A blockchain consensus transmission method for shield construction data security

Abstract

The application discloses a kind of block chain consensus transmission methods for shield construction data security, belong to the technical field of tunnel engineering data security and block chain.The application classifies and identifies shield construction data and generates dimension identification label by defining identification dimension: data source, data type, driving ring number and storage mode, and then realizes the safe transmission of data using double-layer consensus mechanism.After collecting shield machine construction data, structured data stream is obtained through edge computing node cleaning and feature extraction, identification label is determined according to the identification dimension, and hierarchical encryption is then performed, an improved SBNCM double-layer consensus mechanism is used, and the network is dynamically scheduled by SDN controller to ensure transmission.This method can classify and manage according to the characteristics of shield construction data, improve data security and transmission efficiency, and is suitable for the safe transmission of shield construction data in tunnel engineering.

Description

Technical Field

[0001] This invention belongs to the technical field of tunnel engineering data security and blockchain, and specifically relates to a blockchain consensus transmission method for shield tunneling construction data security. Background Technology

[0002] During tunnel boring machine (TBM) construction, various sensors generate a large amount of construction data in real time, including geological data and equipment operation data. Existing blockchain systems face the following problems when processing TBM construction data: a lack of a secure classification mechanism for TBM construction data, making it difficult to implement differentiated security management based on data source and type; traditional consensus algorithms are inefficient in underground construction environments and cannot meet the real-time transmission requirements of TBM construction data; and the storage and transmission methods of construction data do not take into account the characteristics of TBM construction, resulting in insufficient data security and traceability.

[0003] A Chinese patent application with publication number CN111539005A proposes a blockchain data identification method for data security strategies. It classifies blockchain data by data source and type, but it is not optimized for the special characteristics of shield tunneling construction scenarios (such as tunneling ring number, underground signal environment, etc.), making it difficult to directly apply to the secure transmission management of shield tunneling construction data. Summary of the Invention

[0004] To address the aforementioned technical issues, this invention provides a blockchain consensus transmission method for secure shield tunneling construction data. By defining identification dimensions adapted to shield tunneling scenarios, it enables the classified management and secure transmission of construction data, thereby improving data security and transmission efficiency.

[0005] This invention adopts the following technical solution: a blockchain consensus transmission method for secure shield tunneling construction data, comprising the following steps:

[0006] Collect shield tunneling construction data, perform data cleaning and feature extraction through edge computing nodes, and output a timestamp-aligned structured data stream;

[0007] Based on the data security strategy, the identification dimensions of the shield tunneling construction data are determined. The structured data stream is read using the identification dimensions to obtain the identification results and generate unique dimension identification labels.

[0008] A dynamic encryption strategy is created to identify confidential data and ordinary data based on the dimension identification tags and perform hierarchical encryption; the confidential data forcibly triggers the PBFT consensus process, while the ordinary data enters the fast consensus phase.

[0009] The improved SBNCM two-layer consensus mechanism is used for transmission. When the network is stable, it enters the fast consensus phase, and when the network is unstable, it switches to the PBFT consensus process.

[0010] A three-mode redundancy network architecture is deployed inside the tunnel to form an anti-interference dynamic network; an SDN intelligent switching mechanism is established to dynamically schedule 5G, Beidou and microwave networks to achieve link switching.

[0011] In a further embodiment, the tunnel boring machine (TBM) construction data includes at least: sensor data, tunneling parameters, and geological data;

[0012] The process of acquiring the structured data stream is as follows: the processed shield tunneling construction data is unified and correlated in terms of time, distance, and attributes; and the locations of different shield tunneling machines are uniformly coded.

[0013] In a further embodiment, the identification dimensions include: data source, data type, tunneling ring number, and storage method;

[0014] The data source is used to identify the data generating entity, the data type is used to distinguish between engineering status parameters and operation behavior records, the tunneling ring number is used to bind the segment assembly mileage station number, and the storage method is used to clarify the data storage architecture hierarchy.

[0015] In a further embodiment, the process for determining the dimension identification label is as follows:

[0016] The structured data stream is dimension-mapped according to the identification dimensions, and a structured description is generated according to "data source-data type-ring number-storage method";

[0017] Create unique codes for each data source, data type, and storage method, and update them to the structured description to generate dimension identification labels "source code-type code-ring number-storage code".

