A biosafety physical resource multidimensional data management system

Abstract

The application discloses a kind of biological safety physical resources multidimensional data management system, it is related to biological safety physical resources management technical field, to solve the existing management system there is data synchronization fault surface-authorization check failure-tracing risk transmission interlocking technical problem, including: blockchain architecture module, using three-level dynamic chain architecture, store resource identification, operation log and real-time state data, configure the chain right migration mechanism of security level trigger, and synchronously build inter-chain data consistency check mechanism, avoid data tampering or loss in the process of chain right migration;Multi-modal authorization module, build multidimensional biological key system, cross-agency access request is verified by smart contract, trigger security control and early warning if verification fails, and support on-chain emergency reset and temporary hosting of permissions when key is abnormal;On-chain and off-chain tracing module, link on-chain evidence and off-chain data.The application has the advantage of providing reliable data and permission basis for emergency dispatch.

Description

TECHNICAL FIELD

[0001] The present application relates to the technical field of biosafety physical resource management, and more particularly to a multi-dimensional data management system for biosafety physical resources. BACKGROUND

[0002] In the scenario of collaborative disposal of cross-regional public health emergencies (such as unknown viral pneumonia and emerging infectious disease outbreaks) by provincial CDCs, city CDCs and third-party testing laboratories, the cross-institutional transfer and management of biosafety physical resources (including virus isolates, throat swab positive samples, inactivated samples to be tested, etc.) is a core link of emergency disposal. Such resources need to meet the requirements of high safety and high traceability, and the transfer process needs to record the unique identification of resources, the qualifications of operators, the storage environment parameters (temperature, humidity) and the cross-node transfer track in real time, and needs to quickly respond to cross-institutional access requests and emergency dispatching requirements to support key work such as virus gene sequencing, strain comparison and vaccine development.

[0003] The current biosafety resource management system in the industry mostly adopts the traditional architecture of "single-chain storage + static authorization", which is difficult to adapt to the needs of cross-institutional and high-dynamic emergency scenarios, and has significant technical bottlenecks: when resources are transferred from city laboratories (operation nodes) to provincial CDCs (regional domain chains) and national supervision platforms (core chains), there is a lack of hierarchical data synchronization and verification mechanism, and the hash value deviation often occurs due to the asynchronous data update of node chains and domain chains, resulting in "data synchronization fault". At the same time, the authorization mechanism only relies on a single password or fixed qualification certificate, and cannot dynamically verify the historical violation records of the operators and the physical characteristics of the resource carriers, which is prone to "authorization failure" (such as expired qualification of operators still accessing high-level samples). In addition, the on-chain operation log and off-chain sensing data are not associated and verified, and once there is suspicious operation, the upstream and downstream transfer nodes cannot be traced, leading to "risk transmission out of control". The above "data synchronization fault - authorization verification failure - traceability risk transmission" chain problem directly causes the lag of resource positioning during emergency dispatching, the inability to block operation risks, delays the cross-institutional deployment and detection progress of key samples of the epidemic, and even may cause biosafety accidents due to data tampering or loss. In view of this, we propose a multi-dimensional data management system for biosafety physical resources. SUMMARY

[0004] The purpose of the present application is to provide a multi-dimensional data management system for biosafety physical resources to solve the technical problems of data synchronization fault - authorization verification failure - traceability risk transmission in the existing management system.

[0005] To solve the above technical problems, the present application provides the following technical scheme: a multi-dimensional data management system for biosafety physical resources, comprising:

[0006] The blockchain architecture module adopts a three-level dynamic chain architecture, stores resource identifiers, operation logs and real-time state data, configures a chain right migration mechanism triggered by security level, and synchronously constructs an inter-chain data consistency verification mechanism to avoid data tampering or loss during chain right migration;

[0007] The multi-modal authorization module constructs a multi-dimensional biological key system, verifies cross-agency access requests through smart contracts, triggers security control and early warning if verification fails, and supports on-chain emergency reset and temporary hosting of permissions in case of key abnormalities;

[0008] The on-chain and off-chain traceability module associates on-chain records and off-chain data, generates a full-life-cycle traceability report and marks suspicious operations, and can trace all resource flow paths associated with suspicious operations to block risk transmission;

[0009] The emergency dispatch module constructs a cross-agency emergency resource library on the core chain, automatically selects nodes, generates dispatch instructions and pushes task notifications during public health emergencies, and configures a resource conflict coordination mechanism.

[0010] Preferably, the three-level dynamic chain architecture of the blockchain architecture module is "core chain - domain chain - node chain";

[0011] The core chain stores resource unique identifiers and cross-domain flow key node information, which is maintained by the supervisory subject as a super node. The super node is responsible for the final audit of core chain data and the issuance of synchronization instructions;

[0012] The domain chain is divided according to administrative regions or types of institutions, and an improved practical Byzantine fault tolerance algorithm is configured to realize intra-domain data synchronization. During the synchronization process, the data needs to be written into the domain chain after being confirmed by a majority of nodes in the domain, and the resource operation logs in the corresponding range are stored;

[0013] The node chain is deployed on each resource storage or operation node, and stores real-time state data of the resources. When the node chain data is updated, the operator's identity information and operation timestamp need to be recorded first;

[0014] The chain right migration mechanism is as follows: when the security level of the resource changes, the node chain data is automatically synchronized to the domain chain, and the core information of the domain chain is synchronized to the core chain. Before synchronization, the original node chain operation permission is frozen, and after synchronization is completed, a chain right migration credential is generated and written into the full chain. The credential contains the chain layer information before and after migration and the data verification result;

[0015] The inter-chain data consistency verification mechanism is as follows: during the chain right migration process, the core chain, the domain chain and the node chain respectively generate independent hash values for the synchronized data, and confirm the data consistency through cross comparison. If there is a difference, a data rollback operation is triggered immediately, and alarm information containing the difference data location and comparison result is pushed to the supervisory node;

[0016] To quantify the evaluation data consistency difference degree, introduce the inter-chain data consistency deviation value calculation, the specific formula is as follows:

[0017] ;

[0018] Wherein, The inter-chain data consistency deviation value, The hash value generated by the core chain for the synchronization data, The hash value generated by the domain chain for the synchronization data, The hash value generated by the node chain for the synchronization data, The absolute value symbol is used to eliminate the positive and negative effects of the hash value difference, and only the difference size is retained.

