A message verification method and system for a communication network system

Abstract

This invention relates to the field of message verification technology, and particularly to a message verification method and system for a communication network system. The method includes: creating a relay authorization management platform, acquiring registered users, and defining relay nodes; when a Bluetooth receiver pre-integrated in a target device scans the Bluetooth signal of a relay node, establishing a communication link between the Bluetooth receiver and the relay node, and recording the establishment time of the communication link; collecting monitoring data from the target device, creating a hash function, and sorting the relay nodes sequentially according to their establishment time, obtaining at least a first node and a second node; using the hash function to hash the monitoring data to obtain a first hash value. This invention, by using hash values ​​for cross-verification, can prevent unauthorized relay nodes from arbitrarily participating in data transmission, greatly improving the reliability of overall communication network data transmission while verifying the authenticity of monitoring data.

Description

Technical Field

[0001] This invention relates to the field of message verification technology, and in particular to a message verification method and system for a communication network system. Background Technology

[0002] Message verification in a communication network system refers to confirming the authenticity, integrity, and source of a message during network transmission to ensure that the content received by the target end has not been tampered with, forged, or lost, and to guarantee that the message is a valid message from a trusted sender. This communication network system can be integrated into power IoT, industrial internet, vehicle-to-everything (V2X) systems, smart meter systems, and smart city communication systems. For example, existing smart meters typically upload user electricity consumption data to a management platform via carrier communication or cellular networks. However, during data transmission, channel interference, node anomalies, or malicious attacks can still lead to data tampering, forgery, or loss. Furthermore, hardware deployment can result in significant manpower and material costs.

[0003] Therefore, "how to use relay nodes to transmit and verify data" is the technical problem that this invention needs to solve. Summary of the Invention

[0004] The purpose of this invention is to provide a message verification method and system for a communication network system, in order to solve the problem of "how to use relay nodes to transmit and verify data" mentioned in the background art.

[0005] To achieve the above objectives, the present invention provides the following technical solution:

[0006] A message verification method for a communication network system, the method comprising:

[0007] Create a relay authorization management platform, obtain registered users, and define relay nodes. When the Bluetooth receiver pre-integrated in the target device scans the Bluetooth signal of the relay node, establish a communication link between the Bluetooth receiver and the relay node, and record the establishment time of the communication link.

[0008] Collect monitoring data from the target device, create a hash function, and sort the relay nodes in order of their establishment time from earliest to latest to obtain at least the first and second nodes. Use the hash function to hash the monitoring data to obtain the first hash value. Send the first hash value to the relay authorization management platform via the communication link of the first node. Integrate the establishment time and the first hash value corresponding to the first node and hash it to obtain the second hash value. Repeat this process to obtain the final hash value.

[0009] Record the number of hashes to obtain the final hash value, set the risk level of the target device, establish the correspondence between the number of hashes and the risk level, and upload all hash values ​​to the relay authorization management platform via the communication link;

[0010] Once all hash values ​​are received, the cross-validation mechanism pre-embedded in the relay authorization management platform is activated to determine whether the monitoring data are the same. If they are, the monitoring data is sent to the preset terminal. If not, an authorization node is defined from the relay node, and the monitoring data is verified.

[0011] Furthermore, the steps for creating a relay authorization management platform and obtaining registered users include:

[0012] Receive the identity information of each registered user, wherein the identity information includes at least: contact information, job type, place of residence and willingness to participate, and divide the identity information into several sub-items, wherein each sub-item corresponds to a weight value;

[0013] Edit the evaluation rules, calculate the credibility score for each registered user, and define registered users with credibility scores greater than the threshold as relay nodes.

[0014] Furthermore, the step of recording the establishment time of the communication link and sorting the relay nodes sequentially according to the establishment time from earliest to latest includes:

[0015] Build a node chain using the sorted relay nodes and establish a mapping between the node chain and the final hash value;

[0016] Build a cloud repository, upload the final hash value to the cloud repository, and verify it at a preset frequency.

