Government affair data sharing and security evidence storage system based on block chain
The initial data fingerprint and effective locking identifier are generated through blockchain technology, which solves the problem of missing trust anchors in cross-departmental government approval, and realizes automated data status verification and authority control to ensure the security and consistency of government data.
Patent Information
- Application Number
- CN202510917117.4
- Authority / Receiving Office
- CN · China
- Patent Type
- Applications(China)
- Current Assignee / Owner
- Filing Date
- 2025-07-03
- Publication Date
- 2025-08-01
- Estimated Expiration
- 2045-07-03
AI Technical Summary
There is a risk of lack of trust anchor points and inconsistent data status in the cross-departmental government approval process. The existing plan lacks an automatic linkage mechanism between the status of the approval process and data modification permissions. The permission changes rely on manual operations to cause unlocking lag or overprivileges.
The blockchain-based government data sharing and security evidence storage system realizes automated data state verification and permission control by generating initial data fingerprints, final review requests, data status verification, effective locking identification and permission unlocking modules.
Ensure the authenticity and consistency of data status, automatically trigger the distributed verification process, realize the synchronization of the status of the second-level business system, avoid the spread of error approval results, and ensure the security of government-sensitive information.
Smart Images

Figure CN120408583A_ABST
Abstract
Description
Technical Field
[0001] The present invention belongs to the technical field of blockchain applications and relates to a government data sharing and secure evidence storage system based on blockchain. Background Art
[0002] The current cross-departmental government approval process is plagued by the risk of missing trust anchors and inconsistent data status. Traditionally, after the initial review department completes the business review, the approval results must be transmitted to the final review department manually or through intranet email. This lacks a real-time, reliable cross-system data verification mechanism. If initial review data is accidentally modified during the final review, the risk of data tampering cannot be detected in a timely manner, easily leading to approval conclusions based on invalid data.
[0003] Existing solutions utilize centralized databases or blockchain-based evidence storage. Some systems synchronize approval status through the establishment of a shared database, with central nodes managing data versions. Others utilize blockchain to store key operation logs, providing an immutable record of operational actions. These approaches attempt to reduce the error rate caused by manual intervention through technological means.
[0004] To address the above issues, the existing solution lacks an automatic linkage mechanism between the approval process status and data modification permissions. Permission changes rely on manual operations, which can easily lead to unlocking delays or unauthorized operations. Summary of the Invention
[0005] In order to solve the above problems, the present invention provides a government data sharing and secure evidence storage system based on blockchain.
[0006] The blockchain-based government data sharing and secure evidence storage system includes:
[0007] The preliminary review response and fingerprint generation module is used to respond to the preliminary review pass operation of the business system of the first government department, obtain the business data set to be approved, and generate the initial data fingerprint through the preset irreversible operation rules;
[0008] The final review request trigger module, when the business system of the second government department triggers the final review operation, constructs a final review request instruction data packet containing the transaction number and the initial review node identifier, and sends it to the logical switch contract on the blockchain;
[0009] The verification request processing module is used for the logical switch contract to determine the node address of the first government department according to the approval process dependency table, generate a data verification request message containing the transaction number, and send it to the node;
[0010] In the data status verification module, the first government department node obtains the initial data fingerprint cached locally and the real-time data copy of the business system, generates a real-time data fingerprint through irreversible operation rules, and compares and generates a data status signal;
[0011] When the effective lock generation module receives a valid confirmation signal, the logical switch contract extracts the final review operation feature data, binds the initial data fingerprint to generate an effective lock identifier, and writes it into the blockchain.
[0012] The data effectiveness notification module, the relay node listens for the effective lock identifier on the blockchain, parses the associated department identifier to generate a data effectiveness notification message, and pushes it to the corresponding business system.
[0013] The permission unlocking module, the business system of the first government department responds to the data effectiveness notification message and performs the operation of unlocking the modification permission of the business data.
[0014] A further solution of the present invention to generate an initial data fingerprint includes the following steps:
[0015] Capture the event of passing the preliminary review operation. The business system extracts the complete set of data to be approved from the local buffer according to the transaction number associated with the event.
[0016] The set of data to be approved is arranged in a fixed order and then operated. The data content is converted byte by byte through an irreversible operation rule, and finally a character sequence of a fixed length is output as the initial data fingerprint.
[0017] The generated initial data fingerprint is bound to the transaction number and stored in the local buffer directly associated with the business system of the first government department. The local buffer is set to only allow the business system of this department to access, and a countdown timer is started.
[0018] A further solution of the present invention to construct a final review request instruction data packet containing the transaction number and the preliminary review node identifier includes the following steps:
[0019] When the business system of the second government department monitors that the final review pass button event in its final review operation interface is clicked in real time, it obtains the transaction number loaded on the current page.
[0020] Combine the transaction number, the node identifier of the first government department, and the current timestamp to form a final review request instruction; perform encryption processing on the final review request instruction and attach a digital signature to generate an anti-tampering instruction verification code.
