenance cost of the system.

[0005] To achieve the above purpose, the present invention aims to provide a unified resource identification and resolution calculation method based on a trusted data space, including the following steps:

[0006] S1. Generate a composite structure of resource identifiers according to the multi-source characteristics of resources, adopt a distributed hash algorithm and multi-factor analysis to dynamically adjust the generation strategy of resource identifiers, and then encrypt the generated identifiers. During the process of generating the composite structure of resource identifiers according to the multi-source characteristics of resources, introduce the influencing factors of resource status for optimization;

[0007] S2. Use a blockchain to store the encrypted resource identifiers. Whenever the resource identifiers are updated or verified, trigger a smart contract to verify whether the resource identifiers are legal, and at the same time record the historical changes and verification processes of the resource identifiers through the distributed ledger of the blockchain;

[0008] After the resource identifier is verified, the system allocates the parsing tasks of the resource identifier to each distributed node according to the load balancing algorithm. After each distributed node executes the identifier parsing task in parallel, their respective processing results are merged, and finally the result of the identifier parsing is returned.

[0009] As a further improvement of this technical solution, the multi-source characteristics of the resources include, but are not limited to, resource type, creation time, geographical location, and version information.

[0010] As a further improvement of this technical solution, in S1, the specific steps for generating the composite structure of the resource identifier according to the multi-source characteristics of the resources are as follows:

[0011] Generation of the composite structure of the resource identifier:

[0012] UID r = H(Type r ||Time r ||Location r ||Version r );

[0013] Among them, UID r represents the preliminary identifier of resource r; Type r represents the resource type; Time r represents the resource creation time; Location r represents the geographical location where the resource is created; Version r represents the version information of the resource; H is a hash function; || represents the operation of merging different attributes of the resource.

[0014] As a further improvement of this technical solution, in S1, during the process of generating the composite structure of the resource identifier according to the multi-source characteristics of the resources, the influence factor of the resource status is introduced for optimization. After optimization, it is specifically:

[0015] UID r ' = H(Type r ||Time r ||Location r ||Version r ||(ω(Status r ) × Status r ));

[0016] Among them, UID r ' is the identifier of the optimized resource r; ω(Status r ) is the weight of the status of resource r; Status r is the status of resource r;

[0017] Among them, the value of ω(Status r ) is as follows:

[0018] When Status r is in the active state, ω(Status r ) = 1, indicating that the resource r is in the normal available state;

[0019] When Status r is in the pending state, ω(Status r ) = 0.5, indicating that the resource r is currently inactive;

[0020] When Status r is in the expired state, ω(Status r ) = 0, indicating that the resource r has expired.

[0021] As a further improvement of this technical solution, in the S1, the specific steps of dynamically adjusting the generation strategy of the resource identifier by using the distributed hash algorithm and multi-factor analysis are as follows:

[0022] S11. The comprehensive weight of the comprehensive influence of multiple factors:

[0023] W total = w U ·U r + w F ·F r + w L ·L + w P ·P r ;

[0024] Among them, W total is the weighted sum of multiple factors; U r is the resource update time index; w U is the weight of the resource update time index; F r is the resource access frequency; w F is the weight of the resource access frequency; L is the system load; w L is the weight of the system load; P r is the resource priority; w P is the weight of the resource priority;

[0025] S12. Adjust the resource identifier generation strategy according to the comprehensive weight;

[0026] Set the weight threshold W threshold of the comprehensive influence in advance;

[0027] If W total > W threshold , then:

[0028] UID r ” = H(Type r || Time r || Location r || Version r || w U · U r || w F · F r || w L · L || w P · P r );

[0029] If W total ≤ W threshold , then:

[0030] UID r ” = H(Type r || Time r || Location r || Version r );

[0031] Wherein, UID r ” is the identifier of the adjusted resource r.

[0032] As a further improvement of this technical solution, the smart contract can execute resource management tasks at each stage of the resource identifier life cycle, wherein the resource management tasks include verification of the creation, modification, and destruction processes.

[0033] As a further improvement of this technical solution, in S2, the smart contract is triggered to verify whether the resource identifier is legal, and the specific steps are as follows:

[0034] S21. The smart contract sets access control rules based on user roles, device attributes, and time limits to restrict different users' access rights to resources;

[0035] S22. Each time a user requests a resource, the smart contract verifies the user's permissions according to the pre-set access control policy and returns the corresponding resource information according to the permission policy;

[0036] S23. After the permission verification is completed, based on the multi-dimensional access control policy of the resource identifier, calculate the user's access permission score, and then dynamically adjust the user's access permission.

