Blockchain development platform full life cycle data security management method

Abstract

The application relates to the technical field of data security management, in particular to a full life cycle data security management method of a blockchain development platform. The method comprises the following steps: obtaining storage information of a file where data is located in a blockchain, calculating a storage security characteristic index of the file where the data is located based on the storage information; obtaining transmission information of the file where the data is located in the blockchain, calculating a transmission security characteristic index of the file where the data is located based on the transmission information; obtaining environment information of the file where the data is located in the blockchain, wherein the environment information comprises an environment risk value and a constraint influence value, and calculating an environment security characteristic index of the file where the data is located based on the environment information; and generating a safety warning signal of the file where the data is located based on the storage security characteristic index, the transmission security characteristic index and the environment security characteristic index, so that the storage security risk and the data transmission risk of data security management of the blockchain development platform can be reduced.

Description

Technical Field

[0001] This invention relates to the field of data security management technology, specifically to a method for full lifecycle data security management of blockchain development platforms. Background Technology

[0002] As a distributed ledger technology, blockchain offers new solutions for the entire lifecycle management of data due to its decentralized, distributed storage, immutability, and smart contracts. Blockchain technology ensures the authenticity, integrity, and trustworthiness of data through cryptographic algorithms and consensus mechanisms, providing a powerful tool for solving traditional data management challenges.

[0003] Traditional data security management faces the following challenges:

[0004] On the one hand, there are security risks in data storage: traditional centralized storage not only faces storage capacity bottlenecks, but also data security risks. Once the storage center fails or is attacked, the data will be at risk of being lost or leaked.

[0005] On the other hand, there are security risks associated with data transmission and the security of the surrounding environment: Hackers can exploit system attacks to obtain business and user data for malicious purposes. When data flows and is used in large quantities, external malicious attackers may use API interfaces to obtain sensitive data in bulk. The increased mobility of core business data and personal identification information transmitted via APIs poses a significant risk of leakage.

[0006] Therefore, there is an urgent need for a full lifecycle data security management method for blockchain development platforms to solve the above problems. Summary of the Invention

[0007] The purpose of this invention is to provide a full lifecycle data security management method for blockchain development platforms: to solve the technical problems of high data storage security risks and high data transmission security risks in traditional data security management.

[0008] The full lifecycle data security management method for blockchain development platforms includes:

[0009] Obtain the storage information of the file containing the data in the blockchain, and calculate the storage security feature index of the file containing the data based on the storage information;

[0010] Obtain the transmission information of the file containing the data in the blockchain, and calculate the transmission security feature index of the file containing the data based on the transmission information;

[0011] Obtain the environmental information of the file containing the data in the blockchain. The environmental information includes environmental risk value and constraint impact value. Calculate the environmental safety characteristic index of the file containing the data based on the environmental information.

[0012] Security warning signals for the files containing the data are generated based on storage security characteristic indices, transmission security characteristic indices, and environmental security characteristic indices.

[0013] Furthermore, calculating the storage security characteristic index of the file containing the data based on storage information specifically includes the following process:

[0014] Based on the storage information, obtain the public-private key pair (pk, sk) of the file containing the data, where pk is the public key and sk is the private key. Generate a file S containing N data entries based on (pk, sk). pk and the capacity file S pk Stored in the current blockchain node;

[0015] Challenge c is generated by using a challenge generation algorithm and historical block parameters to generate the corresponding block.

[0016] The current blockchain node is based on challenge c and the capacity file S stored locally. pk Generate capacity feature values;

[0017] The storage security feature index of the file containing the data is calculated based on the capacity feature value.

[0018] Furthermore, a capacity file S containing N data entries is generated based on (pk, sk). pk Specifically, the process includes the following:

[0019] p(x,sk), It is a set of collision-resistant hash functions, where x, A hash table data structure consisting of N data items;

[0020] Calculate the capacity file S based on the public-private key pair (pk, sk) pk The unique identifier is hash(pk), where hash(pk) represents the hash operation performed on the public key pk;

[0021] For data x: calculate the corresponding key y from 1 to N: y = p(x, hash(pk)); create a hash table A with y as the key and data x as the value;

[0022] Data Calculate the corresponding keys from 1 to N. Search for the key in hash table A The corresponding value of x;

[0023] Calculate key z: Using z as the key, The capacity file S for the value pk .