[0021] A further solution of the present invention to generate a data verification request message containing the transaction number includes the following steps:
[0022] The logical switch contract receives the final review request instruction forwarded by the blockchain network and extracts the transaction number and the preliminary review node identifier therein.
[0023] Index by the preliminary examination node identifier, query the approval process dependency table pre-stored inside the logic switch contract. When there is a record in the dependency table that exactly matches the preliminary examination node identifier, obtain the associated first government department node address;
[0024] Combine the transaction number, the current blockchain height value, and the logic switch contract address to generate a data verification request message, and add the blockchain network timestamp as the message timeliness identifier.
[0025] A further solution of the present invention, sending to this node, includes the following steps:
[0026] Call the node communication interface at the bottom layer of the blockchain, and send the data verification request message to the obtained first government department node address;
[0027] If the target node does not respond within the preset duration, resend automatically.
[0028] A further solution of the present invention, comparing to generate a data status signal, includes the following steps:
[0029] Verify the timeliness of the data verification request message;
[0030] Call the first government department business system through the internal interface, pass in the transaction number to request to obtain a complete copy of the corresponding business data; query the local buffer area according to this transaction number, and read the initial data fingerprint stored by the preliminary examination response and fingerprint generation module;
[0031] Compare the initial data fingerprint and the real-time data fingerprint character by character. When it is determined to be consistent, generate a valid confirmation signal, otherwise generate an invalidation warning signal.
[0032] A further solution of the present invention, binding the initial data fingerprint to generate an effective lock identifier, includes the following steps:
[0033] Extract the final approval department identifier and the final approval timestamp from the blockchain historical record;
[0034] Using the transaction number as the retrieval key, query the final approval request instruction sent by the second government department business system in the blockchain historical transaction record, and extract the final approval operation characteristic data from the structured data packet of this instruction, including the final approval department identifier and the final approval request timestamp;
[0035] Combine the initial data fingerprint, the final approval department identifier, and the dual timestamps to form a binding data set;
[0036] Generate a fixed-length identification code through the double conversion of SHA-256 hash and RIPEMD-160 hash.
[0037] A further solution of the present invention, parsing the associated department identifier to generate a data effectiveness notice message and pushing it to the corresponding business system, includes the following steps:
[0038] After the blockchain network completes the writing operation of the effective lock mark, the relay nodes deployed on the physical servers of each government department scan the new block data in real time;
[0039] Each relay node detects the effective lock identifier related to its department through a preset identifier matching pattern, and extracts the transaction number and initial review timestamp;
[0040] Construct a standardized data effectiveness notification message and push it to the designated receiving port of the related business system through the department's intranet transmission protocol.
[0041] A further solution of the present invention is to perform an unlocking operation of the modification permission of the business data, comprising the following steps:
[0042] After receiving the data validity notification message from the relay node of the first government department, the network monitoring service of the business system immediately parses the transaction number and validity status code in the message;
[0043] Locate the corresponding business data record stored locally based on the transaction number;
[0044] If the status code indicates that the approval process has taken effect, the modification restrictions on the business data will be lifted through the internal permission control interface.
[0045] A further solution of the present invention, performing the modification permission unlocking operation of the business data, further includes the following steps:
[0046] Locate the initial data fingerprint copy in the local cache area stored in the fingerprint generation module based on the transaction number;
[0047] Perform physical deletion and free up memory space; close the countdown timer associated with the transaction.
[0048] In summary, the present invention has the following beneficial technical effects:
[0049] 1. Build a trust foundation for collaborative government data approval through blockchain technology. During the preliminary review phase, an initial data fingerprint is generated as the initial anchor point for data integrity. During the final review phase, real-time data fingerprint comparison verifies business data consistency. A logical switch contract automatically triggers a distributed verification process to ensure the authenticity of data status signals. Ultimately, a valid lock flag associated with the final review operation characteristics is permanently written to the blockchain.
[0050] 2. Automated process control based on smart contracts eliminates the time delays associated with traditional manual approval results transmission. Relay nodes monitor blockchain events in real time and proactively push notifications of data validation, achieving second-level synchronization of business system status. When data anomalies are detected, an invalidation alarm signal immediately terminates the process and triggers a cross-departmental audit mechanism to prevent the spread of erroneous approval results.
[0051] 3. Generate data fingerprints using irreversible operation rules to ensure the integrity verification of the original business data can be completed without uploading it to the blockchain, fundamentally avoiding the risk of leakage of sensitive government information. The permission unlocking operation strictly depends on the effective locking identifier stored on the blockchain. The business system of the first government department will only lift the data modification restriction when verifying the digital signature of the relay node and the status code is legal. BRIEF DESCRIPTION OF THE DRAWINGS
[0052] In order to more clearly illustrate the technical solutions in the embodiments of the present invention or the prior art, the following will briefly introduce the drawings required for the description of the embodiments or the prior art. The drawings are used to provide a further understanding of the present invention. For those of ordinary skill in the art, other drawings can be obtained based on these drawings without creative efforts.
[0053] Figure 1 It discloses a framework schematic diagram in the embodiments of the present application.