[0019] Preferably, the multi-dimensional biological key system of the multi-modal authorization module comprises:

[0020] The inherent key generated by the symmetric encryption algorithm based on the characteristics of the resource itself, the inherent key is bound with the unique identifier of the resource and cannot be tampered with;

[0021] The dynamic key generated by fusing the iris or fingerprint features of the operator with the qualification certificate number, the biological features and qualification information need to be desensitized during the fusion process;

[0022] The binding key generated based on the physical indentation on the surface of the resource storage carrier or the unique code of the RFID chip, the binding key corresponds to the carrier one by one and updates with the carrier state;

[0023] The dynamic key is automatically updated at a preset period, and the update frequency is adjusted based on the historical operation behavior risk assessment result of the operator, and the operation compliance times and abnormal operation record information are referred to during the assessment;

[0024] The key abnormal emergency reset is: when it is detected that the key is tampered with or the operator cannot provide the key due to special reasons, the supervisory node initiates an on-chain vote, the voting participating nodes are preset authoritative nodes within the domain, and after the vote is passed, a temporary key is generated and entrusted to the designated standby personnel, and at the same time, all operation permissions associated with the original key are frozen, and the temporary key needs to be additionally recorded when used. Operation reason;

[0025] The verification process is: synchronously verify the validity of the inherent key, the dynamic key and the binding key, and verify whether the biological safety protection level qualification of the agency is matched with the resource safety level; If any verification link fails, immediately trigger the on-chain data freezing, the physical locking of the storage carrier, and push the warning information containing the verification failure link and the failure reason to the supervisory node;

[0026] To accurately calculate the historical operation behavior risk assessment result of the operator, so as to determine the dynamic key update frequency, introduce the operation risk value calculation, the specific formula is as follows:

[0027] ;

[0028] wherein, is the operator operation risk value, is the number of historical operation compliance times of the operator, is the number of historical operation abnormal record times of the operator, is the total number of historical operation times of the operator.

[0029] Preferably, the association process of the on-chain and off-chain traceability module is:

[0030] The sensing and communication module integrated through the resource storage carrier collects environmental data and resource state data in real time, and after collection, the data is first subjected to integrity check, and after passing the check, a state hash value is generated and uploaded to the node chain at a preset interval;

[0031] The special terminal configured with the biometric identification module records the operation process information, and the identity verification of the operator needs to be completed first during recording, and after passing the verification, the operation information is subjected to block chain storage, and after processing, the key information is synchronized to the domain chain;

[0032] The risk transmission blockage is: after marking the suspicious operation, automatically tracing all upstream flow nodes and downstream receiving nodes of the resources involved in the operation, pushing prompt information containing suspicious operation details and risk level to each related node, and limiting further access, detection and operation of associated resources until the risk investigation is completed and an investigation report is generated;

[0033] When generating the report, based on the resource unique identifier of the core chain, the operation log corresponding to the domain chain and the state data of the node chain are located, and the time stamp of the on-chain operation record and the collection time stamp of the off-chain sensing data are compared one by one to determine whether they are consistent, if there is a time deviation beyond the reasonable range, it is marked as a suspicious operation and the deviation duration is recorded;

[0034] In order to quantitatively determine whether the time deviation is beyond the reasonable range, a time deviation risk coefficient calculation is introduced, and the specific formula is as follows:

[0035] ;

[0036] wherein, is the time deviation risk coefficient, is the absolute deviation value of the on-chain operation record time stamp and the off-chain sensing data collection time stamp, is the operator operation risk value, is the risk adjustment coefficient.

[0037] Preferably, the cross-agency emergency resource library of the emergency dispatch module stores resource detection capability information, protective material reserve information, and personnel standby information of each node. All information needs to be audited by the node itself and verified by the domain chain twice before being uploaded and encrypted into the core chain after verification;

[0038] The resource conflict coordination mechanism is as follows: when multiple sudden public health events simultaneously apply for the resources of the same node, a priority ranking model is constructed according to the emergency degree, influence range, and resource matching degree of the events. The model calculates the priority of the events by first quantitatively evaluating each dimension of information and then comprehensively determining the priority. The resources are preferentially dispatched to high-priority events, and function-matched and geographically adjacent alternative nodes are recommended for low-priority events. The resource availability of the alternative nodes is also informed synchronously.

[0039] When screening nodes, the geographical range is limited according to the resource traceability results, and the nodes are ranked according to the principles of response speed priority and resource utilization optimization. After ranking, a dispatch instruction is generated, which includes resource allocation path, receiving node responsibility, and time requirements. The instruction is synchronized to the relevant node chain and core chain, and the task notification pushed contains the chain authorization voucher, which needs to be verified by the receiving node before the dispatch operation can be executed.

[0040] Preferably, the resource unique identifier stored in the core chain includes an encrypted resource ID and a hash root value generated based on the resource genome characteristics. The hash root value generated based on the resource genome characteristics is obtained by encrypting the fragments with species uniqueness extracted from the resource genome. During extraction, the variable fragments in the genome are excluded to ensure uniqueness.

[0041] The storage of cross-domain flow key node information by the core chain includes the validity period of node qualifications and historical compliance records, which are used as pre-check conditions for chain right migration. During verification, it is first checked whether the node qualifications are within the validity period, and then it is confirmed that there is no major violation in the historical compliance records. Only when both conditions are met can the chain right migration be started.

[0042] To quantitatively evaluate the historical compliance degree of the node as a pre-check basis for chain right migration, node compliance degree calculation is introduced, and the specific formula is as follows:

[0043] ;

[0044] wherein, is the node compliance degree, is the average value of the historical inter-chain data consistency deviation value of the node, is the preset maximum allowed deviation value, when the node qualifications are within the validity period and the preset compliance threshold is reached, the chain right migration is allowed to start.

[0045] Preferably, the resource operation log of the domain chain contains resource access time and operator qualification summary, the operator qualification summary includes the biological safety level operation qualification certificate number and validity period information of the operator, and the summary information needs to be synchronized with the qualification database of the supervision department regularly to ensure accuracy;

[0046] When the domain chain receives the node chain synchronization data, it needs to verify the device state and network security of the node chain first. After verification, the data can be received. If the verification fails, the failure item is fed back and the node chain is required to be rectified and re-synchronized.

[0047] Preferably, the symmetric encryption algorithm is SM4 encryption algorithm, which is used to ensure the encryption security of the inherent key, and a randomly generated initial vector is used in the encryption process to improve the encryption strength;

[0048] The management period of the temporary key can be preset, and a reasonable time length is determined in combination with actual business needs. After the expiration, the temporary key is automatically invalidated and triggers a new key generation process. After the new key is generated, it needs to be updated to all associated chain layers to avoid the risk of long-term management of permissions.

[0049] Preferably, the biometric identification module of the special terminal completes identity verification by collecting iris or fingerprint information of the operator. When collecting, the clarity and integrity of the biometric information need to be ensured. After verification, the operation process information can be recorded;

[0050] The special terminal automatically records abnormal behaviors during operation. When recording, the operation time, operation steps and operator information need to be associated and uploaded to the domain chain as suspicious operation judgment basis. After receiving, the domain chain needs to store the abnormal behavior information in categories for subsequent query;

[0051] In order to quantitatively evaluate the severity of operation abnormality and serve as a supplementary basis for suspicious operation judgment, operation abnormality severity calculation is introduced, and the specific formula is as follows:

[0052] ;

[0053] Among them, is the operation abnormality severity, is the time deviation risk coefficient, is the operation process violation quantitative value, , is the weight coefficient of each dimension, which is preset according to the influence of operation abnormality risk, respectively representing the importance of time deviation risk and process violation in abnormality severity evaluation, and the sum of weight coefficients is 1, ensuring the comprehensiveness of evaluation.

