Trusted data collection method and system for terminal trust management and identity authentication method

Abstract

The present application discloses a trusted data collection method and system for terminal trust management and identity authentication methods, which relates to the field of energy and environmental monitoring technology. The trusted data collection system sequentially checks whether digital certificates meet preset certificate standards. If they meet the standards, the network traffic of the collection device is monitored in real time and the network traffic is analyzed. If abnormal traffic is found, it is determined to be an intervention attempt by a suspected non-authenticated collection device, and the connection with the suspected non-authenticated collection device is cut off. Otherwise, the collection device is allowed to access the trusted data collection system. Emission data is automatically collected and uploaded based on the collection device and the carbon emission meter. According to the embedded collection contract and the enterprise's preset data transaction requirements, the emission data is read from the carbon emission meter or the trusted data collection system at preset time intervals on demand. Encoding and information association processing are performed based on the emission data, and a one-to-one or one-to-many mapping relationship is established to generate structured data and upload it to the blockchain layer.

Description

Technical Field

[0001] The present application relates to the field of energy and environmental monitoring technology, and in particular to a trusted data collection method and system for terminal trust management and identity authentication methods. Background Art

[0002] As major energy consumers, key energy-consuming units require accurate monitoring and effective management of their energy consumption data, playing a crucial role in achieving energy conservation and emission reduction goals and promoting energy structure optimization and transformation. Against this backdrop, online energy consumption monitoring systems for key energy-consuming units have emerged.

[0003] Carbon emissions data is derived from on-site carbon emission measurement equipment. The security of this data is directly related to the safety of the equipment and online monitoring systems. Due to the lack of a rigorous authentication mechanism for monitoring instrument terminals, a large number of unreviewed devices have flooded the market, making it difficult to guarantee the authenticity of the collected carbon emissions data. Consequently, the collected data may contain significant deviations and fail to truly reflect actual pollution emissions, which can have a serious impact on higher-level carbon emissions monitoring and data analysis applications.

[0004] In view of this, we need a trusted data collection method and system for terminal trust management and identity authentication methods to solve the above problems. Summary of the Invention

[0005] The purpose of this application is to solve the problem that the authenticity of the collected data is difficult to guarantee and cannot truly reflect the actual pollution emissions. In order to solve the above technical problems, a trusted data collection method and system with terminal trust management and identity authentication methods are provided, in which the authenticity of the collected data can be guaranteed and the actual pollution emissions can be truly reflected.

[0006] To achieve the above-mentioned purpose, the embodiment of the present application adopts the following technical solutions: a trusted data collection method of a terminal trust management and identity authentication method, the method comprising: sending a digital certificate to a collection device based on a perception layer and a digital certificate authentication mechanism, the digital certificate including a device identification, a validity period and an encrypted signature information; when the collection device is connected to a trusted data collection system, the trusted data collection system sequentially checks whether the digital certificate meets the preset certificate standards; if it meets the standards, the network traffic of the collection device is monitored in real time and the network traffic is analyzed. If abnormal traffic is found, it is determined to be an intervention attempt by a suspected non-authenticated collection device, and the connection with the suspected non-authenticated collection device is cut off. Otherwise, the collection device is allowed to access the trusted data collection system; emission data is automatically collected and uploaded based on the collection device and the carbon emission meter, and the collected emission data includes consumption data of multiple energy media and attribute information of mutually related collection devices; according to the embedded collection contract and the enterprise's preset data transaction requirements, emission data is read from the carbon emission meter or the trusted data collection system at preset time intervals on demand; encoding and information association processing are performed based on the emission data, and a one-to-one or one-to-many mapping relationship is established to generate structured data and upload it to the blockchain layer.

[0007] Furthermore, according to an embodiment of the present application, the method also includes: the blockchain layer includes a blockchain storage layer and a blockchain core layer, the blockchain storage layer adopts a distributed accounting mechanism to protect the transaction information of the collection device and store the smart contract code; the trusted data collection system submits transaction data to the chain through point-to-point communication, and the transaction data includes static data of the collection device and dynamic data generated by the transaction.

