Construction project full life cycle information integrity guarantee method and system based on block chain

Abstract

The invention discloses a block chain-based construction project full life cycle information integrity guarantee method and system, and the method comprises the steps: firstly assigning a key address for each stakeholder in a construction project full life cycle; a sender uploads information to generate a hash value, and the hash value is processed by a series of functions to obtain an encrypted code and broadcasts the encrypted code; after verification, the receiver repeatedly processes and broadcasts; other parties decrypt and verify; if the verification exceeds the preset proportion is passed, the system packs the data into blocks, a difficulty problem is set, the first solver obtains permission and rewards, and the information and the blocks are stored together; the system is used for realizing the method, the information cannot be tampered through asymmetric encryption and a multimode hash function, and the transmission security is ensured by adopting a hybrid broadcast mode and an encryption channel; a dynamic consensus mechanism is combined with differentiated rewards to form decentralized verification ecology, the trust problem of a traditional mode is effectively solved, and digital upgrading of the building industry is promoted.

Description

TECHNICAL FIELD

[0001] The present application relates to an information integrity guarantee method and system, in particular to a building project whole life cycle information integrity guarantee method and system based on a block chain. BACKGROUND

[0002] The part provided in this part is only background information related to the present disclosure, which does not necessarily constitute prior art.

[0003] Building project whole life cycle information management involves planning, design, construction, operation and maintenance and other stages, and participants include owners, design units, construction units, supervision parties and supervision departments. A large amount of engineering documents, contracts, drawings and field data are generated in each stage, which needs to be shared and cooperated in real time among multiple parties. With the development of digital technology, traditional paper archives are gradually replaced by electronic storage, but information still faces security risks in transmission, storage and verification process.

[0004] The traditional building information management mode relies on centralized servers or third-party platforms to store data, which has the risk of single point failure, and the data modification trace is difficult to trace. In the process of information transmission, paper files are easy to lose and tamper, and electronic documents may be illegally accessed due to permission management vulnerabilities. When multiple parties cooperate, the authenticity of information needs to be verified through repeated checking and manual confirmation, which is inefficient and easy to cause disputes.

[0005] In addition, the traditional technology lacks effective authentication mechanism for the identity of information sender, and it is difficult to prevent forgery or impersonation. When data is transferred across stages, due to the lack of unified standards, information format is not compatible, content is missing, and other problems occur frequently, resulting in project delay or cost increase. These defects restrict the fine and intelligent development of building industry whole life cycle management.

[0006] It should be noted that the information disclosed in the above background section is only used to strengthen the understanding of the background of the present disclosure, and therefore can include information that does not constitute prior art known to those of ordinary skill in the art. SUMMARY

[0007] The technical problem to be solved by the present application is to provide a building project whole life cycle information integrity guarantee method and system based on a block chain to solve the problems of the prior art.

[0008] In order to solve the above technical problems, the present application discloses a building project whole life cycle information integrity guarantee method and system based on a block chain, which comprises:

[0009] Step 1, setting all stakeholders in the whole life cycle of the building project, generating private key, public key and exclusive information sending and receiving address for each stakeholder;

[0010] Step 2, the information sender uploads the building project information to the cloud to generate a first hash value; a second hash value is generated according to the information transmission description and the first hash value; an encryption code is generated according to the second hash value and the identity signature label;

[0011] Step 3, the information sender broadcasts to all stakeholders, the broadcast content including the information transmission description, the first hash value, the encryption code, the public key, the exclusive information transceiver address and the broadcast timestamp;

[0012] Step 4, the information receiver calculates the first hash value after downloading the broadcast content and compares it with the broadcast value, if consistent, generates the receiver related data according to the same method in step 2 and broadcasts;

[0013] Step 5, other stakeholders use the public key of the sender to decrypt the broadcast encryption code to get the decrypted value of the second hash value, the identity signature label and the decrypted value of the first hash value; calculate the first hash value and the second hash value and compare with the decrypted value;

[0014] Step 6, after the verification of the comparison result of the super preset proportion is passed, all valid related data is packaged into a new information block and the block hash value is calculated; set a mathematical problem according to the network computing power; the first participant who successfully solves the mathematical problem uploads the result, and the system verifies it and gives it the permission to add blocks and issues rewards, which are stored together with the block.

[0015] Further, the private key and public key for each stakeholder in step 1 are generated, and the specific method includes:

[0016] Step 1-1, using asymmetric encryption algorithm, generating the product of two large prime numbers as part of the public key, and the other part of the public key is calculated by the Euler function related to the prime number;

[0017] Step 1-2, the private key is derived from the public key parameters by the extended Euclidean algorithm, which is a pair of matching keys with the public key, and the length of the public key is consistent with the length of the private key;

[0018] Among them, the identity information associated with the public key includes the role type of the stakeholder, the project participation permission and the hash value of the identity authentication file. After the identity authentication file is approved by the blockchain system administrator, the public key and the identity information are bound and stored.

[0019] Further, the first hash value generated in step 2 includes:

[0020] The first hash value is generated by the basic hash function, wherein the basic hash function is:

[0021]

[0022] Among them, is input data, is a first hash value output, is a secure hash algorithm, represents that a 256-bit hash value is output.