[0017] Furthermore, the step of integrating the establishment time and first hash value corresponding to the first node, hashing to obtain the second hash value, and so on, to obtain the final hash value includes:

[0018] Construct time windows, each corresponding to a final hash value, and store the time windows and final hash values ​​in a versioned manner.

[0019] Furthermore, the steps of recording the number of hashes to obtain the final hash value, setting the risk level of the target device, and establishing the correspondence between the number of hashes and the risk level include:

[0020] Based on the correspondence, a lookup table is drawn, wherein the lookup table includes at least: a risk level item and a hash count item;

[0021] Determine whether there is abnormal data in the monitoring data. If so, define the registered user as a relay node and use the relay node to upload the abnormal data to the relay authorization management platform.

[0022] Furthermore, the step of defining authorized nodes from relay nodes and verifying the monitoring data includes:

[0023] Based on the identity information, an authorized node is selected from the relay nodes;

[0024] When the number of relay nodes corresponding to the target device is less than a set value within the same time window, the attribute data of the target device is collected, a verification task is generated, and it is published to the relay authorization management platform.

[0025] Furthermore, the system includes:

[0026] The module is used to create a relay authorization management platform, obtain registered users, and define relay nodes. When the Bluetooth receiver pre-integrated in the target device scans the Bluetooth signal of the relay node, a communication link is established between the Bluetooth receiver and the relay node, and the establishment time of the communication link is recorded.

[0027] The module is used to collect monitoring data from the target device, create a hash function, sort the relay nodes in order of their establishment time from earliest to latest, obtain at least the first node and the second node, hash the monitoring data using the hash function to obtain the first hash value, send the first hash value to the relay authorization management platform via the communication link of the first node, integrate the establishment time and the first hash value corresponding to the first node, and hash to obtain the second hash value, and so on, to obtain the final hash value;

[0028] The upload module is used to record the number of hashes to obtain the final hash value, set the risk level of the target device, establish the correspondence between the number of hashes and the risk level, and upload all hash values ​​to the relay authorization management platform via the communication link.

[0029] The verification module is used to activate the cross-verification mechanism pre-embedded in the relay authorization management platform after receiving all hash values, to determine whether the monitoring data are the same. If they are the same, the monitoring data is sent to the preset terminal. If not, an authorization node is defined from the relay node and the monitoring data is verified.

[0030] Furthermore, the establishment module includes:

[0031] The receiving unit is used to receive the identity information of each registered user, wherein the identity information includes at least: contact information, job type, place of residence and willingness to participate, and the identity information is divided into several sub-items, wherein each sub-item corresponds to a weight value;

[0032] The editing unit is used to edit the evaluation rules, calculate the credibility score of each registered user, and define registered users whose credibility scores are greater than the threshold as relay nodes.

[0033] Furthermore, the obtaining module includes:

[0034] The mapping unit is used to construct a node chain using the sorted relay nodes and establish a mapping between the node chain and the final hash value.

[0035] The building unit is used to build a cloud repository, upload the final hash value to the cloud repository, and verify it at a preset frequency;

[0036] A storage unit is used to construct time windows, each time window corresponding to a final hash value, and the time windows and final hash values ​​are stored in version form.

[0037] Furthermore, the upload module includes:

[0038] A drawing unit is used to draw a lookup table based on the correspondence, wherein the lookup table includes at least: a risk level item and a hash count item;

[0039] The judgment unit is used to determine whether there is abnormal data in the monitoring data. If so, the registered user is defined as a relay node, and the abnormal data is uploaded to the relay authorization management platform using the relay node.