[0054] Preferably, the node geographic range defined by the emergency dispatching module is:

[0055] Taking the resource collection place or the flow path in the resource traceability result as a benchmark, nodes within a preset distance range are screened, and nodes without corresponding resource processing capacity in the geographical range need to be excluded during screening;

[0056] In the priority sorting model, the event emergency degree refers to the event response time limit requirement, the influence range refers to the number of people possibly affected, and the resource matching degree refers to the matching degree of the existing resources of the node and the event demand, and the priority is calculated by comprehensively calculating the evaluation results of each dimension according to a preset weight.

[0057] Compared with the prior art, the beneficial effects of the present application are:

[0058] 1. The present application can realize real-time synchronization of resource data across layers and institutions by using the three-level dynamic chain architecture of "core chain-domain chain-node chain" and the inter-chain data consistency verification mechanism, and realizes dynamic authorization verification by combining a multi-dimensional biological key system, thereby fundamentally solving the chain problems of "data synchronization fault line-authorization verification failure-traceability risk transmission", ensuring that the data is real and traceable during resource flow, and the authorization is accurate and compliant, and providing reliable data and permission basis for emergency dispatch.

[0059] 2. The present application further solves the problem of resource competition when multiple public health emergencies occur by using the cross-institutional emergency resource library and the priority sorting model, and can quantify the priority according to the event emergency degree, the influence range and the resource matching degree, and preferentially dispatch resources to high-demand scenarios, while recommending alternative nodes in the geographical vicinity to avoid resource idling or mismatch, and improve the rationality and efficiency of emergency dispatch.

[0060] 3. The present application further solves the residual problems of "permission hosting risk" and "suspected operation missed judgment" by using the emergency reset mechanism on the key chain and the operation abnormality severity evaluation model: when key tampering or the operator cannot provide the key is detected, a temporary hosting key can be generated by the authoritative nodes in the domain and the original permission is frozen; when operation abnormality occurs, the abnormal severity can be quantified by combining the time bias risk coefficient and the process violation, the suspicious behavior can be accurately marked and the risk transmission can be blocked, thereby realizing the triple protection of "data security-permission controllable-risk blocking", and strengthening the whole life cycle management and control ability of the system for high security level resources. BRIEF DESCRIPTION OF DRAWINGS

[0061] Figure 1 The figure is a schematic diagram of the system framework of the present application. DETAILED DESCRIPTION

[0062] In order to facilitate those skilled in the art to understand the technical scheme of the present application, the technical scheme of the present application will be further described in conjunction with the drawings of the specification.

[0063] Example 1, as Figure 1As shown, the present application provides a biosafety physical resource multidimensional data management system, comprising:

[0064] The blockchain architecture module adopts a three-level dynamic chain architecture, stores resource identification, operation log and real-time state data, configures a chain right migration mechanism triggered by security level, and synchronously constructs an inter-chain data consistency verification mechanism to avoid data tampering or loss during chain right migration;

[0065] The multi-modal authorization module constructs a multi-dimensional biological key system, verifies cross-agency access requests through smart contracts, triggers security control and early warning if verification fails, and supports on-chain emergency reset and temporary hosting of permissions when key abnormalities occur;

[0066] The on-chain and off-chain traceability module associates on-chain storage and off-chain data, generates a full life cycle traceability report and marks suspicious operations, and can trace all resource flow paths associated with suspicious operations to block risk transmission;

[0067] The emergency dispatch module constructs a cross-agency emergency resource library on the core chain, automatically selects nodes, generates dispatch instructions and pushes task notifications during public health emergencies, and configures a resource conflict coordination mechanism to solve the problem of resource contention during multiple event concurrency.

[0068] In an embodiment of the present application, the three-level dynamic chain architecture of the blockchain architecture module is "core chain-domain chain-node chain";

[0069] The core chain stores resource unique identification and cross-domain flow key node information, which is maintained by the supervisory subject as a super node, and the super node is responsible for the final audit of core chain data and the issuance of synchronization instructions;

[0070] The domain chain is divided according to administrative regions or types of institutions, and an improved practical Byzantine fault tolerance algorithm is configured to realize intra-domain data synchronization, which needs to be confirmed by a majority of nodes in the domain before being written into the domain chain during the synchronization process, and stores resource operation logs within the corresponding range;

[0071] The node chain is deployed on each resource storage or operation node, and stores real-time state data of the resource (including resource storage temperature fluctuation information and resource remaining amount information), and the node chain data needs to record the identity information of the operator and the operation timestamp first when updating;

[0072] The chain right migration mechanism is: when the security level of the resource changes, the node chain data is automatically synchronized to the domain chain, and the core information of the domain chain is synchronized to the core chain, the original node chain operation permission is frozen before synchronization, and the chain right migration credential is generated after synchronization is completed and written into the whole chain, the credential includes the chain layer information before and after migration and the data verification result;

[0073] The inter-chain data consistency checking mechanism is: during the chain weight migration process, the core chain, the domain chain and the node chain respectively generate independent hash values for the synchronized data, the data consistency is confirmed through pairwise cross comparison, if there is a difference, the data rollback operation is triggered immediately, and the alarm information containing the difference data position and the comparison result is pushed to the supervision node;

[0074] To quantify the evaluation of the degree of data consistency difference, the inter-chain data consistency deviation value calculation is introduced, and the specific formula is as follows:

[0075] ;

[0076] Among them, The inter-chain data consistency deviation value is used to intuitively reflect the difference degree of the synchronized data of the three chains, and is a judgment index for triggering the data rollback operation;

[0077] The hash value generated by the core chain for the synchronized data is calculated by the core chain according to the preset hash algorithm, which represents the characteristics of the synchronized data stored by the core chain;

[0078] The hash value generated by the domain chain for the synchronized data is calculated by the domain chain using the same hash algorithm as the core chain, which represents the characteristics of the synchronized data stored by the domain chain;

[0079] The hash value generated by the node chain for the synchronized data is calculated by the node chain using the same hash algorithm as the core chain and the domain chain, which represents the characteristics of the synchronized data stored by the node chain;

[0080] The absolute value symbol is used to eliminate the positive and negative effects of the hash value difference, and only the difference size is retained to ensure that the deviation value is a non-negative value;

[0081] The formula is used to quantify the evaluation of the consistency difference degree of the core chain, the domain chain and the node chain in the data synchronization process in the blockchain architecture. By calculating the absolute difference sum between the hash values of the synchronized data generated by the three chains, it is judged whether the data is tampered or lost: if the difference sum is greater than 0, it means that the hash values of at least two chains do not match, there is data difference; if the difference sum is equal to 0, it means that the hash values of the three chains are completely consistent, the data synchronization is correct;

[0082] Through the algorithm formula, the consistency of inter-chain data synchronization can be quickly and accurately detected, and the biological safety risk caused by data tampering or loss (such as detection failure caused by sample information error) can be avoided. Compared with the traditional "single-chain verification" or "pair-by-pair comparison" mode, the formula further improves the comprehensiveness and reliability of data consistency verification through cross comparison of the three chains, provides security for the chain right migration mechanism, and ensures the integrity and authenticity of the biological safety physical resource data in the cross-chain circulation process.