[0008] Furthermore, according to an embodiment of the present application, the method also includes: the blockchain core layer is used to support the generation, execution and calling of smart contracts, and realizes data storage and query through the contract interface. The blockchain core layer includes a DPoS consensus mechanism, a token incentive mechanism and a key management module; based on the DPoS consensus mechanism, verification nodes are elected to ensure the security and efficiency of the blockchain layer; based on the token incentive mechanism, token rewards are issued to encourage collection equipment to participate in maintenance and data submission.

[0009] Furthermore, according to an embodiment of the present application, the method also includes: connecting the blockchain layer with the application layer, issuing a transaction request based on the application layer and automatically performing transaction behavior, the transaction behavior including data interaction and business collaboration between collection devices; generating transaction information after the transaction behavior is processed by the smart contract and storing it in the cloud database of the blockchain.

[0010] Furthermore, according to an embodiment of the present application, the method also includes: an application layer for providing various application services to users, and the application layer includes a government subsystem, an energy-consuming unit subsystem, and a public subsystem; the government subsystem has an automatic early warning function, and when it is monitored that the emission data exceeds a preset threshold and produces abnormal fluctuations, an early warning message is immediately sent; the energy-consuming unit subsystem is used to monitor and manage energy consumption; the public subsystem is used to provide query and analysis services for carbon emission data.

[0011] Furthermore, according to an embodiment of the present application, the method also includes: the trusted data acquisition system adds a data verification layer based on the blockchain layer during the data transmission process, and performs secondary verification on the data uploaded to the blockchain layer.

[0012] Furthermore, according to an embodiment of the present application, the method further includes: based on determining that the device is a suspected non-certified collection device, cutting off the connection with the suspected non-certified collection device, and starting a traceability program to find potential risk sources.

[0013] To achieve the above-mentioned purpose, the embodiment of the present application also adopts the following technical solutions: a trusted data acquisition system of terminal trust management and identity authentication method, the system including: a digital certificate sending module, the digital certificate sending module is used to send a digital certificate to the acquisition device based on the perception layer and the digital certificate authentication mechanism, the digital certificate includes a device identification, validity period and encrypted signature information; a verification module, the verification module is used when the acquisition device is connected to the trusted data acquisition system, the trusted data acquisition system sequentially checks whether the digital certificate meets the preset certificate standards; deploys a network intrusion detection module, deploys a network intrusion detection module for real-time monitoring of the network traffic of the acquisition device if it meets the standards, analyzes the network traffic, and if abnormal traffic is found, it is determined to be an intervention attempt of a suspected non-authenticated acquisition device, and the connection with the suspected non-authenticated acquisition device is cut off. connection, otherwise the collection device is allowed to access the trusted data collection system; the carbon emission meter has a built-in intelligent collection module, which automatically collects and uploads emission data based on the collection device and the carbon emission meter. The collected emission data includes consumption data of multiple energy media and attribute information of interrelated collection devices; the carbon emission data reading module is used to read emission data from the carbon emission meter or the trusted data collection system at preset time intervals on demand according to the embedded collection contract and the enterprise's preset data transaction requirements; the carbon emission data association module is used to encode and associate information based on emission data, and establish a one-to-one or one-to-many mapping relationship to generate structured data and upload it to the blockchain layer.

[0014] To achieve the above-mentioned purpose, an embodiment of the present application also discloses an electronic device, which includes a processor; a memory, in which computer program instructions are stored. When the computer program instructions are executed by the processor, the processor executes a trusted data collection method such as the above-mentioned terminal trust management and identity authentication method.

[0015] To achieve the above objectives, an embodiment of the present application also discloses a computer-readable storage medium on which computer program instructions are stored. When the computer program instructions are executed by a processor, the processor executes a trusted data collection method such as the above-mentioned terminal trust management and identity authentication method.