[0024] Furthermore, the process of generating the corresponding block challenge c through the challenge generation algorithm and historical block parameters specifically includes the following steps:

[0025] Obtain the current block height h and historical block parameters Δ based on the stored information;

[0026] If the current block height h is an integer multiple of Δ, then perform a hash operation on the capacity proof of the (h-Δ)th block to obtain challenge c; if the current block height h is not an integer multiple of Δ, then perform k consecutive hash operations on the capacity proof of the (hk)th block to obtain challenge c.

[0027] Furthermore, based on challenge c and the local storage capacity file S pk The process of generating capacity feature values ​​includes the following steps:

[0028] From the locally stored capacity file S pk Query for values ​​that meet the equality condition.

[0029]

[0030] Where ℃(z|y) indicates that the last n digits of z and y are equal;

[0031] For those that meet the equality condition Calculate its mass Q:

[0032] Q = (hash(sig / 2)) bl )) 1 / N ;

[0033] Where sig is the signature of the file containing the data, and bl is the parameter for initializing the capacity space;

[0034] Obtain the block difficulty parameter corresponding to the file it belongs to, and record the difference between the quality Q and the difficulty parameter as the capacity feature value.

[0035] Furthermore, calculating the storage security characteristic index of the file containing the data based on the capacity characteristic value specifically includes the following process:

[0036] A management cycle is generated, which is divided into several sub-periods. The capacity characteristic values ​​of all sub-periods are obtained. A rectangular coordinate system is established with the execution time of the sub-period as the X-axis and the capacity characteristic values ​​as the Y-axis. Data storage security curves are plotted by plotting points. The number of line segments whose capacity characteristic values ​​exceed the preset capacity characteristic threshold is obtained from the data storage security curves. At the same time, two perpendicular lines are drawn from the two endpoints to the X-axis to obtain two perpendicular line segments. A graph is formed by the data storage security curve, the two perpendicular line segments, and the X-axis. The area of ​​the graph is calculated, and the area of ​​the graph and the number of line segments are normalized and then the ratio is calculated. The obtained ratio is recorded as the storage security characteristic index of the file where the data is located.

[0037] Furthermore, obtaining the transmission information of the file containing the data within the blockchain, and calculating the transmission security characteristic index of the file containing the data based on the transmission information, specifically includes the following processes:

[0038] A management cycle is generated and divided into several sub-periods. Based on the transmission information of the data file in the blockchain, the data transmission frequency of the data file in the blockchain within each sub-period is obtained. A Cartesian coordinate system is established with the execution time of the sub-period as the X-axis and the data transmission frequency as the Y-axis. A data transmission security curve is plotted by plotting points. The number of all rising segments and falling segments of the curve are obtained from the data transmission security curve, and the ratio of the number of rising segments to the number of falling segments is recorded as the transmission excellence ratio. The data transmission security curve is obtained by normalizing the length of the line segment above the preset data transmission security curve. The transmission excellence ratio is multiplied by the value to obtain the product value. A set of transmission performance values ​​is constructed using the product value, and then the maximum and minimum subsets in the set are obtained. The difference between the maximum and minimum subsets in the set is marked as the transmission security feature index.

[0039] Furthermore, the calculation of the environmental safety characteristic index based on the environmental information data file specifically includes the following processes:

[0040] Generate a management cycle and divide the management cycle into several sub-periods;

[0041] The environmental risk value of the file containing the data in each sub-time period is obtained. The environmental risk value represents the sum of the part of the characteristic curve change trend value of environmental information that is greater than the preset threshold. The environmental information includes the average file upload rate and the file download rate. The environmental risk value is compared and analyzed with the stored preset environmental risk value threshold. If the environmental risk value is greater than the preset environmental risk value threshold, the number of sub-time periods corresponding to the environmental risk value that is greater than the preset environmental risk value threshold is marked as the first risk value HJ.