[0083] In the embodiments of the present application, the multi-dimensional biological key system of the multi-modal authorization module comprises:

[0084] The inherent key is generated based on the characteristics of the resource itself through a symmetric encryption algorithm, and the inherent key is bound to the unique identifier of the resource and cannot be tampered with;

[0085] The dynamic key is generated based on the fusion of the iris or fingerprint features of the operator and the qualification certificate number, and the biological features and qualification information need to be desensitized during the fusion process;

[0086] The binding key is generated based on the physical indentation on the surface of the resource storage carrier or the unique code of the RFID chip, and the binding key corresponds to the carrier one by one and is updated with the carrier state;

[0087] The dynamic key is automatically updated at a preset period, and the update frequency is adjusted based on the historical operation behavior risk assessment result of the operator, and the operation compliance times and abnormal operation record information are referred to during the assessment;

[0088] The key abnormal emergency reset is: when it is detected that the key is tampered with or the operator cannot provide the key due to special reasons, the supervisory node initiates an on-chain vote, the voting participating nodes are preset authoritative nodes within the domain, and after the vote is passed, a temporary key is generated and entrusted to the designated standby personnel, and at the same time, all operation permissions associated with the original key are frozen, and the temporary key needs to be additionally recorded when used. Operation reason;

[0089] The verification process is: synchronously verifying the validity of the inherent key, the dynamic key and the binding key, and verifying whether the biological safety protection level qualification of the agency is matched with the resource safety level; if any verification link fails, the on-chain data freezing, storage carrier physical locking, and the warning information containing the verification failure link and the failure reason are immediately triggered to the supervisory node;

[0090] To accurately calculate the historical operation behavior risk assessment result of the operator, the dynamic key update frequency is determined, the operation risk value calculation is introduced, and the specific formula is as follows:

[0091] ;

[0092] Among them, The operation personnel operation risk value is used for measuring the compliance risk degree of the operation personnel operation behavior, and is a core basis for adjusting the dynamic key update frequency.

[0093] The operation personnel historical operation compliance times refer to the total number of operations of the operation personnel in the past operation that meet the biosafety operation specification and the inter-chain data consistency verification has no deviation (D=0).

[0094] The operation personnel historical operation abnormal record times refer to the total number of operations of the operation personnel in the past operation that violate the biosafety operation specification or the inter-chain data consistency verification has deviation.

[0095] The operation personnel historical operation total times refer to the total number of the compliance operation and the abnormal operation, and are used as the basis for calculating the risk value.

[0096] The formula is used for quantitatively calculating the historical operation behavior risk value of the operation personnel, so as to determine the update frequency of the dynamic key. The proportion of the compliance operation in the total operation is calculated through the compliance times and the abnormal record times in the historical operation of the operation personnel, and then the risk value is obtained by subtracting the proportion from 1: the higher the compliance operation proportion, the lower the risk value, and the lower the dynamic key update frequency; the lower the compliance operation proportion, the higher the risk value, and the higher the dynamic key update frequency, and the calculation is only based on the operation record of the inter-chain data consistency verification without deviation, so as to ensure the accuracy of the data basis.

[0097] The algorithm formula realizes the accurate matching of the dynamic key update frequency and the operation personnel risk, avoids the fixed update mode of "one size fits all": the update frequency of the high-risk operation personnel is increased, and the risk of key cracking or abuse is reduced; the update frequency of the low-risk operation personnel is reduced, and unnecessary operation cost is reduced. At the same time, the operation record based on the inter-chain data consistency verification without deviation is calculated, so as to ensure the objectivity and accuracy of the risk evaluation, further strengthen the security of the multi-modal authorization module, and provide a scientific basis for the operation permission control of the biosafety physical resources.

[0098] In the embodiment of the application, the association process of the on-chain and off-chain traceability module is as follows:

[0099] The sensing and communication module integrated with the resource storage carrier collects environmental data (including temperature, humidity and vibration data) and resource state data in real time, and after collection, the data is subjected to integrity check, and after passing the check, a state hash value is generated and uploaded to the node chain at a preset interval;

[0100] The operation process information (including resource sampling amount and detection item) is recorded through a special terminal configured with a biometric identification module. Before recording, the identity of the operator needs to be verified. After verification, the operation information is stored in the blockchain. After processing, the key information is synchronized to the domain chain;

[0101] Risk transmission blocking: After marking suspicious operations, automatically trace all upstream flow nodes (including resource collection and transportation nodes) and downstream receiving nodes (including detection and storage nodes) involved in the operation. Push prompt information containing suspicious operation details and risk level to each related node, and restrict further access and detection of associated resources until the risk investigation is completed and the investigation report is generated.

[0102] When generating the report, based on the unique resource identifier of the core chain, locate the operation log and node chain state data corresponding to the domain chain. Compare the time stamp of the chain operation record with the collection time stamp of the off-chain sensor data. If there is a time deviation beyond the reasonable range, mark it as suspicious operation and record the deviation duration.

[0103] To quantify whether the time deviation is beyond the reasonable range, introduce time deviation risk coefficient calculation. The specific formula is as follows:

[0104] ;

[0105] Where, is the time deviation risk coefficient, which is used to comprehensively evaluate the risk degree of time stamp deviation, and is the key indicator for marking suspicious operations;

[0106] is the absolute deviation value of the on-chain operation record time stamp and the off-chain sensor data collection time stamp, i.e. the absolute value of the difference between the two time stamps, reflecting the size of the time synchronization deviation;

[0107] is the operator operation risk value, which is used to reflect the historical operation risk level of the operator and adjust the risk tolerance of the time deviation;

[0108] is the risk adjustment coefficient, which is generated based on the operator risk value. The higher the risk value, the larger the adjustment coefficient, and the stronger the amplification effect of the time deviation;

[0109] This formula is used to quantitatively determine whether the deviation between the on-chain operation record time stamp and the off-chain sensor data collection time stamp is beyond the reasonable range, in order to identify suspicious operations. By associating the absolute deviation value of the time stamp with the operator operation risk value: the higher the operator risk value, the lower the tolerance to time deviation, and the larger the risk coefficient calculated under the same time deviation; when the risk coefficient exceeds the preset threshold, it is determined as suspicious operation and needs to be further investigated;

[0110] The algorithm formula breaks through the limitation of the traditional "fixed time threshold" to determine the suspicious operation, and dynamically adjusts the judgment standard combined with the risk of the operator, which not only avoids the excessive control of low-risk operators (such as misjudging slight time deviation as suspicious operation), but also strengthens the strict supervision of high-risk operators (such as triggering risk warning with slight time deviation). Through the correlation evaluation of time deviation and personnel risk, the accuracy of the suspicious operation identification of the on-chain and off-chain traceability module is improved, and the risk transmission caused by time synchronization anomaly (such as the confusion of sample operation record and actual state) is timely blocked.