[0018] In a further embodiment, the creation process of the dynamic encryption strategy is as follows:

[0019] Upgrade encryption conditions are preset. If the dimension identification tag meets the upgrade encryption conditions, it is defined as confidential data. The confidential data is generated into a ciphertext package using a double encryption mechanism. If the dimension identification tag does not meet the upgrade encryption conditions, it is defined as ordinary data. The ordinary data is encrypted and then plaintext is appended.

[0020] In a further embodiment, the improved SBNCM two-layer consensus mechanism includes: a fast consensus phase and a PBFT consensus process; when the network is stable, it enters the fast consensus phase, and when the network is unstable, it switches to the PBFT consensus process.

[0021] In a further embodiment, the consensus process of the rapid consensus phase is as follows:

[0022] Taking the server in the ground master control room as the main node, packing the encrypted data and the dimension identification label into a data unit and broadcasting it to the network;

[0023] After each sub-node receives the data unit, it performs multi-level verification, and sends a structured response message after the verification passes. The structure of the structured response message is expressed as: <received, [ring number], [data hash], [device ID]>;

[0024] After the main node collects 3f + 1 structured response messages within the specified time, it broadcasts a consensus confirmation instruction. Among them, f is the maximum number of fault-tolerant nodes, and the consensus confirmation instruction is expressed as: <agree, [block height], [timestamp]>; The data is written into the blockchain;

[0025] If the main node does not collect 3f + 1 structured response messages within the specified time, it automatically switches to the PBFT consensus process.

[0026] In a further embodiment, the PBFT consensus process includes the following processes:

[0027] The main node broadcasts a pre-prepare message: <pre-prepare, [data unit], [V_Ring]>, where V_Ring is the view number;

[0028] After each sub-node performs multi-level verification on the data, it mutually sends prepare messages: <prepare, [data hash], V_Ring, [node ID]>;

[0029] After each sub-node receives 2f + 1 prepare messages, it broadcasts a commit message with a ring number signature: <commit, SM2([ring number] + [timestamp]), V_Ring>;

[0030] After each sub-node collects 2f + 1 commit messages, it performs data disk writing and feeds back <reply, [block hash]> to complete the consensus, where f is the maximum number of fault-tolerant nodes.

[0031] In a further embodiment, the establishment process of the SDN intelligent switching mechanism is as follows:

[0032] Pre-set network monitoring, and the network monitoring at least includes: packet loss rate index, end-to-end delay duration index, and signal-to-noise ratio index;

[0033] When any one of the indicators exceeds the corresponding threshold for 500 ms continuously, perform microwave link switching; when switching, automatically select the optimal relay node based on Beidou positioning to ensure that the transmission path is parallel to the shield tunneling axis.

[0034] In a further embodiment, the upgrade encryption conditions are at least one of the following:

[0035] Condition 1: The data source is a subsystem and is a control command;

[0036] Condition 2: The ring number is located in a geological risk zone;

[0037] Condition 3: The data type is geological early warning or attitude deviation.

[0038] The beneficial effects of this invention are as follows: This invention provides hierarchical management of data security by using multi-dimensional identification tags to achieve classified and hierarchical management of shield tunneling construction data, thereby improving the efficiency of data security control; This invention enhances real-time performance by using a two-layer consensus mechanism to achieve rapid consensus in shield tunneling construction scenarios, shortening data transmission latency and meeting real-time requirements; This invention strengthens anti-interference capabilities by optimizing storage and transmission methods based on the characteristics of shield tunneling construction, thereby improving the stability and security of data transmission in underground environments. Attached Figure Description

[0039] Figure 1 This is a flowchart of a blockchain consensus transmission method for ensuring data security in tunnel boring machine (TBM) construction.

[0040] Figure 2 This is a flowchart of the identification process for dimension recognition labels.

[0041] Figure 3 This is a flowchart of the dynamic encryption strategy.

[0042] Figure 4 This is the state transition diagram of the SBNCM two-layer consensus mechanism.

[0043] Figure 5 This is a diagram of a multimodal network switching architecture. Detailed Implementation

[0044] The present invention will be further described below with reference to the accompanying drawings and embodiments.