[0054] Figure 2 It discloses a process schematic diagram in the embodiments of the present application. DETAILED DESCRIPTION OF THE EMBODIMENTS
[0055] In order to make the objectives, technical solutions, and advantages of the embodiments of the present invention clearer, the following will clearly and completely describe the technical solutions in the embodiments of the present invention in conjunction with the drawings in the embodiments of the present invention. Obviously, the described embodiments are part of the embodiments of the present invention, rather than all of them. All other embodiments obtained by those of ordinary skill in the art without creative efforts belong to the scope of protection of the present invention.
[0056] The following will make a preferred and detailed description of the present invention in conjunction with the attached Figure 1 - Figure 2 drawings.
[0057] Referring to the attached Figure 1 - Figure 2 drawings, the present invention proposes a government data sharing and secure storage system based on the blockchain, including the following modules:
[0058] A preliminary review response and fingerprint generation module, which is used to respond to the preliminary review passing operation of the business system of the first government department, obtain the business data set to be approved, and generate an initial data fingerprint through a preset irreversible operation rule;
[0059] A final review request trigger module. When the business system of the second government department triggers a final review operation, it constructs a final review request instruction data packet containing the transaction number and the preliminary review node identifier, and sends it to the logical switch contract on the blockchain;
[0060] A verification request processing module, which is used for the logical switch contract to determine the first government department node address according to the approval process dependency table, generate a data verification request message containing a transaction number, and send it to the node;
[0061] A data status verification module. The first government department node obtains the initial data fingerprint cached locally and the real-time data copy of the business system, generates a real-time data fingerprint through an irreversible operation rule, and compares to generate a data status signal;
[0062] An effective lock generation module. When receiving a valid confirmation signal, the logical switch contract extracts the final approval operation characteristic data, binds the initial data fingerprint to generate an effective lock identifier, and writes it into the blockchain;
[0063] A data effectiveness notification module. The relay node monitors the effective lock identifier on the blockchain, parses the associated department identifier to generate a data effectiveness notification message, and pushes it to the corresponding business system;
[0064] A permission unlocking module. The business system of the first government department responds to the data effectiveness notification message and performs an operation to unlock the modification permission of the business data.
[0065] In one embodiment of the present invention, the preliminary review response and fingerprint generation module includes the following steps:
[0066] In the preliminary review response and fingerprint generation module, when the business system of the first government department receives the preliminary review passing instruction of the operator for a specific government matter, it immediately starts the data processing process. The business system uses all the structured data and attachment files of the current matter to be approved as the input source, and generates a unique corresponding initial data fingerprint through a preset irreversible operation rule. The initial data fingerprint is stored in the local buffer directly associated with the business system of the first government department until the subsequent process triggers verification or timeout clearing. The local buffer is located in the temporary storage area of the memory of the physical server of the first government department, and its data access permission is limited to the business system process of this department, and it is automatically cleared and an alarm is triggered after power off.
[0067] The specific implementation process includes:
[0068] 1. Instruction response stage. The business system of the first government department continuously monitors the approval operation interface of the business system. When the business system detects that the operator clicks the "preliminary review passed" button, it automatically captures the operation event. The business system extracts the complete set of data to be approved from the local buffer according to the transaction number associated with the event.
[0069] 2. During the fingerprint generation stage, the data set to be approved is arranged in a fixed order and then undergoes operations. The data content is converted byte by byte through an irreversible operation rule, and finally a character sequence of a fixed length is output as the initial data fingerprint. Irreversible operation rule: Any change in a byte will cause an unpredictable change in the output result, and the original data content cannot be deduced from the output result.
[0070] 3. During the temporary storage control stage, the generated initial data fingerprint is bound to the transaction number and stored in the local buffer directly associated with the business system of the first government department. The local buffer is set to only allow access by the business system of this department, and a countdown timer is started. If the verification is not triggered after the timeout, the data will be automatically cleared.
[0071] Among them, the initial data fingerprint is a character sequence of a fixed length generated by converting the complete government data set through an irreversible operation rule, and is used to uniquely identify the integrity status of the data set.
[0072] The business system of the first government department is a software program deployed on the internal server of the government department and having a graphical operation interface, and is used to process specific government approval affairs.
[0073] Exemplarily, it is assumed that the staff of the housing construction unit completes the preliminary review of materials in the "Construction Project Planning Permit" approval system and clicks the "Preliminary Review Passed" button on the system interface. The approval system immediately performs the following operations:
[0074] Extract all the declaration forms, design drawings, and inspection report electronic files under the transaction number;
[0075] Arrange the file content in alphabetical order of the file name, and generate a 64-bit hexadecimal character sequence (such as "9F86D081884C7D659A2FEAA0C55AD015") through an irreversible operation rule;
[0076] The 64-bit hexadecimal character sequence is bound to the transaction number and stored in the isolated storage area of the memory of the housing construction unit's approval server;
[0077] Start a 72-hour countdown. If the verification is not triggered during this period, the storage record will be automatically deleted.