[0016] Beneficial effects:

[0017] This application uses a trusted data collection system to check whether the digital certificate meets the preset certificate standards in sequence; if it meets the standards, it monitors the network traffic of the collection device in real time and analyzes the network traffic. If abnormal traffic is found, it is determined to be an intervention attempt by a suspected non-certified collection device, and the connection with the suspected non-certified collection device is cut off. Otherwise, the collection device is allowed to access the trusted data collection system; based on the collection device and the carbon emission meter, the emission data is automatically collected and uploaded, and the collected emission data includes the consumption data of various energy media and the attribute information of the interrelated collection devices; according to the embedded collection contract and the enterprise's preset data transaction requirements, the emission data is read from the carbon emission meter or the trusted data collection system at preset time intervals on demand; based on the emission data, encoding and information association processing are performed, and a one-to-one or one-to-many mapping relationship is established to generate structured data and upload it to the blockchain layer, thereby achieving the technical effect that the authenticity of the collected data can be guaranteed and the actual pollution emission situation can be truly reflected, and solving the technical problem that the authenticity of the collected data is difficult to guarantee and the actual pollution emission situation cannot be truly reflected. BRIEF DESCRIPTION OF THE DRAWINGS

[0018] The present application is further described below with reference to the accompanying drawings and examples.

[0019] Figure 1 This is a flow chart of the trusted data collection method of the terminal trust management and identity authentication method of this application.

[0020] Figure 2 This is a structural diagram of the trusted data collection system of the terminal trust management and identity authentication method of this application.

[0021] Figure 3 It is a structural diagram of the electronic device of this application. DETAILED DESCRIPTION

[0022] In order to clearly and completely describe the objectives and technical solutions of the present invention and make the advantages more clearly understood, the embodiments of the present invention are further described in detail below with reference to the accompanying drawings. It should be understood that the specific embodiments described herein are part of the embodiments of the present invention, not all of them, and are only used to explain the embodiments of the present invention, not to limit the embodiments of the present invention. All other embodiments obtained by ordinary technicians in this field without making creative efforts are within the scope of protection of the present invention.

[0023] In the description of the present invention, it should be noted that the terms "center," "middle," "upper," "lower," "left," "right," "inner," "outer," "top," "bottom," "side," "vertical," "horizontal," and the like, indicating positions or location relationships, are based on the positions or location relationships shown in the accompanying drawings and are intended only to facilitate the description of the present invention and simplify the description. They are not intended to indicate or imply that the devices or components referred to must have a specific orientation, be constructed, or operate in a specific orientation. Therefore, they should not be construed as limiting the present invention. Furthermore, the terms "one," "first," "second," "third," "fourth," "fifth," and "sixth" are used for descriptive purposes only and should not be construed as indicating or implying relative importance.

[0024] In the description of the present invention, it should be noted that, unless otherwise expressly specified or limited, the terms "mounted," "connected," and "connected" should be understood in a broad sense. For example, they may refer to fixed, detachable, or integral connections; mechanical or electrical connections; direct or indirect connections through an intermediate medium; and internal communication between two components. Those skilled in the art will understand the specific meanings of the above terms in the present invention based on the specific circumstances.

[0025] For the purpose of simplicity and illustration, the principles of the embodiments are described primarily with reference to examples. In the following description, many specific details are provided to provide a thorough understanding of the embodiments. However, it will be apparent to those skilled in the art that the embodiments may not be limited to these specific details in practice. In some instances, well-known methods and structures are not described in detail to avoid unnecessarily obscuring the understanding of the embodiments. In addition, all embodiments may be used in combination with each other.

[0026] Example 1:

[0027] like Figure 1 As shown, this embodiment provides a trusted data collection method for a terminal trust management and identity authentication method, wherein the method is applied to a trusted data collection system for a terminal trust management and identity authentication method, and the method includes:

[0028] S10. Send a digital certificate to the collection device based on the perception layer and digital certificate authentication mechanism. The digital certificate includes device identification, validity period, and encrypted signature information;

[0029] At the data collection front end, it is crucial to introduce a digital certificate authentication mechanism to enhance the security of device access and the credibility of the data source.

[0030] Each legitimate device involved in data collection—whether it's a carbon emissions detector, temperature, pressure, flow, level sensors, or other related equipment like data collectors—is assigned a unique digital certificate. This digital certificate acts as a "digital ID" for the device, detailing the device model. This allows the system to accurately identify the device's specifications and functional characteristics, facilitating subsequent adaptation of the corresponding data processing workflow.