[0040] Compared with the prior art, the beneficial effects of the present invention are:

[0041] By constructing relay nodes, the data transmission pressure of smart meters can be reduced, and the communication success rate and reliability can be improved. By using the first node to hash the monitoring data, data integrity can be guaranteed and data tampering can be prevented. By using the second node to hash the first hash value, a data foundation can be provided for the verification of the authenticity of the monitoring data, further improving the security of the monitoring data. By performing multiple hashes, the hash can be prevented from being reverse-engineered, enhancing the anti-cracking capability of the monitoring data. By cross-validating the hash value, unauthorized relay nodes can be prevented from arbitrarily participating in data transmission. While realizing the verification of the authenticity of the monitoring data, the reliability of the overall communication network data transmission is greatly improved. Attached Figure Description

[0042] Figure 1A flowchart illustrating a message verification method for a communication network system provided in an embodiment of the present invention;

[0043] Figure 2 This is a first sub-flowchart of the message verification method for a communication network system provided in an embodiment of the present invention;

[0044] Figure 3 This is a second sub-flowchart of the message verification method for a communication network system provided in an embodiment of the present invention;

[0045] Figure 4 The third sub-flowchart of the message verification method for a communication network system provided in this embodiment of the invention;

[0046] Figure 5 This is a fourth sub-flowchart of the message verification method for a communication network system provided in an embodiment of the present invention;

[0047] Figure 6 A block diagram of the composition of a message verification system for a communication network system provided in an embodiment of the present invention;

[0048] Figure 7 A block diagram of the composition of the establishment module in the message verification system of the communication network system provided in the embodiments of the present invention;

[0049] Figure 8 A block diagram of the module composition in the message verification system of the communication network system provided in the embodiments of the present invention;

[0050] Figure 9 A block diagram of the upload module in the message verification system of the communication network system provided in the embodiments of the present invention;

[0051] Figure 10 This is a block diagram of the verification module in the message verification system of the communication network system provided in an embodiment of the present invention. Detailed Implementation

[0052] To make the objectives, technical solutions, and advantages of this invention clearer, the invention will be further described in detail below with reference to the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are merely illustrative and not intended to limit the invention.

[0053] In Example 1, Figure 1 The implementation flow of the message verification method for a communication network system provided in this embodiment of the invention is illustrated below, and is described in detail below:

[0054] S100: Create a relay authorization management platform, obtain registered users, and define relay nodes. When the Bluetooth receiver pre-integrated in the target device scans the Bluetooth signal of the relay node, establish a communication link between the Bluetooth receiver and the relay node, and record the establishment time of the communication link.

[0055] A relay authorization management platform is created, primarily for managing relay nodes and receiving and processing monitoring data. Users who have completed identity registration are defined as registered users. Based on each registered user's identity information, relay nodes are selected from among them. A relay node refers to a registered user who can participate in the relay transmission of monitoring data. Target devices requiring data transmission are identified, such as smart meters or sensors in industrial equipment. Bluetooth receivers are installed at the location where these target devices are concentrated or at a pre-set location. The Bluetooth receivers are used to establish short-range wireless communication links and relay and transmit monitoring data. When the Bluetooth receiver is activated, it periodically scans the surrounding environment for Bluetooth signals. Once a Bluetooth signal from a relay node is detected, the receiver uses the corresponding identity information to perform a legitimacy comparison and authorization confirmation of the relay node. If the comparison is successful and the relay node is in an authorized state, a communication link is established between the Bluetooth receiver and the relay node, and the establishment time is recorded.

[0056] S200: Collect monitoring data from the target device, create a hash function, record the establishment time of the communication link, and sort the relay nodes in order of establishment time from first to last to obtain at least the first node and the second node. Use the hash function to hash the monitoring data to obtain the first hash value. Send the first hash value to the relay authorization management platform through the communication link of the first node. Integrate the establishment time and the first hash value corresponding to the first node and hash to obtain the second hash value. Repeat this process to obtain the final hash value.

[0057] Collect monitoring data from the target device, which can be electricity consumption data from smart meters or sensor data collected by sensing devices; select a hash function, such as MD5 or SHA-1; based on the time order in which each relay node participates in establishing the communication link, sort the relay nodes in chronological order, defining the first relay node as the first node and the second relay node as the second node; in other words, the first node is the relay node that first appears within the scanning range of the Bluetooth receiver.