[0045] Example 1

[0046] like Figure 1 As shown, a blockchain consensus transmission method for secure shield tunneling construction data includes the following steps:

[0047] Collect shield tunneling construction data, perform data cleaning and feature extraction through edge computing nodes, and output a timestamp-aligned structured data stream;

[0048] Based on the data security strategy, the identification dimensions of the shield tunneling construction data are determined. The structured data stream is read using the identification dimensions to obtain the identification results and generate unique dimension identification labels.

[0049] A dynamic encryption strategy is created to identify confidential data and ordinary data based on the dimension identification tags and perform hierarchical encryption; the confidential data forcibly triggers the PBFT consensus process, while the ordinary data enters the fast consensus phase.

[0050] The improved SBNCM two-layer consensus mechanism is used for transmission. When the network is stable, it enters the fast consensus phase, and when the network is unstable, it switches to the PBFT consensus process.

[0051] A three-mode redundancy network architecture is deployed in the tunnel to form an anti-interference dynamic network; an SDN intelligent switching mechanism is established to dynamically schedule 5G, Beidou and microwave networks to achieve link switching. In this embodiment, the link can be switched within 500ms when the packet loss rate is ≥30%.

[0052] In a further embodiment, the tunnel boring machine (TBM) construction data includes at least: sensor data, construction and tunneling parameters, and geological data. The acquisition process of the structured data stream is as follows: the processed TBM construction data is unified and correlated in terms of time, distance, and attributes, such as data cleaning, transformation, and fusion; and the locations of different TBM models are uniformly coded.

[0053] In this embodiment, the edge computing nodes process the tunnel boring machine (TBM) construction data based on preset rules. The criteria eliminate outliers caused by sensor malfunctions and complete the missing data using linear interpolation. For geological data, the periodic variation characteristics of rock layer density can be obtained through Fourier transform, and the final output is a structured data stream with precise timestamps (accuracy down to the millisecond level).

[0054] When generating tunnel boring machine (TBM) construction data, the identification dimensions of the data are determined based on a pre-configured data security policy. These identification dimensions include: data source, data type, tunneling ring number, and storage method.

[0055] Furthermore, the data source is used to identify the data generating entity. In this embodiment, the data generating entity includes: the tunnel boring machine subsystem (tunneling monitoring system, slurry circulation system, guidance system, grouting system, etc.) and human operation roles (operator, site engineer, etc.).

[0056] The data type is used to distinguish between engineering status parameters and operational behavior records. Engineering status parameters include real-time operating indicators such as cutterhead torque, feed speed, and excavation chamber pressure; operational behavior records include logs of human actions such as parameter modifications, emergency stop commands, and maintenance work orders.

[0057] The tunneling ring number is used to bind the mileage station number of the segment assembly. The geological risk level (water-rich sand layer, fault fracture zone) and environmental sensitivity (underpass of buildings, cultural relic protection area) of the ring number are associated through the GIS system.

[0058] The storage method is used to define the data storage architecture hierarchy. In this embodiment, the data storage architecture hierarchy includes local cache (built-in storage of the tunnel boring machine PLC), edge server (deployed at the tunnel shaft), cloud platform (ground monitoring center) and blockchain evidence storage node.

[0059] In a further embodiment, the process for determining the dimension identification label is as follows:

[0060] The structured data stream is dimension-mapped according to the identification dimensions, and a structured description is generated according to "data source-data type-ring number-storage method";

[0061] Create unique codes for each data source, data type, and storage method, and update them to the structured description to generate dimension identification labels "source code-type code-ring number-storage code".

[0062] Furthermore, by combining the following dimensions to map and read the structured data stream, the system automatically performs the following operations:

[0063] Data source identification is mapped to preset codes. This can be further understood as assigning a unique source code to each tunnel boring machine (TBM) subsystem, such as "JM" for the tunneling monitoring system, "NSH" for the slurry circulation system, "DX" for the guidance system, and "ZJ" for the grouting system. In manual operation roles, the operator code is "OP," and the field engineer code is "ENG." When the guidance system generates engineering status and attitude data, the source dimension is identified as "DX," and the source identifier for manual modification of propulsion parameters is "OP." This source code allows for precise traceability of the data generating entity.