[0031] S20. When the collection device is connected to the trusted data collection system, the trusted data collection system sequentially checks whether the digital certificate meets the preset certificate standards;

[0032] When a device attempts to access the data collection system, the system immediately initiates a rigorous verification process. First, check whether the certificate format complies with the established encryption standard. This encryption standard is usually based on a high-strength encryption algorithm recognized by the industry, such as the national secret series algorithm. Its complex encryption rules and key system can effectively resist external illegal cracking and ensure the confidentiality and integrity of the certificate. Secondly, verify the validity period of the certificate. Only devices within the validity period are considered to be in normal operation and maintenance status and can participate in data collection. Expired devices need to be re-authenticated to ensure the real-time and reliability of the access device. Finally, verify the authenticity of the certificate through interaction with a professional certificate authority. As an independent third-party trust source, the agency endorses the identity of the device with its rigorous review process and secure certificate management system. Only when all the above verification links are successfully passed, the equipment will be granted access to the system, ensuring that the emission monitoring system builds a solid security line from the source, ensuring the authenticity and reliability of subsequent data, and providing solid support for the stable operation of carbon emission monitoring and environmentally friendly emission standards, thereby achieving the technical effect of ensuring the authenticity of the collected data and being able to truly reflect the actual pollution emissions, and solving the technical problem that the authenticity of the collected data is difficult to ensure and cannot truly reflect the actual pollution emissions.

[0033] S30. If the conditions are met, the network traffic of the collection device is monitored in real time and analyzed. If abnormal traffic is found, it is determined to be an attempt of intervention by a suspected unauthenticated collection device, and the connection with the suspected unauthenticated collection device is cut off. Otherwise, the collection device is allowed to access the trusted data collection system;

[0034] For example, when a large number of connection requests come from the same IP address in a short period of time, and these requests point to the key ports of the data acquisition system, it is very likely that a suspected unauthenticated device is trying to brute force access. If such an access attempt by a suspected unauthenticated device occurs, the system will take action on the system based on the access attempt. First, it will cut off the connection between the data and the system within the specified time to prevent the suspicious device from further infiltrating the system to prevent potential data theft or malicious manipulation, thereby achieving the technical effect that the authenticity of the collected data can be guaranteed and can truly reflect the actual pollution emissions.

[0035] S40. Automatically collect and upload emission data based on collection equipment and carbon emission metering instruments, where the collected emission data includes consumption data of multiple energy media and attribute information of interrelated collection equipment;

[0036] S50. Read emission data from the carbon emission meter or trusted data collection system at preset time intervals as needed according to the embedded collection contract and the enterprise's preset data transaction requirements;

[0037] These collection modules automatically wake up at preset intervals and begin collecting data. This preset interval fully accounts for the diverse carbon emissions monitoring accuracy requirements of different industries and enterprises, demonstrating a high degree of flexibility. For general enterprises, during non-critical regulatory periods or when production processes are relatively stable, a preset interval of 15-20 minutes can meet basic data monitoring needs without excessively increasing system burden and operational costs.

[0038] When the acquisition module is awakened, it first sends a status query command to the associated acquisition device. Through real-time interactive communication with the acquisition device, it confirms that the device is operating normally and has no faults, eliminating hidden dangers in data collection work in advance and ensuring the accuracy and reliability of subsequent data.

[0039] S60: Encode and associate information based on emission data, establish a one-to-one or one-to-many mapping relationship, generate structured data and upload it to the blockchain layer.

[0040] Specifically, the collection module first sends a status query command to the associated collection device. After confirming that the device is operating normally and has no faults, it collects consumption data covering multiple energy media and attribute information of the associated collection devices. The energy medium consumption data includes carbon emission trading data, and the device attribute information includes the production unit to which it belongs, the installation location, and the device status, where the device status includes operating time and whether it has been maintained. The collected data is preliminarily encoded locally based on industry standards, and the emission data is deeply associated with the collection device attribute information to establish a one-to-one or one-to-many mapping relationship to form structured information.