[0058] In the target device, the monitoring data is preprocessed, and a hash function is used to hash the monitoring data. The hash result is defined as the first hash value. Using the communication link between the first node and the Bluetooth receiver, the first hash value is uploaded to the relay authorization management platform via the first node. When the second node establishes a communication link with the Bluetooth receiver, the establishment time of the communication link of the first node is integrated with the first hash value, and the hash function is called again to hash the integrated information to obtain the second hash value. The relay authorization management platform continues to transmit the second hash value through the next relay node in sequence, and performs the same integration and hashing process. This cycle continues until all sorted nodes have completed the above superposition calculation. This cyclic hashing process is called chain hashing. However, unlike chain hashing, in this application, hashing stops when a certain number of hashes are reached, and the final hash value is defined as the final hash value. The final hash value not only contains the unique characteristic information of the monitoring data, but also integrates the time sequence characteristics of each relay node. It can be used to verify the integrity of the communication link, the legitimacy of the relay node, and also to determine whether the monitoring data has been tampered with.

[0059] S300: Record the number of hashes to obtain the final hash value, set the risk level of the target device, establish the correspondence between the number of hashes and the risk level, and upload all hash values ​​to the relay authorization management platform via the communication link.

[0060] Each time the monitoring data is hashed, it is recorded as one hash count. The hash count is the number of times the monitoring data is hashed to the final hash value. Based on the type, location, and data collection frequency of the target device, a corresponding risk level is assigned to each target device. The higher the risk level, the more hash counts are assigned. For example, if a target device is operating stably and has no abnormal historical data, its corresponding risk level can be set to low and a smaller hash count can be assigned. If another target device is located in a critical area or has a history of tampering risk, its corresponding risk level can be set to high and a larger hash count can be assigned. Different risk levels correspond to different hash counts. For example, a high risk level corresponds to 5 hash counts, and a low risk level corresponds to 1 hash count.

[0061] After each hash is completed, the hash value is uploaded to the relay authorization management platform through the corresponding communication link.

[0062] S400: After receiving all hash values, activate the cross-validation mechanism pre-embedded in the relay authorization management platform to determine whether the monitoring data is the same. If so, send the monitoring data to the preset terminal. If not, define an authorization node from the relay node and verify the monitoring data.

[0063] Once the relay authorization management platform receives the hash value corresponding to the number of times, it hashes the received monitoring data to determine if it matches the first hash value. It then integrates the first hash value with the corresponding establishment time and continues hashing to obtain the second hash value, until the calculated final hash value is obtained. If this calculated result matches the actual received final hash value, it indicates that the monitoring data is correct and the data transmission process has not been tampered with or lost. The cross-validation mechanism is essentially the repeated hashing and verification process within the relay authorization management platform described above.

[0064] If the calculated result is the same as the final hash value actually received, the monitoring data is sent to the preset terminal through the relay authorization management platform. The preset terminal can be the management terminal of the target device. If the two are different, an authorized node is selected from the relay nodes. The authorized node refers to the operation and maintenance personnel of the target device. The authorized node re-verifies the suspicious monitoring data. The re-verification includes sending the monitoring data directly to the management terminal of the target device through the authorized node.

[0065] In Example 2, Figure 2 The implementation flow of the message verification method for a communication network system provided in this embodiment of the invention is illustrated below. The steps of creating a relay authorization management platform and obtaining registered users are described in detail below:

[0066] S101: Receive the identity information of each registered user, wherein the identity information includes at least: contact information, job type, place of residence and willingness to participate, and divide the identity information into several sub-items, wherein each sub-item corresponds to a weight value.

[0067] The system receives identity information submitted by each registered user, including contact information, job type, place of residence, and willingness to participate. Willingness to participate refers to "why they are willing to participate in the relay transmission of monitoring data." This identity information is divided into multiple sub-items, such as contact information, job type, place of residence, and willingness to participate, with each sub-item assigned a weight value.