[0023] Further, the second hash value generated in step 2, that is, the combination of the information transmission description and the first hash value, calls the time stable mapping function and the identity fusion function for processing, and combines the multi-mode feature binding hash function to generate the second hash value, which specifically includes:

[0024] Determine the input parameters, including the new string composed of the combination of the information transmission description and the first hash value , the information transmission timestamp , the sender's exclusive information transceiver address and the receiver's exclusive information transceiver address ;

[0025] The information transmission timestamp is processed by using the time stable mapping function to obtain the time mapping result ;

[0026] The sender's exclusive information transceiver address and the receiver's exclusive information transceiver address are converted into binary format and operated by using the identity fusion function to obtain the identity fusion result ;

[0027] The new string , the time mapping result , and the identity fusion result are sequentially spliced by using the string connection operator || to form a combination string , which is represented as follows:

[0028]

[0029] The combination string is operated by using the basic hash function to obtain the hash value, which is the second hash value .

[0030] Further, the time stable mapping function is:

[0031]

[0032] Wherein, t is the information transmission timestamp or the signature timestamp, is a logarithmic function or a logarithmic function with base 10, is the time mapping result.

[0033] Further, the identity fusion function is:

[0034]

[0035] wherein, is the sender-specific information transceiver address, is the receiver-specific information transceiver address, is the exclusive or operator, is the identity fusion result.

[0036] Further, the encrypted code generated according to the second hash value and the identity signature label in step 2 is generated, that is, the identity signature label is generated by using an identity signature function, and the second hash value and the identity signature label are encrypted by an encryption mechanism with a role signature factor to obtain the encrypted code; wherein, in the sender information processing, the identity signature function is:

[0037]

[0038] wherein, is the identity signature label, is the sender role identifier, is the signature timestamp, is the basic hash function, and || is the string concatenation operator.

[0039] Further, the information sender broadcasts to all stakeholders in step 3, including:

[0040] The information sender first broadcasts to the receiver point-to-point, and after the receiver feedback confirmation, the information sender broadcasts to other stakeholders in the whole network;

[0041] When the receiver finds that the broadcast elements are missing, the receiver sends a retransmission request containing the missing list to the sender, and the sender retransmits within a preset period.

[0042] Further, in the consensus and reward execution, the reward includes a basic virtual credit reward and an additional reward, the additional reward is determined according to the information verification accuracy rate of the participant in the past 30 days, the verification accuracy rate is the ratio of the correct verification times to the total verification times, and when the verification accuracy rate is higher than 95%, the additional reward is 1.2 times of the basic virtual credit reward.

[0043] The application also proposes a building project full life cycle information integrity guarantee system based on a block chain, which is used to realize the foregoing method, and includes:

[0044] A key address management module is configured to generate a private key, a public key and a dedicated information sending and receiving address for each stakeholder in the whole life cycle of a building project, and store the public key associated with the stakeholder role type, project participation permission and audited identity authentication file hash value;

[0045] An information processing module is deployed in an information sender terminal, uploads the building project information to the cloud, generates a first hash value, combines the information transmission description and the first hash value, calls a time stable mapping function, an identity fusion function and a multi-modal feature binding hash function to generate a second hash value, calls an identity signature function to generate an identity signature label, and generates an encryption code;

[0046] A broadcast receiving module includes a sending sub-module and a receiving sub-module; the sending sub-module first broadcasts the information transmission description, the first hash value, the encryption code, the public key, the sending and receiving address and the broadcast timestamp to the receiver point-to-point, and then broadcasts to all other stakeholders in the network after receiving the feedback confirmation, and supplements the missing elements within a preset time period after receiving the supplement request; the receiving sub-module checks the broadcast integrity, downloads the building project information, calculates the first hash value and compares it with the broadcast value, and if they are consistent, calls the information processing module to generate the receiver related data and triggers the sending sub-module to broadcast;

[0047] A multi-subject verification module receives the verification results and digital signatures of all stakeholders, and counts the number of verification passes and the total number of verifications , calculates the verification pass rate R, and determines whether to enter the consensus process according to the comparison result of R and the 80% threshold, and if R≤80%, generates a notification containing the verification pass rate, the list of stakeholders who failed to pass the verification and the corresponding verification opinions and broadcasts it;

[0048] A consensus reward module packages the related data as a new information block and calculates the block hash value when R>80%, sets a difficulty parameter N according to the network computing power to generate a mathematical problem, receives the solution results of the participants and verifies them, gives the first correct solver the permission to add blocks, and distributes the basic virtual credit rewards and additional rewards according to the information verification accuracy of the participants within a preset time period.

[0049] Advantages:

[0050] 1. The present application introduces blockchain technology to build a building project full life cycle information integrity protection system, effectively solving the problems of easy tampering and difficult tracing of information in traditional mode, using asymmetric encryption algorithm to generate unique identity for each stakeholder, combining time stable mapping function and multi-mode feature binding hash function, realizing the non-repudiation and verifiability of the whole information transmission process, adopting a hybrid mode of point-to-point confirmation + whole network synchronization in the broadcast and receiving link, cooperating with SSL / TLS encrypted transmission channel, ensuring the integrity and confidentiality of information in multi-party transmission, this design makes the data of each stage of building project traceable and auditable, and improves the trust basis of cross-organization collaboration.

[0051] 2. The present application builds a decentralized information verification ecology through dynamic consensus mechanism and incentive compatible reward system, sets 80% verification threshold, and issues differentiated rewards combined with the verification accuracy of participants in the past 30 days, which not only ensures efficient consensus, but also stimulates the participation enthusiasm of stakeholders through additional point reward mechanism, when the verification fails, the system automatically generates rectification notice containing the list of failed and opinions, forming a closed-loop management, this mode deeply integrates technical verification and economic incentive, breaks through the limitations of traditional information management relying on centralized institutions, and provides a replicable trust infrastructure for digital transformation of the construction industry. BRIEF DESCRIPTION OF DRAWINGS

[0052] The above and / or other aspects of the present application will become apparent from the following detailed description of the application taken in conjunction with the accompanying drawings.

