Production information tracing system based on quantum encryption technology

Abstract

The invention discloses a production information tracing system based on a quantum encryption technology. The invention relates to the technical field of electronic information, and solves the problem of low safety of data storage of an existing production information tracing system. The system comprises a data entry unit, a data cleaning unit, a quantum encryption data management unit and a data tracing unit, the quantum encryption data management unit comprises an information classification module, a storage backup module, an access management module, an encryption / decryption management module and a data distribution module; wherein the encryption / decryption management module is used for performing encryption preprocessing on original information by adopting a compression function encryption algorithm and performing secondary encryption on a generated code to finally generate a group of keys, and the keys are distributed and transmitted through a quantum communication technology, so that the confidentiality of the information can be ensured, and the safety of the production information is further ensured.

Description

Technical Field

[0001] The present invention relates to the field of electronic information technology, and in particular, to a production information traceability system based on quantum encryption technology. Background Art

[0002] A production information traceability system is a system that details the information of each link in the product production process through information means. It covers the full life cycle data from product concept design to final delivery and use. Starting from design to raw material procurement, it tracks information through various process parameters, process settings, quality inspection processes, product packaging, and all stages such as finished product warehousing, sales, and after-sales of the production process. The system uses a data collection system to assign a unique identity identifier to each file in the product production process, and combines database technology, network communication technology, etc. to collect, store, process, and share various information in the production process. These information include but are not limited to product design documents, drawings, documentation and product characteristics of materials, operating parameters of production equipment, process settings, production records, quality inspection data, as well as product transportation and sales information, quality management, etc.

[0003] Existing production information traceability systems usually include an information collection module, a data storage module, and a query and traceability module. The information collection module is mainly used for the initial entry of production data to be traced. For example, basic parameters of raw materials, models, suppliers, production process parameter settings, quality inspection information, production information, etc. The data storage module is mainly used for storing the collected information. The query and traceability module is the core function of the system, which facilitates specific personnel to trace and query all production data of products. For example, when a user enters the corresponding trace code on the product, the basic production information of the product can be displayed.

[0004] The data storage security of existing production information traceability systems is relatively low. In the information age, product production information is the most important data asset of an enterprise. Involving the core production information of the enterprise, such as product design drawings, process documents, software / firmware codes, etc., once leaked, it may cause huge losses to the enterprise. However, currently, traditional production traceability systems still adopt ordinary encryption and management methods. With the development of technology, such as the development of supercomputing power, quantum computers, artificial intelligence and other technologies, traditional data storage security has become extremely precarious. Traditional production information traceability systems lack hierarchical management of sensitive information, and any user can query all the entered information in the system. Therefore, it may lead to the leakage of some confidential information. All data in traditional production information traceability systems are manually entered and stored in the database. When manual data entry is incorrect or maliciously entered by an attacker to mislead information, and the system cannot identify such risks, which is also a vulnerability in current traditional information traceability systems. Summary of the Invention

[0005] The object of the present invention is to provide a production information traceability system based on quantum encryption technology to solve the problem of low security of data storage in existing production information traceability systems.

[0006] The present invention provides a production information traceability system based on quantum encryption technology, including: a data entry unit, a data cleaning unit, a quantum encrypted data management unit, and a data traceability unit; The data entry unit is used to enter production-related information through radio frequency identification technology and image scanning technology; at the same time, a human biometric feature device is provided on the information input device to record the accurate identity information of each information entry person in detail, ensuring that unauthorized personnel cannot enter information; each piece of information needs to be classified manually according to the confidentiality level, and the confidentiality level is divided into ordinary information and confidential information; after the information collection is completed, a corresponding identification code is generated for later information traceability and query; The data cleaning unit is used to identify, correct or delete errors, incomplete, duplicate or invalid parts in production-related information, so that the production-related information meets the analysis or application requirements; through preliminary data cleaning, ensure the accuracy of the format of all information, the integrity of the content, and mark the confidentiality level of the information according to the predetermined information classification rules; The quantum encrypted data management unit includes an information classification module, a storage backup module, an access management module, an encryption / decryption management module, and a data distribution module; the encryption / decryption management module is used to perform encryption preprocessing on the original information using a compression function encryption algorithm, which consists of 64 rounds of iterative operations, and generates a unique code for the information through non-linear transformation. The decryption method of this encryption preprocessing is synchronized to the corresponding authorized viewer of the information; perform secondary encryption on the generated code, and this secondary encryption process is carried out through block processing and multi-round confusion encryption algorithms, and finally generate a set of keys. Through the keys, the confidentially encrypted data can be restored to the data after encryption preprocessing; the keys are distributed and transmitted through quantum communication technology; The data traceability unit is used to manage and display the entire life cycle of production information, and at the same time support the operation information of all viewers and modifiers who view the information.

