Trusted data acquisition method and system of terminal trust management and identity verification method

Abstract

The invention discloses a trusted data acquisition method and system of a terminal trust management and identity verification method, and relates to the technical field of energy and environmental protection monitoring. The trusted data acquisition system is used for checking whether digital certificates accord with a preset certificate standard in sequence; if yes, monitoring the network flow of the acquisition equipment in real time, analyzing the network flow, if abnormal flow is found, judging that the abnormal flow is an intervention attempt of suspected non-certified acquisition equipment, cutting off the connection with the suspected non-certified acquisition equipment, and otherwise, allowing the acquisition equipment to access the trusted data acquisition system; the emission data is automatically collected and uploaded based on the collection equipment and the carbon emission metering instrument; according to the embedded acquisition contract and enterprise preset data transaction requirements, reading emission data from the carbon emission metering instrument or the trusted data acquisition system at preset time intervals as required; and performing coding and information association processing based on the emission data, establishing a one-to-one or one-to-many mapping relationship, generating structured data, and uploading the structured data to a block chain layer.

Description

Technical Field

[0001] This application relates to the technical field of energy and environmental protection monitoring, and particularly to a reliable data acquisition method and system for terminal trust management and identity authentication methods. Background Art

[0002] As major energy consumers, key energy-using units play a crucial role in achieving energy conservation and emission reduction goals and promoting the optimization and transformation of the energy structure through the accurate monitoring and effective management of their energy consumption data. Against this background, the online energy consumption monitoring system for key energy-using units has emerged.

[0003] Carbon emission data comes from on-site carbon emission metering devices, and the security of this data is directly related to the security of the devices and the online monitoring system. Due to the lack of a rigorous authentication mechanism for monitoring instrument terminal devices, a large number of devices that have not been strictly reviewed have flooded the market, resulting in the authenticity of the collected carbon emission data being difficult to guarantee. As a result, the collected data may have large deviations and cannot truly reflect the actual pollution emissions, which will have a serious impact on the upper-layer carbon emission monitoring and data analysis applications.

[0004] In view of this, we need a reliable data acquisition method and system for terminal trust management and identity authentication methods to solve the above problems. Summary of the Invention

[0005] The purpose of this application is to solve the problem that the authenticity of the collected data is difficult to guarantee and cannot truly reflect the actual pollution emissions. To solve the above technical problems, a reliable data acquisition method and system for terminal trust management and identity authentication methods are provided, where the authenticity of the collected data can be guaranteed and can truly reflect the actual pollution emissions.

[0006] To achieve the above object, the embodiments of the present application adopt the following technical solutions: a method for collecting trusted data in a terminal trust management and authentication method, the method comprising: sending a digital certificate to a collection device based on a perception layer and a digital certificate authentication mechanism, the digital certificate including device identification, validity period, and encrypted signature information; when the collection device accesses the trusted data collection system, the trusted data collection system sequentially checks whether the digital certificate conforms to a preset certificate standard; if it conforms, the network traffic of the collection device is monitored in real time, and the network traffic is analyzed. If abnormal traffic is found, it is determined as a suspected intrusion attempt by a non-authenticated collection device, and the connection with the suspected non-authenticated collection device is cut off. Otherwise, the collection device is allowed to access the trusted data collection system; automatically collecting and uploading emission data based on the collection device and carbon emission metering instruments, the collected emission data including consumption data of various energy media and attribute information of the associated collection devices; reading emission data from the carbon emission metering instruments or the trusted data collection system at preset time intervals according to the embedded collection contract and the enterprise's preset data transaction requirements; performing encoding and information association processing on the emission data, and establishing a one-to-one or one-to-many mapping relationship to generate structured data and upload it to the blockchain layer.

[0007] Further, according to the embodiments of the present application, the method further comprises: the blockchain layer includes a blockchain storage layer and a blockchain core layer. The blockchain storage layer adopts a distributed accounting mechanism to protect the transaction information of the collection device and store the smart contract code; the trusted data collection system submits transaction data to the blockchain through peer-to-peer communication, and the transaction data includes static data of the collection device and dynamic data generated by the transaction.

