Data security transmission system and method based on block chain

Abstract

The invention discloses a block chain-based data security transmission system and method, and the system comprises a plurality of block chain nodes, each block chain node is connected with a plurality of router nodes through an independent link, data is sent to each block chain node in a broadcasting manner, and then the block chain nodes encrypt and distribute the data, so that the data security transmission efficiency is improved. And the router node groups the data distributed by the block chain node and then forwards the data. According to the method, the defects in the prior art can be overcome, and routing attacks and solar erosion attacks are reduced.

Description

Technical Field

[0001] This invention relates to the field of data communication technology, and in particular to a data security transmission system and method based on blockchain. Background Technology

[0002] Blockchain is a distributed, decentralized data transmission and storage technology that has experienced rapid development over the past decade. Because data updates in a blockchain require modification of the ledger across all nodes, the risk of data tampering is significantly reduced. With the maturity of blockchain technology, more and more vertical markets are choosing to use it for data transmission because it reduces intermediaries, offers strong interactivity, and greatly improves data transmission efficiency. However, as user adoption of blockchain technology increases, so too does the number of malicious attacks targeting it. Routing attacks and eclipse attacks are two common types of attacks. Both exploit vulnerabilities in network routing nodes to illegally intrude and steal data. Improving the security of blockchain data transmission between different routing nodes is crucial to reducing routing and eclipse attacks. Summary of the Invention

[0003] The technical problem to be solved by the present invention is to provide a data security transmission system and method based on blockchain, which can overcome the shortcomings of the prior art and reduce the occurrence of routing attacks and eclipse attacks.

[0004] To solve the above-mentioned technical problems, the technical solution adopted by the present invention is as follows.

[0005] A blockchain-based data security transmission system includes: several blockchain nodes, each blockchain node being connected to several router nodes through an independent link; the blockchain nodes are used to receive data, then encrypt and distribute the data; and the router nodes are used to group the data distributed by the blockchain nodes and then forward it.

[0006] A transmission method for the aforementioned blockchain-based secure data transmission system includes the following steps: Data is broadcast to various blockchain nodes, which then encrypt and distribute the data. Router nodes group the data distributed by the blockchain nodes and then forward it.

[0007] As a preferred approach, after receiving the data, the blockchain node performs a risk assessment and categorizes the data into high-risk and low-risk data. For low-risk data, it performs one encryption, while for high-risk data, it performs a second encryption after the first encryption. Each encryption uses the key generated from the current blockchain node's ledger.

[0008] As a preferred approach, data risk assessment dimensions are determined, and an evaluation matrix for the data is established based on these dimensions. The elements of the evaluation matrix are... W ij P represents the weight of the i-th evaluation dimension relative to the j-th evaluation dimension. ij Let be the probability of the i-th evaluation dimension relative to the j-th evaluation dimension; use the Laplace transform to transform the evaluation matrix into a Hermitian matrix. Calculate the eigenvectors of the Hermitian matrix, which contain the risk weights of all dimensions. Calculate the sum of the eigenvalues ​​of all eigenvectors as the data risk assessment value. Set a risk preset value based on the actual working conditions. If the data risk assessment value is less than the risk preset value, it is determined to be low-risk data; otherwise, it is determined to be high-risk data.

[0009] As a preferred approach, data risk assessment dimensions include data source address, data type, data summary, data identity information, and data sensitivity.

[0010] Preferably, the data distributed by the blockchain nodes is grouped according to the data target address, and each group contains at least one low-risk data. The router node first sends the low-risk data, extracts the response data of all router nodes through which the low-risk data passes, forms a response data packet, and then transforms the response data packet into a set of linearly independent data groups in each dimension through orthogonal transformation. The feature vector of the data group is extracted. If the extracted feature vector contains a feature vector that is not in the feature vector whitelist, it is determined that there is an illegal attack in this data link; otherwise, it is determined that there is no illegal attack in this data link. When sending high-risk data, the data link with the fewest router nodes shared with the data link with illegal attack is selected for transmission.