[0037] As a further improvement of this technical solution, verifying the user's permissions in S22 includes checking whether the user role meets the requirements; verifying whether the device attributes meet the access conditions; confirming whether the access request is within the permitted time range; and confirming whether other defined access rules are met.

[0038] As a further improvement of this technical solution, calculating the user's access permission score in S23 is based on the user role, the authentication status of the device, the device type or the security level of the device, the time of the access request and the set permitted time range, the user's historical behavior, the frequency of the user accessing resources, and the security status of the current trusted data space. Specifically as follows:

[0039] User role score R:

[0040] R = {1, 0.75, 0.5, 0.25, 0};

[0041] Wherein, R is the user role score; when the user role is an administrator, then R = 1; when the user role is a senior user, then R = 0.75; if the user role is a regular user, then R = 0.5; if the user role is a visitor, then R = 0.25; if the user role is a banned user, then R = 0;

[0042] Device authentication status score D status :

[0043] D status = {0, 1};

[0044] Wherein, D status is the device authentication status score; when the device is authenticated, then D status = 1; when the device is not authenticated, then D status = 0;

[0045] Device security level score D security :

[0046]

[0047] Wherein, D security is the device security level score; MaxSecurityLevel is the maximum value of the device security level; DeviceSecurityLevel is the security level of the device;

[0048] Access time score T access :

[0049]

[0050] Wherein, T accessLet Score be the access time score; T be the access time; AllowedTimeRange be the allowed time range; AccessTime be the time point of the access request;

[0051] The historical behavior score H history :

[0052] H history = 1 - penaltyFactor;

[0053] where H history is the historical behavior score; penaltyFactor is the penalty factor based on historical behavior;

[0054] The access frequency score F access :

[0055] F access = e -b·AccessFrequency ;

[0056] where F access is the access frequency score; b is a constant controlling the impact of access frequency; AccessFrequency is the access frequency;

[0057] Then, the access permission score of the user:

[0058] Score = w1·R + w2·D status + w3·D security + w4·T access + w5·H history + w6·F access + w7·S data ;

[0059] where Score is the access permission score of the user; w1 is the weight of the user role score; w2 is the weight of the device authentication status score; w3 is the weight of the device security level score; w4 is the weight of the access time score; w5 is the weight of the historical behavior score; w6 is the weight of the access frequency score; w7 is the weight of the data space security score.

[0060] As a further improvement of this technical solution, an artificial intelligence model is used for query optimization during the parsing of the S3 resource identifier, specifically: by analyzing historical query data, a prediction model for resource queries is established, and the node allocation and load balancing strategy of resource queries are dynamically adjusted according to the query prediction model, and the optimal query node is selected in the case of high concurrency.

[0061] Compared with the prior art, the beneficial effects of the present invention:

[0062] 1. In the resource unified identification and parsing calculation method based on a trusted data space, by introducing a status weight mechanism, the generated identifier can not only represent the basic characteristics of the resource but also reflect the current status of the resource. This enables the system to make more intelligent choices in more complex scenarios. Additionally, it helps simplify the query logic and eliminates the need for additional query operations to determine the resource status.

[0063] 2. In the resource unified identification and parsing calculation method based on a trusted data space, according to the weight score of user access, the smart contract can dynamically adjust the user's access rights. The smart contract can automatically adjust the permissions to enhance the security of the system and prevent abuse. BRIEF DESCRIPTION OF THE DRAWINGS

[0064] Figure 1 It is a flowchart of the overall method of the present invention. DETAILED DESCRIPTION OF THE EMBODIMENTS

[0065] Next, the technical solutions in the embodiments of the present invention will be clearly and completely described in conjunction with the accompanying drawings in the embodiments of the present invention. Obviously, the described embodiments are only a part of the embodiments of the present invention, rather than all of the embodiments. All other embodiments obtained by those of ordinary skill in the art based on the embodiments of the present invention without creative efforts shall fall within the protection scope of the present invention.