[0111] In the embodiment of the application, the cross-agency emergency resource library of the emergency dispatch module stores resource detection capability information (including detectable pathogen types and detection processing capacity) of each node, protection material reserve information (including the number of protective equipment and the state of disinfection equipment), and personnel standby information (including the list of personnel with specified biological safety level operation qualifications). All information needs to be audited by the node itself and verified by the domain chain twice before being encrypted and written into the core chain;

[0112] The resource conflict coordination mechanism is: when multiple sudden public health events apply for the resources of the same node at the same time, a priority sorting model is constructed according to the emergency degree, influence range and resource matching degree of the event. The model calculates the priority of the event by quantitatively evaluating each dimension of information first, and then determining the priority of the event comprehensively. The resources are dispatched to the high-priority event first, and the function-matched and geographically adjacent alternative nodes are recommended for the low-priority event, and the resource available state of the alternative nodes is informed synchronously;

[0113] When screening nodes, the geographical range is limited according to the resource traceability result, and the nodes are sorted according to the principle of response speed priority and resource utilization optimization. The dispatching instruction is generated after sorting, which contains resource allocation path, receiving node responsibility and time requirement, and is synchronized to the related node chain and core chain. The task notification pushed contains the on-chain authorization voucher, which needs to be verified by the receiving node before the dispatching operation can be executed;

[0114] In order to comprehensively calculate the priority of the event, the event priority index is calculated, and the event emergency degree, influence range and resource matching degree are combined, and the specific formula is as follows:

[0115] ;

[0116] Among them, The event priority index is used to sort the resource dispatching priority of multiple concurrent events. The higher the index, the higher the resource dispatching priority;

[0117] The quantitative value of the event emergency degree is obtained according to the event response time limit requirement (such as whether it needs to be handled urgently). The higher the emergency degree, the larger the quantitative value.

[0118] The event influence range quantization value is quantified according to the number of people possibly affected by the event and the regional range, and the wider the influence range, the greater the quantization value;

[0119] The resource matching degree quantization value is quantified according to the matching degree of node resources and event demand (such as detection equipment and protective material matching), and the higher the matching degree, the greater the quantization value;

[0120] The time deviation risk coefficient reflects the risk degree of the event caused by time deviation, and the greater the risk coefficient, the greater the quantization value;

[0121] The weight coefficients of each dimension are preset according to the biological safety event management demand, respectively representing the importance of the emergency degree, the influence range, the resource matching degree and the time deviation risk in the priority evaluation, and the sum of the weight coefficients is 1, ensuring the rationality of the evaluation result;

[0122] The formula is used for comprehensive calculation of the priority index of the public health emergency, and solves the resource contention problem when multiple events occur. By quantifying the emergency degree, the influence range, the resource matching degree and the time deviation risk coefficient of the event respectively, and then weighting and summing according to the preset weight, the priority index is obtained: the higher the quantization value of each dimension, the greater the corresponding weight, the higher the priority index, and the higher the priority of the event to obtain resource scheduling, so as to ensure that the events with high risk and high demand obtain resource support in priority;

[0123] The algorithm formula realizes multi-dimensional and scientific event priority evaluation, and avoids the subjectivity and limitation of traditional "experience judgment" to dispatch resources. By integrating the emergency, the influence range, the resource adaptability and the time risk, the resources are ensured to flow to the events that need them most (such as high emergency, wide influence and high risk of sudden epidemic), while the resource matching degree is also considered to improve the resource utilization efficiency. In addition, the flexible setting of the weight coefficient can adapt to the management needs of different types of biological safety events, enhance the universality and practicality of the emergency scheduling module, and provide accurate decision basis for cross-agency resource collaborative scheduling.

[0124] In the embodiment of the application, the resource unique identifier stored in the core chain comprises an encrypted resource ID and a hash root value generated based on resource genome characteristics, wherein the hash root value generated based on resource genome characteristics is obtained by encrypting the fragments with species uniqueness extracted from the resource genome, and the fragments with easy variation in the genome are excluded during extraction to ensure uniqueness;

[0125] ​​​The core chain stores the information of the key nodes of cross-domain flow, including the valid period of node qualification and historical compliance record, as the pre-check condition for chain right migration. When checking, it first checks whether the node qualification is within the valid period, and then confirms that there is no major violation in the historical compliance record. Both conditions are met, and the chain right migration can be started.

[0126] To quantitatively evaluate the historical compliance degree of the node as the pre-check basis for chain right migration, the node compliance degree calculation is introduced, and the specific formula is as follows:

[0127] ;

[0128] Among them, is the node compliance degree, which is used to measure the compliance level of the node in historical data synchronization, and is the core index of the pre-check for chain right migration;

[0129] is the average value of the deviation value of the historical inter-chain data consistency of the node, that is, the sum of the deviation value of each time in the past multiple inter-chain data synchronization of the node divided by the synchronization times, reflecting the average deviation level of the historical data synchronization of the node;

[0130] is the preset maximum allowed deviation value, which is determined according to the biological safety data management specification, representing the maximum deviation upper limit acceptable for node data synchronization. If the value exceeds, the node has a serious compliance risk;

[0131] When the node qualification is within the valid period and reaches the preset compliance threshold, the chain right migration is allowed to start;

[0132] The formula is used to quantitatively evaluate the historical compliance degree of the node as the pre-check basis for chain right migration. By calculating the ratio of the average value of the deviation value of the historical inter-chain data consistency of the node to the preset maximum allowed deviation value, and then subtracting the ratio from 1 to get the compliance degree: the smaller the average value of the historical deviation, the higher the compliance degree, and the node meets the requirements of chain right migration; the larger the average value of the historical deviation, the lower the compliance degree, and the node is more difficult to pass the chain right migration check, and needs to be combined with the node qualification valid period to jointly determine to ensure the overall evaluation of the node compliance;

[0133] The algorithm formula sets a scientific pre-compliance threshold for chain right migration, avoiding the data security risk after chain right migration due to poor historical compliance of the node (such as frequent data deviation). By quantifying the historical compliance performance of the node, it replaces the traditional "qualitative evaluation" (such as "no major violation"), and improves the objectivity and accuracy of the check result. At the same time, combined with the node qualification valid period check, a "qualification + compliance" dual audit mechanism is formed, further strengthening the safety of chain right migration, ensuring that the receiving node has a reliable compliance basis when the biological safety physical resources are transferred across nodes, and protecting the safety of data and resources.​

[0134] In the embodiments of the present application, the resource operation log of the domain chain contains resource access time and operation personnel qualification summary, the operation personnel qualification summary includes the biological safety level operation qualification certificate number and validity period information of the operation personnel, and the summary information needs to be synchronized with the qualification database of the supervision department regularly to ensure accuracy;

[0135] When the domain chain receives the node chain synchronization data, it needs to verify the device state of the node chain (including whether the sensor is normal and whether the storage device is stable) and the network security (including whether there is abnormal access and whether the data transmission is encrypted), and only after the verification is passed, the data can be received, and if the verification fails, the failure item is fed back and the node chain is required to be rectified and synchronized again;

[0136] In order to comprehensively evaluate the data synchronization access qualification of the node chain, the node synchronization access index calculation is introduced, and the device state and network security are combined, and the specific formula is as follows:

[0137] ;

[0138] Among them, is the node synchronization access index, which is used to determine whether the node chain has the qualification to synchronize data to the domain chain, and the index reaches the preset threshold value to access;

[0139] is the node compliance degree, reflecting the historical compliance level of the node, which is the basic index of access evaluation;

