Archive information distributed management system based on block chain

Abstract

The invention discloses an archive information distributed management system based on a block chain, and relates to the technical field of block chains, the archive information distributed management system comprises a monitoring center, and the monitoring center is in communication connection with an archive information acquisition module, an archive information classification module, an archive information processing module and an archive information management module; the archive information acquisition module is used for acquiring personal archive information data of company employees; the archive information classification module is used for carrying out step segment classification on the personal archive information data to obtain step archive information data; the archive information processing module is used for constructing a block chain node according to the stepped archive information data, and establishing an information security smart contract according to the block chain node; the archive information management module is used for performing archive information management operation on the personal archive information data in the block chain node according to the information security smart contract; and the security of archive information management is greatly improved.

Description

Technical Field

[0001] The present invention relates to the technical field of blockchain, and specifically to a distributed management system for archival information based on blockchain. Background Art

[0002] With the rapid development of information technology, the archival work is gradually realizing the transformation and upgrading of modern archival management with informatization as the core. In order to better utilize the archival data resources, various social units are massively using digital means to improve the storage, processing, and data sharing of archives. While the digital archival sharing management mode brings convenience to the archival management work, there are still problems such as digital archives being easily tampered with, and it is difficult to recover after being tampered with and damaged. There are often problems of some archival information being tampered with or deleted, which seriously affects the management efficiency of archives, violates the original intention of improving the reliability of archives, and brings unnecessary troubles such as the transmission and guidance of incorrect information to users.

[0003] Blockchain is a distributed computing network. Each node in this computing network executes and records the same transaction affairs, and these transaction affairs are finally classified into individual blocks. Only one block can be added to this network at a time. Each block contains a mathematical proof to ensure that the added block is in the same sequence as the blocks already added in the network. In this way, the "distributed database" of blockchain can ensure the consistency of data among all network nodes. Therefore, a distributed management system for archival information based on blockchain is provided. Summary of the Invention

[0004] In order to solve the above technical problems, the purpose of the present invention is to provide a distributed management system for archival information based on blockchain.

[0005] In order to achieve the above purpose, the present invention provides the following technical solutions:

[0006] Compared with the prior art, the beneficial effects of the present invention are: an archival information collection module is used to collect personal archival information data of company employees; an archival information classification module is used to classify the personal archival information data by stages to obtain staged archival information data; an archival information processing module is used to construct blockchain nodes according to the staged archival information data, and obtain an information security smart contract according to the blockchain nodes; an archival information management module is used to perform archival information management operations on the personal archival information data in the blockchain nodes according to the information security smart contract; greatly improving the security of archival information management. Brief Description of the Drawings

[0007] To more clearly illustrate the technical solutions in the embodiments of the present application or the prior art, the following will briefly introduce the accompanying drawings required in the embodiments. Obviously, the accompanying drawings in the following description are only some embodiments recorded in the present invention. For those of ordinary skill in the art, other accompanying drawings can also be obtained based on these drawings.

[0008] Figure 1 This is the schematic diagram of the present invention. Specific embodiments

[0009] To make the objectives, technical solutions, and advantages of the present invention clearer, the following will describe the technical solutions of the present invention in detail. Obviously, the described embodiments are only some embodiments of the present invention, rather than all embodiments. Based on the embodiments of the present invention, all other implementation manners obtained by those of ordinary skill in the art without creative efforts belong to the scope protected by the present invention.

[0010] As Figure 1 shown, a distributed management system for archival information based on blockchain includes a monitoring center, and the monitoring center is communicatively connected with an archival information collection module, an archival information classification module, an archival information processing module, and an archival information management module;

[0011] The archival information collection module is used to collect personal archival information data of company employees;

[0012] The archival information classification module is used to classify personal archival information data in stages to obtain staged archival information data;

[0013] The archival information processing module is used to construct blockchain nodes according to the staged archival information data, and obtain an information security smart contract based on the blockchain nodes;

[0014] The archival information management module is used to perform archival information management operations on the personal archival information data in the blockchain nodes according to the information security smart contract.