[0011] As a preferred approach, security testing and vulnerability patching should be performed on data links where illegal attacks are suspected.

[0012] As a preferred approach, the log information of router nodes sending high-risk data is periodically summarized, router nodes with inconsistent log information are isolated, and security checks and vulnerability patching are performed. At the same time, the router nodes that have been patched are enabled to form a new data link.

[0013] The beneficial effects of adopting the above technical solution are as follows: This invention improves the accuracy and efficiency of risk assessment by optimizing the data risk assessment method. Then, by using low-risk data to examine the data link, risky links can be quickly identified. Therefore, when sending high-risk data, a relatively secure data link can be selected, reducing the occurrence of routing attacks and eclipse attacks. Attached Figure Description

[0014] Figure 1 This is a structural diagram of a specific embodiment of the present invention. Detailed Implementation

[0015] Reference Figure 1 One specific embodiment of the present invention is a multi-link transmission structure, which includes several blockchain nodes. Each blockchain node is connected to several router nodes through an independent link. Data is broadcast to each blockchain node, and then the blockchain nodes encrypt and distribute the data. The router nodes group the data distributed by the blockchain nodes and then forward it.

[0016] After receiving data, blockchain nodes perform a risk assessment, categorizing the data into high-risk and low-risk categories. The accuracy of this risk assessment directly impacts the subsequent algorithm implementation; therefore, we provide the following assessment method.

[0017] First, determine the dimensions for data risk assessment, including data source address, data type, data summary, data identity information, and data sensitivity. Based on these risk assessment dimensions, establish a 5x5 data evaluation matrix. The elements of the evaluation matrix are... , 1≤i≤5, 1≤j≤5, where W ij P represents the weight of the i-th evaluation dimension relative to the j-th evaluation dimension. ij Let be the probability of the i-th evaluation dimension relative to the j-th evaluation dimension. The evaluation matrix is ​​transformed into a Hermitian matrix using a Laplace transform. The eigenvectors of the Hermitian matrix are calculated, containing the risk weights of all dimensions. The sum of the eigenvalues ​​of all eigenvectors is used as the data risk assessment value. A risk preset value is set based on the actual working conditions. If the data risk assessment value is less than the risk preset value, it is determined to be low-risk data; otherwise, it is determined to be high-risk data.

[0018] For low-risk data, encryption is performed once; for high-risk data, encryption is performed twice, after the first encryption. This allows more computing power to be allocated to high-risk data. Each encryption uses the key generated from the current blockchain node ledger.

[0019] Due to the large number of router nodes, directly detecting illegal attacks on each router node would consume enormous computing power and could not guarantee real-time performance. Therefore, we adopted the following indirect detection method.

[0020] Router nodes group the data distributed by blockchain nodes according to the data destination address, with each group containing at least one low-risk data item. The router node first sends the low-risk data, extracts the response data from all router nodes the low-risk data has passed through, forming a response data packet. Then, it uses an orthogonal transformation to convert the response data packet into a set of linearly independent data groups. Feature vectors are extracted from these data groups. If the extracted feature vectors contain feature vectors not in the feature vector whitelist, it is determined that there is an illegal attack in this data link; otherwise, it is determined that there is no illegal attack in this data link.

[0021] When sending high-risk data, the data link with the fewest router nodes shared with the data link where illegal attacks are suspected is selected for transmission. Simultaneously, security checks and vulnerability patching are performed on the data link where illegal attacks are suspected. The log information of the router nodes sending high-risk data is periodically summarized; router nodes with inconsistent log information are isolated, and security checks and vulnerability patching are performed on them. At the same time, the patched router nodes are activated to form new data links.

[0022] This invention abandons the periodic monitoring of individual nodes found in existing blockchain data transmission algorithms. Instead, it employs a method of synchronous data link detection with data transmission, expanding the perspective to the entire data transmission link rather than directly monitoring individual nodes. This significantly improves monitoring efficiency without compromising data transmission efficiency. To ensure efficient data link monitoring and reduce the impact of unauthorized attacks on data transmission, a rapid assessment of the risk level of transmitted data is necessary. This invention optimizes the data risk assessment method, enabling rapid classification of high- and low-risk data, thereby achieving simultaneous high-security data transmission and vulnerability remediation.