[0140] is the device state quantitative value, which is quantified according to the running state (such as whether it is working normally or has a fault) of the storage device and the sensor device of the node chain. When the device is running normally, the quantitative value is high, and when the device is faulty, the quantitative value is low;

[0141] is the network security quantitative value, which is quantified according to the access control and data transmission encryption of the network of the node chain (such as whether there is abnormal access and whether the transmission is encrypted). The more perfect the network security protection is, the higher the quantitative value is;

[0142] , , is the weight coefficient of each dimension, which is preset according to the data synchronization security demand, respectively representing the importance of node compliance degree, device state and network security in access evaluation, and the sum of the weight coefficients is 1, ensuring the comprehensiveness of the evaluation;

[0143] When A reaches the preset access threshold value, the node chain is allowed to synchronize data to the domain chain;

[0144] The formula is used for comprehensive evaluation of the access qualification of the node chain to the domain chain synchronization data, and ensures the safety and reliability of the synchronization data. By quantifying the node compliance, device state and network security in three dimensions respectively, and then weighting and summing according to the preset weight, the access index is obtained: the higher the node compliance, the better the device state and the stronger the network security, the higher the access index, and the easier to pass the synchronization access check; otherwise, the access index is lower, and the reapplication after rectification is required, and the total weight coefficient is 1, ensuring the balance of the evaluation result;

[0145] The algorithm formula constructs a node synchronization access evaluation system of "compliance + device + network" trinity, breaks through the traditional verification mode of only focusing on "data itself", and safeguards the synchronization data safety from multiple dimensions of node basic ability and running environment. By quantifying the node compliance history, device reliability and network security, the abnormal synchronization data caused by device failure (such as sensor failure) or network attack (such as data interception) is avoided, and the accuracy and safety of the domain chain data are further strengthened. At the same time, the flexible weight setting can adapt to the synchronization needs of different security level data, and improve the flexibility and safety of the data management of the blockchain architecture module.

[0146] In the embodiment of the application, the symmetric encryption algorithm is SM4 encryption algorithm, which is used to protect the encryption security of the inherent key, and a randomly generated initial vector is used in the encryption process to improve the encryption strength;

[0147] The management period of the temporary key can be preset, and a reasonable time length is determined according to actual business needs, and after the expiration, the temporary key is automatically invalidated and triggers a new key generation process, and after the generation of the new key, it needs to be updated to all associated chain layers, avoiding the risk of long-term management of the permission;

[0148] In order to determine the reasonable management period of the temporary key, the management period suggestion value calculation is introduced, and the specific formula is as follows:

[0149] ;

[0150] Among them, The temporary key management period suggestion value is a quantitative reference for the temporary key management time, and is the core basis for determining the final management period;

[0151] The preset basic management period is determined according to the biological safety operation emergency demand, and represents the basic management time of the temporary key used by the low-risk operator;

[0152] The operator operation risk value reflects the operation risk level of the operator, and is used to adjust the length of the management period;

[0153] The time limit adjustment coefficient is generated based on the operator risk value, the higher the risk value, the smaller the adjustment coefficient, the shorter the recommended value of the hosting time limit, the lower the risk value, the larger the adjustment coefficient, and the longer the recommended value of the hosting time limit;

[0154] The formula is used to determine the reasonable hosting time limit of the temporary key, and avoid the security risk caused by long-term hosting of the permission. By associating the preset basic hosting time limit with the operator operation risk value: the higher the operator risk value, the shorter the recommended value of the hosting time limit; the lower the operator risk value, the longer the recommended value of the hosting time limit, and then fine-tuning according to the actual business demand, the hosting time limit can meet the emergency use demand and reduce the risk of abuse of permission;

[0155] The algorithm formula realizes the dynamic adaptation of the temporary key hosting time limit, avoids the risk (such as long-term holding of temporary keys by high-risk personnel) or inconvenience (such as frequent application for keys by low-risk personnel) that may be caused by "fixed time limit" hosting. By combining the operator risk value, different risk level personnel are matched with differentiated hosting time limit, which meets the emergency permission use demand and maximally reduces the risk of abuse or leakage of permission. In addition, fine-tuning according to the actual business demand is allowed, which takes into account the scientificity of the algorithm and the flexibility of actual operation, further perfects the key management mechanism of the multi-modal authorization module, and improves the security and practicability of system permission control.

[0156] In the embodiment of the application, the biometric identification module of the special terminal completes identity verification by collecting iris or fingerprint information of the operator, and the clarity and integrity of the biometric information need to be ensured during collection; after verification, the operation process information can be recorded;

[0157] The special terminal automatically records abnormal behaviors (such as operation timeout, non-standard operation process) during operation, and the operation time, operation steps and operator information need to be associated during recording, and are synchronously uploaded to the domain chain as suspicious operation judgment basis; after receiving the domain chain, the abnormal behavior information needs to be classified and stored for subsequent query;

[0158] In order to quantitatively evaluate the severity of operation abnormality, as a supplementary basis for suspicious operation judgment, operation abnormality severity calculation is introduced, and the specific formula is as follows:

[0159] ;

[0160] Wherein, is the operation abnormality severity, used to measure the risk degree of single operation abnormality, and is an important supplementary index for suspicious operation judgment, The larger the operation abnormality severity is, the higher the probability of operation being judged as suspicious operation is;

[0161] is a time deviation risk coefficient, reflecting the risk level of operation time synchronization deviation;

[0162] For the operation flow violation quantization value, the number of steps that violate the biosafety specification during the operation process (such as not sampling according to the flow, not recording operation information) is quantized to obtain the quantization value, and the more the number of violation items, the greater the quantization value;

[0163] 、 The weight coefficients of each dimension are preset according to the influence of operation abnormality risk, respectively representing the importance of time deviation risk and process violation in abnormality severity assessment, and the sum of the weight coefficients is 1, ensuring the comprehensiveness of the assessment;

[0164] The formula is used for quantitatively evaluating the severity of operation abnormality, and provides supplementary basis for suspicious operation determination. The abnormality severity is obtained by weighting and summing the time deviation risk coefficient and the operation flow violation quantization value according to the preset weight: the higher the time deviation risk and the more the number of process violation items, the higher the abnormality severity, and the greater the probability of operation being determined as suspicious operation; otherwise, the abnormality severity is lower, and the operation is more likely to be determined as normal deviation, and the sum of the weight coefficients is 1, ensuring the rationality of the evaluation;

[0165] The algorithm formula realizes multi-dimensional quantitative evaluation of operation abnormality, breaking through the limitation of traditional single abnormality item determination of suspicious operation. By integrating time deviation risk and process violation, the actual severity of operation abnormality is more comprehensively reflected, avoiding excessive control of slight abnormality (such as low-risk time deviation and no process violation), while accurately identifying serious abnormality (such as high-risk time deviation and multiple process violations). In addition, the supplementary abnormality severity assessment provides more abundant basis for suspicious operation determination, improves the accuracy and reliability of the on-chain and off-chain traceability module risk identification, and timely discovers and blocks potential biosafety operation risks.