[0008] Further, according to the embodiments of the present application, the method further comprises: the blockchain core layer is used to support the generation, execution, and invocation of smart contracts, and realizes the storage and query of data through a contract interface. The blockchain core layer includes a DPoS consensus mechanism, a token incentive mechanism, and a key management module; validating nodes are elected based on the DPoS consensus mechanism to ensure the security and efficiency of the blockchain layer; token rewards are issued based on the token incentive mechanism to encourage the collection device to participate in maintenance and data submission.

[0009] Further, according to the embodiments of the present application, the method further comprises: the blockchain layer is connected to the application layer, and based on the transaction requests issued by the application layer, transaction behaviors are automatically performed. The transaction behaviors include data interaction and business collaboration between collection devices; after the transaction behaviors are processed by the smart contract, transaction information is generated and stored in the cloud database of the blockchain.

[0010] Further, according to the embodiments of the present application, the method further includes: The application layer is used to provide various application services for users. The application layer includes a government subsystem, an energy-consuming entity subsystem, and a public subsystem; the government subsystem has an automatic warning function. When it monitors that the emission data exceeds the preset threshold and shows abnormal fluctuations, it immediately sends a warning message; the energy-consuming entity subsystem is used to monitor and manage energy consumption; the public subsystem is used to provide query and analysis services for carbon emission data.

[0011] Further, according to the embodiments of the present application, the method further includes: The trusted data acquisition system adds a data verification layer based on the blockchain layer during the data transmission process to perform secondary verification on the data uploaded to the blockchain layer.

[0012] Further, according to the embodiments of the present application, the method further includes: Based on the determination of a suspected non-certified acquisition device, disconnect the connection with the suspected non-certified acquisition device and start a traceability program to find potential risk sources.

[0013] To achieve the above object, the embodiments of the present application also adopt the following technical solutions: A trusted data acquisition system for the terminal trust management and identity authentication method. The system includes: A digital certificate sending module, which is used to send digital certificates for acquisition devices based on the perception layer and the digital certificate authentication mechanism. The digital certificate includes device identification, validity period, and encrypted signature information; A verification module, which is used to sequentially check whether the digital certificate meets the preset certificate standards when the acquisition device accesses the trusted data acquisition system; A deployed network intrusion detection module, which is used to, if it meets the standards, monitor the network traffic of the acquisition device in real time, analyze the network traffic, and if abnormal traffic is found, determine it as an intrusion attempt by a suspected non-certified acquisition device, and then disconnect the connection with the suspected non-certified acquisition device. Otherwise, allow the acquisition device to access the trusted data acquisition system; An intelligent acquisition module is built into the carbon emission metering instrument. The intelligent acquisition module built into the carbon emission metering instrument automatically acquires and uploads emission data based on the acquisition device and the carbon emission metering instrument. The acquired emission data includes consumption data of various energy media and attribute information of the associated acquisition device; A carbon emission data reading module, which is used to read emission data from the carbon emission metering instrument or the trusted data acquisition system at preset time intervals according to the embedded acquisition contract and the enterprise's preset data transaction requirements; A carbon emission data association module, which is used to perform coding and information association processing based on the emission data, establish a one-to-one or one-to-many mapping relationship, generate structured data, and upload it to the blockchain layer.

[0014] To achieve the above object, an embodiment of the present application also discloses an electronic device, which includes a processor; a memory in which computer program instructions are stored, and when the computer program instructions are run by the processor, the processor is caused to execute the trusted data collection method of the terminal trust management and authentication method as described above.

[0015] To achieve the above object, an embodiment of the present application also discloses a computer-readable storage medium, on which computer program instructions are stored, and when the computer program instructions are run by the processor, the processor is caused to execute the trusted data collection method of the terminal trust management and authentication method as described above.