[0007] Further, the entered production-related information includes design documents, engineering drawings, processing parameters, process cards, production information, transfer status, storage status, supplier information, user materials, and business information.

[0008] Further, the format of the entered production-related information supports documents, tables, pictures, videos, and codes.

[0009] Further, the information classification module is used to specify the classification rules, access rules, storage requirements, and backup strategies of the data.

[0010] Further, the storage and backup module is used to store the production-related information, and the storage methods are divided into local storage and cloud server storage.

[0011] Further, the local storage has the function of off-site disaster recovery; the cloud server storage is stored by remote servers deployed with cloud services, and users access these data through the Internet, and the data is stored on multiple nodes using distributed storage technology.

[0012] Further, the access management module is used to ensure that only authorized users can access specific data through access control policies; prevent illegal data access and leakage through user biometric recognition and authorization mechanism methods.

[0013] Further, the access management module checks the legality and integrity of the data during data input and update through data verification policies; the access management module supports data retrieval and preprocessing functions, and can extract key search information from the data control according to the analysis requirements of the visitors.

[0014] Further, the data distribution module is used to transfer the data from the storage end to the target terminal device, where the storage end is the storage and backup module, and the target end is the terminal device used by the operator.

[0015] Further, the data distribution process of the data distribution module is as follows: The data distribution module selects the transmission method and protocol according to the location and environmental network of the issuing terminal; if the issuing terminal and the storage and backup module are within the same local area network, the Ethernet protocol is used for transmission; if it is connected to the remote target end through the Internet, the TCP / IP protocol or the HTTP network protocol is used for transmission; Send the prepared data module to the target end according to the selected transmission protocol and format; After the data reaches the target end, the biometric features on the terminal device first identify the operator's identity. When the system determines that the operator is an authorized person, the data is decrypted by the operator for data access; when the terminal device identifies that the operator is an unauthorized person, the system automatically destroys the information and reads the biometric information of this illegal operator to generate relevant log record events.

[0016] The present invention has the following beneficial effects: A production information traceability system based on quantum encryption technology of the present invention, compared with traditional data collection methods, the data collection terminal device in this system adopts biometric technology, which can accurately identify the identity of operators and generate a unique data decryption key for the operator, greatly improving the accuracy of data sources and the accuracy of personnel identity identification. The data entry of this system adopts radio frequency identification technology and image scanning technology, significantly improving the accuracy and efficiency of the entered data. Data encryption uses a confidentiality algorithm to encrypt data, and at the same time, the decryption key after encryption is transmitted in combination with quantum secure communication. Based on the basic principles of quantum mechanics, the confidentiality of this information can be guaranteed, thereby ensuring the security of production information. All information is encrypted twice, and the decryption algorithms after the two encryptions are separately generated and issued, which can ensure the security of information. BRIEF DESCRIPTION OF THE DRAWINGS

[0017] In order to more clearly illustrate the technical solutions of the present invention, the accompanying drawings required for use in the embodiments will be briefly introduced below. Obviously, for those of ordinary skill in the art, without creative efforts, other drawings can also be obtained based on these drawings.

[0018] Figure 1 It is a schematic diagram of a production information traceability system based on quantum encryption technology provided by the present invention. DETAILED DESCRIPTION OF THE EMBODIMENTS

[0019] To make the objectives, technical solutions and advantages of the present invention clearer, the technical solutions of the present invention will be clearly and completely described below in conjunction with the specific embodiments and corresponding drawings of the present invention. Obviously, the described embodiments are only a part of the embodiments of the present invention, rather than all the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by those of ordinary skill in the art without creative efforts fall within the scope of protection of the present invention. The following will detail the technical solutions provided by each embodiment of the present invention in conjunction with the drawings.

[0020] The present invention realizes the data management of the production information traceability system based on quantum encryption technology, thus ensuring the security of the entire material traceability system from the source. Based on a standardized and intelligent data system, full-life cycle and full-link digital confidentiality control are realized for the material management link. The system greatly improves production management efficiency and fully empowers production management, material traceability, and digital marketing.

[0021] Please refer to Figure 1 , a production information traceability system based on quantum encryption technology provided by the present invention, includes: a data entry unit, a data cleaning unit, a quantum encrypted data management unit, and a data traceability unit.

[0022] The data entry unit mainly realizes the functions of data collection and classification. The data entry unit inputs production-related information through radio frequency identification technology and image scanning technology. The input production-related information includes design documents, engineering drawings, processing parameters, process cards, production information, transfer status, storage status, supplier information, user profiles, and business information, etc. The formats of the input production-related information support various formats such as documents, tables, pictures, videos, and codes. There is a human biometric feature device on the information input device, which records the accurate identity information of each information entry person in detail to ensure that unauthorized personnel cannot input information. Each piece of information needs to be classified manually according to the confidentiality level. For example, some basic information that does not involve commercial secrets is defined as ordinary information, while information related to the core of the product and other sensitive information is defined as confidential information. After the information collection is completed, a corresponding identification code is generated for later information traceability and query.