[0068] S102: Edit the evaluation rules, calculate the credibility score for each registered user, and define registered users with credibility scores greater than the threshold as relay nodes.

[0069] Based on identity information, multiple evaluation rules are edited, with each sub-item corresponding to at least one evaluation rule. All weight values ​​corresponding to each registered user are superimposed to obtain the credibility score of the registered user. Registered users with credibility scores greater than the threshold are defined as relay nodes.

[0070] For example, a certain evaluation rule is: the weight of residents in this community is 3, the weight of residents in other communities is 1, and the weight of residents from other places is 0. By using all the evaluation rules, the registered users are analyzed, and all the weight values ​​corresponding to the registered users are superimposed to obtain the reliability score.

[0071] In Example 3, Figure 3 The implementation flow of the message verification method for a communication network system provided in this embodiment of the invention is illustrated. The following details the steps of recording the establishment time of the communication link and sorting the relay nodes in order of establishment time from earliest to latest:

[0072] S201: Use the sorted relay nodes to build a node chain and establish a mapping between the node chain and the final hash value.

[0073] All relay nodes are sorted in chronological order of their establishment time, and the resulting queue is defined as a node chain, with each node chain corresponding to a final hash value.

[0074] S202: Build a cloud repository, upload the final hash value to the cloud repository, and verify it at a preset frequency.

[0075] A cloud-based repository is constructed, primarily used to store the final hash value for backtracking monitoring data. The final hash value is uploaded to the cloud repository for storage, and verified at a preset frequency. The advantage of this method is that it ensures that the monitoring data will not be tampered with during storage, greatly improving the security of monitoring data storage.

[0076] In Example 4, Figure 3 The implementation flow of the message verification method for a communication network system provided in this embodiment of the invention is illustrated. The following details the steps of integrating the establishment time and first hash value corresponding to the first node, hashing to obtain the second hash value, and so on, to obtain the final hash value, as follows:

[0077] S203: Construct time windows, where each time window corresponds to a final hash value, and store the time windows and final hash values ​​in version form.

[0078] Two time points are selected, and a time window is constructed using these two time points. After the time window ends, the monitoring data and the final hash value are updated synchronously, and the overwritten historical monitoring data and the final hash value are stored in a versioning manner. The duration of the time window can be 1 day or 1 month.

[0079] In Example 5, Figure 4The implementation flow of the message verification method for a communication network system provided in this embodiment of the invention is illustrated. The following details the steps of recording the number of hashes to obtain the final hash value, setting the risk level of the target device, and establishing the correspondence between the number of hashes and the risk level:

[0080] S301: Based on the correspondence, draw a lookup table, wherein the lookup table includes at least: a risk level item and a hash count item.

[0081] Create a comparison table based on the correspondence between risk level and hash count.

[0082] S302: Determine whether there is abnormal data in the monitoring data. If so, define the registered user as a relay node and use the relay node to upload the abnormal data to the relay authorization management platform.

[0083] The system determines whether there is abnormal data in the monitoring data. For example, if the monitoring data of a smart meter increases rapidly, and the growth rate exceeds the corresponding threshold, it indicates that the user may be using electricity abnormally, and the monitoring data of the smart meter is defined as abnormal data. When the Bluetooth receiver scans any registered user, that registered user is defined as a relay node, and the abnormal data is directly uploaded to the relay authorization management platform using the relay node. In this embodiment, all registered users are directly defined as relay nodes to expand the source of relay nodes so as to upload abnormal data in a timely manner.

[0084] In Example 6, Figure 5 The implementation flow of the message verification method for a communication network system provided in this embodiment of the invention is illustrated. The steps of defining an authorized node from a relay node and verifying the monitoring data are described in detail below:

[0085] S401: Select an authorized node from the relay nodes based on the identity information.

[0086] Based on the registered user's identity information, an authorized node is selected from the relay nodes, where the authorized node can be the maintenance personnel of the target device.