[0016] Beneficial effects:

[0017] In the present application, the trusted data collection system sequentially checks whether the digital certificate conforms to the preset certificate standard; if it conforms, it real-time monitors the network traffic of the collection device, analyzes the network traffic, and if abnormal traffic is found, it determines that it is a suspected intrusion attempt by a non-authenticated collection device, and then cuts off the connection with the suspected non-authenticated collection device, otherwise it allows the collection device to access the trusted data collection system; based on the collection device and the carbon emission measurement instrument, it automatically collects and uploads the emission data, and the collected emission data includes the consumption data of various energy media and the attribute information of the associated collection devices; according to the embedded collection contract and the enterprise's preset data transaction requirements, it reads the emission data from the carbon emission measurement instrument or the trusted data collection system at preset time intervals as needed; based on the emission data, it performs encoding and information association processing, and establishes a one-to-one or one-to-many mapping relationship, generates structured data and uploads it to the blockchain layer, thereby achieving the technical effect that the authenticity of the collected data can be guaranteed and the actual pollution emission situation can be truly reflected, and solving the technical problem that the authenticity of the collected data is difficult to guarantee and the actual pollution emission situation cannot be truly reflected. Description of the drawings

[0018] The following further describes the present application with reference to the drawings and embodiments.

[0019] Figure 1 It is a flowchart of the trusted data collection method of the terminal trust management and authentication method of the present application.

[0020] Figure 2 It is a structural diagram of the trusted data collection system of the terminal trust management and authentication method of the present application.

[0021] Figure 3 It is a structural diagram of the electronic device of the present application. Detailed implementation manners

[0022] In order to clearly and completely describe the objectives and technical solutions of the present invention, and make the advantages more clearly understood, the following further elaborates on the embodiments of the present invention in conjunction with the accompanying drawings. It should be understood that the specific embodiments described herein are part of the embodiments of the present invention, rather than all of the embodiments, and are merely used to explain the embodiments of the present invention, rather than limiting the embodiments of the present invention. All other embodiments obtained by those of ordinary skill in the art without creative efforts fall within the scope of protection of the present invention.

[0023] In the description of the present invention, it should be noted that the orientation or positional relationship indicated by the terms "center", "middle", "upper", "lower", "left", "right", "inner", "outer", "top", "bottom", "side", "vertical", "horizontal", etc. is based on the orientation or positional relationship shown in the accompanying drawings, and is only for the convenience of describing the present invention and simplifying the description, rather than indicating or implying that the device or element referred to must have a specific orientation, be constructed and operated in a specific orientation, and thus should not be construed as a limitation to the present invention. In addition, the terms "one", "first", "second", "third", "fourth", "fifth", "sixth" are only used for descriptive purposes and should not be construed as indicating or implying relative importance.

[0024] In the description of the present invention, it should be noted that unless otherwise clearly specified and defined, the terms "installed", "connected", "coupled" should be understood in a broad sense. For example, it can be a fixed connection, a detachable connection, or an integral connection; it can be a mechanical connection or an electrical connection; it can be directly connected or indirectly connected through an intermediate medium, and it can be the communication inside two elements. For those of ordinary skill in the art, the specific meanings of the above terms in the present invention can be understood according to specific circumstances.

[0025] For the purposes of simplicity and illustration, the principles of the embodiments are mainly described by reference to examples. In the following description, many specific details are set forth to provide a thorough understanding of the embodiments. However, it is obvious that for those of ordinary skill in the art, these embodiments may not be limited to these specific details in practice. In some instances, well-known methods and structures are not described in detail to avoid unnecessarily obscuring these embodiments. Additionally, all embodiments can be used in combination with each other.

[0026] Embodiment 1:

[0027] As Figure 1 shown, this embodiment provides a method for collecting trusted data of a terminal trust management and identity authentication method. Among them, this method is applied to a trusted data collection system of the terminal trust management and identity authentication method, and this method includes:

[0028] S10. Send digital certificates to the acquisition devices based on the perception layer and the digital certificate authentication mechanism. The digital certificates include device identifiers, validity periods, and encrypted signature information;

[0029] At the front end of data acquisition, to strengthen the security of device access and the credibility of data sources, it is crucial to introduce a digital certificate authentication mechanism.

[0030] For each legal device participating in data acquisition, whether it is a carbon emission detector required for carbon emission acquisition devices, or various sensors such as temperature, pressure, flow, and liquid level, as well as related devices such as data collectors, a unique digital certificate is assigned. This digital certificate is like the "electronic ID card" of the device, covering in detail the device model, which enables the system to accurately identify the specifications and functional characteristics of the device, facilitating subsequent adaptation to corresponding data processing processes.