[0064] Data types are categorized as follows: real-time operating parameters such as cutterhead torque, feed speed, and excavation bin pressure are classified as engineering status parameters, coded "EP"; logs of human actions such as parameter modifications, emergency stop commands, and maintenance work orders are classified as operation behavior records, coded "OB". Type labels are added according to data type during data collection, and labels are also defined for each parameter to facilitate the implementation of differentiated safety strategies based on data type.

[0065] The tunneling ring number is linked to a mapping relationship between the tunneling ring number and geological data through a GIS system. For example, ring K3+520 corresponds to a water-rich sand layer (permeability coefficient). The risk level of ring K3+600 is marked as "high"; the risk level of ring K3+600 is "low" as it traverses a layer of ordinary clay. When a ring number corresponds to a building (such as a historical building) that it passes under, an environmental sensitivity code "ES-H" is added to the identification label to provide a basis for subsequent encryption strategies and transmission priorities.

[0066] The storage method is determined as follows: the local cache (built-in storage in the tunnel boring machine's PLC) is coded as "LC", the edge server (deployed at the tunnel shaft entrance) is coded as "ES", the cloud platform (ground monitoring center) is coded as "CP", and the blockchain evidence storage node is coded as "BC". Real-time data of the cutterhead torque is first stored in the local cache (LC), and synchronized to the edge server (ES) every 5 minutes. At the same time, dual-end storage is completed in parallel on the cloud platform (CP) and the blockchain evidence storage node (BC). After geological data is generated, it is simultaneously stored on the cloud platform (CP) and the blockchain evidence storage node (BC) to ensure secure storage of multiple copies of the data.

[0067] Taking the K3+520 ring engineering state attitude data generated by the guidance system and stored on the edge server as an example, the structured description generated according to the format of "source code-type code-ring number-storage method" is "guidance system-engineering state attitude data-K3+520 ring-edge storage". The corresponding dimension identification label is "DX-EPORIENT-K3+520-ES", where the source code "DX" corresponds to the guidance system and the type code "EPORIENT" represents the engineering state attitude data.

[0068] The shield tunneling construction data is tagged based on the identification dimension, generating a unique dimension identification label. The identification label "DX-EPORIENT-K3+520-ES" is encrypted using the SHA-256 algorithm, generating a 64-bit hash value, which serves as an immutable identifier throughout the data's lifecycle. The hash value is shown below:

[0069] "7D4A1C2B3D4E5F6A7B8C9D0E1F2A3B4C5D6E7F8A9B0C1D2E3F4A5B6C7D8E9F".

[0070] Furthermore, the creation process of the dynamic encryption strategy in this embodiment is as follows:

[0071] Upgrade encryption conditions are preset. If a unique dimension identification tag meets the upgrade encryption conditions, it is defined as confidential data. The confidential data is generated into a ciphertext package using a double encryption mechanism. If the unique dimension identification tag does not meet the upgrade encryption conditions, it is defined as ordinary data. The ordinary data is encrypted and then plaintext is appended.

[0072] The dual encryption mechanism is as follows: the confidential data is first encrypted using the AES-256 algorithm (key length 256 bits, working mode CTR) to generate ciphertext, and then the dimension identification tag is encrypted using the RSA-4096 public key to generate a ciphertext package.

[0073] Correspondingly, the plaintext appended to the encrypted ordinary data is further as follows: Ordinary data is encrypted using AES-128 (key length 128 bits, working mode GCM), and a plaintext four-dimensional label is appended to the data header for quick classification.

[0074] Furthermore, the upgrade encryption condition is at least one of the following:

[0075] Condition 1: The data source is a subsystem and is a control command;

[0076] Condition 2: The ring number is located in a geologically risky area, such as the permeability coefficient. Condition 3: The data type is geological early warning or attitude deviation.

[0077] For example, when the data source is the tunneling monitoring system (JM) and the type is a control command (such as a propulsion speed adjustment command), or the ring number is located in the K3+520 water-rich sand layer (permeability coefficient) If the data type is geological warning (such as surface subsidence exceeding the threshold), it will be automatically identified as confidential data.