[0015] It should be further noted that in the specific implementation process, the specific process of the archival information collection module collecting personal archival information data includes:

[0016] The archival information collection module is provided with a personal archival information collection unit and a personal archival information sorting unit. Company employees enter personal basic identity data and personal biometric data through the personal archival information collection unit;

[0017] Generate a unique identity token according to the personal basic identity data and personal biometric data;

[0018] The personal file information sorting unit presets the standard format of personal file information, and standardizes and sorts the obtained personal basic identity data and personal biometric data according to the standard format of personal file information to obtain personal file information data;

[0019] It should be further noted that the personal file information data includes name, gender, age, ID number, mobile phone number, position held, fingerprint data, face data, and iris data;

[0020] The file information collection module uploads the collected personal file information data to the file information classification module.

[0021] It should be further noted that in the specific implementation process, the specific process of the file information classification module classifying personal file information data in stages includes:

[0022] It should be further noted that the positions held include ordinary employees, middle-level management, and senior management;

[0023] When the position held is an ordinary employee, the personal file information data of the company employees belonging to ordinary employees is marked as first-level ladder file information data;

[0024] When the position held is middle-level management, the personal file information data of the company employees belonging to middle-level management is marked as second-level ladder file information data;

[0025] When the position held is senior management, the personal file information data of the company employees belonging to senior management is marked as third-level ladder file information data;

[0026] It should be further noted that the first-level ladder file information data, second-level ladder file information data, and third-level ladder file information data include the corresponding personal file information data and a unique identity token.

[0027] The file information classification module uploads the obtained ladder file information data to the file information processing module.

[0028] It should be further noted that in the specific implementation process, the specific process of the file information processing module constructing blockchain nodes according to the ladder file information data includes:

[0029] It should be further noted that the blockchain nodes include first-level blockchain nodes, second-level blockchain nodes, and third-level blockchain nodes;

[0030] It should be further noted that in the specific implementation process, the specific process of constructing first-level blockchain nodes according to the first-level ladder file information data in the ladder file information data includes:

[0031] It should be further noted that the first-level blockchain node includes a first-level core data unit, a first-level security verification unit, and a first-level twin data unit;

[0032] It should be further noted that the first-level core data unit is used to store first-level ladder file information data; the first-level twin data unit is used to real-time backup the first-level ladder file information data in the first-level core data unit for the operation history of file information management; the first-level security verification unit is used to perform access security verification on the second-level blockchain node;

[0033] Send the obtained first-level ladder file information data to the first-level core data unit for storage, and real-time send the first-level ladder file information data stored in the first-level core data unit to the first-level twin data unit for backup;

[0034] Construct a first-level blockchain node according to the first-level core data unit and the first-level twin data unit that have completed configuration.

[0035] It should be further noted that in the specific implementation process, according to the second-level ladder file information data in the ladder file information data, the specific process of constructing the second-level blockchain node includes:

[0036] It should be further noted that the second-level blockchain node includes a second-level core data unit, a second-level twin data unit, a second-level security verification unit, and a first-level blockchain node access unit;

[0037] It should be further noted that the second-level core data unit is used to store second-level ladder file information data; the second-level twin data unit is used to real-time backup the second-level ladder file information data in the second-level core data unit for the operation history of file information management; the second-level security verification unit is used to perform security verification on the access of the third-level blockchain node to the second-level blockchain node; the first-level blockchain node access unit is used for the second-level blockchain node to perform data access operations on the first-level blockchain;

[0038] Send the obtained second-level ladder file information data to the second-level core data unit for storage, and real-time send the second-level ladder file information data stored in the second-level core data unit to the second-level twin data unit for backup;

[0039] Construct a second-level blockchain node according to the second-level core data unit and the second-level twin data unit that have completed configuration.

[0040] It should be further noted that in the specific implementation process, according to the third-level ladder file information data in the ladder file information data, the specific process of constructing the third-level blockchain node includes:

[0041] It should be further noted that the three - level blockchain node includes a three - level core data unit, a three - level twin data unit, a three - level security verification unit, a three - level blockchain node access unit, and a two - level blockchain node access unit;

[0042] It should be further noted that the three - level core data unit is used to store three - level ladder file information data; the three - level twin data unit is used to real - time backup the three - level ladder file information data in the three - level core data unit for the operation history of file information management; the three - level security verification unit is used for the security verification of other three - level blockchain nodes accessing the three - level blockchain node; the three - level blockchain node access unit is used for other three - level blockchain nodes to perform data access operations on the three - level blockchain node; the two - level blockchain node access unit is used for the three - level blockchain node to perform data access operations on the two - level blockchain;