[0042] Obtain the constraint impact value of the file containing the data within the preset time threshold. The constraint impact value represents the number of times the file containing the data fails to be broadcast to other nodes through the blockchain. Compare and analyze the constraint impact value with the stored preset constraint impact value threshold. If the constraint impact value is greater than the preset constraint impact value threshold, mark the part of the constraint impact value that is greater than the preset constraint impact value threshold as the second risk value YS.

[0043] Substituting the first risk value HJ and the second risk value YS into the formula for calculating the environmental safety characteristic index, the environmental safety characteristic index HA is obtained:

[0044] Where α and β are the weighting coefficients, respectively.

[0045] Furthermore, the process of generating a security warning signal for the file containing the data based on the storage security characteristic index, transmission security characteristic index, and environmental security characteristic index specifically includes the following steps:

[0046] Load the storage security feature index threshold, transmission security feature index threshold, and environmental security feature index threshold. Determine whether the storage security feature index exceeds the storage security feature index threshold. If it does, determine that the file containing the data has a storage risk and generate a warning signal. If not, determine that the file containing the data does not have a storage risk and do not generate a warning signal.

[0047] Determine whether the transmission security feature index exceeds the transmission security feature index threshold. If it does, determine that the file containing the data has a transmission risk and generate a warning signal. If not, determine that the file containing the data does not have a transmission risk and do not generate a warning signal.

[0048] If the environmental safety characteristic index exceeds the environmental safety characteristic index threshold, the file containing the data is deemed to have an environmental safety risk, and an early warning signal is generated. If not, the file containing the data is deemed not to have an environmental safety risk, and no early warning signal is generated.

[0049] Compared to existing solutions, the beneficial effects achieved by this invention are:

[0050] This invention acquires the storage information of the data file in the blockchain, calculates the storage security characteristic index of the data file based on the storage information; acquires the transmission information of the data file in the blockchain, calculates the transmission security characteristic index of the data file based on the transmission information; acquires the environmental information of the data file in the blockchain, wherein the environmental information includes environmental risk value and constraint impact value, calculates the environmental security characteristic index of the data file based on the environmental information; and generates a security warning signal for the data file based on the storage security characteristic index, transmission security characteristic index, and environmental security characteristic index, which can reduce the storage security risk and data transmission risk of data security management in blockchain development platforms.

[0051] Furthermore, by examining three key aspects—storage, transmission, and environment—a comprehensive assessment of the data's location within the blockchain is obtained. Storage information analysis reveals the data's storage status and stability on blockchain nodes; transmission information analysis provides insights into the security of data flow within the blockchain network; and environmental information analysis considers the impact of external risk factors and constraints on data security. This multi-dimensional and comprehensive evaluation approach more accurately identifies potential security threats to data throughout its lifecycle, avoiding security vulnerabilities caused by incomplete analysis. Attached Figure Description

[0052] To more clearly illustrate the technical solutions in the embodiments of this application or the prior art, the drawings used in the embodiments will be briefly introduced below. Obviously, the drawings described below are only some embodiments recorded in this invention. For those skilled in the art, other drawings can be obtained based on these drawings.

[0053] Figure 1 This is a flowchart illustrating the full lifecycle data security management method for a blockchain development platform according to the first embodiment of the present invention.

[0054] Figure 2 This is a flowchart illustrating the workflow of a second blockchain development platform's full lifecycle data security management method according to an embodiment of the present invention.

[0055] Figure 3 This is a flowchart of the third blockchain development platform's full lifecycle data security management method according to an embodiment of the present invention. Detailed Implementation

[0056] The technical solutions of the embodiments of the present invention will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only some embodiments of the present invention, and not all embodiments. Based on the embodiments of the present invention, all other embodiments obtained by those skilled in the art without creative effort are within the scope of protection of the present invention.

[0057] Furthermore, the described features, structures, or characteristics can be combined in any suitable manner in one or more exemplary embodiments. Numerous specific details are provided in the following description to give a full understanding of exemplary embodiments of this disclosure. However, those skilled in the art will recognize that the technical solutions of this disclosure can be practiced with one or more of the specific details omitted, or other methods, components, steps, etc., can be employed. In other instances, well-known structures, methods, implementations, or operations are not shown or described in detail to avoid obscuring various aspects of this disclosure.