[0023] The data cleaning unit is used to identify, correct, or delete the errors, incompleteness, duplication, or invalid parts in the production-related information, so that the production-related information meets the analysis or application requirements; through preliminary data cleaning, it ensures the accuracy of all information formats, the integrity of the content, and marks the confidentiality level of the information according to the predetermined information classification rules.

[0024] The quantum encryption data management unit is used to uniformly manage the collected data through a secure and confidential communication channel, including an information classification module, a storage and backup module, an access management module, an encryption / decryption management module, and a data distribution module.

[0025] The information classification module is used to stipulate the classification rules, access rules, storage requirements, and backup strategies of the data. For example, the production traceability data is divided into confidential information and ordinary information. Confidential information such as the core formula of the product, and ordinary information such as general production process records, and corresponding access control measures and security protection requirements are formulated for different levels of data.

[0026] The storage and backup module is used to store the production-related information. The storage methods are divided into local storage and cloud server storage. Local storage has the function of off-site disaster recovery. When other unexpected situations occur, it can ensure that the data is not lost and the business can be quickly restored, thus minimizing losses to the greatest extent; cloud server storage is stored by remote servers deployed with cloud services. Users access these data through the Internet, and the data is stored on multiple nodes using distributed storage technology to improve the reliability and availability of the data.

[0027] An access management module is used to ensure that only authorized users can access specific data through access control policies; prevent illegal data access and leakage through user biometric recognition and authorization mechanism methods. Inside the access management module, data verification policies are used to check the legality and integrity of data during data input and update; the access management module supports data retrieval and preprocessing functions, and can extract key search information from the data according to the analysis requirements of the visitors.

[0028] The encryption / decryption management module is the core module of the entire system. It mainly encrypts data through quantum encryption means. Specifically, it is used to perform encryption preprocessing on the original information using a compression function encryption algorithm. This encryption algorithm consists of 64 rounds of iterative operations and generates a unique code for this information through non-linear transformation. After encryption by the algorithm, each document has a unique corresponding code, which corresponds one-to-one with the original data and has uniqueness. After the data is encrypted, it circulates in the entire system in the form of a code, reducing the risk of information leakage. Because the same algorithm is used, regardless of the size of the original data, after unified algorithm iterative operations, their code lengths are the same. The decryption method of this encryption preprocessing is synchronized to the authorized viewers corresponding to this information for later information interpretation.

[0029] The encryption / decryption management module is also used for re-encryption processing. Re-encryption processing is to perform secondary encryption on the already generated code. This secondary encryption process is carried out through block processing and multi-round confusion encryption algorithms, and finally generates a set of keys. Through the keys, the confidentially encrypted data after secondary encryption can be restored to the data after encryption preprocessing; the keys are distributed and transmitted through quantum communication technology; the keys are transmitted between the storage backup module and the data query terminal.

[0030] Quantum communication technology uses quantum state substances for secure information transmission, that is, loading the information to be transmitted on quantum state substances, such as single photons, and the single photon carries the information and transmits it to the data query terminal. Because quantum state substances satisfy the following characteristics: quantum uncertainty and quantum collapse effect, quantum communication has unconditional security. The main process of this information transmission is as follows: the key to be transmitted is converted into a corresponding electrical signal according to a specific conversion protocol, and this signal is randomly loaded on the polarization encoding of a single photon. Through wavelength division multiplexing technology, the photon information is loaded into a common optical communication channel for signal transmission. After the data query terminal receives this signal, it performs quantum state measurement, and then the query terminal and the information center compare information. Through screening, the information to be transmitted is finally confirmed. After this link, the original data is converted into a code at this time. During the data transmission process of the entire information management system, all data is encrypted, and the decrypted data is only displayed after decryption at the terminal, thus improving the overall confidentiality of the system.

[0031] The data distribution module is used to transfer data from the storage end to the target terminal device. The storage end is the storage backup module, and the target end is the terminal device used by the operator. The data distribution process of the data distribution module is as follows: The data distribution module selects the transmission method and protocol according to the location and environmental network of the issuing terminal; if the issuing terminal and the storage backup module are within the same local area network, the Ethernet protocol is used for transmission; if it is connected to a remote target end through the Internet, the TCP / IP protocol or the HTTP network protocol is used for transmission; according to the selected transmission protocol and format, the prepared data module is sent to the target end; after the data arrives at the target end, the biometric features on the terminal device first identify the operator's identity. When the system determines that the operator is an authorized person, the data is decrypted by the operator for data access; when the terminal device identifies that the operator is an unauthorized person, the system automatically destroys the information and reads the biometric information of this illegal operator to generate relevant log record events.