[0053] Figure 1 The above and / or other aspects of the present application will become apparent from the following detailed description of the application taken in conjunction with the accompanying drawings.

[0054] Figure 2 The above and / or other aspects of the present application will become apparent from the following detailed description of the application taken in conjunction with the accompanying drawings.

[0055] Figure 3 The above and / or other aspects of the present application will become apparent from the following detailed description of the application taken in conjunction with the accompanying drawings.

[0056] Figure 4 The above and / or other aspects of the present application will become apparent from the following detailed description of the application taken in conjunction with the accompanying drawings. DETAILED DESCRIPTION

[0057] The application provides a kind of based on blockchain's building project whole life cycle information integrity guarantee method and system, by asymmetric encryption technology for each participant allocation unique digital identity, combine multi-mode feature binding hash function and dynamic consensus mechanism, ensure that information generation, transmission, storage whole process is inalterable and can be traced back;System uses point-to-point confirmation and whole network synchronization broadcast mode, cooperate identity signature and encryption verification, effectively prevent information forgery and tampering, at the same time, through the differential reward mechanism stimulates stakeholders to participate in verification, forms decentralized trust ecology.

[0058] The technical scheme of the application is as follows:

[0059] In the first aspect, a building project whole life cycle information integrity guarantee method based on blockchain is provided, and the specific steps of the method are:

[0060] Key address configuration: all stakeholders in the whole life cycle of the building project are determined, and a unique private key, a matching public key and a dedicated information receiving address are generated for each stakeholder by using an asymmetric encryption algorithm; the private key is independently kept by each stakeholder, the public key is associated with identity information and stored in a blockchain public node, and the dedicated information receiving address is used as an information receiving identifier;

[0061] In the key address configuration, the asymmetric encryption algorithm uses RSA algorithm, the product of two large prime numbers is generated as part of the public key, and the other part is calculated by the Euler function related to the prime number; the generated private key and public key are a pair of matching keys, the private key is derived from the public key parameters by using the extended Euclidean algorithm, and the private key length is set to 2048 bits, and the public key length is consistent with the private key length; the identity information associated with the public key includes the role type of the stakeholder, the project participation authority and the hash value of the identity authentication file, and the identity authentication file needs to be audited and passed by the blockchain system administrator to complete the binding storage of the public key and the identity information.

[0062] Sender information processing: the information sender uploads the building project information to the cloud, generates a first hash value by using a basic hash function; combines the information transmission description and the first hash value, calls a time stable mapping function and an identity fusion function for processing, generates a second hash value by using a multi-mode feature binding hash function; calls an identity signature function to generate an identity signature label, encrypts the second hash value and the identity signature label by using an encryption mechanism with a role signature factor, and obtains an encryption code;

[0063] In the sender information processing, the mathematical expression of the basic hash function is: , wherein: is the input data, is the output first hash value, is a secure hash algorithm, For the number of bits of the algorithm, it represents the 256-bit hash value output by the algorithm, and the specific operation process includes:

[0064] SHA-256 is a kind of secure hash algorithm, which belongs to SHA-2 series. The standard operation process is to pad the input data first, so that the data length becomes an integer multiple of 512 bits, then group the padded data by 512 bits, then perform message scheduling on each group of data, then perform compression operation, and the compression operation is realized through 64 rounds of iteration. Each round of iteration uses different nonlinear functions and constants. After a series of operations, a 256-bit hash value is output, which is consistent with the formula to get the first 256-bit hash value.

[0065] In the sender information processing, the specific steps for generating the second hash value are: determining the input parameters of the multi-mode feature binding hash function, including a new string composed of the information transmission description and the first hash value , information transmission timestamp , sender exclusive information transceiver address , receiver exclusive information transceiver address Call the time stable mapping function to process the information transmission timestamp , get the time mapping result Convert the sender exclusive information transceiver address and the receiver exclusive information transceiver address to binary format, call the identity fusion function to operate, get the identity fusion result , in order to , time mapping result , identity fusion result Splice through the string connection operator || , form a combined string ; call the basic hash function to operate on the combined string , the hash value obtained is the second hash value .

[0066] In the sender information processing, the mathematical expression of the time stable mapping function is: , t is the information transmission timestamp or signature timestamp, is the natural logarithm function or the logarithm function with base 10, is the time mapping result; the mathematical expression of the identity fusion function is: , is the sender exclusive information transceiver address, is the receiver exclusive information transceiver address, is the exclusive or operator, is the identity fusion result.

[0067] In the sender information processing, the multi-mode feature binding hash function expression is: wherein is the second hash value, is a new string combined by the information transmission description and the first hash value, and t is the information transmission timestamp, is the sender's exclusive information transceiver address, is the receiver's exclusive information transceiver address, is the basic hash function, and || is the string concatenation operator, is the time-stable mapping function result, is the identity fusion function result.

[0068] In the sender information processing, the mathematical expression of the identity signature function is: wherein is the identity signature label, is the sender's role identifier, is the signature timestamp, is the basic hash function, and || is the string concatenation operator;

[0069] First, the identity signature function is used to generate an identity signature label; then, under the encryption mechanism with a role signature factor, the sender's role corresponding signature factor is extracted first, the second hash value and the identity signature label are encrypted through the encryption mechanism with the role signature factor to obtain an encrypted code, that is, the signature factor is combined with the second hash value and the identity signature label, and then the private key of the sender is used to encrypt the combined data to finally obtain the encrypted code.