[0031] S20. When the acquisition device accesses the trusted data acquisition system, the trusted data acquisition system sequentially checks whether the digital certificate meets the preset certificate standards;

[0032] When the device attempts to access the data acquisition system, the system immediately starts a rigorous verification process. First, check whether the certificate format follows the established encryption standard, which is usually based on industry-recognized high-strength encryption algorithms, such as the national encryption series algorithms. Their complex encryption rules and key systems can effectively resist external illegal cracking, ensuring the confidentiality and integrity of the certificate. Secondly, verify the certificate validity period. Only devices within the validity period are regarded as being in normal operation and maintenance status and can participate in data acquisition. Expired devices need to be re-certified to ensure the timeliness and reliability of the access devices. Finally, verify the authenticity of the certificate by interacting with a professional certificate issuing agency. As an independent third-party trust source, this agency endorses the device identity with its rigorous review process and secure certificate management system. Only when all the above verification links are successfully passed can the device be granted the permission to access the system, ensuring from the source that the emission monitoring system builds a solid security defense line, ensuring the authenticity and reliability of subsequent data, providing strong support for the stable operation of carbon emission monitoring and environmental protection up-to-standard emissions, and thus achieving the technical effect that the authenticity of the collected data can be guaranteed and can truly reflect the actual pollution emission situation, and solving the technical problem that the authenticity of the collected data is difficult to guarantee and cannot truly reflect the actual pollution emission situation.

[0033] S30. If it meets the standards, then monitor the network traffic of the acquisition device in real time, analyze the network traffic. If abnormal traffic is found, it is determined as a suspected intrusion attempt by a non-authenticated acquisition device, and then disconnect the connection with the suspected non-authenticated acquisition device. Otherwise, allow the acquisition device to access the trusted data acquisition system;

[0034] For example, when a large number of connection requests come from the same IP address in a short period of time, and these requests point to the key ports of the data acquisition system, it is very likely that a suspected unauthenticated device is trying to brute force access. If such an access attempt by a suspected unauthenticated device occurs, the system will take action on the system based on the access attempt. First, it will cut off the connection between the data and the system within the specified time, and prevent the suspicious device from further infiltrating the system to prevent potential data theft or malicious manipulation, thereby achieving the technical effect that the authenticity of the collected data can be guaranteed and can truly reflect the actual pollution emissions.

[0035] S40, automatically collecting and uploading emission data based on collection equipment and carbon emission metering instruments, where the collected emission data includes consumption data of multiple energy media and attribute information of interrelated collection equipment;

[0036] S50, reading emission data from a carbon emission meter or a trusted data collection system at preset time intervals as needed according to the embedded collection contract and the enterprise's preset data transaction requirements;

[0037] These collection modules automatically wake up at preset time intervals and start data collection. This preset time interval fully takes into account the differentiated requirements of carbon emission monitoring accuracy in different industries and enterprises, showing a high degree of flexibility. For general enterprises, during non-key supervision periods or relatively stable production processes, the preset time interval is set at 15-20 minutes, which can meet basic data monitoring needs without excessively increasing system burden and operation and maintenance costs.

[0038] When the acquisition module is awakened, it first sends a status query command to the associated acquisition device, and through real-time interactive communication with the acquisition device, confirms that the equipment is operating normally and without faults, eliminates hidden dangers in data collection work in advance, and ensures the accuracy and reliability of subsequent data.

[0039] S60: Encode and associate the emission data, establish a one-to-one or one-to-many mapping relationship, generate structured data and upload it to the blockchain layer.

[0040] Specifically, the collection module first sends a status query instruction to the associated collection device, and after confirming that the device is operating normally and without faults, collects consumption data covering multiple energy media and associated collection device attribute information. The energy medium consumption data includes carbon emission trading data, and the equipment attribute information includes the production unit to which it belongs, the installation location, and the equipment status, wherein the equipment status includes the operating time, whether it is maintained, etc.; the collected data is preliminarily encoded locally based on industry standards, and the emission data is deeply associated with the collection device attribute information, and a one-to-one or one-to-many mapping relationship is established to form structured information;

[0041] The raw data collected is not piled up chaotically locally. Instead, according to strict industry-standard coding rules, such as the widely used XML or JSON formats, it is preliminarily coded in an orderly manner, transformed into structured information that is easy to identify, transmit, and process subsequently. In this process, it is particularly important to deeply associate the energy consumption data with the device attribute information. By constructing a one-to-one or one-to-many mapping relationship, each piece of energy consumption data can be accurately corresponded to the specific device and its environment, further strengthening the data foundation and providing a solid guarantee for upper-layer data management, analysis, and application.