[0078] In one embodiment of the present invention, the final review request trigger module includes the following steps:
[0079] In the final review request trigger module, when the business system of the second government department receives an operation instruction submitted by the operator for final review confirmation on the final review operation interface, it automatically extracts the transaction number of the current government affair and the associated preliminary review department identifier, and constructs a final review request instruction. The business system sends the final review request instruction containing the transaction number to the logical switch contract address deployed on the blockchain through a preset blockchain communication interface. The logical switch contract refers to the immutable program code pre-deployed at a specific address on the blockchain, and the logical switch contract address is specified by hard coding in the configuration file of the business system of the second government department.
[0080] The specific implementation process includes:
[0081] 1. Instruction capture phase: The business system of the second government department monitors the "Final Review Passed" button event in its final review operation interface in real time. When it detects that the button is clicked, it immediately obtains the transaction number loaded on the current page. The business system reads the node identifier of the first government department preset in the configuration file, and there is an associated mapping relationship between the node identifier and the encoding rule of the transaction number.
[0082] 2. Instruction construction phase: Combine the transaction number, the node identifier of the first government department, and the current timestamp to form a final review request instruction. The order of its fields is:
[0083]
Transaction number (20-bit string) | Preliminary review node identifier (8-digit digital code) | Request timestamp (13-bit Unix timestamp)
[0084] 3. Instruction transmission phase: Call the blockchain node service program, bind the final review request instruction and the instruction verification code, and send them to the blockchain network. Specify the receiving address as the hexadecimal logical switch contract address of the logical switch contract, and this address has been written into the white list of the business system of the second government department during system initialization.
[0085] Among them, the business system of the second government department refers to the software program deployed on the physical server of the final review institution, which has an operation interface and data storage independent of the business system of the first government department. The final review request instruction is a structured data packet composed of a transaction number, a preliminary review node identifier, and a timestamp, and is a verifiable transmission object formed by attaching a digital signature.
[0086] In one embodiment of the present invention, the verification request processing module includes the following steps:
[0087] In the verification request processing module, once the blockchain network confirms receipt of the final review request from the second government department's business system, the logic switch contract deployed at a specific address automatically activates the execution process. The logic switch contract parses the preliminary review node identifier in the request, queries its pre-stored approval process dependency table, and determines the node address of the first government department requiring verification. The logic switch contract then constructs a data verification request message and sends it to the node via the blockchain's peer-to-peer communication protocol.
[0088] The specific implementation process includes:
[0089] 1. The instruction parsing phase refers to the logical switch contract receiving the final review request instruction forwarded by the blockchain network, extracting the transaction number and preliminary review node identifier. The digital signature verification code attached to the instruction is removed, and the original final review request instruction is retained.
[0090] 2. During the dependency matching phase, the pre-stored approval process dependency table within the logical switch contract is queried using the preliminary review node identifier as an index (the storage structure is: preliminary review identifier → final review identifier → verification node address). If a record in the dependency table fully matches the preliminary review node identifier, the associated first government department node address is obtained. If no record in the dependency table fully matches the preliminary review node identifier, the process is terminated and an alarm is triggered.
[0091] 3. During the request construction phase, the transaction number, current blockchain height value, and logical switch contract address are combined to generate a data verification request message. The order of the fields is as follows:
[0092] [Transaction number (20-bit string) | Block height (8-bit integer) | Logical switch contract address (42-bit string)], add the blockchain network timestamp as the message timeliness identifier.
[0093] 4. During the targeted transmission phase, the node communication interface at the bottom layer of the blockchain is called to send the data verification request message to the first government department node address obtained. The message validity period is set: if the target node does not respond within the preset time, it will be automatically resent.
[0094] Among them, the approval process dependency table is a key-value pair data structure solidified in the logic switch contract code, which stores the mapping relationship between the preliminary review department identifier and the verification node address, and is initialized and written when the logic switch contract is deployed.
[0095] The data verification request message contains a standardized data package of transaction number, blockchain height value, and logical switch contract address, which is used to trigger the verification operation of the target node.
[0096] The first government department node address refers to the unique identifier of the blockchain network composed of alphanumeric characters, corresponding to the access point of the blockchain client program running on the physical server.
[0097] Exemplarily, after the logical switch contract address "0x9aC2B3d..." receives the instruction "2024-00123|ZJJSJ|1717987669123" sent by the natural resources unit:
[0098] Extract the initial review node identifier "ZJJSJ";
[0099] Query the pre-stored relationship table of the logical switch contract (example entry: "ZJJSJ" → "ZRZYJ" → "0x5dF8e...");
[0100] Generate a request message: "2024-00123|18965742|ox9aC2B3d...";
[0101] Append the network timestamp "1717987672000";
[0102] Send it to the housing construction unit node address "0x5dF8e..." through the blockchain communication protocol.
[0103] In one embodiment of the present invention, the data status verification module includes the following steps:
[0104] In the data status verification module, when the first government department node receives a data verification request message from the logical switch contract, it immediately extracts the initial data fingerprint of the local buffer according to the transaction number in the message. The node synchronously triggers the first government department business system to obtain the current latest business data, generates a real-time data fingerprint through the same irreversible operation rule, and generates a data status signal after comparing the two bit by bit. If they are exactly the same, it constructs a valid confirmation signal and returns it to the logical switch contract, and forcibly reads the latest data copy from the persistent storage; if there are differences, it generates an invalid alarm signal and terminates the subsequent process.