[0058] This embodiment provides a method for full lifecycle data security management of a blockchain development platform. Figure 1 This is a flowchart illustrating the full lifecycle data security management method for a blockchain development platform according to the first embodiment of the present invention, as shown below. Figure 1 As shown, the method includes the following steps:

[0059] Step S101: Obtain the storage information of the file containing the data in the blockchain, and calculate the storage security feature index of the file containing the data based on the storage information;

[0060] Step S102: Obtain the transmission information of the file containing the data in the blockchain, and calculate the transmission security feature index of the file containing the data based on the transmission information;

[0061] Step S103: Obtain the environmental information of the file containing the data in the blockchain, wherein the environmental information includes environmental risk value and constraint impact value, and calculate the environmental security characteristic index of the file containing the data based on the environmental information;

[0062] Step S104: Generate a security warning signal for the file containing the data based on the storage security feature index, transmission security feature index, and environmental security feature index.

[0063] In summary, this invention comprehensively acquires various information about the data file within the blockchain from three key levels: storage, transmission, and environment. Storage information analysis can grasp the storage status and stability of data on blockchain nodes; transmission information analysis can provide insights into the security of data flow within the blockchain network; and environmental information analysis considers the impact of external risk factors and constraints on data security. This multi-dimensional and comprehensive evaluation method can more accurately identify potential security threats to data throughout its entire lifecycle, avoiding security vulnerabilities caused by one-sided analysis.

[0064] In some embodiments, calculating the storage security feature index of the file containing the data based on storage information specifically includes the following process:

[0065] Based on the storage information, obtain the public-private key pair (pk, sk) of the file containing the data, where pk is the public key and sk is the private key. Generate a file S containing N data entries based on (pk, sk). pk and the capacity file S pk Stored in the current blockchain node;

[0066] Specifically, a file S containing N data entries is generated based on (pk, sk). pk Specifically, the process includes the following:

[0067] p(x,sk), It is a set of collision-resistant hash functions, where x, A hash table data structure consisting of N data items;

[0068] Calculate the capacity file S based on the public-private key pair (pk, sk) pk The unique identifier is hash(pk), where hash(pk) represents the hash operation performed on the public key pk;

[0069] For data x: calculate the corresponding key y from 1 to N: y = p(x, hash(pk)); create a hash table A with y as the key and data x as the value;

[0070] Data Calculate the corresponding keys from 1 to N. Search for the key in hash table A The corresponding value of x;

[0071] Calculate key z: Using z as the key, The capacity file S for the value pk .

[0072] Challenge c is generated by using a challenge generation algorithm and historical block parameters to generate the corresponding block.

[0073] Specifically, the current block height h and historical block parameters Δ are obtained based on the storage information;

[0074] If the current block height h is an integer multiple of Δ, then perform a hash operation on the capacity proof of the (h-Δ)th block to obtain challenge c; if the current block height h is not an integer multiple of Δ, then perform k consecutive hash operations on the capacity proof of the (hk)th block to obtain challenge c.

[0075] The current blockchain node is based on challenge c and the capacity file S stored locally. pk Generate capacity feature values;

[0076] Based on challenge c and the local storage capacity file S pk The process of generating capacity feature values ​​includes the following steps:

[0077] From the locally stored capacity file S pk Query for values ​​that meet the equality condition.

[0078]

[0079] Where ℃(z|y) indicates that the last n digits of z and y are equal;

[0080] For those that meet the equality condition Calculate its mass Q:

[0081] Q = (hash(sig / 2)) bl )) 1 / N ;

[0082] Where sig is the signature of the file containing the data, and bl is the parameter for initializing the capacity space;

[0083] Obtain the block difficulty parameter corresponding to the file it belongs to, and record the difference between the quality Q and the difficulty parameter as the capacity feature value.