[0041] The collected raw data is not randomly stored locally. Instead, it is systematically encoded according to strict industry-standard encoding rules, such as the widely used XML or JSON formats, to transform it into structured information that is easy to identify, transmit, and subsequently process. During this process, it is particularly important to deeply correlate energy consumption data with device attribute information. By establishing one-to-one or one-to-many mapping relationships, each piece of energy consumption data can be accurately mapped to a specific device and its environment, further consolidating the data foundation and providing a solid foundation for upper-level data management, analysis, and application.

[0042] Furthermore, according to an embodiment of the present application, the method also includes: the blockchain layer includes a blockchain storage layer and a blockchain core layer, the blockchain storage layer adopts a distributed accounting mechanism to protect the transaction information of the collection device and store the smart contract code; the trusted data collection system submits transaction data to the chain through point-to-point communication, and the transaction data includes static data of the collection device and dynamic data generated by the transaction.

[0043] The blockchain core layer is used to support the generation, execution and calling of smart contracts, and realizes data storage and query through the contract interface. The blockchain core layer includes the DPoS (Delegated Proof of Stake) consensus mechanism, token incentive mechanism and key management module; based on the DPoS consensus mechanism, verification nodes are elected to ensure the security and efficiency of the blockchain layer; based on the token incentive mechanism, token rewards are issued to encourage collection equipment to participate in maintenance and data submission.

[0044] For example, the core link in carbon emission monitoring is the blockchain layer, and the use of a multi-center distributed accounting model has become the key support for ensuring data security, reliability and efficient use.

[0045] The blockchain layer consists of two sublayers: the blockchain storage layer and the blockchain core layer. The blockchain storage layer utilizes a multi-center distributed ledger to persistently store transaction information across all entities and store smart contract code, ensuring traceability and immutability. Each entity in the system communicates point-to-point, submitting relevant data to the blockchain, including static data such as entity names and attributes, as well as dynamic data generated by transactions. The blockchain core layer is the core of the entire blockchain system, including the Delegated Proof of Stake (DPoS) consensus mechanism, token incentive mechanisms, and key management. It generates and executes smart contracts for different businesses, calls contract interfaces to store and query data, and enforces business regulations.

[0046] Once the conditions agreed in the contract are triggered, the contract will automatically execute the corresponding clauses, ensuring the automation and standardization of the business process, and the transparency of the entire process. With the synergy of multi-center distributed accounting and smart contracts, the system successfully achieves the traceability and non-tamperability of data, and records layer by layer along the data flow path, so that any data changes and accesses leave clear traces, eliminating the possibility of subsequent tampering.

[0047] Furthermore, according to an embodiment of the present application, the method also includes: connecting the blockchain layer with the application layer, issuing a transaction request based on the application layer and automatically performing transaction behavior, the transaction behavior including data interaction and business collaboration between collection devices; generating transaction information after the transaction behavior is processed by the smart contract and storing it in the cloud database of the blockchain.

[0048] The application layer is used to provide users with various application services. The application layer includes the government subsystem, the energy-consuming unit subsystem and the public subsystem. The government subsystem has an automatic early warning function. When the monitored emission data exceeds the preset threshold and produces abnormal fluctuations, it immediately sends an early warning message; the energy-consuming unit subsystem is used to monitor and manage energy consumption; the public subsystem is used to provide query and analysis services for carbon emission data.

[0049] By tightly integrating with the blockchain platform and leveraging distributed applications to conveniently access the system, key data from the entire carbon emissions monitoring process can be obtained. Based on this data, emissions monitoring can be accurately carried out to ensure that companies strictly adhere to environmental emission standards. By seamlessly integrating distributed applications with the blockchain platform, real-time control over every aspect of carbon emissions monitoring is achieved.

[0050] During the identity authentication process, only authorized personnel can access critical data, safeguarding enterprise information security. Emissions monitoring provides real-time insights into operational status and emission indicators. Combined with the energy-saving management module, it leverages big data analysis and intelligent algorithms to unlock energy-saving potential for the enterprise. Furthermore, when faced with complex production decision-making scenarios, such as equipment upgrades and process optimization, the intelligent decision-making function provides enterprises with multiple feasible solutions based on historical data and real-time operating conditions, helping management make the optimal decision.