[0105] The specific implementation process includes:
[0106] 1. Request parsing stage: The communication service program of the first government department node listens to the incoming messages of the blockchain network. When it captures a data verification request message with the target address being this node, it extracts the transaction number and the logical switch contract address therein. Verify the timeliness of the message: If the difference between the current time and the message timestamp exceeds the preset difference threshold, discard it.
[0107] 2. In the data acquisition stage, the business system of the first government department is called through the internal interface, and the transaction number is passed in to request a complete copy of the corresponding business data; the local buffer is queried according to the transaction number, and the initial data fingerprint stored by the preliminary review response and fingerprint generation module is read.
[0108] 3. In the fingerprint generation and comparison stage, the obtained latest business data copy is arranged according to the same file sorting rule of the preliminary review response and fingerprint generation module, and a real-time data fingerprint is generated through the same irreversible operation rule; the initial data fingerprint and the real-time data fingerprint are compared character by character: if the lengths of the two fingerprints are equal and each character is the same, it is determined to be consistent; if the lengths are unequal or the characters at any position do not match, it is determined to be inconsistent.
[0109] 4. In the signal feedback stage, when it is determined to be consistent, a valid confirmation signal is generated by combining the transaction number, "VALID" status code and comparison timestamp; when it is determined to be inconsistent, an invalid alarm signal is generated by combining the transaction number, error timestamp, and "IN VALID" status code. The signal is sent back to the logical switch contract address through the blockchain node, and when it is inconsistent, the subsequent operations of this transaction are terminated.
[0110] Among them, the real-time data fingerprint is a fixed-length character sequence generated based on the latest business data copy obtained from the business system of the first government department at the current moment through the same irreversible operation rule of the preliminary review response and fingerprint generation module.
[0111] The data status signal is a structured feedback data packet composed of a transaction number, a timestamp, and a status code (VALID / IN VALID), which is used to transmit the verification conclusion to the blockchain.
[0112] The invalid alarm signal is a data status signal specifically containing the "IN VALID" status code, which immediately interrupts the current approval process chain after being triggered.
[0113] The setting of the preset difference threshold needs to comprehensively consider the blockchain network latency, business tolerance, and security policy. Usually, it takes an integer multiple of the adjacent block time window (for example, 3 - 5 minutes) to ensure that it can cover the reasonable time delay from transaction broadcast to node processing.
[0114] Exemplarily, after the housing construction unit node address "0x5dF8e……" receives the request message "2024-00123|18965742|0x9aC2B3d……":
[0115] Parse the transaction number "2024-00123", verify that the timestamp is valid; query the local buffer to obtain the initial data fingerprint "9F86D081884C7D659A2FEAA0C55AD015"; request the latest materials for the transaction number "2024-00123" from the approval system of the housing construction unit; generate a real-time data fingerprint according to the irreversible operation rule;
[0116] The materials have not been modified and are still "9F86D081884C7D659A2FEAA0C55AD015". Compare the two fingerprints bit by bit and they are exactly the same. Generate the signal "2024-00123|1717987685000|VALID" and send it to the logical switch contract address "0x9aC2B3d……" through the blockchain.
[0117] In one embodiment of the present invention, the effective lock generation module includes the following steps:
[0118] In the effective lock generation module, after the logical switch contract receives the valid confirmation signal returned by the first government department node, it immediately extracts the transaction number and confirmation timestamp contained in the signal. The logical switch contract then retrieves the matching final approval request instruction in the blockchain transaction record and extracts the final approval operation feature data from it. The initial data fingerprint and the final approval operation feature are bound and combined in a preset format to generate a unique effective lock identifier, and finally this identifier is written as new block data into the immutable storage area of the blockchain.
[0119] The specific implementation process includes:
[0120] 1. Signal verification stage: The logical switch contract continuously listens to the incoming messages on the blockchain network. When it captures the data status signal with the source address being the first government department node and the status code being "VALID", it extracts the transaction number therein and verifies that the time difference between the timestamp of the signal and the current blockchain time exceeds the preset difference threshold.
[0121] 2. Feature extraction stage: Using the transaction number as the retrieval key, query the final approval request instruction sent by the second government department's business system in the blockchain historical transaction record. Extract the final approval operation feature data from the structured data packet of this instruction, including the final approval department identifier and the final approval request timestamp.