[0084] Calculate the storage security feature index of the file containing the data based on its capacity feature value:

[0085] Figure 2 This is a flowchart illustrating the workflow of the second type of blockchain development platform's full lifecycle data security management method according to an embodiment of the present invention, as follows: Figure 2 As shown, the process of calculating the storage security feature index of the file containing the data based on the capacity feature value includes the following steps:

[0086] Step S201: Generate a management cycle, divide the management cycle into several sub-periods, obtain the capacity characteristic values ​​of all sub-periods, establish a rectangular coordinate system with the execution time of the sub-periods as the X-axis and the capacity characteristic values ​​as the Y-axis, and draw the data storage security curve by plotting points;

[0087] Step S202: Obtain the number of line segments whose capacity characteristic values ​​exceed the preset capacity characteristic threshold from the data storage security curve;

[0088] Step S203: Draw perpendicular lines from the two endpoints to the X-axis to obtain two perpendicular line segments. A graph is formed by the data storage security curve, the two perpendicular line segments, and the X-axis. Calculate the area of ​​the graph, and then normalize the area of ​​the graph and the number of line segments before calculating the ratio. The obtained ratio is recorded as the storage security feature index of the file where the data is located.

[0089] In summary, by generating a management cycle and dividing it into several sub-periods, the capacity characteristic values ​​of data in different time periods can be obtained in real time and dynamically. Plotting a data storage security curve with the sub-period execution time as the X-axis and the capacity characteristic value as the Y-axis visually demonstrates the trend of data storage capacity changes over time. This allows security managers to clearly observe fluctuations in data storage capacity, promptly identify potential storage security risks, such as abnormal capacity growth which may indicate malicious attacks or data redundancy, and thus take swift action to ensure the stability and security of data storage. Obtaining the number of line segments from the data storage security curve where the capacity characteristic value exceeds a preset capacity characteristic threshold allows for precise identification of abnormal periods during data storage. The preset capacity characteristic threshold can be reasonably set according to actual business needs and data storage characteristics. When the capacity characteristic value exceeds this threshold, it indicates that the data storage may be in an insecure state. By counting the number of line segments, the frequency of abnormal situations can be quantified, providing strong support for further analysis of the causes of anomalies and the development of response strategies. Quantifying the degree of storage security risk: Two perpendicular lines are drawn from the two endpoints to the X-axis, forming two perpendicular segments. A graph is constructed from the data storage security curve, the two perpendicular segments, and the X-axis, and the area of ​​this graph is calculated. This innovative area calculation method comprehensively considers the fluctuation range and duration of data storage capacity during abnormal periods, transforming abstract storage security risks into concrete quantitative indicators. The larger the area of ​​the graph, the more severe the capacity fluctuation and the longer the duration during abnormal periods, indicating a higher storage security risk. This quantitative approach allows security managers to more intuitively understand the severity of data storage security risks, providing a basis for developing scientific and reasonable security strategies.

[0090] In some embodiments, obtaining the transmission information of the file containing the data in the blockchain and calculating the transmission security feature index of the file containing the data based on the transmission information specifically includes the following process:

[0091] A management cycle is generated and divided into several sub-periods. Based on the transmission information of the data file in the blockchain, the data transmission frequency of the data file in the blockchain within each sub-period is obtained. A Cartesian coordinate system is established with the execution time of the sub-period as the X-axis and the data transmission frequency as the Y-axis. A data transmission security curve is plotted by plotting points. The number of all rising segments and falling segments of the curve are obtained from the data transmission security curve, and the ratio of the number of rising segments to the number of falling segments is recorded as the transmission excellence ratio. The data transmission security curve is obtained by normalizing the length of the line segment above the preset data transmission security curve. The transmission excellence ratio is multiplied by the value to obtain the product value. A set of transmission performance values ​​is constructed using the product value, and then the maximum and minimum subsets in the set are obtained. The difference between the maximum and minimum subsets in the set is marked as the transmission security feature index.

[0092] In summary, by dynamically capturing transmission fluctuation characteristics, quantitatively evaluating transmission dynamic performance, comprehensively considering transmission security margins, and integrating multi-dimensional information for precise assessment, a comprehensive, in-depth, and scientific assessment method for blockchain data transmission security is provided. This helps to improve the security and reliability of data transmission and ensure the stable operation of the blockchain system.