[0042] Furthermore, according to the embodiments of the present application, the method further includes: The blockchain layer includes a blockchain storage layer and a blockchain core layer. The blockchain storage layer adopts a distributed ledger mechanism to protect the transaction information of the acquisition device and store the smart contract code; the trusted data acquisition system submits the transaction data to the blockchain through peer-to-peer communication. The transaction data includes the static data of the acquisition device and the dynamic data generated by the transaction.

[0043] The blockchain core layer is used to support the generation, execution, and invocation of smart contracts, and realizes the storage and query of data through the contract interface. The blockchain core layer includes a DPoS (Delegated Proof of Stake) consensus mechanism, a token incentive mechanism, and a key management module; based on the DPoS consensus mechanism, verification nodes are elected to ensure the security and efficiency of the blockchain layer; based on the token incentive mechanism, token rewards are issued to encourage the acquisition device to participate in maintenance and data submission.

[0044] Exemplarily, in the core link of carbon emission monitoring, it is the blockchain layer. Adopting a multi-center distributed ledger mode becomes the key support for ensuring data security, credibility, and efficient utilization.

[0045] This blockchain layer has two sub-layers: a blockchain storage layer and a blockchain core layer. The blockchain storage layer adopts a multi-center distributed ledger to persistently store the transaction information of each entity and store the smart contract code, which is traceable and tamper-proof. Each entity in the system communicates peer-to-peer and submits relevant data to the blockchain, including static data such as entity names and attributes, and dynamic data generated by transactions; the blockchain core layer is the core of the entire blockchain system, including a DPoS consensus mechanism, a token incentive mechanism, key management, etc., generates and executes smart contracts corresponding to different services, invokes the contract interface to store and query data, and executes business regulations.

[0046] Once the conditions stipulated in the contract are triggered, the contract will automatically execute the corresponding terms, ensuring the automation and standardization of the business process, and the entire process is transparent and traceable. With the combined efforts of multi-center distributed ledger and smart contracts, the system successfully realizes the traceability and immutability of data. It records layer by layer along the data flow path, leaving clear traces for any data change or access, eliminating the possibility of post-factum tampering.

[0047] Furthermore, according to the embodiments of the present application, the method further includes: the blockchain layer is connected to the application layer, and based on the transaction requests issued by the application layer, transaction behaviors are automatically performed. The transaction behaviors include data interaction and business collaboration between collection devices; after being processed by the smart contract according to the transaction behaviors, transaction information is generated and stored in the cloud database of the blockchain.

[0048] The application layer is used to provide various application services for users. The application layer includes a government subsystem, an energy-consuming unit subsystem, and a public subsystem; the government subsystem has an automatic early warning function. When it detects that the emission data exceeds the preset threshold and shows abnormal fluctuations, it immediately sends out early warning information; the energy-consuming unit subsystem is used to monitor and manage energy consumption; the public subsystem is used to provide query and analysis services for carbon emission data.

[0049] By closely connecting with the blockchain platform, using distributed applications to conveniently access the system, and obtaining key data throughout the entire process of carbon emission monitoring. Based on these data, accurately carry out emission monitoring work to ensure that enterprises strictly comply with environmental protection emission standards. Through the seamless docking of distributed applications and the blockchain platform, real-time control of all links in carbon emission monitoring is achieved.

[0050] In the identity authentication link, ensure that only authorized personnel can access key data to protect the information security of the enterprise. Utilize the emission monitoring function to understand the operating status and emission indicators in real time, and combine with the energy-saving management module. Based on big data analysis and intelligent algorithms, tap the energy-saving potential for the enterprise. At the same time, in the face of complex production decision-making scenarios, such as equipment replacement and process optimization and adjustment, the intelligent decision-making function provides multiple feasible solution suggestions for the enterprise based on historical data and real-time working conditions, helping the management make the optimal choice.

[0051] Furthermore, according to the embodiments of the present application, the method further includes: the trusted data collection system adds a data verification layer based on the blockchain layer during the data transmission process to perform secondary verification on the data uploaded to the blockchain layer.