[0023] In the description of this invention, it should be understood that the terms "longitudinal", "lateral", "up", "down", "front", "rear", "left", "right", "vertical", "horizontal", "top", "bottom", "inner", "outer", etc., indicate the orientation or positional relationship based on the orientation or positional relationship shown in the accompanying drawings, and are only for the convenience of describing this invention, and are not intended to indicate or imply that the device or element referred to must have a specific orientation, or be constructed and operated in a specific orientation, and therefore should not be construed as a limitation of this invention.

[0024] The foregoing has shown and described the basic principles, main features, and advantages of the present invention. Those skilled in the art should understand that the present invention is not limited to the above embodiments. The embodiments and descriptions in the specification are merely illustrative of the principles of the invention. Various changes and modifications can be made to the invention without departing from its spirit and scope, and all such changes and modifications fall within the scope of the present invention as claimed. The scope of protection of this invention is defined by the appended claims and their equivalents.

Claims

1. A blockchain-based data security transmission system, characterized in that The application relates to a data transmission method and system. The application comprises:

2. The transmission method of the blockchain-based data security transmission system according to claim 1, characterized in that The application comprises the following steps: The data is sent to each blockchain node by broadcasting, and then the blockchain node encrypts and distributes the data; the router node groups the data distributed by the blockchain node and then forwards the data. 3.The transmission method of the blockchain-based data security transmission system according to claim 2, characterized in that: After receiving the data, the blockchain node performs risk assessment on the data and divides the data into high-risk data and low-risk data. For low-risk data, one-time encryption is performed, and for high-risk data, secondary encryption is performed after one-time encryption; the current blockchain node account book is used to generate a key for each encryption. 4.The transmission method of the blockchain-based data security transmission system according to claim 3, characterized in that: determining a data risk assessment dimension, establishing an evaluation matrix of the data according to the data risk assessment dimension, elements of the evaluation matrix being wherein W ij is a weight of the i th evaluation dimension relative to the j th evaluation dimension, P ij is a possibility of the i th evaluation dimension relative to the j th evaluation dimension; using Laplace transformation to transform the evaluation matrix into an Hermitian matrix. Calculating an eigenvector of the Hermitian matrix, the eigenvector containing risk weights of all dimensions, calculating a sum of eigenvalues of all eigenvectors as a data risk assessment value. According to actual working conditions, setting a risk preset value, when the data risk assessment value is less than the risk preset value, determining as low-risk data, otherwise determining as high-risk data. 5.The transmission method of the blockchain-based data security transmission system according to claim 4, characterized in that: The data risk assessment dimensions include data source address, data type, data digest, data identity information and data sensitivity. 6.The transmission method of the blockchain-based data security transmission system according to claim 5, characterized in that: According to the data target address, the data distributed by the blockchain node is grouped, and each group of data at least includes one low-risk data; the router node first sends the low-risk data, extracts the response data of all router nodes through which the low-risk data passes, forms a response data packet, and then converts the response data packet into a group of linearly independent data groups in each dimension through orthogonal transformation; the feature vector of the data group is extracted; if the extracted feature vector contains a feature vector not in the feature vector white list, it is determined that illegal attack behavior exists in the data link; otherwise, it is determined that illegal attack behavior does not exist in the data link; when high-risk data is sent, the data link with the least router node shared with the data link with illegal attack behavior is selected for sending. 7.The transmission method of the blockchain-based data security transmission system according to claim 6, characterized in that: The data link with illegal attack behavior is subjected to security detection and vulnerability repair. 8.The transmission method of the blockchain-based data security transmission system according to claim 7, characterized in that: The router node log information for sending high-risk data is periodically summarized, the router nodes with inconsistent log information are isolated, subjected to security detection and vulnerability repair, and the router nodes subjected to vulnerability repair are enabled to form a new data link.

Images