[0070] Broadcasting and receiving processing: the information sender broadcasts the information transmission description, the first hash value, the encrypted code, the public key, the transceiver address, and the broadcast timestamp to all stakeholders; the receiver checks the broadcast integrity, calculates the first hash value after downloading the information and compares it with the broadcast value, and if they are consistent, the sender's processing steps are repeated to generate the receiver's related data and broadcast;

[0071] The steps of receiving party checking broadcast integrity, downloading information and comparing first hash value with broadcast value include: after receiving the broadcast content of the information sender, the receiving party first checks the broadcast element integrity, needs to confirm whether the broadcast content contains information transmission description, first hash value, encryption code, sender public key, sender exclusive information transceiver address, receiver exclusive information transceiver address and broadcast timestamp, and if any element is missing, it is judged that the broadcast is not complete; if the broadcast is complete, the receiving party accesses the cloud storage access interface associated with the block chain system, inputs the information transmission description in the broadcast and the sender identity, calls the corresponding building project information and downloads, and the downloading process adopts SSL / TLS protocol to establish an encrypted transmission channel; the receiving party calls the basic hash function to calculate the hash value of the downloaded building project information to generate the first hash value on the receiving party side; the receiving party compares the first hash value calculated by itself with the first hash value broadcast by the information sender bit by bit to confirm whether they are completely consistent; if they are consistent, the receiving party repeats the processing steps of the information sender: generates the receiving party information transmission description containing the receiving party identity, the sender identity, the received information content and the receiving timestamp, combines the description and the first hash value into a new string, calls the time stable mapping function and the identity fusion function to process the corresponding parameters, generates the second hash value of the receiving party through the multi-mode feature binding hash function in combination with the new string, calls the identity signature function to generate the receiving party identity signature label, encrypts the second hash value of the receiving party and the identity signature label through the encryption mechanism with the role signature factor to obtain the receiving party encryption code;

[0072] Multi-agent information verification: other stakeholders use the sender public key to decrypt their encryption code, separate the second hash value and the identity signature label; calculate the second hash value and compare it with the decrypted value; verify the receiving party information according to the same steps, and compare the first hash values of both parties;

[0073] The specific steps of comparing the first hash values of both parties are: the system collects the verification results fed back by all the stakeholders participating in information verification, and the verification results contain pass or fail identification and verification party digital signature; the system extracts the number of stakeholders whose verification results are passed, denoted as ; the total number of stakeholders with information verification authority is counted, denoted as , wherein is the total number of project participants preset by the block chain system, and The system calculates the verification pass rate , the formula is: , and the preset proportion threshold is 80%; when , it is judged that the verification passes the preset proportion, and the system performs the subsequent steps of new information block packaging, block hash value calculation, difficulty parameter N setting, mathematical problem generation, participant solving, block adding and reward distribution; when When the system terminates the current consensus process, it generates a notification containing the verification pass rate, a list of stakeholders who failed verification, and corresponding verification opinions, and broadcasts it to all stakeholders. After the problem is resolved, the information verification process is restarted.

[0074] In the broadcast and reception process, the information sender uses a point-to-point + full network synchronous broadcast mode. First, it broadcasts to the receiver point-to-point, and then broadcasts to other stakeholders after receiving feedback from the receiver. If the receiver finds that the broadcast elements are missing, it sends a retransmission request containing the missing list to the sender, who must retransmit within 10 minutes.

[0075] Consensus and reward execution: When the verification pass rate exceeds the pre-set value, the building project information, each participant's verification record, and related time markers are integrated and packaged into a new information block. The hash value of this new information block is calculated. Then, based on the network's computing power, a difficulty parameter N is set to generate a mathematical problem that requires the first N bits of the combined hash value to be 0. Those who wish to participate adjust the random number to calculate the combined hash value. The first person to successfully calculate the result uploads it to the system, which verifies it and grants the person the right to add the block to the blockchain and issues a reward. The reward information is also saved with the block.

[0076] In the consensus and reward execution, the reward includes a basic virtual credit reward and an additional reward. The additional reward is determined by the information verification accuracy rate of the participant in the past 30 days. The verification accuracy rate is the ratio of the number of correct verifications to the total number of verifications. When the verification accuracy rate is higher than 95%, the additional reward is 1.2 times the basic virtual credit reward.

[0077] Second aspect, a building project full life cycle information integrity protection system based on blockchain, the system includes:

[0078] Key address management module: all stakeholders in the building project full life cycle are identified, and a 2048-bit unique private key, matching public key, and exclusive information sending and receiving address are generated for each stakeholder through RSA asymmetric encryption algorithm. The public key is associated with the stakeholder's role type, project participation authority, and audited identity authentication file hash value.

[0079] Information processing module: deployed in the information sender terminal, upload the building project information to the cloud, generate the first hash value through the SHA-256 basic hash function, combine the information transmission description and the first hash value, call the time stable mapping function, identity fusion function and multi-mode feature binding hash function to generate the second hash value, call the identity signature function to generate the identity signature label, encrypt the second hash value and the identity signature label through the encryption mechanism with the role signature factor to obtain the encryption code;

[0080] Broadcast receiving module: including sending sub-module and receiving sub-module; the sending sub-module: adopts point-to-point + full network synchronous broadcast mode, first broadcasts the information transmission description, the first hash value, the encryption code, the public key, the transceiver address and the broadcast timestamp to the receiver point-to-point, and then broadcasts to other stakeholders in the full network after receiving the feedback confirmation, and supplements the missing elements within 10 minutes after receiving the supplement request; the receiving sub-module: checks the broadcast integrity, downloads the building project information through the SSL / TLS encryption channel, calculates the first hash value and compares it with the broadcast value, if they are consistent, calls the information processing module to generate the receiver related data and triggers the sending sub-module to broadcast;