[0066] Embodiment

[0067] Please refer to Figure 1 As shown, a resource unified identification and parsing calculation method based on a trusted data space is provided, including the following steps:

[0068] S1. Generate a composite structure of the resource identifier according to the multi-source characteristics of the resource, adopt a distributed hash algorithm and multi-factor analysis to dynamically adjust the generation strategy of the resource identifier, and then encrypt the generated identifier. During the process of generating the composite structure of the resource identifier according to the multi-source characteristics of the resource, introduce the influencing factors of the resource status for optimization;

[0069] The multi-source characteristics of the resource include but are not limited to resource type, creation time, geographical location, and version information. Among them, the resource type refers to the category to which the resource belongs, such as files, database records, images, videos, etc.; the creation time refers to the creation time of the resource, usually represented by a timestamp; the geographical location refers to the physical or logical location of the resource, which can be represented by longitude and latitude, data center location, etc.; the version information refers to the version number of the resource.

[0070] In S1, the specific steps of generating the composite structure of the resource identifier according to the multi-source characteristics of the resource are as follows:

[0071] Generation of the composite structure of the resource identifier:

[0072] UID r = H(Type r || Time r || Location r || Version r );

[0073] Among them, UID r represents the preliminary identifier of resource r; Type r represents the resource type; Time r represents the resource creation time; Location r represents the geographical location where the resource is created; Version r represents the version information of the resource; H is a hash function used to calculate a unique identifier after concatenating the above multiple fields; || represents the operation of merging different attributes of the resource;

[0074] Use the distributed hash algorithm to process the preliminary identifier UID of resource r r as follows:

[0075] H(UID r ) = Hash(UID r ) mod N;

[0076] Among them, N is the number of nodes in the trusted data space; H(UID r ) is the hash value of the preliminary identifier of resource r.

[0077] In S1, during the process of generating the composite structure of the resource identifier according to the multi-source characteristics of the resource, the influence factor of the resource status is introduced for optimization. The resource status refers to the current status of the resource, such as "active", "archived", "deleted". After optimization, it is specifically:

[0078] UID r ' = H(Type r || Time r || Location r || Version r || (ω(Status r ) × Status r ));

[0079] Among them, UID r ' is the identifier of the optimized resource r; ω(Status r ) is the weight of the status of resource r; Status r is the status of resource r;

[0080] Among them, ω(Statusr ) takes the following values:

[0081] When Status r is in the active state, ω(Status r ) = 1, indicating that resource r is in a normal available state;

[0082] When Status r is in the pending state, ω(Status r ) = 0.5, indicating that resource r is currently inactive and awaits further processing;

[0083] When Status r is in the expired state, ω(Status r ) = 0, indicating that resource r has become invalid and has little priority;

[0084] The main difference between the formulas before and after optimization lies in whether the status information of the resource is considered. The formula before optimization is only based on static attributes (such as type, time, and location, etc.), while ignoring the dynamically changing status; in contrast, the optimized formula, by introducing a status weight mechanism, enables the generated identifier to not only represent the basic characteristics of the resource but also reflect the current status of the resource. This enables the system to make more intelligent choices in more complex scenarios, such as preferentially processing important resources in the active state or ignoring those entries that have expired and are no longer relevant. In addition, this method helps to simplify the query logic because developers can directly obtain information about the resource status from the identifier without having to perform additional query operations to determine the resource status.

[0085] In S1, the specific steps for dynamically adjusting the generation strategy of resource identifiers using the distributed hash algorithm and multi-factor analysis are as follows:

[0086] S11. The comprehensive weight of the comprehensive influence of multiple factors:

[0087] W total = w U ·U r + w F ·F r + w L ·L + w P ·P r ;

[0088] Among them, W total is the weighted sum of multiple factors; U r is the update time indicator of the resource, usually expressed as the difference from the current time or the correlation of the update time; w U is the weight of the update time indicator of the resource; F ris the access frequency of the resource, reflecting the usage of the resource; w F is the weight of the access frequency of the resource; L is the system load, which may take values from 0 to 1, indicating the degree of the current load (the lower the load, the more complex calculations may be allowed); w L is the weight of the system load; P r is the priority of the resource, which may be a rank value; w P is the weight of the priority of the resource;

[0089] S12. Adjust the identifier generation strategy of the resource according to the comprehensive weight;

[0090] Set the weight threshold W of the comprehensive impact in advance threshold ;

[0091] If W total >W threshold , it means that the resource is in a state of high priority, high activity or low system load. At this time, the system selects a more complex generation method to ensure the quality and uniqueness of the identifier. The generation method may include a hash algorithm with a higher number of digits, more feature dimensions, and a weighted generation considering more factors. Then:

[0092] UID r ” = H(Type r ||Time r ||Location r ||Version r ||w U ·U r ||w F ·F r ||w L ·L||w P ·P r );

[0093] If W total ≤W threshold , it means that the resource state is low or the system load is high. At this time, a simplified generation strategy can be selected to improve efficiency. For example, a simpler field concatenation or a hash algorithm with a lower number of digits can be used. Then:

[0094] UID r ” = H(Type r ||Time r ||Location r ||Version r );

[0095] Among them, UID r ” is the identifier of the adjusted resource r;

[0096] In summary, weight coefficients are defined for each influencing factor, and the comprehensive influence weight is calculated. Then, based on the results of the multi-factor analysis, the identifier generation strategy is adjusted. If the weights of certain factors are large (such as frequent resource updates or low system load), the system may choose a more complex generation method to ensure the high quality of the identifier. If the weights are small, the system can choose a more simplified generation method to improve the generation efficiency.

[0097] The identifier generation strategy adjusts the identifier generation strategy according to the results of the multi-factor analysis before assigning tasks. If the weights of certain factors are large (such as frequent resource updates or low system load), the system may choose a more complex generation method to ensure the high quality of the identifier. If the weights are small, the system can choose a more simplified generation method to improve the generation efficiency. For example, if the load of a certain node is low, the system may choose a more complex generation strategy (such as a more accurate hashing method), while when the load is high, a fast and simple hashing algorithm may be selected;

[0098] S2. Use the blockchain to store the encrypted resource identifier. Whenever the resource identifier is updated or verified, the smart contract is triggered to verify whether the resource identifier is legal, and at the same time, the historical changes and verification process of the resource identifier are recorded through the distributed ledger of the blockchain;

[0099] The smart contract can execute resource management tasks at each stage of the resource identifier life cycle. Among them, the resource management tasks include the verification of the creation, modification, and destruction processes;

[0100] The smart contract is automatically executed on the blockchain and does not rely on central control or manual intervention. For example, when the identifier is created, the smart contract will automatically trigger the relevant verification process; when the identifier needs to be updated, the smart contract will also automatically verify whether the update complies with the rules.

[0101] At each stage, the tasks of the smart contract can be further subdivided:

[0102] Resource creation (creation stage): Ensure the uniqueness of the resource identifier; verify the format, structure, permissions, etc. requirements of the resource identifier; record the creation operation and metadata;

[0103] Resource update (modification stage): Verify whether the identifier update is legal; ensure that the update complies with business rules (such as permission checking, version control, etc.); automatically trigger the verification process related to the update;

[0104] Resource destruction (destruction stage): Ensure the legality of the identifier destruction (such as confirming that the identifier is no longer in use and preventing illegal deletion, etc.); complete the destruction operation and record.

[0105] In S2, trigger the smart contract to verify whether the resource identifier is legal. The specific steps are as follows:

[0106] S21. The smart contract sets access control rules based on user roles, device attributes, and time limits to restrict the access rights of different users to resources. By setting precise access control rules for different users, devices, and time ranges, the system can dynamically authorize according to specific usage scenarios. This can significantly improve the security of the system, ensuring that only users meeting specific conditions can access resources, thereby preventing unauthorized access and abuse of resources.

[0107] S22. Each time a user requests a resource, the smart contract verifies the user's permissions according to the pre-set access control policy and returns the corresponding resource information according to the permission policy, ensuring the dynamicity and timeliness of permissions. This can not only effectively control improper access but also flexibly respond to different business requirements and operation scenarios.

[0108] Verifying the user's permissions includes: checking whether the user role meets the requirements; verifying whether the device attributes meet the access conditions (such as whether the device is certified); confirming whether the access request is within the permitted time range; and confirming whether other defined access rules are met.

[0109] Verifying the user role can ensure that users with different roles can only perform operations within their permitted scope. This is the basis for hierarchical management of access, which can effectively restrict user permissions and prevent unauthorized operations.

[0110] Device authentication is an important means to ensure access security. By checking whether the device attributes meet the requirements, the system can avoid access through insecure or uncertified devices, enhancing the security of resources. Ensuring that only devices meeting security standards can access sensitive resources further prevents the intrusion of malicious devices or data leakage.

[0111] Time limit is an effective means to prevent unauthorized access, especially for resources that have usage permissions only within a specific time period. This can prevent users from accessing resources at inappropriate times (such as non-working hours, holidays, etc.), thereby reducing potential security risks.