[0043] The obtained three - level ladder file information data is sent to the three - level core data unit for storage, and the three - level ladder file information data stored in the three - level core data unit is sent to the three - level twin data unit for backup in real - time;

[0044] According to the configured three - level core data unit and three - level twin data unit, a three - level blockchain node is constructed;

[0045] It should be further noted that the first - level blockchain node belongs to the second - level blockchain node, the second - level blockchain node belongs to the third - level blockchain node, and the access between the third - level blockchain node and the second - level blockchain node and the first - level blockchain node requires progressive chain - type access;

[0046] For example:

[0047] When the third - level blockchain node accesses the first - level blockchain node, the third - level blockchain node must pass through the security verification and protection of the second - level blockchain node, and then initiate an access request to the first - level blockchain node. After passing through the security verification and protection of the first - level blockchain node, it can access the first - level blockchain node;

[0048] When other third - level blockchain nodes access the first - level blockchain node of this third - level blockchain node, the other third - level blockchain nodes must pass through the security verification and protection of this third - level blockchain node, and then repeat the above operations to access the first - level blockchain node of this third - level blockchain node;

[0049] It should be further noted that according to the uniqueness of the first - level ladder file information data, the second - level ladder file information data, and the third - level ladder file information data, the first - level blockchain node, the second - level blockchain node, and the third - level blockchain node are unique;

[0050] The file information processing module uploads the obtained blockchain nodes to the file information processing module.

[0051] It should be further noted that in the specific implementation process, the specific process for the file information processing module to obtain the information security smart contract based on the blockchain nodes includes:

[0052] Generate an information security smart contract based on the first-level security verification unit of the first-level blockchain node, the second-level security verification unit of the second-level blockchain node, the first-level blockchain node access unit, the third-level security verification unit of the third-level blockchain node, the third-level blockchain node access unit, and the second-level blockchain node access unit;

[0053] It should be further noted that the information security smart contract has encryption and decryption functions, permission management functions, and identity verification functions;

[0054] The information security smart contract includes a first-level information security smart contract, a second-level information security smart contract, and a third-level information security smart contract;

[0055] It should be further noted that the first-level information security smart contract is used for secure verification access between the first-level blockchain node and the second-level blockchain node; the second-level information security smart contract is used for secure verification access between the second-level blockchain node and the third-level blockchain node; the third-level information security smart contract is used for secure verification access between the third-level blockchain node and other third-level blockchain nodes;

[0056] It should be further noted that in the specific implementation process, the specific process for generating the first-level information security smart contract includes:

[0057] Obtain the unique identity tokens of the hierarchical file information data in the first-level blockchain node and the second-level blockchain node;

[0058] Through the ECC asymmetric encryption algorithm (elliptic curve encryption), encrypt the unique identity token of the first-level blockchain node and the unique identity token of the second-level blockchain node to obtain the first key pair for the first-level blockchain node and the second key pair for the second-level blockchain node, where the first key includes a first public key and a first private key; the second key includes a second public key and a second private key;

[0059] When a secondary blockchain node accesses a primary blockchain node, the primary blockchain node access unit of the secondary blockchain node will encrypt the second public key or the second private key according to the first public key to obtain the first encrypted data, and send the first encrypted data to the primary security verification unit of the primary blockchain node. The primary security verification unit decrypts the first encrypted data according to the first private key to obtain the decrypted second public key or the second private key, thereby realizing the encryption and decryption functions of the primary information security smart contract;

[0060] The identity verification function of the primary information security smart contract is realized by verifying the decrypted second public key or the second private key;

[0061] After the identity verification function is completed, the secondary blockchain node performs file information management operations on the primary blockchain node to realize the permission management function of the primary information security smart contract.