[0051] Furthermore, according to an embodiment of the present application, the method also includes: the trusted data acquisition system adds a data verification layer based on the blockchain layer during the data transmission process, and performs secondary verification on the data uploaded to the blockchain layer.

[0052] Furthermore, according to an embodiment of the present application, the method further includes: based on determining that the device is a suspected non-certified collection device, cutting off the connection with the suspected non-certified collection device, and starting a traceability program to find potential risk sources.

[0053] Specifically, traffic within the data collection network is monitored 24 / 7 in real time. Any suspected non-certified data collection device is automatically traced. By analyzing the source IP address and routing information of the data packet and collaborating with external organizations such as network service providers, we can uncover potential sources of risk. This comprehensive, multi-layered protection barrier, built from the perspective of network traffic, ensures stable system operation and data security.

[0054] To address carbon emissions monitoring issues in the energy internet consumption sector, blockchain technology is being applied to the development of an online carbon emissions monitoring system for key energy-consuming entities. This system utilizes a blockchain platform architecture, with features including authentication of carbon emissions monitoring blockchain terminals, trusted data collection, distributed cloud storage after data upload, and information coordination mechanisms for multi-party data use. By leveraging blockchain technology, stakeholders involved in carbon emissions production, trading, and consumption—including those involved in production and consumption—are designated as nodes on the blockchain. Information from each link is collected and uploaded to the blockchain, where it is linked and stored in an unalterable, orderly manner. This system provides an autonomous, efficient, and decentralized credit environment for carbon emissions trading.

[0055] This trusted data collection system, based on terminal trust management and identity verification methods, establishes a trust relationship between participating entities and is subject to government oversight. This trusted data collection system is ideally suited for building using a consortium blockchain model, where participating nodes join the blockchain network through identity authentication. Participating nodes are interconnected and share data, maintaining the integrity, authenticity, and trustworthiness of blockchain transactions and ledger data through a consensus mechanism. The blockchain platform offers excellent scalability, allowing for flexible addition and removal of nodes based on business scenarios and the needs of participating entities.

[0056] Example 2:

[0057] like Figure 2 As shown, based on the same inventive concept as the trusted data collection method of the terminal trust management and identity authentication method in the aforementioned embodiment, the present invention also provides a trusted data collection system of the terminal trust management and identity authentication method, which includes:

[0058] Digital certificate sending module, which is used to send digital certificates to acquisition devices based on the perception layer and digital certificate authentication mechanism. The digital certificate includes device identification, validity period and encrypted signature information;

[0059] Verification module, which is used when the collection device is connected to the trusted data collection system, and the trusted data collection system sequentially checks whether the digital certificate meets the preset certificate standards;

[0060] Deploy a network intrusion detection module to monitor the network traffic of the collection device in real time and analyze the network traffic if it meets the requirements. If any abnormal traffic is found, it is determined to be an attempt to intervene by a suspected unauthenticated collection device. The connection with the suspected unauthenticated collection device will be cut off. Otherwise, the collection device will be allowed to access the trusted data collection system.

[0061] The carbon emission meter has a built-in intelligent collection module. The module automatically collects and uploads emission data based on the collection equipment and the carbon emission meter. The collected emission data includes consumption data of various energy media and attribute information of interrelated collection equipment.

[0062] Carbon emission data reading module, which is used to read emission data from carbon emission meters or trusted data collection systems at preset time intervals according to the embedded collection contract and the enterprise's preset data transaction requirements;

[0063] The carbon emission data association module is used to perform encoding and information association processing based on emission data, establish a one-to-one or one-to-many mapping relationship, generate structured data and upload it to the blockchain layer.

[0064] The various variations and specific examples of the trusted data collection method of the terminal trust management and identity authentication method in the aforementioned embodiment 1 are also applicable to the trusted data collection system of the terminal trust management and identity authentication method in this embodiment. Through the aforementioned detailed description of the trusted data collection method of the terminal trust management and identity authentication method, those skilled in the art can clearly know the implementation method of the trusted data collection system of the terminal trust management and identity authentication method in this embodiment, so for the sake of brevity of the specification, it will not be described in detail here.