[0122] 3. Identifier generation stage: Send a fingerprint acquisition request to the first government department node, receive the fingerprint generated in real time by the business system of the first government department and signed with the department's private key and then return it. Combine the initial data fingerprint and the final approval operation feature data to form a bound data set, and the arrangement format is:
[0123]
Initial data fingerprint (64 bits) | Final approval department identifier (8 bits) | Final approval timestamp (13 bits) | Preliminary approval timestamp (13 bits)
[0124] 4. Perform a double irreversible conversion operation on the dataset to generate an intermediate identification code using the first conversion rule (the first conversion rule is SHA-256 hash); then process the intermediate identification code using the second conversion rule (the second conversion rule is RIPEMD-160 hash) to generate a final effective lock identifier, satisfying the following formula: effective lock identifier = SHA-256(RIPEMD-160(bound dataset)), and finally write this identifier as new block data into the immutable storage area of the blockchain.
[0125] Among them, the final review operation feature data is a combination of the department identifier and timestamp extracted from the final review request instruction, representing the digital identity and time attribute of the final review operation. The effective lock identifier is a fixed-length character sequence generated through double irreversible conversion, permanently binding the initial data fingerprint and the final review operation feature to form an inseparable evidence body. The immutable storage area is the data storage area in the blockchain confirmed by the consensus mechanism.
[0126] Exemplarily, after the logical switch contract address "0x9aC2B3d……" receives the valid confirmation signal "2024-00123|1717987685000|VALID":
[0127] Extract the transaction number "2024-00123"; query the blockchain record to find the original instruction "2024-00123|ZJJSJ|1717987669123" sent by the natural resources unit;
[0128] Request the initial data fingerprint "9F86D081884C7D659A2FEAA0C55AD015" from the housing construction unit node address "0x5dF8e……";
[0129] Combine the bound dataset "9F86D……|ZRZYJ|1717987669123|1717987660000";
[0130] Generate the effective lock identifier "7E8F9A0B1C2D3E4F567890A1B2C3D4E5F";
[0131] Construct the data packet for uploading to the chain "7E8F9A...|2024-00123|18965745";
[0132] After being confirmed by the blockchain consensus, write it into block No. 18965745.
[0133] In one embodiment of the present invention, the data effectiveness notification module includes the following steps:
[0134] After the blockchain network completes the write operation of the effective lock identifier, the relay nodes deployed on the physical servers of each government department scan the new block data in real time. Each relay node detects the effective lock identifier related to its own department through the pre-set identifier matching mode, extracts the transaction number and the initial review timestamp therein, constructs a standardized data effectiveness notification message, and pushes it to the specified receiving port of the associated business system through the department intranet transmission protocol.
[0135] The specific implementation process includes:
[0136] 1. Blockchain monitoring stage: The relay nodes of each government department continuously synchronize the latest block data of the blockchain. When a new block is generated, all records in the block data area are immediately traversed. Using the pre-loaded set of identifiers of its own department (such as the housing construction unit identifier "ZJJSJ") as a filtering condition, the trigger is only when the identifier contains the corresponding field of its own department role (the initial review department only pays attention to the notice containing the initial review identifier), and only processes the effective lock identifier records containing these identifiers.
[0137] 2. Identifier parsing stage: Perform reverse parsing operations on the matched effective lock identifiers, intercept the final review department identifier segment at a fixed offset position; separate the transaction number and timestamp data according to the identifier length rule. Verify the logical rationality of the timestamp. If the initial review timestamp is later than the final review timestamp, it is marked as an abnormal record.
[0138] 3. Notification construction stage: Combine the transaction number, the effective block height, and the data effectiveness status code to generate a notification message. The field arrangement order is: [Transaction number (20 digits) | Block height (8 digits) | Status code (6 digits)], and add the digital signature of the relay node as the source authentication identifier.
[0139] 4. Directed push stage: Establish a persistent communication link with the associated business system through the government private network; send the notification message to the UDP notification port pre-opened by the business system; if no confirmation response from the business system is received within 10 seconds, resend it.
[0140] Among them, the relay node is a dedicated communication program running on the government department server, with the ability to synchronize and parse blockchain data and a communication interface for the department intranet. The identifier matching mode is a filtering logic based on string inclusion relationship, and the processing process is triggered when there is a substring in the effective lock identifier that is exactly the same as the pre-set identifier of its own department.
[0141] The data effectiveness notification message is a structured message body containing the transaction number, blockchain height, and effectiveness status, and is used to transmit the approval result to the business system.
[0142] Exemplarily,
[0143] After the effective lock identifier "7E8F9A...|2024-00123|18965745" is written into the blockchain:
[0144] The housing construction unit relay node scans the block and detects the "ZJJSJ" field in the identifier;
[0145] Parse and obtain the transaction number "2024-00123" and block height "18965745";
[0146] Construct a notification message "2024-00123|18965745|ACTIVE" and add the node signature "ZJJSJ_SIG_01"; push it to the UDP port of the housing construction unit's approval system through the government-specific network; the natural resources unit's relay node simultaneously detects the same identifier containing "ZRZYJ" and pushes the message to the natural resources unit's final review system.
[0147] In one embodiment of the present invention, the permission unlocking module includes the following steps:
[0148] In the permission unlocking module, upon receiving the data validation notification message from the department's relay node, the network monitoring service of the first government department's business system immediately parses the transaction number and validation status code contained in the message. Based on the transaction number, it locates the corresponding business data record stored locally. If the status code indicates that the approval process has been validated, the modification restrictions on the business data are lifted through the internal permission control interface, and the transaction status log is updated simultaneously.