[0062] It should be further noted that in the specific implementation process, the specific process of generating the secondary information security smart contract includes:

[0063] Obtain the unique identity token of the ladder file information data in the tertiary blockchain node;

[0064] Encrypt the unique identity token of the tertiary blockchain node through the RSA asymmetric encryption algorithm; obtain the third key pair regarding the tertiary blockchain node, where the third key includes the third public key and the third private key;

[0065] When a tertiary blockchain node accesses a secondary blockchain node, the secondary blockchain node access unit of the tertiary blockchain node will encrypt the third public key or the third private key according to the second public key to obtain the second encrypted data, and send the second encrypted data to the secondary security verification unit of the secondary blockchain node. The secondary security verification unit decrypts the second encrypted data according to the second private key to obtain the decrypted third public key or the third private key, thereby realizing the encryption and decryption functions of the secondary information security smart contract;

[0066] The identity verification function of the secondary information security smart contract is realized by verifying the decrypted third public key or the third private key;

[0067] After the identity verification function is completed, the tertiary blockchain node performs file information management operations on the secondary blockchain node to realize the permission management function of the secondary information security smart contract.

[0068] It should be further noted that in the specific implementation process, the specific process of generating the tertiary information security smart contract includes:

[0069] A unique identity token for obtaining the ladder profile information data in other third-level blockchain nodes;

[0070] Through the ElG asymmetric encryption algorithm, encrypt the unique identity token of other third-level blockchain nodes; obtain the fourth key pair for other third-level blockchain nodes, where the fourth key includes a fourth public key and a fourth private key;

[0071] When other third-level blockchain nodes access the third-level blockchain node, the third-level blockchain node access unit of the other third-level blockchain nodes will encrypt the fourth public key or the fourth private key according to the third public key to obtain the third encrypted data, and send the third encrypted data to the third-level security verification unit of the third-level blockchain node. The third-level security verification unit decrypts the third encrypted data according to the third private key to obtain the decrypted fourth public key or the fourth private key, thereby realizing the encryption and decryption functions of the third-level information security smart contract;

[0072] Implement the identity verification function of the third-level information security smart contract according to the identity verification of the decrypted fourth public key or the fourth private key;

[0073] After completing the identity verification function, other third-level blockchain nodes perform file information management operations on the third-level blockchain node to implement the permission management function of the third-level information security smart contract;

[0074] The file information processing module uploads the obtained information security smart contract to the file information management module.

[0075] It should be further noted that in the specific implementation process, the specific process of the file information management module performing file information management operations on the personal file information data in the blockchain node according to the information security smart contract includes:

[0076] Set the valid access time for the obtained first-level information security smart contract, second-level information security smart contract, and third-level information security smart contract.

[0077] Within the valid access time, recording the file information management operations on the personal file information data in the blockchain node as an execution transaction, and the execution transaction includes a first transaction, a second transaction, a third transaction, and a fourth transaction;

[0078] It should be further noted that the first transaction is used to perform an operation of adding personal profile information data to the personal profile information data in the blockchain node; the second transaction is used to perform an operation of deleting personal profile information data from the personal profile information data in the blockchain node; the third transaction is used to perform an operation of adding personal profile information data to the personal profile information data in the blockchain node; the fourth transaction is used to perform an operation of adding personal profile information data to the personal profile information data in the blockchain node;

[0079] According to the primary information security smart contract, the secondary blockchain node executes the first transaction, the second transaction, the third transaction, or the fourth transaction on the primary ladder profile information data of the primary blockchain node, obtains the primary ladder profile information data after the execution of the transaction is completed, and updates the primary ladder profile information data of the primary core data unit in the primary blockchain node; sends the primary ladder profile information data before the update to the primary twin data unit for storage, and the primary security verification unit records the executed transaction;

[0080] According to the secondary information security smart contract, the tertiary blockchain node executes the first transaction, the second transaction, the third transaction, or the fourth transaction on the secondary ladder profile information data of the secondary blockchain node, obtains the secondary ladder profile information data after the execution of the transaction is completed, and updates the secondary ladder profile information data of the secondary core data unit in the secondary blockchain node; sends the secondary ladder profile information data before the update to the secondary twin data unit for storage, and the secondary security verification unit records the executed transaction;

[0081] According to the tertiary information security smart contract, other tertiary blockchain nodes execute the first transaction, the second transaction, the third transaction, or the fourth transaction on the tertiary ladder profile information data of the tertiary blockchain node, obtains the tertiary ladder profile information data after the execution of the transaction is completed, and updates the tertiary ladder profile information data of the tertiary core data unit in the tertiary blockchain node; sends the tertiary ladder profile information data before the update to the tertiary twin data unit for storage, and the tertiary security verification unit records the executed transaction;