[0065] Example 3:

[0066] like Figure 3 As shown, the electronic device includes one or more processors and memory.

[0067] The processor may be a central processing unit (CPU) or other form of processing unit with data processing capability and / or instruction execution capability, and may control other components in the electronic device to perform desired functions.

[0068] The memory may include one or more computer program products, which may include various forms of computer-readable storage media, such as volatile memory and / or non-volatile memory. The volatile memory may, for example, include random access memory (RAM) and / or cache memory (cache), etc. The non-volatile memory may, for example, include read-only memory (ROM), hard disk, flash memory, etc. One or more computer program instructions may be stored on the computer-readable storage medium, and the processor may run the program instructions to implement the trusted data collection method of the terminal trust management and authentication method of the various embodiments of the present application above and / or other desired functions. Various contents such as emission data may also be stored in the computer-readable storage medium, and the volatile memory can save the functions related to the present application.

[0069] Secondly, the electronic device also includes an input device and an output device, and these components are interconnected via a bus system and / or other forms of connection mechanisms (not shown).

[0070] For example, when the electronic device is a stand-alone device, the input device may be a communication network connector. In addition, the input device may also include, for example, a keyboard, a mouse, and the like.

[0071] The output device can output various information to the outside, and the output device can include, for example, a display, a speaker, a printer, a communication network and its connected remote output device, etc.

[0072] Of course, for simplicity, the figure only shows some components of the electronic device related to the present application, omitting components such as buses, input / output interfaces, etc. In addition, the electronic device may further include any other appropriate components depending on the specific application.

[0073] In addition, an embodiment of the present application may also be a computer-readable storage medium having computer program instructions stored thereon, which, when executed by a processor, enables the processor to execute the steps of the trusted data collection method of the terminal trust management and authentication method according to various embodiments of the present application described in the above "Exemplary Method" section of this specification.

[0074] The computer readable storage medium can adopt any combination of one or more readable media. The readable medium can be a readable signal medium or a readable storage medium. The readable storage medium can, for example, include but is not limited to a system, device or component of electricity, magnetism, light, electromagnetic, infrared, or semiconductor, or any combination thereof. More specific examples (non-exhaustive list) of readable storage media include: an electrical connection with one or more wires, a portable disk, a hard disk, a random access memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or flash memory), an optical fiber, a portable compact disk read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination thereof.

[0075] Although the above describes the illustrative specific implementation methods of the present application so that those skilled in the art can understand the present application, the present application is not limited to the scope of the specific implementation methods. For those of ordinary skill in the art, as long as various changes are within the spirit and scope of the present application defined and determined by the attached claims, all application creations based on the concept of the present application are protected.

Claims

1. A trusted data collection method for a terminal trust management and identity authentication method, wherein the trusted data collection method for a terminal trust management and identity authentication method is applied to a trusted data collection system for a terminal trust management and identity authentication method, wherein: The method comprises: Send a digital certificate to the acquisition device based on the perception layer and digital certificate authentication mechanism. The digital certificate includes device identification, validity period and encrypted signature information; When the acquisition device is connected to the trusted data acquisition system, the trusted data acquisition system sequentially checks whether the digital certificate meets the preset certificate standards; If the conditions are met, the network traffic of the collection device is monitored in real time and analyzed. If abnormal traffic is found, it is determined to be an attempt of intervention by a suspected non-authenticated collection device, and the connection with the suspected non-authenticated collection device is cut off. Otherwise, the collection device is allowed to access the trusted data collection system; Automatically collect and upload emission data based on the collection equipment and carbon emission meter, wherein the collected emission data includes consumption data of multiple energy media and attribute information of the interrelated collection equipment; Reading the emission data from the carbon emission meter or the trusted data collection system at preset time intervals as needed according to the embedded collection contract and the enterprise's preset data transaction requirements; Based on the emission data, encoding and information association processing are performed, and a one-to-one or one-to-many mapping relationship is established to generate structured data and upload it to the blockchain layer.