[0032] The data traceability unit is used to manage and display the production information throughout its life cycle. Through the data traceability unit, relevant information such as the operator at the time of data generation, the data generation time, and the generation device can be clearly seen. At the same time, it supports viewing the operation information of all viewers and modifiers of this information.

[0033] The above-described embodiments of the present invention do not constitute a limitation on the protection scope of the present invention.

Claims

1. A production information traceability system based on quantum encryption technology, characterized in that, Including: A data entry unit, a data cleaning unit, a quantum encrypted data management unit, and a data traceability unit; The data entry unit is used to enter production-related information through radio frequency identification technology and image scanning technology; at the same time, a human biometric feature device is provided on the information input device to record the accurate identity information of each information entry person in detail, ensuring that unauthorized personnel cannot enter information; Each piece of information needs to be manually classified according to the confidentiality level, and the confidentiality level is divided into ordinary information and confidential information; after the information collection is completed, a corresponding identification code is generated for later information traceability and query use; The data cleaning unit is used to identify, correct, or delete errors, incomplete, duplicate, or invalid parts in production-related information, so that the production-related information meets the analysis or application requirements; through preliminary data cleaning, ensure the accuracy of the format of all information, the integrity of the content, and mark the confidentiality level of the information according to the predetermined information classification rules; The quantum encrypted data management unit includes an information classification module, a storage backup module, an access management module, an encryption / decryption management module, and a data distribution module; the encryption / decryption management module is used to perform encryption preprocessing on the original information using a compression function encryption algorithm, which consists of 64 rounds of iterative operations, and generates a unique code for the information through non-linear transformation. The decryption method of this encryption preprocessing is synchronized to the corresponding authorized viewers of the information; Perform secondary encryption on the generated code. This secondary encryption process is carried out through block processing and multi-round confusion encryption algorithms, and finally a set of keys is generated. Through the keys, the confidentially encrypted data can be restored to the data after encryption preprocessing; The keys are distributed and transmitted through quantum communication technology; The data traceability unit is used to manage and display the entire life cycle of production information, and at the same time support the operation information of all viewers and modifiers who view the information.

2. The production information traceability system based on quantum encryption technology according to claim 1, characterized in that, The entered production-related information includes design documents, engineering drawings, processing parameters, process cards, production information, transfer status, storage status, supplier information, user materials, and business information.

3. A production information traceability system based on quantum encryption technology according to claim 1, characterized in that, The format of the entered production-related information supports documents, tables, pictures, videos, and codes.

4. A production information traceability system based on quantum encryption technology according to claim 1, characterized in that, The information classification module is used to stipulate the classification rules, access rules, storage requirements, and backup strategies of data.

5. A production information traceability system based on quantum encryption technology according to claim 1, characterized in that, The storage backup module is used to store production-related information, and the storage methods are divided into local storage and cloud server storage.

6. The production information traceability system based on quantum encryption technology according to claim 5, characterized in that, Local storage has the function of off-site disaster recovery; cloud server storage is stored by remote servers deploying cloud services. Users access these data through the Internet, and the data is stored on multiple nodes using distributed storage technology.

7. The production information traceability system based on quantum encryption technology according to claim 1, wherein, The access management module is used to ensure that only authorized users can access specific data through access control policies; prevent illegal data access and leakage through user biometric identification and authorization mechanism methods.

8. The production information traceability system based on quantum encryption technology according to claim 7, wherein The access management module checks the legality and integrity of data during data input and update through data verification policies; The access management module supports data retrieval and preprocessing functions, and can extract key search information from the data according to the analysis requirements of the visitors.

9. The production information traceability system based on quantum encryption technology according to claim 1, wherein, The data distribution module is used to transfer data from the storage end to the target terminal device. The storage end is the storage backup module, and the target end is the terminal device used by the operator.

10. A production information traceability system based on quantum encryption technology according to claim 9, characterized in that, The data distribution process of the data distribution module is as follows: The data distribution module selects the transmission method and protocol according to the location and environmental network of the issuing terminal; if the issuing terminal and the storage backup module are within the same local area network, the Ethernet protocol is used for transmission; If it is connected to a remote target end through the Internet, the TCP / IP protocol or a transmission based on the HTTP network protocol is used; The prepared data module is sent to the target end according to the selected transmission protocol and format; After the data reaches the target end, the biometric features on the terminal device first identify the operator. When the system determines that the operator is an authorized person, the data is decrypted by the operator for data access; when the terminal device identifies that the operator is an unauthorized person, the system automatically destroys the information and reads the biometric information of this illegal operator to generate relevant log record events.

Images