[0087] S402: When the number of relay nodes corresponding to the target device is less than the set value within the same time window, collect the attribute data of the target device, generate a verification task, and publish it to the relay authorization management platform.

[0088] If, within a certain time window, the number of relay nodes detected by the Bluetooth receiver corresponding to the target device is lower than the set value (this may be due to the target device being deployed in a relatively remote location), the attribute data of the target device is collected. The attribute data includes the target device's number, type, and deployment location. The attribute data of the target device is written into a preset template, a verification task is generated, and the verification task is published to the relay authorization management platform.

[0089] Figure 6 This invention illustrates a block diagram of the composition structure of a message verification system for a communication network system provided in an embodiment of the present invention. The message verification system 1 of the communication network system includes:

[0090] Module 11 is used to create a relay authorization management platform, obtain registered users, and define relay nodes. When the Bluetooth receiver pre-integrated in the target device scans the Bluetooth signal of the relay node, a communication link is established between the Bluetooth receiver and the relay node, and the establishment time of the communication link is recorded.

[0091] Module 12 is used to collect monitoring data from the target device, create a hash function, sort the relay nodes in order of establishment time from first to last, obtain at least the first node and the second node, hash the monitoring data using the hash function to obtain the first hash value, send the first hash value to the relay authorization management platform via the communication link of the first node, integrate the establishment time and the first hash value corresponding to the first node, and hash to obtain the second hash value, and so on, to obtain the final hash value;

[0092] Upload module 13 is used to record the number of hashes to obtain the final hash value, set the risk level of the target device, establish the correspondence between the number of hashes and the risk level, and upload all hash values ​​to the relay authorization management platform via the communication link.

[0093] The verification module 14 is used to activate the cross-verification mechanism pre-embedded in the relay authorization management platform after receiving all hash values, to determine whether the monitoring data are the same. If they are the same, the monitoring data is sent to the preset terminal. If not, an authorization node is defined from the relay node and the monitoring data is verified.

[0094] Figure 7 This invention illustrates a block diagram of the composition of a message verification system for a communication network system provided in an embodiment of the present invention. The establishment module 11 includes:

[0095] The receiving unit 111 is used to receive the identity information of each registered user, wherein the identity information includes at least: contact information, job type, place of residence and willingness to participate, and the identity information is divided into several sub-items, wherein each sub-item corresponds to a weight value;

[0096] Editing unit 112 is used to edit evaluation rules, calculate the credibility score of each registered user, and define registered users whose credibility scores are greater than the threshold as relay nodes.

[0097] Figure 8 This diagram illustrates the structural block diagram of a message verification system for a communication network system provided in an embodiment of the present invention. The obtaining module 12 includes:

[0098] Mapping unit 121 is used to construct a node chain using the sorted relay nodes and establish a mapping between the node chain and the final hash value.

[0099] The construction unit 122 is used to build a cloud repository, upload the final hash value to the cloud repository, and verify it at a preset frequency;

[0100] Storage unit 123 is used to construct time windows, wherein each time window corresponds to a final hash value, and the time windows and final hash values ​​are stored in a version format.

[0101] Figure 9 This diagram illustrates the structural block diagram of a message verification system for a communication network system provided in an embodiment of the present invention. The upload module 13 includes:

[0102] The drawing unit 131 is used to draw a lookup table according to the correspondence, wherein the lookup table includes at least: a risk level item and a hash count item;

[0103] The judgment unit 132 is used to determine whether there is abnormal data in the monitoring data. If so, the registered user is defined as a relay node, and the abnormal data is uploaded to the relay authorization management platform using the relay node.

[0104] Figure 10 This invention illustrates a block diagram of the composition of a message verification system for a communication network system provided in an embodiment of the present invention. The verification module 14 includes:

[0105] The selection unit 141 is used to select an authorized node from the relay nodes using the identity information;

[0106] The publishing unit 142 is used to collect the attribute data of the target device, generate a verification task, and publish it to the relay authorization management platform when the number of relay nodes corresponding to the target device is less than a set value within the same time window.