2. The trusted data collection method of the terminal trust management and identity authentication method according to claim 1, characterized in that: The method further comprises: The blockchain layer includes a blockchain storage layer and a blockchain core layer. The blockchain storage layer adopts a distributed accounting mechanism to protect the transaction information of the collection device and store smart contract code; The trusted data collection system submits transaction data to the chain through point-to-point communication. The transaction data includes static data of the collection device and dynamic data generated by the transaction.

3. The trusted data collection method of the terminal trust management and identity authentication method according to claim 2, characterized in that: The method further comprises: The blockchain core layer is used to support the generation, execution and invocation of smart contracts, and realizes data storage and query through the contract interface. The blockchain core layer includes the DPoS consensus mechanism, token incentive mechanism and key management module; Electing verification nodes based on the DPoS consensus mechanism to ensure the security and efficiency of the blockchain layer; Token rewards are issued based on the token incentive mechanism to encourage the collection equipment to participate in maintenance and data submission.

4. The trusted data collection method of the terminal trust management and identity authentication method according to claim 1, characterized in that: The method further comprises: The blockchain layer is connected to the application layer, and based on the application layer, a transaction request is issued and a transaction behavior is automatically performed. The transaction behavior includes data interaction and business collaboration between the collection devices; After the transaction behavior is processed by the smart contract, transaction information is generated and stored in the cloud database of the blockchain.

5. The trusted data collection method of the terminal trust management and identity authentication method according to claim 4, characterized in that: The method further comprises: The application layer is used to provide various application services for users, and the application layer includes a government subsystem, an energy-consuming unit subsystem, and a public subsystem; The government subsystem has an automatic early warning function, and when it detects that the emission data exceeds the preset threshold and produces abnormal fluctuations, it will immediately send an early warning message; The energy consumption unit subsystem is used to monitor and manage energy consumption; The public subsystem is used to provide query and analysis services for carbon emission data.

6. The trusted data collection method of the terminal trust management and identity authentication method according to claim 1, characterized in that: The method further comprises: The trusted data acquisition system adds a data verification layer based on the blockchain layer during the data transmission process, and performs secondary verification on the data uploaded to the blockchain layer.

7. The trusted data collection method of the terminal trust management and identity authentication method according to claim 1, characterized in that: The method further comprises: Based on the determination that it is a suspected non-certified collection device, the connection with the suspected non-certified collection device is cut off, and a tracing procedure is initiated to find the potential risk source.

8. A trusted data collection system for terminal trust management and identity authentication method, characterized in that: The system comprises: A digital certificate sending module, which is used to send a digital certificate to the acquisition device based on the perception layer and the digital certificate authentication mechanism. The digital certificate includes device identification, validity period and encrypted signature information; A verification module, wherein when the acquisition device is connected to a trusted data acquisition system, the trusted data acquisition system sequentially verifies whether the digital certificate meets a preset certificate standard; Deploy a network intrusion detection module, the deployed network intrusion detection module is used to monitor the network traffic of the collection device in real time if it meets the requirements, analyze the network traffic, and if abnormal traffic is found, it is determined to be an intervention attempt by a suspected unauthenticated collection device, and the connection with the suspected unauthenticated collection device is cut off; otherwise, the collection device is allowed to access the trusted data collection system; The carbon emission meter has a built-in intelligent collection module, which automatically collects and uploads emission data based on the collection device and the carbon emission meter. The collected emission data includes consumption data of multiple energy media and attribute information of the interrelated collection devices; A carbon emission data reading module, configured to read the emission data from the carbon emission meter or the trusted data collection system at preset time intervals as needed based on the embedded collection contract and the enterprise's preset data transaction requirements; A carbon emission data association module is used to perform encoding and information association processing based on the emission data, establish a one-to-one or one-to-many mapping relationship, generate structured data, and upload it to the blockchain layer.

9. An electronic device comprising: processor; A memory, wherein computer program instructions are stored in the memory, and when the computer program instructions are executed by the processor, the processor executes the trusted data collection method of the terminal trust management and identity authentication method according to any one of claims 1 to 7.

10. A computer-readable storage medium having computer program instructions stored thereon, wherein when the computer program instructions are executed by a processor, the processor is caused to execute the trusted data collection method of the terminal trust management and identity authentication method according to any one of claims 1 to 7.

Images