[0052] Furthermore, according to the embodiments of the present application, the method further includes: based on the determination of a suspected non-authenticated collection device, disconnect the connection with the suspected non-authenticated collection device and start a traceability program to find potential risk sources.

[0053] Specifically, the traffic in the data acquisition network is monitored in real time 24 hours a day. After a suspected non-authenticated acquisition device is determined, the traceability program is automatically started. By analyzing the source IP address and routing information of the data packets, and collaborating with external institutions such as network service providers, the potential risk sources hidden behind are deeply explored. An all-round and multi-level protection barrier is built for the data management system of carbon emission monitoring from the network traffic level to ensure the stable operation of the system and the safety of data without worry.

[0054] Regarding the problem of carbon emission monitoring in the consumption link of the energy Internet, blockchain technology is applied to the construction of the online monitoring system for carbon emissions of key energy-consuming units. The blockchain platform architecture is adopted, and the authentication of blockchain terminal devices for carbon emission monitoring and the acquisition of trusted data, the distributed cloud storage after data upload, and the information collaboration mechanism in the multi-subject use of data are carried out. Using blockchain technology, the relevant stakeholders in each link of carbon emission, such as production, trading, and consumption, are used as each node of the blockchain. After collecting the information of each link, it is uploaded to the chain and orderly linked into blocks for storage and cannot be changed, which can provide an autonomous, efficient, and decentralized credit environment for carbon emission trading.

[0055] There is a certain trust relationship among the participating subjects in the trusted data acquisition system of this terminal trust management and identity authentication method, and they all accept government supervision. The trusted data acquisition system is suitable for being constructed in the consortium chain mode, and the participating nodes join the blockchain network through identity authentication. Each participating node is interconnected and data-shared, and the transaction behavior of the blockchain and the integrity, authenticity, and credibility of the ledger data are maintained through the consensus mechanism. The blockchain platform has good scalability, and according to the business scenario and the business needs of the participating subjects, nodes can be added or exited elastically.

[0056] Embodiment 2:

[0057] As Figure 2 shown, based on the same inventive concept as the trusted data acquisition method of the terminal trust management and identity authentication method in the foregoing embodiment, the present invention also provides a trusted data acquisition system for the terminal trust management and identity authentication method. The system includes:

[0058] A digital certificate sending module, which is used to send digital certificates for acquisition devices based on the perception layer and the digital certificate authentication mechanism. The digital certificate includes device identification, validity period, and encrypted signature information;

[0059] A verification module, which is used to sequentially check whether the digital certificate meets the preset certificate standard when the acquisition device accesses the trusted data acquisition system;

[0060] Deploy a network intrusion detection module, which is used to monitor the network traffic of the acquisition device in real time if it meets the conditions, analyze the network traffic, and if abnormal traffic is found, it is determined as a suspected intrusion attempt by a non-authenticated acquisition device, and then disconnect the connection with the suspected non-authenticated acquisition device; otherwise, allow the acquisition device to access the trusted data acquisition system.

[0061] The carbon emission metering instrument is built-in with an intelligent acquisition module, which automatically acquires and uploads emission data based on the acquisition device and the carbon emission metering instrument. The acquired emission data includes the consumption data of various energy media and the attribute information of the associated acquisition device.

[0062] The carbon emission data reading module is used to read emission data from the carbon emission metering instrument or the trusted data acquisition system at preset time intervals as needed according to the embedded acquisition contract and the enterprise's preset data transaction requirements.

[0063] The carbon emission data association module is used to perform coding and information association processing based on the emission data, establish a one-to-one or one-to-many mapping relationship, generate structured data and upload it to the blockchain layer.

[0064] The various change methods and specific examples of the trusted data acquisition method of the terminal trust management and identity authentication method in the foregoing Embodiment 1 are equally applicable to the trusted data acquisition system of the terminal trust management and identity authentication method in this embodiment. Through the foregoing detailed description of the trusted data acquisition method of the terminal trust management and identity authentication method, those skilled in the art can clearly know the implementation method of the trusted data acquisition system of the terminal trust management and identity authentication method in this embodiment. Therefore, for the sake of simplicity of the specification, it will not be elaborated here.