[0107] The module 11 is mainly used to complete step S100, the module 12 is mainly used to complete step S200, the module 13 is mainly used to complete step S300, and the module 14 is mainly used to complete step S400.

[0108] The receiving unit 111 is mainly used to complete step S101, and the editing unit 112 is mainly used to complete step S102.

[0109] The mapping unit 121 is mainly used to complete step S201, the construction unit 122 is mainly used to complete step S202, and the storage unit 123 is mainly used to complete step S203.

[0110] The drawing unit 131 is mainly used to complete step S301, and the judgment unit 132 is mainly used to complete step S302;

[0111] The selection unit 141 is mainly used to complete step S401, and the release unit 142 is mainly used to complete step S402.

[0112] Suppose that a smart meter is installed in a certain community, which is the target device in this application. A Bluetooth receiver is deployed in the smart meter to periodically scan the Bluetooth signal in the surrounding environment. When a passerby A (who has completed registration in advance and is a relay node) establishes a communication link between A's mobile terminal and the Bluetooth receiver, the smart meter will upload the daily and monthly electricity consumption data that needs to be transmitted to the preset platform through the communication link.

[0113] The technical features of the above embodiments can be combined in any way. For the sake of brevity, not all possible combinations of the technical features in the above embodiments are described. However, as long as there is no contradiction in the combination of these technical features, they should be considered to be within the scope of this specification.

[0114] The embodiments described above are merely illustrative of several implementations of the present invention, and while the descriptions are specific and detailed, they should not be construed as limiting the scope of the present invention. It should be noted that those skilled in the art can make various modifications and improvements without departing from the concept of the present invention, and these modifications and improvements all fall within the scope of protection of the present invention. Therefore, the scope of protection of this patent should be determined by the appended claims.

[0115] The above description is only a preferred embodiment of the present invention and is not intended to limit the present invention. Any modifications, equivalent substitutions, and improvements made within the spirit and principles of the present invention should be included within the protection scope of the present invention.

Claims

1. A message authentication method for a communication network system, characterized by, The method comprises: Creating a relay authorization management platform, obtaining registered users, and defining relay nodes. When a Bluetooth receiver integrated in a target device in advance scans a Bluetooth signal of a relay node, a communication link between the Bluetooth receiver and the relay node is established, and the establishment time of the communication link is recorded; Collecting monitoring data of the target device, creating a hash function, and sequentially sorting the relay nodes in the order of establishment time from early to late to obtain at least a first node and a second node. In the target device, the monitoring data is hashed using the hash function to obtain a first hash value. The first hash value is sent to the relay authorization management platform via the communication link of the first node. The establishment time corresponding to the first node and the first hash value are integrated. In the target device, the second hash value is obtained by continuing to hash. The final hash value is obtained by analogy; The number of hashings to obtain the final hash value is recorded, the risk level of the target device is set, and the correspondence between the number of hashings and the risk level is established. All hash values are uploaded to the relay authorization management platform via the communication link; After receiving all the hash values, the cross-validation mechanism embedded in the relay authorization management platform is activated to determine whether the monitoring data is the same. If yes, the monitoring data is sent to a preset terminal. If no, an authorized node is defined from the relay nodes, and the monitoring data is verified; The step of creating a relay authorization management platform and obtaining registered users comprises: Receiving the identity information of each registered user, wherein the identity information at least includes: contact information, work type, residence, and participation willingness. The identity information is divided into several items, and each item corresponds to a weight value; Editing evaluation rules, calculating the credibility score of each registered user, and defining the registered user with a credibility score greater than a threshold value as a relay node; The step of defining an authorized node from the relay nodes and verifying the monitoring data comprises: Selecting an authorized node from the relay nodes via the identity information; When the number of relay nodes corresponding to the target device in the same time window is less than a set value, attribute data of the target device is collected, a verification task is generated, and is published to the relay authorization management platform.