[0112] In addition to factors such as roles, devices, and time, the system can also introduce other custom rules (such as geographical location, access frequency, etc.). These rules can control permissions more precisely, ensuring that access behaviors comply with regulations and organizational policies and avoiding violations of internal procedures.

[0113] After the permission verification is completed, based on the multi-dimensional access control policy of the resource identifier, calculate the user's access permission score, and then dynamically adjust the user's access permissions.

[0114] Calculate the user's access privilege score based on the user role (such as administrator, regular user, visitor, etc.), the authentication status of the device, the device type or the security level of the device, the time of the access request and the set allowed time range, the user's historical behavior, the frequency of the user accessing resources, and the security status of the current trusted data space, as follows:

[0115] User role score R:

[0116] R = {1, 0.75, 0.5, 0.25, 0};

[0117] Among them, R is the user role score; when the user role is administrator, then R = 1; when the user role is advanced user, then R = 0.75; if the user role is regular user, then R = 0.5; if the user role is visitor, then R = 0.25; if the user role is banned user, then R = 0;

[0118] By assigning different scores to different roles, the access privilege of resources can be flexibly controlled according to the user identity. Administrators can obtain the highest privilege, while banned users cannot access resources. This role differentiation can enhance the security of the system, prevent unauthorized users from accessing sensitive information, and at the same time ensure that advanced users and regular users have different access scopes according to their privilege levels;

[0119] Device authentication status score D status :

[0120] D status = {0, 1};

[0121] Among them, D status is the device authentication status score; when the device is authenticated, then D status = 1; when the device is not authenticated, then D status = 0;

[0122] Using the device authentication status score, it can be ensured that only authenticated devices can obtain higher privileges, preventing insecure devices from accessing important resources. By introducing the non - linear characteristics of the Sigmoid function, the influence of the authentication status on the access privilege can be smoothly adjusted, enabling the system to provide fine - grained access control in different authentication states and enhancing the device security;

[0123] Device security level score D security :

[0124]

[0125] Among them, D securityLet the device security level score be; MaxSecurityLevel be the maximum value of the device security level; DeviceSecurityLevel be the security level of the device;

[0126] Scoring based on the device security level can effectively screen devices with high security and avoid low - security - level devices from threatening resources. Through the standardized scoring of the device security level, the system can dynamically adjust access permissions to ensure that devices access resources within the allowed security range, which helps prevent security vulnerabilities and potential attack risks;

[0127] Access time score T access :

[0128]

[0129] Wherein, T access is the access time score, representing the degree of match between the access time selected by the user when requesting resources and the preset allowed time range. The higher the score, the closer the access time is to the expected time range, and vice versa; T is the access time, that is, the time when the user actually initiates the request. Usually a specific timestamp (e.g., hours, minutes, seconds), used to compare with the allowed time range; AllowedTimeRange is the allowed time range, representing the time period set by the system or administrator for the user to access resources. This is a time interval, usually representing a fixed window, such as from 9 am to 5 pm; AccessTime is the time point of the access request, representing the specific moment when the user issues the resource request;

[0130] If T is within the allowed time window, what is calculated is the deviation between the access time T and the set allowed time range. The smaller the value, the closer it is to the preset time range and the higher the score; If T is not within the allowed time range: At this time, the score is directly 0, indicating that the access time is not within the predetermined allowed range, so there is no permission to access resources.

[0131] By restricting the access time, it can be ensured that users request resources within the specified time window and avoid accessing at inappropriate times. For example, the system can prevent resource access during non - working hours, improving the compliance and security of resource use. This score mechanism based on the time window can effectively manage access requests at different time periods and prevent abuse or unauthorized access;

[0132] Historical behavior score H history :

[0133] H history = 1 - penaltyFator;

[0134] Wherein, Hhistory is the historical behavior score; penaltyFactor is the penalty factor based on historical behavior; the user's historical behavior score reflects whether the user's behavior record is good, and the score is adjusted based on the penalty factor penaltyFactor of historical behavior. If the user has no bad record, the score is 1; if there is a bad record, the score will be reduced accordingly;

[0135] By considering the user's historical behavior, users with bad records can be identified and access control can be performed according to their behavior. This penalty mechanism can effectively reduce potential risks, reduce the access rights of malicious users, and thus improve the overall security of the system. By reviewing historical behavior, the user's access rights can be adjusted more intelligently, reducing the incidence of violations;