[0065] Embodiment 3:

[0066] As Figure 3 shown, the electronic device includes one or more processors and a memory.

[0067] The processor can be a central processing unit (CPU) or other forms of processing units with data processing capabilities and / or instruction execution capabilities, and can control other components in the electronic device to perform desired functions.

[0068] The memory may include one or more computer program products, and the computer program products may include various forms of computer-readable storage media, such as volatile memory and / or non-volatile memory. The volatile memory may include, for example, random access memory (RAM) and / or cache memory, etc. The non-volatile memory may include, for example, read-only memory (ROM), hard disk, flash memory, etc. One or more computer program instructions may be stored on the computer-readable storage media, and the processor may run the program instructions to implement the trusted data collection method of the terminal trust management and authentication method of various embodiments of the present application above and / or other desired functions. Various contents such as emission data may also be stored in the computer-readable storage media, and the volatile memory can save the functions related to the present application.

[0069] Secondly, the electronic device further includes an input device and an output device, and these components are interconnected through a bus system and / or other forms of connection mechanisms (not shown).

[0070] For example, when the electronic device is a stand-alone device, the input device may be a communication network connector. In addition, the input device may further include, for example, a keyboard, a mouse, and so on.

[0071] The output device can output various information to the outside. The output device may include, for example, a display, a speaker, a printer, and a communication network and its connected remote output devices, etc.

[0072] Of course, for simplicity, only some of the components related to the present application in the electronic device are shown in the figure, and components such as buses, input / output interfaces, etc. are omitted. In addition, according to specific application scenarios, the electronic device may further include any other appropriate components.

[0073] In addition, an embodiment of the present application may also be a computer-readable storage media, on which computer program instructions are stored, and when the computer program instructions are run by a processor, the processor is caused to execute the steps in the trusted data collection method of the terminal trust management and authentication method according to various embodiments of the present application described in the "Exemplary Method" section above of this specification.

[0074] The computer-readable storage medium may adopt any combination of one or more readable media. The readable media may be a readable signal medium or a readable storage medium. The readable storage medium may include, for example, but is not limited to, an electrical, magnetic, optical, electromagnetic, infrared, or semiconductor system, apparatus, or device, or any combination of the above. More specific examples (a non-exhaustive list) of the readable storage medium include: an electrical connection having one or more wires, a portable disk, a hard disk, a random access memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or flash memory), an optical fiber, a portable compact disk read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination of the above.

[0075] Although the above description of the illustrative embodiments of the present application is provided for the convenience of those skilled in the art to understand the present application, the present application is not limited to the scope of the specific embodiments. For those of ordinary skill in the art, as long as various changes are within the spirit and scope of the present application defined and determined by the appended claims, all applications and creations that utilize the concept of the present application are within the scope of protection.

Claims

1. A method for collecting trusted data in a terminal trust management and authentication method, where the method for collecting trusted data in the terminal trust management and authentication method is applied to a trusted data collection system for the terminal trust management and authentication method, wherein, The method includes: Sending a digital certificate to the acquisition device based on the perception layer and the digital certificate authentication mechanism, where the digital certificate includes device identification, validity period, and encrypted signature information; When the acquisition device accesses the trusted data acquisition system, the trusted data acquisition system sequentially checks whether the digital certificate meets the preset certificate standards; If it meets the standards, it monitors the network traffic of the acquisition device in real time, analyzes the network traffic, and if abnormal traffic is found, it determines that it is a suspected attempt by a non-authenticated acquisition device to intervene, and then cuts off the connection with the suspected non-authenticated acquisition device. Otherwise, it allows the acquisition device to access the trusted data acquisition system; Automatically collecting and uploading emission data based on the acquisition device and the carbon emission measurement instrument, where the collected emission data includes consumption data of various energy media and attribute information of the associated acquisition device; According to the embedded acquisition contract and the enterprise's preset data transaction requirements, read the emission data from the carbon emission measurement instrument or the trusted data acquisition system at preset time intervals as needed; Perform encoding and information association processing on the emission data, establish a one-to-one or one-to-many mapping relationship, generate structured data, and upload it to the blockchain layer.