[0081] Multi-agent verification module: receives the verification results and digital signatures of all stakeholders, and counts the number of verification passes and the total number of verifications , calculates the verification pass rate R, and determines whether to enter the consensus process according to the comparison result of R and the 80% threshold, if

[0082] R≤80% then generate a notification containing the verification pass rate, the list of stakeholders who failed to pass the verification and the corresponding verification opinions and broadcast it;

[0083] Consensus reward module: used to package related data as a new information block and calculate the block hash value when R> 80%, set the difficulty parameter N according to the network computing power to generate a mathematical problem, receive the solution results of the participants and verify them, give the first correct solver the permission to add blocks, and according to the information verification accuracy of the participants in the past 30 days, issue basic virtual credit rewards and additional rewards.

[0084] Embodiment one:

[0085] Take the building project construction phase material acceptance information upload as an example.

[0086] The construction project material acceptance link of the construction project construction stage is clear to all stakeholders, including the construction unit, the construction unit, the supervision unit, the material supplier, the quality detection agency, and the five main bodies. Through the RSA asymmetric encryption algorithm, a unique private key, a matching public key, and a dedicated information receiving address are generated for each stakeholder, wherein the private key is independently kept by each subject, the construction unit stores its private key in a dedicated encryption hardware device, and the construction unit stores the private key through offline storage; the public key is stored in the blockchain public node after associating the identity information of each subject, the identity information includes the role type, the project participation authority and the hash value of the identity authentication file of each subject, all identity authentication files are audited by the blockchain system administrator, and the public key and the identity information are stored after the audit is passed; the dedicated information receiving address is the unique identifier of each subject for information transmission in the blockchain network, the dedicated address of the construction unit is used to receive the material information uploaded by the material supplier, and the material acceptance application information is sent to the supervision unit and the construction unit, as shown in Figure 1 .

[0087] The material supplier uploads the steel material acceptance information of this supply to the cloud storage system, calls the basic hash function to process the uploaded steel material acceptance information, generates a first hash value, and the mathematical expression of the basic hash function is: , wherein: is the input data, is the output hash value, which is used to preliminarily confirm that the material information has not been tampered with during the uploading process, as shown in Figure 3 .

[0088] Subsequently, the material supplier combines the information transmission description and the first hash value to form a new information set, wherein the information transmission description includes the sender identity, the receiver identity, the material information category and the transmission initiation time, calls the time stable mapping function to process the information transmission timestamp, and obtains the time mapping result, the mathematical expression of the time stable mapping function is: , t is the information transmission timestamp or the signature timestamp, is the natural logarithm function or the logarithm function with base 10, is the time mapping result, which ensures the stability of the time information in the subsequent verification; at the same time, the identity fusion function is called to respectively operate the dedicated information receiving address of the material supplier and the dedicated information receiving address of the construction unit and the supervision unit, and the identity fusion result is obtained, the mathematical expression of the identity fusion function is: , is the sender's dedicated information receiving address, is the receiver's dedicated information receiving address, is the exclusive or operator, is the identity fusion result, realizing the association and binding of the identity information of the sender and the receiver.

[0089] In combination with the above processing result, a multi-mode feature binding hash function is called to operate on the combined information to generate a second hash value, and the expression of the multi-mode feature binding hash function is: , wherein is the second hash value, is a new string combined by the information transmission description and the first hash value, and t is the information transmission timestamp, is the sender's exclusive information receiving address, is the receiver's exclusive information receiving address, is a basic hash function, and || is a string concatenation operator, is the result of the time stable mapping function, is the result of the identity fusion function, which integrates multi-dimensional features such as information content, time, and identity, further improving information security, then an identity signature function is called, the role identification of the material supplier and the signature timestamp are input, to generate an identity signature label, which is used to identify the sender's identity and the signature time of the information, and the mathematical expression of the identity signature function is: , wherein is the identity signature label, is the sender's role identification, is the signature timestamp, is a basic hash function, and || is a string concatenation operator, finally, the second hash value and the identity signature label are encrypted by an encryption mechanism with a role signature factor to obtain an encrypted code, the role signature factor is set according to the role type of the material supplier, ensuring that only the receiver with corresponding permission can decrypt the relevant information.

[0090] The material supplier broadcasts information in a point-to-point + full-network synchronous broadcast mode, first broadcasts to the construction unit and the supervision unit in a point-to-point manner, the broadcast content includes information transmission description, first hash value, encrypted code, public key of the material supplier, exclusive information receiving address of the material supplier and the receiver, and broadcast timestamp, after receiving the broadcast information, the construction unit and the supervision unit first verify the broadcast integrity to confirm whether all the above elements are included in the broadcast content, and no missing elements are found after inspection, it is determined that the broadcast is complete.

[0091] Subsequently, the construction unit and the supervision unit input the information transmission description in the broadcast and the identity of the material supplier through the cloud storage access interface associated with the blockchain system, call the corresponding steel material acceptance information and download, establish an encrypted transmission channel using the SSL / TLS protocol during the downloading process to prevent the information from being stolen or tampered with during the downloading process, and after the downloading is completed, the construction unit and the supervision unit respectively call the basic hash function to calculate the hash of the downloaded steel material acceptance information, generate the first hash value on the receiving side, and compare it with the first hash value broadcast by the material supplier bit by bit. The comparison result shows that the two are completely consistent, confirming that the material information has not changed during transmission and downloading.