[0082] According to the primary information security smart contract and the secondary information security smart contract, the tertiary blockchain node executes transactions on the primary blockchain node and the secondary blockchain node;

[0083] According to the primary information security smart contract, the secondary information security smart contract, and the tertiary information security smart contract, other tertiary blockchain nodes execute transactions on the tertiary blockchain node and the secondary blockchain node and the primary blockchain node subordinate to the tertiary blockchain node.

[0084] The above embodiments are merely used to illustrate the technical method of the present invention rather than to limit it. Although the present invention has been described in detail with reference to the preferred embodiments, those of ordinary skill in the art should understand that the technical method of the present invention can be modified or equivalently replaced without departing from the spirit and scope of the technical method of the present invention.

Claims

1. A distributed management system for archival information based on blockchain, including a monitoring center, characterized in that, The monitoring center is communicatively connected to an archive information collection module, an archive information classification module, an archive information processing module, and an archive information management module; The archive information collection module is used to collect personal archive information data of company employees; The archive information classification module is used for the process of classifying personal archive information data in stages: According to the personal archive information data, a unique identity token is generated; the positions include ordinary employees, middle-level management, and senior management; When the position is an ordinary employee, the personal archive information data of company employees belonging to ordinary employees is marked as first-level ladder archive information data; When the position is middle-level management, the personal archive information data of company employees belonging to middle-level management is marked as second-level ladder archive information data; When the position is senior management, the personal archive information data of company employees belonging to senior management is marked as third-level ladder archive information data; The first-level ladder archive information data, second-level ladder archive information data, and third-level ladder archive information data include the corresponding personal archive information data and the unique identity token; The archive information processing module is used to construct blockchain nodes according to the ladder archive information data, and establish an information security smart contract according to the blockchain nodes; The specific process of generating the first-level information security smart contract includes: Obtain the unique identity tokens of the ladder archive information data in the first-level blockchain node and the second-level blockchain node; The first-level blockchain node includes a first-level core data unit, a first-level security verification unit, and a first-level twin data unit; The first-level core data unit is used to store first-level ladder archive information data; the first-level twin data unit is used to back up in real time the first-level ladder archive information data of the first-level core data unit for the history of archive information management operations; the first-level security verification unit is used to perform access security verification on the second-level blockchain node; The second-level blockchain node includes a second-level core data unit, a second-level twin data unit, a second-level security verification unit, and a first-level blockchain node access unit; The second-level core data unit is used to store second-level ladder archive information data; the second-level twin data unit is used to back up in real time the second-level ladder archive information data of the second-level core data unit for the history of archive information management operations; the second-level security verification unit is used for the security verification of the third-level blockchain node's access to the second-level blockchain node; the first-level blockchain node access unit is used for the second-level blockchain node to perform data access operations on the first-level blockchain; Through the ECC asymmetric encryption algorithm, encrypt the unique identity token of the first-level blockchain node and the unique identity token of the second-level blockchain node to obtain a first key pair for the first-level blockchain node and a second key pair for the second-level blockchain node, where the first key includes a first public key and a first private key; the second key includes a second public key and a second private key; When a secondary blockchain node accesses a primary blockchain node, the primary blockchain node access unit of the secondary blockchain node will encrypt the second public key or the second private key according to the first public key to obtain first encrypted data, and send the first encrypted data to the primary security verification unit of the primary blockchain node. The primary security verification unit decrypts the first encrypted data according to the first private key to obtain the decrypted second public key or second private key, thereby realizing the encryption and decryption functions of the primary information security smart contract; According to the authentication of the decrypted second public key or second private key, the identity authentication function of the primary information security smart contract is realized; After the identity authentication function is completed, the secondary blockchain node performs file information management operations on the primary blockchain node to realize the permission management function of the primary information security smart contract; The specific process of generating a secondary information security smart contract includes: Obtain the unique identity token of the ladder file information data in the tertiary blockchain node; The tertiary blockchain node includes a tertiary core data unit, a tertiary twin data unit, a tertiary security verification unit, a tertiary blockchain node access unit, and a secondary blockchain node access unit; The tertiary core data unit is used to store tertiary ladder file information data; the tertiary twin data unit is used to real-time backup the tertiary ladder file information data of the file information management operation history of the tertiary core data unit; the tertiary security verification unit is used for security verification of other tertiary blockchain nodes accessing the tertiary blockchain node; the tertiary blockchain node access unit is used for other tertiary blockchain nodes to perform data access operations on the tertiary blockchain node; the secondary blockchain node access unit is used for the tertiary blockchain node to perform data access operations on the secondary blockchain; Encrypt the unique identity token of the tertiary blockchain node through the RSA asymmetric encryption algorithm; obtain the third key pair of the tertiary blockchain node, where the third key includes a third public key and a third private key; When the tertiary blockchain node accesses the secondary blockchain node, the secondary blockchain node access unit of the tertiary blockchain node will encrypt the third public key or the third private key according to the second public key to obtain second encrypted data, and send the second encrypted data to the secondary security verification unit of the secondary blockchain node. The secondary security verification unit decrypts the second encrypted data according to the second private key to obtain the decrypted third public key or third private key, thereby realizing the encryption and decryption functions of the secondary information security smart contract; According to the authentication of the decrypted third public key or third private key, the identity authentication function of the secondary information security smart contract is realized; After the identity authentication function is completed, the tertiary blockchain node performs file information management operations on the secondary blockchain node to realize the permission management function of the secondary information security smart contract; The specific process of generating a tertiary information security smart contract includes: Obtain the unique identity token of the ladder file information data in other tertiary blockchain nodes; Encrypt the unique identity tokens of other third-level blockchain nodes through the ElG asymmetric encryption algorithm; obtain the fourth key pair for other third-level blockchain nodes, where the fourth key includes a fourth public key and a fourth private key; When other third-level blockchain nodes access the third-level blockchain node, the third-level blockchain node access unit of the other third-level blockchain nodes will encrypt the fourth public key or the fourth private key according to the third public key to obtain the third encrypted data, and send the third encrypted data to the third-level security verification unit of the third-level blockchain node. The third-level security verification unit decrypts the third encrypted data according to the third private key to obtain the decrypted fourth public key or fourth private key, thereby realizing the encryption and decryption functions of the third-level information security smart contract; Implement the identity verification function of the third-level information security smart contract according to the identity verification of the decrypted fourth public key or fourth private key; After completing the identity verification function, other third-level blockchain nodes perform file information management operations on the third-level blockchain node to implement the permission management function of the third-level information security smart contract; The file information processing module uploads the obtained information security smart contract to the file information management module; The file information management module is used to perform file information management operations on the personal file information data in the blockchain node according to the information security smart contract.