2. The trusted data collection method of the terminal trust management and authentication method according to claim 1, characterized in that, The method further includes: The blockchain layer includes a blockchain storage layer and a blockchain core layer. The blockchain storage layer adopts a distributed accounting mechanism to protect the transaction information of the acquisition device and store smart contract codes; The trusted data acquisition system submits transaction data to the blockchain through peer-to-peer communication. The transaction data includes static data of the acquisition device and dynamic data generated by transactions.

3. The trusted data collection method of the terminal trust management and authentication method according to claim 2, characterized in that, The method further includes: The blockchain core layer is used to support the generation, execution, and invocation of smart contracts, and realizes data storage and query through contract interfaces. The blockchain core layer includes a DPoS consensus mechanism, a token incentive mechanism, and a key management module; Elect verification nodes based on the DPoS consensus mechanism to ensure the security and efficiency of the blockchain layer; Issue token rewards based on the token incentive mechanism to encourage the acquisition device to participate in maintenance and data submission.

4. The trusted data collection method of the terminal trust management and authentication method according to claim 1, characterized in that, The method further includes: The blockchain layer is connected to the application layer, and based on the transaction requests issued by the application layer, automatic transaction behaviors are performed. The transaction behaviors include data interaction and business collaboration between the acquisition devices; After being processed by the smart contract according to the transaction behaviors, transaction information is generated and stored in the cloud database of the blockchain.

5. The trusted data collection method of the terminal trust management and authentication method according to claim 4, characterized in that, The method further includes: The application layer is used to provide various application services for users. The application layer includes a government subsystem, an energy-consuming unit subsystem, and a public subsystem; The government subsystem has an automatic warning function. When it monitors that the emission data exceeds the preset threshold and there is an abnormal fluctuation, it immediately sends a warning message; The energy-consuming unit subsystem is used to monitor and manage energy consumption; The public subsystem is used to provide query and analysis services for carbon emission data.

6. The trusted data collection method of the terminal trust management and authentication method according to claim 1, characterized in that, The method further includes: The described trusted data acquisition system adds a data verification layer based on the blockchain layer during data transmission to perform secondary verification on the data uploaded to the blockchain layer.

7. The trusted data collection method of the terminal trust management and authentication method according to claim 1, characterized in that, The method further includes: Based on determining a suspected non-authenticated acquisition device, disconnect the connection with the suspected non-authenticated acquisition device and start a traceability program to find potential risk sources.

8. A trusted data acquisition system for a terminal trust management and authentication method, characterized in that, The system includes: A digital certificate sending module, which is used to send digital certificates to acquisition devices based on the perception layer and the digital certificate authentication mechanism. The digital certificates include device identification, validity period, and encrypted signature information; A verification module, which is used to sequentially check whether the digital certificates meet the preset certificate standards when the acquisition device accesses the trusted data acquisition system; A deployed network intrusion detection module, which is used to, if it meets the requirements, monitor the network traffic of the acquisition device in real time, analyze the network traffic, and if abnormal traffic is found, determine it as an attempted intrusion by a suspected non-authenticated acquisition device, then disconnect the connection with the suspected non-authenticated acquisition device, otherwise allow the acquisition device to access the trusted data acquisition system; The carbon emission metering instrument is built with an intelligent acquisition module. The intelligent acquisition module of the carbon emission metering instrument automatically acquires and uploads emission data based on the acquisition device and the carbon emission metering instrument. The acquired emission data includes consumption data of various energy media and attribute information of the associated acquisition device; A carbon emission data reading module, which is used to read the emission data from the carbon emission metering instrument or the trusted data acquisition system at preset time intervals as needed according to the embedded acquisition contract and the enterprise's preset data transaction requirements; A carbon emission data association module, which is used to perform coding and information association processing based on the emission data, establish a one-to-one or one-to-many mapping relationship, generate structured data, and upload it to the blockchain layer.

9. An electronic device, including: A processor; A memory, in which computer program instructions are stored. When the computer program instructions are run by the processor, the processor executes the trusted data acquisition method of the terminal trust management and identity verification method as described in any one of claims 1-7.

10. A computer-readable storage medium, on which computer program instructions are stored. When the computer program instructions are run by a processor, the processor executes the trusted data acquisition method of the terminal trust management and identity verification method as described in any one of claims 1-7.

Images