[0092] Due to the consistent comparison of the first hash value, the construction unit and the supervision unit respectively repeat the information processing steps of the material supplier: the construction unit generates a receiving information transmission description containing its own identity, the sender's identity, the received information content and the receiving timestamp, combines the description with the first hash value to form a new string, calls the time stable mapping function to process the receiving timestamp to obtain the time mapping result, calls the identity fusion function to operate the exclusive address of the construction unit and the material supplier to obtain the identity fusion result, combines the new string to call the multi-mode feature binding hash function to generate the second hash value on the construction unit side, and then calls the identity signature function to generate the construction unit identity signature label. Finally, the relevant content is encrypted through the encryption mechanism with the construction unit role signature factor to obtain the construction unit encryption code; the supervision unit generates the information transmission description, the second hash value, the identity signature label and the encryption code on the supervision unit side in the same process. After processing, the construction unit broadcasts the relevant data generated by itself to the construction unit and the supervision unit, and the supervision unit broadcasts the relevant data generated by itself to the construction unit and the construction unit.

[0093] The construction unit and the quality detection agency, as other stakeholders, participate in the information verification process. The construction unit first decrypts the encryption code broadcast by the material supplier using the public key of the material supplier, separates the second hash value and the identity signature label, and then re-operates the information transmission description, timestamp, relevant exclusive address and other information transmitted by the material supplier using the multi-mode feature binding hash function to generate a new second hash value. Compare the new second hash value with the second hash value obtained by decryption to confirm that the two are consistent. At the same time, the construction unit verifies the information broadcast by the construction unit and the supervision unit according to the same steps, decrypts the corresponding encryption code using the public keys of the construction unit and the supervision unit, separates the relevant data, re-calculates the second hash value and compares it to ensure that the information processed by the construction unit and the supervision unit has not been tampered with.

[0094] After that, all stakeholders feed back their respective verification results, which contain a "pass" or "fail" mark and the digital signature of each subject. After the system collects all the verification results, it counts the number of stakeholders P whose verification results are "pass". In this project, P = 5. At the same time, the total number of stakeholders T with information verification authority is determined. The total number of participants in this project is preset to be 5, that is, T = 5. The system calculates the verification pass rate R. Since the preset proportion threshold is 80%, and 100% > 80%, it is determined that the verification pass rate exceeds the preset proportion threshold, and the system enters the subsequent consensus and reward execution step.

[0095] The system packages all the data related to this steel material acceptance into a new information block, and calls the block hash calculation method to calculate the hash value of the block to ensure the integrity of the data in the block.

[0096] According to the computing power of the current blockchain network, set the difficulty parameter N, generate a mathematical problem that needs to combine the first N bits of the block hash value to be 0. Nodes with consensus participation authority in the network can participate in the solution of this mathematical problem. Each node adjusts the random number to constantly calculate the combined hash value. The node belonging to the supervision unit is the first to calculate the combined hash value that meets the first N bits of 0, and immediately uploads the solution result to the system.

[0097] The system verifies the solution result uploaded by the supervision unit. After confirming that the result meets the requirements, the supervision unit is given the authority to add the new information block to the blockchain. After the supervision unit completes the block addition operation, the system issues rewards according to the reward rules. The rewards include basic virtual point rewards and additional rewards. The system first queries the information verification accuracy rate of the supervision unit in the past 30 days. The ratio of the number of correct verifications to the total number of verifications is 98%, which is higher than the threshold of 95%. Therefore, the additional reward is 1.2 times the basic virtual point reward. The reward information and the new information block added this time are stored in the blockchain to ensure that the reward record is traceable and tamper-proof.

[0098] In summary, the method embodiment takes the material acceptance information upload in the construction phase of the building project as the scene, and advances in five steps: key address configuration, sender information processing, broadcast and reception processing, multi-subject information verification, consensus and reward execution. First, generate keys and addresses for 5 stakeholders. Then, the material supplier processes the information to generate a hash value and an encryption code. After transmission through a specific broadcast mode, the receiver verifies and processes repeatedly. Each subject participates in verification. After more than 80% pass, package the block, generate a mathematical problem for solution, and finally reward the successful person. Throughout the process, specified algorithms and functions are used to ensure the integrity of the material acceptance information.

[0099] Embodiment two:

[0100] Take the report submission and audit in the completion and acceptance phase of the building project as an example.

[0101] The building project enters the completion acceptance stage, and the key address management module first sorts out the stakeholders in the completion acceptance link, including the construction unit, the construction unit, the supervision unit, the design unit, the survey unit, and the government quality inspection department, a total of 6 parties. The module generates a unique 2048-bit private key, a matching public key, and a dedicated information transmission address for each party through the RSA asymmetric encryption algorithm.

[0102] For public key storage, the module associates the public key of each party with the corresponding identity information, which includes role type, project participation authority, and hash value of identity authentication files. All identity authentication files are submitted to the blockchain system administrator for review. After approval, the module completes the binding and storage of the public key and identity information, and uploads the public key to the blockchain public node. The private key is kept by each party, and the design unit stores the private key in an encrypted server. The government quality inspection department uses a two-factor authentication method to protect private key access rights. The dedicated information transmission address is assigned to each party by the module as its unique identifier for information interaction related to completion acceptance in the system, as shown in Figure 2 .

[0103] The construction unit, as the submitter of the completion acceptance report, starts the information processing module deployed on its terminal. The construction unit uploads the completion acceptance report to the cloud storage system through the module. The module calls the basic hash function to operate on the uploaded completion acceptance report to generate a first hash value, which is used to preliminarily verify the integrity of the report content.