[0166] In the embodiments of the present application, the node geographic range defined by the emergency dispatching module is:

[0167] Taking the resource collection site or flow path in the resource traceability result as the reference, the nodes within the preset distance range are screened, and the nodes without corresponding resource processing capacity in the geographic range are excluded during screening;

[0168] In the priority sorting model, the event emergency degree refers to the event response time limit requirement (such as whether it needs to be handled within 24 hours), the influence range refers to the number of people that may be affected (such as whether it involves a densely populated area), and the resource matching degree refers to the matching degree of the existing resources of the node and the event demand (such as whether the type of detection equipment matches, and whether the amount of protective materials meets the usage), and the priority is calculated by comprehensively calculating the evaluation results of each dimension according to the preset weight;

[0169] To refine the quantification of resource matching, a precise calculation of resource matching degree is introduced, taking into account the actual resource supply of nodes. The specific formula is as follows:

[0170] ;

[0171] in, Resource matching degree is used to accurately measure the degree of fit between node resources and event requirements, and is a key dimension for event priority assessment.

[0172] These are resource dimension numbers, representing different types of resource needs (such as testing equipment, protective equipment, professional personnel, etc.), ranging from 1 to... Number them sequentially;

[0173] This represents the total number of resource dimensions, determined based on the type of resource requirement for the event, and signifies the total number of resource categories involved in assessing resource matching.

[0174] For the node at the th The actual supply of a resource dimension, i.e., the number of resources a node can currently provide. The quantity or capacity of such resources;

[0175] For the event in the The demand for resources in the event handling process, i.e., the amount of resources needed in the event handling process. The quantity or capacity of such resources;

[0176] For the first The demand weights for each resource dimension are preset based on the degree of dependence of event handling on each resource; the higher the degree of dependence, the greater the weight.

[0177] This formula is used to refine the calculation of resource matching degree, providing a more accurate quantitative basis for event priority assessment. The resource matching degree is obtained by summing the products of the actual supply of a node in each resource dimension and its corresponding demand weight, and then dividing by the sum of the products of the demand of an event in each resource dimension and its corresponding demand weight. The closer the matching degree is to 1 (especially for high-weight resource dimensions), the more suitable the node is to provide resource support for the event. The calculation results are then substituted into the event priority index formula to improve the accuracy of priority assessment.

[0178] The algorithm formula realizes fine and multi-dimensional calculation of resource matching degree, and avoids the limitation of traditional "rough matching" (such as only judging "with / without" corresponding resources). By introducing resource dimension weight, the matching of event core demand resources (such as high-weight detection equipment) is preferentially guaranteed, and it is ensured that the node resources can practically meet the key demand of event disposal. Meanwhile, the scientificity and accuracy of event priority evaluation are improved by substituting the precise matching degree calculation result into the event priority index formula, and the "resource mismatching" (such as assigning high-matching-degree node resources to low-priority events) caused by inaccurate resource matching degree evaluation is avoided, further optimizing the resource allocation efficiency of the emergency dispatching module and providing more accurate resource support for rapid disposal of public health emergencies.

[0179] The embodiments of the present application are disclosed, but are not limited thereto, and those skilled in the art can easily understand the spirit of the present application according to the above embodiments, and make different inferences and changes, as long as they do not deviate from the spirit of the present application, which are within the protection scope of the present application.

Claims

1. A biosafety physical resource multidimensional data management system, characterized in that, Comprise: A blockchain architecture module adopts a three-level dynamic chain architecture to store resource identifiers, operation logs, and real-time state data, configure a chain weight migration mechanism triggered by security level, and synchronously build an inter-chain data consistency verification mechanism to avoid data tampering or loss during chain weight migration; A multi-modal authorization module builds a multi-dimensional biological key system, verifies cross-agency access requests through smart contracts, triggers security control and early warning if verification fails, and supports on-chain emergency reset and temporary authority hosting in case of key abnormalities; A chain-on-chain-offline traceability module associates on-chain records and off-chain data, generates a full-life-cycle traceability report and marks suspicious operations, and traces all resource flow paths associated with suspicious operations to block risk transmission; An emergency dispatch module builds a cross-agency emergency resource library on the core chain, automatically selects nodes, generates dispatch instructions, and pushes task notifications during public health emergencies, and configures a resource conflict coordination mechanism; The three-level dynamic chain architecture of the blockchain architecture module is "core chain - domain chain - node chain"; The risk transmission blocking is: after marking suspicious operations, automatically trace all upstream and downstream nodes involved in the operation, push prompt information containing suspicious operation details and risk level to each related node, and restrict further access and detection operations on associated resources until the risk investigation is completed and a report is generated; When generating the report, based on the resource unique identifier of the core chain, the operation logs of the domain chain and the state data of the node chain are compared one by one to determine whether the time stamp of the on-chain operation record and the collection time stamp of the off-chain sensor data are consistent. If there is a time deviation beyond the reasonable range, it is marked as a suspicious operation and the deviation duration is recorded. To quantify whether the time deviation is beyond the reasonable range, a time deviation risk coefficient is introduced, and the specific formula is as follows: ； wherein, is a time deviation risk coefficient, is an absolute deviation value of the on-chain operation record timestamp and the off-chain sensor data collection timestamp, is an operator operation risk value, is a risk adjustment coefficient.

2. The biological safety physical resource multi-dimensional data management system according to claim 1, characterized in that, The core chain stores resource unique identifiers and cross-domain flow key node information, which is maintained by the supervisory subject as a super node. The super node is responsible for the final audit of core chain data and the issuance of synchronization instructions; The domain chain is divided according to administrative regions or institutional types, and an improved practical Byzantine fault tolerance algorithm is configured to realize domain data synchronization. During synchronization, it needs to be confirmed by a majority of nodes in the domain before being written into the domain chain to store resource operation logs within the corresponding range; The node chain is deployed on each resource storage or operation node, storing real-time state data of the resource. When the node chain data is updated, the operator's identity information and operation time stamp need to be recorded first; The chain weight migration mechanism is: when the security level of the resource changes, the node chain data is automatically synchronized to the domain chain, and the core information of the domain chain is synchronized to the core chain. Before synchronization, the original node chain operation permission is frozen, and after synchronization is completed, a chain weight migration credential is generated and written into the whole chain. The credential contains the chain layer information and data verification results before and after migration. The inter-chain data consistency checking mechanism is that during the chain weight migration process, the core chain, the domain chain and the node chain respectively generate independent hash values for the synchronized data, the data consistency is confirmed through pairwise cross comparison, if there is a difference, the data rollback operation is triggered immediately, and the alarm information containing the difference data position and the comparison result is pushed to the supervision node; In order to quantitatively evaluate the data consistency difference degree, the inter-chain data consistency deviation value calculation is introduced, and the specific formula is as follows: ； wherein, is the inter-chain data consistency deviation value, is the hash value generated by the core chain for the synchronization data, is the hash value generated by the domain chain for the synchronization data, is the hash value generated by the node chain for the synchronization data, is the absolute value symbol, used to eliminate the positive and negative effects of the hash value difference, and only keep the difference size.