[0136] Access frequency score F access :

[0137] F access = e -b·AccessFrequency ;

[0138] where F access is the access frequency score; b is a constant that controls the influence of access frequency; AccessFrequency is the access frequency; the score of the access frequency uses an exponential decay function. Frequent access requests will cause the score to decrease, and vice versa, the score will be higher;

[0139] Scoring according to the frequency of the user accessing resources can effectively prevent the abuse of resources. Users who access frequently will receive a lower access score, which helps to avoid over-requests causing high system load or resource abuse. By introducing a penalty mechanism for access frequency, the use of system resources can be balanced, ensuring fair and stable resource allocation;

[0140] Then, the user's access right score:

[0141] Score = w1·R + w2·D status + w3·D security + w4·T access + w5·H history + w6·F access + w7·S data ;

[0142] where Score is the user's access right score; w1 is the weight of the user role score; w2 is the weight of the device authentication status score; w3 is the weight of the device security level score; w4 is the weight of the access time score; w5 is the weight of the historical behavior score; w6 is the weight of the access frequency score; w7 is the weight of the data space security score

[0143] Based on the score, the smart contract can dynamically adjust the user's access rights. For example, when the user has a high access score, higher permissions (such as more data access rights) may be granted, while when the score is low, the access scope or functions may be restricted; if the system detects anomalies (such as malicious behavior, frequently failed access requests, etc.) based on access frequency or historical behavior, the smart contract can automatically adjust the permissions to enhance the system's security and prevent abuse.

[0144] S3. After the resource identifier verification passes, the system assigns the parsing task of the resource identifier to each distributed node according to the load balancing algorithm. After each distributed node executes the identifier parsing task in parallel, their respective processing results are merged, and finally the result of the identifier parsing is returned.

[0145] Through parallel task allocation, each node can process different parsing tasks simultaneously, thus greatly improving the system's concurrent processing ability and response speed; by dynamically adjusting the task volume of each node, it avoids some nodes being overloaded while other nodes are idle, improving the resource utilization efficiency.

[0146] During the process of S3 resource identifier parsing, an artificial intelligence model is used for query optimization. Specifically: by analyzing historical query data, a prediction model for resource queries is established, and the node allocation and load balancing strategy of resource queries are dynamically adjusted according to the query prediction model. In the case of high concurrency, the optimal query node is selected.

[0147] The load balancing algorithm ensures the reasonable allocation and parallel processing of the resource identifier parsing task, thus enhancing the system's processing ability. Through the analysis and prediction of historical query data, the artificial intelligence model optimizes the query allocation and query node selection in a high-concurrency environment, further improving the system's response speed and resource utilization efficiency. This optimization method effectively reduces the performance bottlenecks that may occur in complex and high-load environments and improves the system's intelligence and adaptability.

[0148] The above shows and describes the basic principles, main features, and advantages of the present invention. Those skilled in the art of this industry should understand that the present invention is not limited by the above embodiments. The above embodiments and descriptions in the specification are only preferred examples of the present invention and are not used to limit the present invention. Without departing from the spirit and scope of the present invention, the present invention will have various changes and improvements, and these changes and improvements all fall within the scope of the present invention claimed.

Claims

1. A method for unified identification and parsing calculation of resources based on a trusted data space, characterized in that, It includes the following steps: S1. Generate a composite structure of resource identifiers according to the multi-source characteristics of resources, dynamically adjust the generation strategy of resource identifiers using a distributed hash algorithm and multi-factor analysis, then encrypt the generated identifiers, and introduce the influencing factors of resource status for optimization in the process of generating the composite structure of resource identifiers according to the multi-source characteristics of resources; S2. Use the blockchain to store the encrypted resource identifiers. Whenever the resource identifiers are updated or verified, trigger the smart contract to verify whether the resource identifiers are legal, and at the same time record the historical changes and verification process of the resource identifiers through the distributed ledger of the blockchain; S3. After the resource identifiers are verified to be passed, the system assigns the parsing tasks of the resource identifiers to each distributed node according to the load balancing algorithm. After each distributed node executes the identifier parsing tasks in parallel, merge their respective processing results, and finally return the result of the identifier parsing; In the above S1, the specific steps of generating the composite structure of resource identifiers according to the multi-source characteristics of resources are as follows: Generation of the composite structure of resource identifiers ； Among them, represents a resource Initial identifier; represents the resource type; represents the resource creation time; represents the geographical location where the resource was created; represents the version information of the resource; is a hash function; represents the operation of merging different attributes of the resource; In the above S1, introduce the influencing factors of resource status for optimization in the process of generating the composite structure of resource identifiers according to the multi-source characteristics of resources. After optimization, it is specifically: ； Among them, is the identifier of the optimized resource ; is the weight of the status of the resource ; is the status of the resource ; Among them, takes the following values: When is in the active state, it indicates that the resource is in a normal available state; When is in the to-be-processed state, it means that the resource is currently inactive; When is in an expired state, it means that the resource has become invalid.