2. The message authentication method of a communication network system according to claim 1, characterized by, The step of recording the establishment time of the communication link and sequentially sorting the relay nodes in the order of establishment time from early to late comprises: Using the sorted relay nodes to build a node chain and establish a mapping between the node chain and the final hash value; Building a cloud storage library, uploading the final hash value to the cloud storage library, and verifying at a preset frequency.

3. The message authentication method of a communication network system according to claim 2, wherein The step of integrating the establishment time corresponding to the first node and the first hash value, and hashing to obtain the second hash value, and sequentially obtaining the final hash value comprises: Building a time window, wherein each time window corresponds to a final hash value. The time window and the final hash value are stored in the form of a version.

4. The message authentication method of a communication network system according to Claim 1, characterized by, The step of recording the number of hashings to obtain the final hash value, setting the risk level of the target device, and establishing the correspondence between the number of hashings and the risk level comprises: Based on the correspondence, a lookup table is drawn up, wherein the lookup table at least includes: risk level items and hash times items; It is judged whether there is abnormal data in the monitoring data, and if so, the registered user is defined as a relay node, and the abnormal data is uploaded to the relay authorization management platform by using the relay node.

5. A message authentication system of a communication network system, characterized by comprising: The system comprises: The establishment module is configured to create a relay authorization management platform, acquire registered users, and define relay nodes, so that when a Bluetooth receiver pre-integrated in a target device scans a Bluetooth signal of a relay node, a communication link between the Bluetooth receiver and the relay node is established, and the establishment time of the communication link is recorded; The obtaining module is configured to collect monitoring data of the target device, create a hash function, sort the relay nodes in the order from the first to the last according to the establishment time, obtain at least a first node and a second node, hash the monitoring data by using the hash function in the target device to obtain a first hash value, send the first hash value to the relay authorization management platform via the communication link of the first node, integrate the establishment time corresponding to the first node and the first hash value, and continue to hash in the target device to obtain a second hash value, and the like, to obtain a final hash value; The uploading module is configured to record the hash times of the final hash value, set a risk level of the target device, establish a correspondence between the hash times and the risk level, and upload all the hash values to the relay authorization management platform via the communication link; The verification module is configured to activate a cross-verification mechanism pre-embedded in the relay authorization management platform after receiving all the hash values, judge whether the monitoring data is the same, and if so, the monitoring data is sent to a preset terminal, and if not, an authorized node is defined from the relay nodes, and the monitoring data is verified; The establishment module comprises: The receiving unit is configured to receive identity information of each registered user, wherein the identity information at least includes: a contact method, a work type, a residence, and a participation willingness, and the identity information is divided into a plurality of sub-items, and each sub-item corresponds to a weight value; The editing unit is configured to edit an evaluation rule, calculate a credibility score of each registered user, and define a registered user with a credibility score greater than a threshold value as a relay node; The verification module comprises: The selection unit is configured to select an authorized node from the relay nodes via the identity information; The publishing unit is configured to collect attribute data of the target device when the number of relay nodes corresponding to the target device is less than a set value in a same time window, generate a verification task, and publish the verification task to the relay authorization management platform.

6. The message authentication system of a communication network system according to claim 5, wherein The obtaining module comprises: The mapping unit is configured to use the sorted relay nodes to build a node chain, and establish a mapping between the node chain and the final hash value; The construction unit is configured to build a cloud storage, upload the final hash value to the cloud storage, and verify according to a preset frequency; The storage unit is configured to build a time window, wherein each time window corresponds to a final hash value, and the time window and the final hash value are stored in the form of a version.

7. The message authentication system of a communication network system according to claim 5, wherein The uploading module comprises: A drawing unit is configured to draw a correspondence table according to the correspondence relationship, wherein the correspondence table at least includes a risk level item and a hash number item; A judging unit is configured to judge whether there is abnormal data in the monitoring data, and if yes, define the registered user as a relay node, and upload the abnormal data to a relay authorization management platform by using the relay node.

Images