[0104] Next, the module automatically generates an information transmission description, which includes the sender's identity, the receiver's identity, the transmission file type, and the transmission initiation time. Then, it combines the information transmission description with the first hash value to form a new string. The module calls the time-stable mapping function to process the information transmission timestamp to obtain a time mapping result. At the same time, it calls the identity fusion function to operate on the dedicated information transmission address of the construction unit and the dedicated information transmission addresses of the construction unit, the supervision unit, and the government quality inspection department to obtain multiple identity fusion results.

[0105] Based on the above processing results, the module calls the multi-modal feature binding hash function to comprehensively operate on the new string, the time mapping result, and the identity fusion result to generate a second hash value. Then, it calls the identity signature function to input the role identifier of the construction unit and the signature timestamp to generate the identity signature label of the construction unit. Finally, the module encrypts the second hash value and the identity signature label through an encryption mechanism with the construction unit role signature factor to generate an encryption code, ensuring that only the specified receiver can decrypt and obtain the relevant data.

[0106] In the broadcast receiving module of the construction unit's terminal, the sending submodule adopts a point-to-point + network-wide synchronous broadcast mode. First, it broadcasts point-to-point to the construction unit, supervision unit, and government quality inspection department. The broadcast content includes information transmission description, first hash value, encryption code, construction unit's public key, the construction unit's and each recipient's exclusive information sending and receiving addresses, and broadcast timestamp. The construction unit, supervision unit, and government quality inspection department respectively send reception confirmation information to the sending submodule. After receiving confirmation feedback from all recipients, the sending submodule then broadcasts to the design unit and survey unit across the network to ensure that these two parties can obtain relevant information from the completion acceptance report.

[0107] During the broadcast, the design unit discovered that the construction unit's public key was missing from the broadcast content. It then sent a request to the sending submodule to retransmit the missing key. After receiving the request, the sending submodule retransmitted the construction unit's public key to the design unit within 10 minutes, ensuring that the design unit could participate normally in subsequent information verification.

[0108] After receiving the broadcast information from the construction unit, the receiving submodule of the construction unit's terminal first verifies the integrity of the broadcast by checking whether the broadcast content includes the information transmission description, the first hash value, the encryption code, the construction unit's public key, the relevant exclusive information sending and receiving address, and the broadcast timestamp. If all elements are found to be complete, the broadcast is deemed to be complete.

[0109] Subsequently, the receiving submodule accesses the cloud storage interface associated with the blockchain system, inputs the information transmission description in the broadcast and the identity identifier of the construction unit, retrieves the corresponding completion acceptance report and starts the download process. During the download process, the receiving submodule automatically establishes an encrypted transmission channel using the SSL / TLS protocol to prevent the report content from being intercepted or tampered with during transmission.

[0110] After downloading, the receiving submodule calls the basic hash function to perform hash calculation on the downloaded completion acceptance report, generating a first hash value for the construction unit. This first hash value is then compared bit-by-bit with the first hash value broadcast by the construction unit. The comparison result shows a complete match. Since the comparison is successful, the receiving submodule calls the information processing module to generate the construction unit's information transmission description, second hash value, identity signature tag, and encryption code, following the construction unit's information processing flow. After generation, the sending submodule is triggered to broadcast the relevant data processed by the construction unit to the supervision unit and government quality inspection department, such as... Figure 4 As shown.

[0111] The multi-stakeholder verification module receives verification results from all stakeholders. Each verification result includes a "pass" or "fail" flag and the digital signature of each stakeholder. The module categorizes and statistically analyzes the verification results. The number of stakeholders with a "pass" verification result (P) is 6, and the total number of stakeholders with information verification permissions (T) is 6.

[0112] The module calculates the verification passing rate R = 100% by the formula. Since the preset threshold is 80%, 100%>80%, the module determines that the current verification result meets the super preset passing condition, and sends an instruction to enter the consensus process to the system; if the survey unit does not obtain the complete completion acceptance report attachment, and feeds back the "not passed" mark, P = 5, R = 83.3%, which is still higher than the threshold of 80%, and enters the consensus process; if two parties feed back "not passed", P = 4, R = 66.7%≤80%, the module generates a notification containing the verification passing rate (66.7%), the list of stakeholders who failed to pass the verification, and the corresponding verification opinions, and broadcasts the notification to all stakeholders. After the construction unit supplements the report attachment and corrects the completion drawing, the information verification process is restarted.

[0113] When the multi-agent verification module determines that the verification passing rate exceeds the preset threshold, the consensus reward module starts running. The module first packages all the relevant data of the current completion acceptance stage into a new information block, calculates the hash value of the block by calling the block hash calculation method, and ensures that the block data cannot be tampered with.

[0114] Subsequently, the module sets the difficulty parameter N according to the computing power of the current block chain network, generates a mathematical problem that requires the first N bits of the combined hash value to be 0, and synchronizes the mathematical problem to all nodes in the network that have consensus participation authority. Each node adjusts the random number to continuously calculate the combined hash value. The node belonging to the government quality inspection department obtains the combined hash value that meets the condition first, and immediately uploads the solution to the consensus reward module.

[0115] The module verifies the solution uploaded by the government quality inspection department, and confirms that the result meets the requirements of the mathematical problem. The government quality inspection department is given the permission to add the new information block to the block chain. The government quality inspection department completes the block addition operation. Then, the module queries the information verification accuracy rate of the government quality inspection department in the past 30 days. The ratio of the number of correct verifications to the total number of verifications is 96%, which is higher than the threshold of 95%. Therefore, according to the reward rules, the government quality inspection department is awarded the basic virtual credit reward, and an additional reward of 1.2 times the basic virtual credit reward is additionally awarded. If the verification accuracy rate of a participating node in the past 30 days is 92%≤95%, only the basic virtual credit reward is awarded. Finally, the module stores the reward information and the new information block added this time in the block chain, realizes the traceability and permanent preservation of the reward record.