3. The multi-dimensional data management system for biosafety physical resources according to claim 1, wherein, The multi-dimensional biological key system of the multi-modal authorization module includes: The inherent key generated based on the characteristics of the resource itself through a symmetric encryption algorithm, the inherent key is bound with the unique identifier of the resource and cannot be tampered with; The dynamic key generated by fusing the iris or fingerprint features of the operator with the qualification certificate number, the biological features and qualification information need to be desensitized during the fusion process; The binding key generated based on the physical indentation on the surface of the resource storage carrier or the unique code of the RFID chip, the binding key corresponds to the carrier one by one and is updated with the carrier state; The dynamic key is automatically updated at a preset period, the update frequency is adjusted based on the historical operation behavior risk assessment result of the operator, and the operation compliance times and abnormal operation record information are referred to during the assessment; The key abnormal emergency reset is that when the key is tampered with or the operator cannot provide the key due to special reasons, the supervision node initiates an on-chain vote, the voting participating nodes are preset authoritative nodes within the domain, and after the vote is passed, a temporary key is generated and entrusted to the designated standby personnel, and at the same time, all operation permissions associated with the original key are frozen, and the temporary key needs to be additionally recorded when used; The verification process is to verify the effectiveness of the inherent key, the dynamic key and the binding key, and to verify whether the biological safety protection level qualification of the agency is matched with the resource safety level; If any verification link fails, the on-chain data freezing and the physical locking of the storage carrier are triggered immediately, and the early warning information containing the verification failure link and the failure reason is pushed to the supervision node; In order to accurately calculate the historical operation behavior risk assessment result of the operator, the dynamic key update frequency is determined, the operation risk value calculation is introduced, and the specific formula is as follows: ； wherein, is an operator operation risk value, is an operator historical operation compliance number of times, is an operator historical operation abnormal record number of times, is an operator historical operation total number of times.

4. The multi-dimensional data management system for biosafety physical resources according to claim 1, wherein, The association process of the on-chain and off-chain traceability module is: Real-time collection of environmental data and resource state data through the sensing and communication module integrated in the resource storage carrier, integrity check of the collected data, generation of state hash value after passing the check, and uploading to the node chain at a preset interval; Recording operation process information through a special terminal configured with a biological recognition module, recording the identity of the operator, verifying the operation information after passing the verification, and storing the key information in the blockchain, and then synchronizing the key information to the domain chain.

5. The multi-dimensional data management system for biosafety physical resources according to claim 1, wherein, The cross-agency emergency resource library of the emergency dispatch module stores the resource detection capability information, protection material reserve information and personnel standby information of each node, all information needs to be audited by the node itself and verified by the domain chain twice before uploading, and the encrypted information is written into the core chain after passing the verification. The resource conflict coordination mechanism is: when multiple sudden public health events apply for the same node resource at the same time, a priority ranking model is constructed according to the emergency degree of the event, the influence range and the resource matching degree, the model calculates the priority of the event by quantitatively evaluating each dimension information, and then the resource is preferentially scheduled to the high-priority event, while the low-priority event is recommended to the alternative node with matching function and geographical proximity, and the resource availability of the alternative node is informed synchronously; When screening nodes, the geographical range is limited according to the resource traceability result, and the nodes are sorted according to the principle of response speed priority and resource utilization optimization. After sorting, a scheduling instruction is generated, which includes resource allocation path, receiving node responsibility and time requirement, and is synchronized to related node chain and core chain. The task notification pushed contains the authorization voucher on the chain, and the voucher needs to be verified by the receiving node before the scheduling operation can be executed.

6. The multi-dimensional data management system for biosafety physical resources according to claim 2, wherein, The resource unique identifier stored in the core chain includes an encrypted resource ID and a hash root value generated based on the resource genome characteristics. The hash root value generated based on the resource genome characteristics is obtained by encrypting the fragments with species uniqueness extracted from the resource genome. During extraction, the variable fragments in the genome are excluded to ensure uniqueness. The core chain stores the information of the cross-domain flow key nodes, including the validity period of the node qualification and the historical compliance record, which is used as a pre-check condition for chain right migration. During the check, it is first verified whether the node qualification is within the valid period, and then it is confirmed that there is no major violation in the historical compliance record. Only when both conditions are met, the chain right migration can be started. In order to quantitatively evaluate the historical compliance degree of the node as a pre-check basis for chain right migration, node compliance degree calculation is introduced, and the specific formula is as follows: ； wherein, is a node compliance degree, is an average value of node historical inter-chain data consistency deviation values, is a preset maximum allowed deviation value, when the node qualification is within a valid period and the chain right migration is allowed to be initiated when a preset compliance threshold is reached.

7. The multi-dimensional data management system for biosafety physical resources according to claim 6, wherein, The resource operation log of the domain chain contains resource access time and operator qualification summary, which includes the biological safety level operation qualification certificate number and validity period information of the operator. The summary information needs to be synchronized with the qualification database of the supervision department regularly to ensure accuracy. When receiving the node chain synchronization data, the domain chain needs to verify the device state and network security of the node chain first. After verification, the data can be received. If the verification fails, the failure item is fed back and the node chain is required to rectify and synchronize again.

8. The multi-dimensional data management system for biosafety physical resources according to claim 3, wherein, The symmetric encryption algorithm is SM4 encryption algorithm, which is used to ensure the encryption security of the inherent key. In the encryption process, a randomly generated initial vector is used to improve the encryption strength. The management period of the temporary key can be preset according to the actual business needs to determine a reasonable time length. After the expiration, the temporary key is automatically invalidated and triggers a new key generation process. After the new key is generated, it needs to be updated to all associated chain layers to avoid the risk of long-term authority management.

9. The multi-dimensional data management system for biosafety physical resources according to claim 4, wherein, The biological identification module of the special terminal completes identity verification by collecting the iris or fingerprint information of the operator. During collection, the clarity and integrity of the biological feature information need to be ensured. After verification, the operation process information can be recorded. The special terminal automatically records abnormal behaviors during the operation process. During recording, the operation time, operation steps and operator information need to be associated and uploaded to the domain chain as suspicious operation judgment basis. After receiving, the domain chain needs to store the abnormal behavior information in a classified manner for subsequent query. In order to quantitatively evaluate the severity of operation anomaly, as a supplementary basis for suspicious operation judgment, operation anomaly severity calculation is introduced, and the specific formula is as follows: ； wherein, is an operation abnormality severity, is a time deviation risk coefficient, is an operation flow violation quantization value, , is a dimension weight coefficient, according to the operation abnormality risk influence preset, respectively representing the importance of the time deviation risk and the flow violation in the abnormality severity evaluation, and the weight coefficient sum is 1, ensuring the comprehensiveness of the evaluation.

10. The multi-dimensional data management system for biosafety physical resources according to claim 5, wherein, The geographic range of the node defined by the emergency dispatching module is: Taking the resource collection place or flow path in the resource traceability result as the benchmark, nodes within the preset distance range are screened, and nodes without corresponding resource processing capacity within the geographic range are excluded during screening; In the priority sorting model, the event emergency degree refers to the event response time limit requirement, the influence range refers to the number of people that may be affected, and the resource matching degree refers to the matching degree of the existing resources of the node and the event demand. The priority is calculated by comprehensively calculating the evaluation results of each dimension according to the preset weight.

Images