[0078] For confidential data, such as geological early warning data for the K3+520 ring, a dual encryption mechanism is employed. First, the data body is encrypted using the AES-256 algorithm (CTR working mode, key "2A4C6E8G0I2K4M6O8Q0S2U4W6Y8Z0B") to generate ciphertext. Then, the dimension identification tag is encrypted using the RSA-4096 public key (public key parameters n=2048 bits, e=65537), ultimately generating a ciphertext packet {AES256 (geological early warning data), RSA4096 (Tag)}.

[0079] Environmental monitoring data for non-risk ring numbers (such as environmental monitoring data for ring K3+700) are encrypted using AES-128 (GCM working mode, key "1A2B3C4D5E6F7G8H"), and plaintext four-dimensional tags are appended to the data header for rapid classification.

[0080] After encryption is complete, confidential data forcibly triggers the PBFT consensus process, while ordinary data enters the fast consensus phase.

[0081] Accordingly, the improved SBNCM two-layer consensus mechanism described in this embodiment includes a fast consensus phase and a PBFT consensus process. Therefore, the fast consensus phase is entered when the network is stable during transmission, and the PBFT consensus process is switched when the network is unstable.

[0082] Among them, the consensus process in the fast consensus stage is as follows: Taking the ground master control room server as the main node, the encrypted data and dimension identification tags are packaged into data units and broadcast to each sub-node. The ground master control room server in this embodiment is configured with a dual-way Intel Xeon Gold processor, 128GB of memory, and a 10Gbps network interface.

[0083] After receiving the data unit, each sub-node performs multi-level verification and sends a structured response message after the verification passes. The structure of the structured response message is represented as: <received, [ring number], [data hash], [device ID]>. Received indicates acceptance. Each sub-node in the embodiment can be an engineer terminal, an edge computing station, etc.

[0084] After the main node collects 3f + 1 structured response messages within the specified time, it broadcasts a consensus confirmation instruction. Among them, f is the maximum number of fault-tolerant nodes. The consensus confirmation instruction is represented as: <agree, [block height], [timestamp]>, where agree is for confirmation; and the data is written into the blockchain.

[0085] In another embodiment, if the main node does not collect 3f + 1 structured response messages within the specified time, it automatically switches to the PBFT consensus process, such as when the 5G signal is weak in the section of the tunnel crossing the Yangtze River.

[0086] Furthermore, the multi-level verification described in this embodiment includes the following three levels: ① Verifying data integrity through SHA-256; ② Matching the risk level of the ring number; ③ Authorization status of the source device, such as environmental monitoring sensors.

[0087] Taking the environmental monitoring data of the K3 + 700 ring as an example, after the verification passes, a structured response message <received, [K3 + 700], [7D4A1...C03], [SD001]> is sent, where K3 + 700 is the ring number, 7D4A1...C03 is the data hash, and SD001 is the device ID.

[0088] After the main node collects 3f + 1 structured response messages (assuming f = 1, that is, at least 4 responses) within 500ms, it broadcasts a consensus confirmation instruction <agree,

[1005] , [2025-05-21 10:35:20]>, and the data is written into the blockchain.

[0089] Correspondingly, the PBFT consensus process includes the following processes:

[0090] The primary node broadcasts a pre-prepare message: <pre-prepare, [data unit], [V_Ring]>; e.g., <pre-prepare, [confidential data unit], [V_K3+520]>, where the view number V_K3+520 is bound to the ring number K3+520, and pre-prepare is for verification; further, V represents the view, and V_Ring is the view number.

[0091] After multi-level verification of the data by each sub-node, they mutually send prepare messages: <prepare, [data hash], V_Ring, [node ID]>; e.g., <prepare, [data hash], V_K3+520, [node ID001]>. The verification method can refer to the multi-level verification in the above embodiments.

[0092] After each sub-node receives 2f + 1 prepare messages (at least 3 messages), it broadcasts a commit message with a ring number signature: <commit, SM2([ring number] + [timestamp]), V_Ring>. For example, <commit, SM2([K3+520] + [2025-06-26 10:40:15]), V_K3+520>, where commit is for formal submission, SM2 is a domestic cryptographic algorithm to sign the ring number and timestamp, and 2025-06-26 10:40:15 is the timestamp.

[0093] After each sub-node collects 2f + 1 commit messages, it executes data writing to the blockchain storage node and feeds back <reply, [block hash]> to complete consensus, e.g., <reply, [A1B2C3D4]>, where reply represents feedback, f is the maximum number of fault-tolerant nodes, and A1B2C3D4 is the hash value.