[0149] The specific implementation process includes:
[0150] During the message reception phase, the first government department's business system continuously monitors the preset UDP port. Upon receiving a data validation notification message, the system verifies that the digital signature attached to the message matches the department's relay node certificate. Only when the signature verification passes and the message format conforms to predefined specifications does the parsing process begin.
[0151] 2. During the transaction location phase, the transaction number in the message is extracted and an exact match query is performed in the business system's local transaction database. If a corresponding transaction record is found, the business data storage path and current permission status associated with the transaction are obtained. If no match is found, the message is discarded.
[0152] 3. During the permission control phase, when the effective status code is "ACTIVE", the unlocking interface of the system permission management component is called: the access control attributes of the business data file are modified, and the "write-forbidden" flag is removed; the transaction status is updated to "Effective" to record the effective block height and unlocking timestamp.
[0153] 4. In the cache cleaning stage, locate the initial data fingerprint copy stored in the local cache area of the preliminary examination response and fingerprint generation module according to the transaction number; perform a physical deletion operation and release the memory space; close the countdown timer associated with this transaction.
[0154] Among them, the modification permission switch is an access control identifier built into the business system. When it is in the locked state, any user is prohibited from modifying business data. The permission unlocking instruction is a standardized operation sequence executed by the business system permission management component, and it realizes the opening of the write permission by modifying the storage system metadata. The local transaction library is a structured data set stored on the hard disk of the business server of the first government department, which records all transaction numbers, statuses, and storage location mapping relationships.
[0155] Exemplarily, after the housing construction unit approval system UDP port receives a message : Verify that the digital signature "ZJJSJ_SIG_01" is valid;
[0156] Query the local transaction library with the number "2024-00123" to locate the storage path of the declaration form " / data / 2024 / 00123.docx"; call the permission interface: remove the "read-only" mark in the file attributes; update the transaction status to "effective" and record the effective height 18965745; delete the initial data fingerprint "9F86D081884C7D659A2FEAA0C55AD015" in the local cache area, and close the 72-hour countdown timer for this transaction.
[0157] It should be noted that for the formulas mentioned above, through the principle of dimensional consistency and mathematical standardization means (such as normalization processing, dimensionless parameter conversion, or unit system unification), physical quantities with different attributes can be translated into unitless standard values or superimposable parameters of the same dimension, so as to eliminate the interference of different dimensions on the operation logic, and make the formulas have mathematical operation rationality and objective law adaptability while retaining the original data distribution characteristics. The above is only an exemplary embodiment of the present invention, and the scope of the present invention cannot be limited by this.
[0158] All or part of the above-mentioned modules can be implemented through software, hardware, and their combinations. It supports being embedded in the processor of the computer device in hardware form or being independent of it, and at the same time also supports being stored in the memory of the computer device in software form, facilitating the processor to call and execute the operations corresponding to the above-mentioned modules.
[0159] It should be noted that the human body information (including but not limited to human device information and personal information, etc.) and data (including but not limited to data for analysis, stored data, and displayed data, etc.) involved in the present invention are all information and data authorized by the human body or fully authorized by all parties. The collection, use, and processing of relevant data require relevant legal standards.
[0160] The above embodiments are only used to illustrate the technical solutions of the present invention, rather than to limit it; although the present invention has been described in detail with reference to the foregoing embodiments, those of ordinary skill in the art should understand that they can still modify the technical solutions recorded in the foregoing embodiments, or perform equivalent replacements on some of the technical features; and these modifications or replacements do not make the essence of the corresponding technical solutions deviate from the spirit and scope of the technical solutions of the various embodiments of the present invention, and should all be included in the protection scope of the present invention.
Claims
1. A government affairs data sharing and secure evidence storage system based on blockchain, characterized in that, Including: The preliminary review response and fingerprint generation module is used to respond to the preliminary review passing operation of the business system of the first government department, obtain the business data set to be approved, and generate an initial data fingerprint through a preset irreversible operation rule; The final review request trigger module, when the business system of the second government department triggers the final review operation, constructs a final review request instruction data packet containing the transaction number and the preliminary review node identifier, and sends it to the logic switch contract on the blockchain; The verification request processing module is used for the logic switch contract to determine the node address of the first government department according to the approval process dependency table, generate a data verification request message containing the transaction number, and send it to this node; The data status verification module, the first government department node obtains the initial data fingerprint cached locally and the real-time data copy of the business system, generates a real-time data fingerprint through the irreversible operation rule, and compares to generate a data status signal; The effective lock generation module, when receiving the valid confirmation signal, the logic switch contract extracts the final review operation characteristic data, binds the initial data fingerprint to generate an effective lock identifier, and writes it into the blockchain; The data effectiveness notification module, the relay node monitors the effective lock identifier on the blockchain, parses the associated department identifier to generate a data effectiveness notification message, and pushes it to the corresponding business system; The permission unlocking module, the business system of the first government department responds to the data effectiveness notification message and performs the permission unlocking operation for modifying the business data.