[0093] In some embodiments, Figure 3 This is a flowchart illustrating the workflow of the third blockchain development platform's full lifecycle data security management method according to an embodiment of the present invention, as follows: Figure 3 As shown, the calculation of the environmental safety characteristic index of the file containing the environmental information data specifically includes the following process:

[0094] Step S301: Generate a management cycle and divide the management cycle into several sub-periods;

[0095] Step S302: Obtain the environmental risk value of the file containing the data in each sub-time period. The environmental risk value represents the sum of the part of the characteristic curve change trend value of environmental information that is greater than the preset threshold. The environmental information includes the average file upload rate and the file download rate. The environmental risk value is compared and analyzed with the stored preset environmental risk value threshold. If the environmental risk value is greater than the preset environmental risk value threshold, the number of sub-time periods corresponding to the environmental risk value that is greater than the preset environmental risk value threshold is marked as the first risk value HJ.

[0096] Step S303: Obtain the constraint impact value of the file containing the data within the preset time threshold. The constraint impact value represents the number of times the file containing the data fails to be broadcast to other nodes through the blockchain. Compare and analyze the constraint impact value with the stored preset constraint impact value threshold. If the constraint impact value is greater than the preset constraint impact value threshold, mark the part of the constraint impact value that is greater than the preset constraint impact value threshold as the second risk value YS.

[0097] Step S304: Substitute the first risk value HJ and the second risk value YS into the environmental safety characteristic index calculation formula to calculate the environmental safety characteristic index HA:

[0098] Where α and β are the weighting coefficients, respectively.

[0099] Furthermore, the process of generating a security warning signal for the file containing the data based on the storage security characteristic index, transmission security characteristic index, and environmental security characteristic index specifically includes the following steps:

[0100] Load the storage security feature index threshold, transmission security feature index threshold, and environmental security feature index threshold. Determine whether the storage security feature index exceeds the storage security feature index threshold. If it does, determine that the file containing the data has a storage risk and generate a warning signal. If not, determine that the file containing the data does not have a storage risk and do not generate a warning signal.

[0101] Determine whether the transmission security feature index exceeds the transmission security feature index threshold. If it does, determine that the file containing the data has a transmission risk and generate a warning signal. If not, determine that the file containing the data does not have a transmission risk and do not generate a warning signal.

[0102] The system determines whether the environmental safety characteristic index exceeds the environmental safety characteristic index threshold. If it does, the file containing the data is deemed to pose an environmental safety risk, and a warning signal is generated. If not, the file containing the data is deemed not to pose an environmental safety risk, and no warning signal is generated.

[0103] The above embodiments can be implemented, in whole or in part, by software, hardware, firmware, or any other combination thereof. When implemented using software, the above embodiments can be implemented, in whole or in part, as a computer program product. The computer program product includes one or more computer instructions or computer programs. When the computer instructions or computer programs are loaded or executed on a computer, all or part of the processes or functions described in the embodiments of this application are generated. The computer can be a general-purpose computer, a special-purpose computer, a computer network, or other programmable device. The computer instructions can be stored in a computer-readable storage medium or transmitted from one computer-readable storage medium to another. For example, the computer instructions can be transmitted from one website, computer, server, or data center to another website, computer, server, or data center via wired (e.g., infrared, wireless, microwave, etc.) means. The computer-readable storage medium can be any available medium that a computer can access or a data storage device such as a server or data center that includes one or more sets of available media. The available medium can be a magnetic medium (e.g., floppy disk, hard disk, magnetic tape), an optical medium (e.g., DVD), or a semiconductor medium. A semiconductor medium can be a solid-state drive.

[0104] Those skilled in the art will recognize that the units and algorithm steps of the various examples described in conjunction with the embodiments disclosed herein can be implemented in electronic hardware, or a combination of computer software and electronic hardware. Whether these functions are implemented in hardware or software depends on the specific application and design constraints of the technical solution. Those skilled in the art can use different methods to implement the described functions for each specific application, but such implementation should not be considered beyond the scope of this application.

[0105] Those skilled in the art will understand that, for the sake of convenience and brevity, the specific working processes of the systems, devices, and units described above can be referred to the corresponding processes in the foregoing method embodiments, and will not be repeated here.