[0094] Further, a triple modular redundant network architecture is deployed inside the tunnel, and the implementation method for forming an anti-interference dynamic networking is as follows: high-speed data transmission is achieved based on a 5G private network (3.5 GHz frequency band, base station spacing 200 m); the Beidou-3 system (B1C frequency point) is integrated to provide a positioning accuracy of ±0.5 m inside the tunnel, and the device position is mapped through the ring number coordinates; a microwave relay link (60 GHz millimeter wave, bandwidth ≥ 50 Mbps) is pre-laid, and relay nodes are deployed every 300 m along the tunnel axis.

[0095] The establishment process of the SDN intelligent switching mechanism is as follows: pre-set for network monitoring, and the network monitoring at least includes: packet loss rate index, end-to-end delay index, and signal-to-noise ratio index.

[0096] If any indicator exceeds the corresponding threshold for 500ms, a microwave link switch will be executed. During the switch, the optimal relay node will be automatically selected based on BeiDou positioning to ensure that the transmission path is parallel to the tunnel boring machine's propulsion axis.

[0097] Furthermore, specific data values ​​are assigned to the thresholds of monitoring indicators. For example, a microwave link switch is required if the packet loss rate is ≥30%, the end-to-end latency is ≥150ms, or the signal-to-noise ratio is ≤-85dBm. When executing the link switch, a pre-stored 3D point cloud model of the tunnel (BIM format) is invoked, the optimal microwave path is calculated based on the BeiDou positioning coordinates, the 5G connection is disconnected, and a microwave channel is established. The switching latency is ≤300ms, and transmission automatically resumes after data migration, triggering the uploading of network status logs for evidence storage. For instance, when the tunnel boring machine crosses the Yangtze River, the water causes a sharp drop in the 5G signal-to-noise ratio. The system detects that the packet loss rate of the relay node exceeds 30% using an SDN algorithm and automatically switches to the pre-stored microwave link to reduce transmission latency and ensure real-time updates of the tunnel boring machine's parameters.

[0098] Establish an SDN intelligent switching mechanism, with the SDN controller monitoring the 5G channel packet loss rate (threshold ≥ 30%), end-to-end latency (threshold ≥ 150ms), and signal-to-noise ratio (SNR threshold ≤ -85dBm) in real time.

[0099] When the tunnel boring machine (TBM) crosses the Yangtze River, the attenuation of the 5G signal by the water causes the signal-to-noise ratio (SNR) to plummet to -90dBm. After 500ms, the SDN controller detects that the packet loss rate has risen to 35%, triggering a link switch. The controller calls the pre-stored 3D point cloud model of the tunnel, obtains the current coordinates of the TBM (K3+520 ring) based on BeiDou positioning, and calculates the optimal microwave path: selecting the two relay nodes (Node A and Node B) closest to the current location, with the path being TBM → Node A → Node B → Ground Monitoring Center, ensuring that the transmission path is parallel to the TBM's propulsion axis. The controller disconnects the 5G connection, sends configuration commands to the microwave relay nodes, establishes a microwave channel, with a switching delay of 280ms. After the data stream is migrated, transmission automatically resumes, and the network switching log (time, reason, new path) is uploaded to the blockchain for evidence storage, for example, "2025-04-26 11:00:15, 5G SNR is below the threshold, switch to microwave link, path: SD001→MR003→MR005→CP001".

[0100] The above description is only a preferred embodiment of the present invention and is not intended to limit the present invention. Any modifications, equivalent substitutions, improvements, etc., made within the spirit and principles of the present invention should be included within the protection scope of the present invention.