2. The government affairs data sharing and secure deposit system based on blockchain according to claim 1, characterized in that Generating the initial data fingerprint includes the following steps: Capture the preliminary review passing operation event, and the business system extracts the complete business data set to be approved from the local buffer according to the transaction number associated with the event; The business data set to be approved is arranged in a fixed order and then operated. The data content is converted byte by byte through the irreversible operation rule, and finally a character sequence of a fixed length is output as the initial data fingerprint; The generated initial data fingerprint is bound to the transaction number, stored in the local buffer directly associated with the business system of the first government department. The local buffer is set to only allow the business system of this department to access, and a countdown timer is started.
3. The blockchain-based government affairs data sharing and security deposit system according to claim 1, characterized in that Constructing a final review request instruction data packet containing the transaction number and the preliminary review node identifier includes the following steps: When the business system of the second government department monitors that the final review passing button event in its final review operation interface is clicked, it obtains the transaction number loaded on the current page; Combine the transaction number, the node identifier of the first government department, and the current timestamp to form a final review request instruction; perform encryption processing on the final review request instruction, and attach a digital signature to generate an anti-tampering instruction verification code.
4. The blockchain-based government affairs data sharing and secure storage system according to claim 1, wherein, Generating a data verification request message containing the transaction number includes the following steps: The logic switch contract receives the final review request instruction forwarded by the blockchain network, and extracts the transaction number and the preliminary review node identifier therein; Using the preliminary review node identifier as an index, query the approval process dependency table pre-stored inside the logic switch contract. When there is a record in the dependency table that exactly matches this preliminary review node identifier, obtain the associated node address of the first government department; Combine the transaction number, the current blockchain height value, and the logic switch contract address to generate a data verification request message, and add the blockchain network timestamp as the message timeliness identifier.
5. The blockchain-based government affairs data sharing and security deposit system according to claim 4, wherein Sending to this node includes the following steps: Call the node communication interface at the bottom layer of the blockchain and send the data verification request message to the obtained first government department node address; If the target node does not respond within the preset time, it will automatically resend.
6. The blockchain-based government affairs data sharing and security deposit system according to claim 1, characterized in that, The comparison generates a data status signal, including the following steps: Verify the timeliness of data verification request messages; Call the first government department's business system through the internal interface, enter the transaction number to request a complete copy of the corresponding business data; query the local cache area based on the transaction number, read the preliminary review response and the initial data fingerprint stored in the fingerprint generation module; The initial data fingerprint is compared with the real-time data fingerprint character by character. If they are determined to be consistent, a valid confirmation signal is generated; otherwise, a failure alarm signal is generated.
7. The blockchain-based government affairs data sharing and security deposit system according to claim 1, characterized in that, Binding the initial data fingerprint to generate an effective lock mark includes the following steps: Extract the final review department identifier and final review timestamp from the blockchain historical records; Using the transaction number as the search key, the blockchain's historical transaction records are searched for the final review request instruction sent by the second government department's business system. The final review operation feature data, including the final review department identifier and the final review request timestamp, is extracted from the structured data packet of the instruction. Combine the initial data fingerprint, final review department identifier and double timestamp to form a bound data set; A fixed-length identification code is generated by double transforming the SHA-256 hash and the RIPEMD-160 hash.
8. The blockchain-based government affairs data sharing and security deposit system according to claim 1, wherein Parsing the associated department identifier to generate a data effectiveness notification message and push it to the corresponding business system includes the following steps: After the blockchain network completes the writing operation of the effective lock mark, the relay nodes deployed on the physical servers of each government department scan the new block data in real time; Each relay node detects the effective lock identifier related to its department through a preset identifier matching pattern, and extracts the transaction number and initial review timestamp; Construct a standardized data effectiveness notification message and push it to the designated receiving port of the related business system through the department's intranet transmission protocol.
9. The blockchain-based government affairs data sharing and security deposit system according to claim 1, wherein Unlocking the modification permissions for business data involves the following steps: After receiving the data validity notification message from the relay node of the first government department, the network monitoring service of the business system immediately parses the transaction number and validity status code in the message; Locate the corresponding business data record stored locally based on the transaction number; If the status code indicates that the approval process has taken effect, the modification restrictions on the business data will be lifted through the internal permission control interface.
10. The blockchain-based government affairs data sharing and security deposit system according to claim 9, characterized in that, Unlocking the modification permissions for business data also includes the following steps: Locate the initial data fingerprint copy in the local cache area stored in the fingerprint generation module based on the transaction number; Perform physical deletion and free up memory space; close the countdown timer associated with the transaction.
Citation Information
Patent Citations
Smart contract tamper-proofing method and device, equipment and storage medium
CN116418523A
Intelligent community space access authority automatic management system based on block chain
CN118659871A
System, method of electronic approval and terminal
JP2003337875A
Cited By
Safety monitoring analysis system and method applied to electronic ticket business platform
CN121391516A
A security monitoring and analyzing system and method applied to an electronic ticket platform
CN121391516B