[0106] In the several embodiments provided in this application, it should be understood that the disclosed systems, apparatuses, and methods can be implemented in other ways. For example, the apparatus embodiments described above are merely illustrative; for instance, the division of units is only a logical functional division, and in actual implementation, there may be other division methods. For example, multiple units or components may be combined or integrated into another system, or some features may be ignored or not executed. Furthermore, the coupling or direct coupling or communication connection shown or discussed may be through some interfaces; the indirect coupling or communication connection between apparatuses or units may be electrical, mechanical, or other forms.

[0107] The units described as separate components may or may not be physically separate. The components shown as units may or may not be physical units; that is, they may be located in one place or distributed across multiple network units. Some or all of the units can be selected to achieve the purpose of this embodiment according to actual needs.

[0108] The above description is merely a specific embodiment of this application, but the scope of protection of this application is not limited thereto. Any variations or substitutions that can be easily conceived by those skilled in the art within the scope of the technology disclosed in this application should be included within the scope of protection of this application. Therefore, the scope of protection of this application should be determined by the scope of the claims.

Claims

1. A method for full lifecycle data security management of a blockchain development platform, characterized in that, The methods include: Obtain the storage information of the file containing the data in the blockchain, and calculate the storage security feature index of the file containing the data based on the storage information; The process of calculating the storage security characteristic index of the file containing the data based on storage information includes the following steps: Retrieve the public and private key pairs of the file containing the data based on the stored information. ,in, For public key, For private key, based on Generate a capacity file containing N data entries. and capacity file Stored in the current blockchain node; Challenges are generated by using a challenge generation algorithm and historical block parameters to create corresponding blocks. ; Current blockchain nodes based on challenges and local storage capacity file Generate capacity feature values; Calculate the storage security feature index of the file containing the data based on its capacity feature value; The process of calculating the storage security feature index of the file containing the data based on its capacity feature value includes the following steps: A management cycle is generated, which is divided into several sub-periods. The capacity characteristic values ​​of all sub-periods are obtained. A rectangular coordinate system is established with the execution time of the sub-period as the X-axis and the capacity characteristic values ​​as the Y-axis. Data storage security curves are plotted by plotting points. The number of line segments whose capacity characteristic values ​​exceed the preset capacity characteristic threshold is obtained from the data storage security curves. At the same time, two perpendicular lines are drawn from the two endpoints to the X-axis to obtain two perpendicular line segments. A graph is formed by the data storage security curve, the two perpendicular line segments, and the X-axis. The area of ​​the graph is calculated. The area of ​​the graph and the number of line segments are normalized and then the ratio is calculated. The ratio is recorded as the storage security characteristic index of the file where the data is located. Obtain the transmission information of the file containing the data in the blockchain, and calculate the transmission security feature index of the file containing the data based on the transmission information; Obtain the environmental information of the file containing the data in the blockchain. The environmental information includes environmental risk value and constraint impact value. Calculate the environmental safety characteristic index of the file containing the data based on the environmental information. Security warning signals for the files containing the data are generated based on storage security characteristic indices, transmission security characteristic indices, and environmental security characteristic indices.

2. The method for full lifecycle data security management of a blockchain development platform according to claim 1, characterized in that, based on Generate a capacity file containing N data entries. Specifically, the process includes the following: , , It is a set of collision-resistant hash functions, where, , A hash table data structure consisting of N data items; Based on public-private key pairs Calculate capacity file Unique identifier ,in, Indicates the public key Perform a hash operation; For data x: calculate the corresponding key y from 1 to N: Create a hash table A with y as the key and x as the value; Data Calculate the corresponding keys from 1 to N. : ; Look up the key in hash table A The corresponding value of x; Calculate key z: With z as the key, Capacity file for values .

3. The method for full lifecycle data security management of a blockchain development platform according to claim 1, characterized in that, Challenges are generated by using a challenge generation algorithm and historical block parameters to create corresponding blocks. Specifically, the process includes the following: The current block height h and historical block parameters are obtained based on the stored information. ; If the current block height h is If the integer multiple of , then for the ... The capacity proof of each block is hashed once to obtain the challenge. If the current block height h is not If the integer multiple of , then for the ... The capacity proof of each block is hashed k consecutively to obtain the challenge. .