Claims

1. A blockchain consensus transmission method for secure data transmission in tunnel boring machine (TBM) construction, characterized in that, It includes the following steps: Collect shield construction data, perform data cleaning and feature extraction through edge computing nodes, and output a structured data stream with timestamp alignment; Determine the identification dimensions of the shield construction data based on the data security policy, use the identification dimensions to read the structured data stream to obtain the identification result, and generate a unique dimension identification label; Create a dynamic encryption policy, identify confidential data and ordinary data according to the dimension identification label and perform hierarchical encryption; the confidential data forcibly triggers the PBFT consensus process, and the ordinary data enters the fast consensus stage; Adopt an improved SBNCM double-layer consensus mechanism for transmission, deploy a triple modular redundant network architecture inside the tunnel to form an anti-interference dynamic networking; establish an SDN intelligent switching mechanism to dynamically schedule 5G, Beidou, and microwave networks to achieve link switching; Among them, the creation process of the dynamic encryption policy is as follows: Preset the upgrade encryption condition. If the dimension identification label meets the upgrade encryption condition, it is defined as confidential data, and a double encryption mechanism is used for the confidential data to generate a ciphertext package; If the dimension identification label does not meet the upgrade encryption condition, it is defined as ordinary data, and the plaintext is appended after encrypting the ordinary data; The improved SBNCM double-layer consensus mechanism includes: The fast consensus stage and the PBFT consensus process; among them, when the network is stable, it enters the fast consensus stage, and when the network is unstable, it switches to the PBFT consensus process.

2. The blockchain consensus transmission method for shield tunneling construction data security according to claim 1, characterized in that, The shield construction data at least includes: sensor data, construction tunneling parameters, and geological data; The acquisition process of the structured data stream is as follows: unify and associate the processed shield construction data in terms of time, distance, and attributes; uniformly encode the points of different types of shield machines.

3. The blockchain consensus transmission method for shield tunneling construction data security according to claim 1, characterized in that, The identification dimensions include: data source, data type, tunneling ring number, and storage method; Among them, the data source is used to identify the data generation entity, the data type is used to distinguish engineering status parameters and operation behavior records, the tunneling ring number is used to bind the mileage stake number of segment assembly, and the storage method is used to clarify the data storage architecture level.

4. A blockchain consensus transmission method for secure shield tunneling construction data according to claim 1, characterized in that, The determination process of the dimension identification label is as follows: Perform dimension mapping on the structured data stream according to the identification dimensions, and generate a structured description according to "data source - data type - ring number - storage method"; Create unique codes for the data source, data type, and storage method respectively and update them to the structured description to generate the dimension identification label "source code - type code - ring number - storage code".

5. A blockchain consensus transmission method for secure shield tunneling construction data according to claim 1, characterized in that, The consensus process of the fast consensus stage is as follows: ​ ​ After the master node collects 3f + 1 structured response messages within the specified time, it broadcasts a consensus confirmation instruction, where f is the maximum number of fault-tolerant nodes, and the consensus confirmation instruction is expressed as: <agree, [block height], [timestamp]>; the data is written to the blockchain; If the master node does not collect 3f + 1 structured response messages within the specified time, it automatically switches to the PBFT consensus process.

6. A blockchain consensus transmission method for secure shield tunneling construction data according to claim 1, characterized in that, The PBFT consensus process includes the following processes: The master node broadcasts a pre-prepare message: <pre-prepare, [data unit], [V_Ring]>, where V_Ring is the view number; Each sub-node mutually sends prepare messages after multi-level verification of the data: <prepare, [data hash], [V_Ring], [node ID]>; After each sub-node receives 2f + 1 prepare messages, it broadcasts a commit message with a ring number signature: <commit, SM2([ring number] + [timestamp]), [V_Ring]>; After each sub-node collects 2f + 1 commit messages, it performs data disk writing and feeds back <reply, [block hash]> to complete the consensus, where f is the maximum number of fault-tolerant nodes.

7. A blockchain consensus transmission method for secure shield tunneling construction data according to claim 1, characterized in that, The establishment process of the SDN intelligent switching mechanism is as follows: Pre-set network monitoring, which at least includes: packet loss rate index, end-to-end delay duration index, and signal-to-noise ratio index; When any one of the indexes exceeds the corresponding threshold continuously for 500 ms, a microwave link switch is executed; when switching, the optimal relay node is automatically selected based on Beidou positioning, and the transmission path is parallel to the shield tunneling axis.

8. A blockchain consensus transmission method for secure shield tunneling construction data according to claim 1, characterized in that, The upgrade encryption conditions are at least one of the following: Condition 1: The data source is a subsystem and it is a control instruction; Condition 2: The ring number is located in a geological risk area; Condition 3: The data type is geological warning or attitude deviation.

Images