2. The distributed management system for archive information based on blockchain according to claim 1, characterized in that The process of the file information collection module collecting personal file information data includes: The file information collection module includes a personal file information collection unit and a personal file information sorting unit. Company employees input personal basic identity data and personal biometric data through the personal file information collection unit; The personal file information sorting unit presets the standard format of personal file information, and standardizes and sorts the obtained personal basic identity data and personal biometric data according to the standard format of personal file information to obtain personal file information data, and the personal file information data includes the position held.

3. A distributed management system for archival information based on blockchain according to claim 1, characterized in that, The process of the file information management module performing file information management operations on the personal file information data in the blockchain node according to the information security smart contract includes: Set the valid access time for the obtained first-level information security smart contract, second-level information security smart contract, and third-level information security smart contract; During the valid access time, record the file information management operation on the personal file information data in the blockchain node as an execution transaction; According to the first-level information security smart contract, the second-level blockchain node performs an execution transaction on the first-level blockchain node; According to the second-level information security smart contract, the third-level blockchain node performs an execution transaction on the second-level blockchain node; According to the third-level information security smart contract, perform execution transactions between third-level blockchain nodes; According to the first-level information security smart contract and the second-level information security smart contract, the third-level blockchain node performs an execution transaction on the first-level blockchain node; According to the first-level information security smart contract, second-level information security smart contract, and third-level information security smart contract, the third-level blockchain node performs an execution transaction on the first-level blockchain node in other third-level blockchain nodes.

Images