4. The method for full lifecycle data security management of a blockchain development platform according to claim 1, characterized in that, According to the challenge and local storage capacity file Specific generation of capacity feature values Includes the following processes: Capacity file from local storage Query for values ​​that meet the equality condition. : ； in, express and The last n digits are equal; For those that meet the equality condition Calculate its mass Q: ； in, For the signature of the file containing the data, Parameters for initializing the capacity space; Obtain the block difficulty parameter corresponding to the file it belongs to, and record the difference between the quality Q and the difficulty parameter as the capacity feature value.

5. The method for full lifecycle data security management of a blockchain development platform according to claim 1, characterized in that, Obtain the transmission information of the file containing the data in the blockchain, and calculate the transmission security feature index of the file containing the data based on the transmission information. Includes the following processes: A management cycle is generated and divided into several sub-periods. Based on the transmission information of the data file in the blockchain, the data transmission frequency of the data file in the blockchain within each sub-period is obtained. A Cartesian coordinate system is established with the execution time of the sub-period as the X-axis and the data transmission frequency as the Y-axis. A data transmission security curve is plotted by plotting points. The number of all rising segments and falling segments of the curve are obtained from the data transmission security curve, and the ratio of the number of rising segments to the number of falling segments is recorded as the transmission excellence ratio. The data transmission security curve is obtained by normalizing the length of the line segment above the preset data transmission security curve. The transmission excellence ratio is multiplied by the value to obtain the product value. A set of transmission performance values ​​is constructed using the product value, and then the maximum and minimum subsets in the set are obtained. The difference between the maximum and minimum subsets in the set is marked as the transmission security feature index.

6. The method for full lifecycle data security management of a blockchain development platform according to claim 1, characterized in that, The environmental safety characteristic index is specifically calculated based on the file containing the environmental information data. Includes the following processes: Generate a management cycle and divide the management cycle into several sub-periods; The environmental risk value of the file containing the data in each sub-time period is obtained. The environmental risk value represents the sum of the part of the characteristic curve change trend value of environmental information that is greater than the preset threshold. The environmental information includes the average file upload rate and the file download rate. The environmental risk value is compared and analyzed with the stored preset environmental risk value threshold. If the environmental risk value is greater than the preset environmental risk value threshold, the number of sub-time periods corresponding to the environmental risk value that is greater than the preset environmental risk value threshold is marked as the first risk value HJ. Obtain the constraint impact value of the file containing the data within the preset time threshold. The constraint impact value represents the number of times the file containing the data fails to be broadcast to other nodes through the blockchain. Compare and analyze the constraint impact value with the stored preset constraint impact value threshold. If the constraint impact value is greater than the preset constraint impact value threshold, mark the part of the constraint impact value that is greater than the preset constraint impact value threshold as the second risk value YS. Substituting the first risk value HJ and the second risk value YS into the formula for calculating the environmental safety characteristic index, the environmental safety characteristic index HA is obtained: ;in, , These are the weighting coefficients.

7. The method for full lifecycle data security management of a blockchain development platform according to claim 1, characterized in that, Based on storage security characteristic index, transmission security characteristic index, and environmental security characteristic index, a security warning signal is generated for the file where the data is located. Includes the following processes: Load the storage security feature index threshold, transmission security feature index threshold, and environmental security feature index threshold. Determine whether the storage security feature index exceeds the storage security feature index threshold. If it does, determine that the file containing the data has a storage risk and generate a warning signal. If not, determine that the file containing the data does not have a storage risk and do not generate a warning signal. Determine whether the transmission security feature index exceeds the transmission security feature index threshold. If it does, determine that the file containing the data has a transmission risk and generate a warning signal. If not, determine that the file containing the data does not have a transmission risk and do not generate a warning signal. If the environmental safety characteristic index exceeds the environmental safety characteristic index threshold, the file containing the data is deemed to have an environmental safety risk, and an early warning signal is generated. If not, the file containing the data is deemed not to have an environmental safety risk, and no early warning signal is generated.

Images