2. The resource unified identification and parsing calculation method based on a trusted data space according to claim 1, characterized in that: The multi-source characteristics of the resources include resource type, creation time, geographical location, and version information.

3. The resource unified identification and parsing calculation method based on a trusted data space according to claim 2, wherein: In the above S1, the specific steps of dynamically adjusting the generation strategy of resource identifiers using a distributed hash algorithm and multi-factor analysis are as follows: S11. Comprehensive weight of the comprehensive influence of multiple factors ； Among them, is the weighted sum of multiple factors; is the resource update time indicator; is the weight of the resource update time indicator; is the resource access frequency; is the weight of the resource access frequency; is the system load; is the weight of the system load; is the resource priority; is the weight of the resource priority; S12. Adjust the identifier generation strategy of resources according to the comprehensive weight Set the weight threshold of the comprehensive impact in advance ; If , then: ； If , then: ; Among them, is the identifier of the adjusted resource .

4. The resource unified identification and parsing calculation method based on the trusted data space according to claim 3, characterized in that: The smart contract can execute resource management tasks at each stage of the life cycle of the resource identifier. Among them, the resource management tasks include verification of the creation, modification, and destruction processes.

5. The resource unified identification and parsing calculation method based on a trusted data space according to claim 4, characterized in that: In the above S2, the specific steps of triggering the smart contract to verify whether the resource identifiers are legal are as follows: S21. The smart contract sets access control rules based on user roles, device attributes, and time limits, restricting the access rights of different users to resources; S22. Every time a user requests a resource, the smart contract verifies the user's permissions according to the pre-set access control policy and returns the corresponding resource information according to the permission policy; S23. After the permission verification is completed, based on the multi-dimensional access control policy of the resource identifier, calculate the user's access permission score, and then dynamically adjust the user's access rights.

6. The resource unified identification and parsing calculation method based on a trusted data space according to claim 5, characterized in that: Verifying the user's permissions in the above S22 includes checking whether the user role meets the requirements; verifying whether the device attributes meet the access conditions; confirming whether the access request is within the allowed time range; and confirming whether other defined access rules are met.

7. The resource unified identification and parsing calculation method based on a trusted data space according to claim 6, wherein: Calculating the user's access permission score in the above S23 is based on user roles, the authentication status of the device, device type or security level of the device, the time of the access request and the set allowed time range, the user's historical behavior, the frequency of the user accessing resources, and the security status of the current trusted data space. Specifically as follows: User role score : ； Among them, is the user role score; when the user role is an administrator, then ; when the user role is a premium user, then ; if the user role is a regular user, then ; if the user role is a guest, then ; if the user role is a banned user, then ; Device authentication status score : ； Among them, is the device authentication status score; when the device is authenticated, then ; when the device is not authenticated, then ; Device safety level score : ； Among them, is the device security level score; is the maximum value of the device security level; is the security level of the device; Access time score : ； Among them, is the access time score; is the access time; is the allowed time range; is the time point of the access request; Historical behavior score : ； Among them, is the historical behavior score; is the penalty factor based on historical behavior; Access frequency score : ； Among them, is the access frequency score; is a constant for controlling the influence of access frequency; is the access frequency; Then, the user's access permission score: ； wherein, is the access permission score of the user; is the weight of the user role score; is the weight of the device authentication status score; is the weight of the device security level score; is the weight of the access time score; is the weight of the historical behavior score; is the weight of the access frequency score; is the weight of the data space security score.

8. The resource unified identification and parsing calculation method based on a trusted data space according to claim 7, characterized in that: During the process of parsing the S3 resource identifier, an artificial intelligence model is used to optimize the query. Specifically, by analyzing historical query data, a prediction model for resource queries is established, and the node allocation and load balancing strategy for resource queries are dynamically adjusted according to the query prediction model. In the case of high concurrency, the optimal query node is selected.

Images