[0116] In summary, the embodiment of the system is around the building project completion acceptance stage report submission and audit, relying on five modules, the key address management module generates key addresses for six parties; the information processing module helps the construction unit to process the acceptance report to generate related data; the broadcast receiving module realizes accurate information transmission and receiving verification; the multi-agent module verifies the results to determine whether to enter the consensus; the consensus reward module packages blocks after verification, generates problems, and rewards the successful ones, and each module cooperates to ensure the information security and traceability of the completion acceptance stage.

[0117] In a specific implementation, the present application provides a computer storage medium and a corresponding data processing unit, wherein the computer storage medium can store a computer program, and the computer program can run the invention content and part or all steps in each embodiment of the building project full life cycle information integrity guarantee method and system based on block chain provided by the present application when executed by the data processing unit. The storage medium can be a magnetic disk, an optical disk, a read-only memory (ROM) or a random access memory (RAM), etc.

[0118] Those skilled in the art can clearly understand that the technical solutions in the embodiments of the present application can be realized by means of a computer program and its corresponding general hardware platform. Based on such understanding, the technical solutions in the embodiments of the present application can be embodied in the form of a computer program, i.e. a software product, which can be stored in a storage medium, including a plurality of instructions for causing a device (which can be a personal computer, a server, a single-chip microcomputer, an MCU or a network device, etc.) containing a data processing unit to execute the method described in each embodiment or some parts of the embodiments of the present application.

[0119] The present application provides a building project full life cycle information integrity guarantee method and system based on block chain. There are many methods and ways to realize the technical solutions, and the above description is only the preferred embodiment of the present application. It should be pointed out that for ordinary skilled persons in the technical field, without departing from the principles of the present application, some improvements and refinements can be made, which should be regarded as the protection scope of the present application. The components not explicitly described in the embodiment can be realized by using existing technology.

Claims

1. A blockchain-based building project full life cycle information integrity assurance method, characterized in that, The application comprises the following steps: Step 1: generating a private key, a public key and a dedicated information transmission address for each stakeholder in the whole life cycle of a building project; Step 2: uploading the building project information to the cloud by the information sender to generate a first hash value; generating a second hash value according to the information transmission description and the first hash value; generating an encryption code according to the second hash value and the identity signature label; Step 3: broadcasting the information by the information sender to all stakeholders, and the broadcast content comprises the information transmission description, the first hash value, the encryption code, the public key, the dedicated information transmission address and the broadcast timestamp; Step 4: calculating the first hash value after downloading the broadcast content by the information receiver and comparing it with the broadcast value, if they are consistent, generating the relevant data of the receiver according to the same method in step 2 and broadcasting it; Step 5: other stakeholders use the public key of the sender to decrypt the broadcast encryption code to obtain the decrypted value of the second hash value, the identity signature label and the decrypted value of the first hash value; calculating the first hash value and the second hash value and comparing them with the decrypted value; Step 6: after the verification of the comparison results of more than a preset proportion is passed, packaging all the valid relevant data into a new information block and calculating the block hash value; setting a mathematical problem according to the network computing power; the first participant who successfully solves the mathematical problem uploads the result, and the system verifies it to give it the permission to add blocks and issue rewards after verification, and the reward information is stored together with the block.

2. The blockchain-based building project full life cycle information integrity assurance method according to claim 1, characterized in that, The method for generating the private key and the public key for each stakeholder in step 1 comprises the following steps: Step 1-1: generating two large prime numbers as part of the public key by using an asymmetric encryption algorithm, and the other part of the public key is calculated by the Euler function related to the prime number; Step 1-2: the private key is derived from the public key parameters by using the extended Euclidean algorithm, and the public key and the private key are a pair of matching keys, and the length of the public key is consistent with the length of the private key; The identity information associated with the public key comprises the role type of the stakeholder, the project participation permission and the hash value of the identity authentication file, and the identity authentication file is audited by the blockchain system administrator, and then the public key and the identity information are bound and stored.

3. The blockchain-based building project full life cycle information integrity assurance method according to claim 2, characterized in that, The method for generating the first hash value in step 2 comprises the following steps: generating the first hash value by using a basic hash function, wherein the basic hash function is: wherein, is the input data, is the first hash value output, is the secure hash algorithm, denotes the output of a 256-bit hash value.

4. The method of claim 3, wherein, The second hash value is generated by combining the information transmission description and the first hash value, calling the time stable mapping function and the identity fusion function for processing, and combining the multi-mode feature binding hash function to generate the second hash value, which comprises the following steps: determining input parameters, including a new string combined from the information transmission description and the first hash value , information transmission timestamp , exclusive information transceiver address of the sender and exclusive information transceiver address of the receiver ; Using time stable mapping function on information transmission timestamp Processing to obtain time mapping result ; The exclusive information transceiver address of the sending party The exclusive information transceiver address of the receiving party Convert to binary format and operate with an identity fusion function to obtain an identity fusion result ​ The new string is concatenated in order , the time mapping result , and the identity fusion result The combined string is formed by string concatenation operator || , which is represented as follows: The calling operation uses the base hash function to operate on the combined string to obtain a hash value as the second hash value .​ 5. The blockchain-based building project full life cycle information integrity assurance method according to claim 4, characterized in that, The time stable mapping function is: wherein t is an information transmission timestamp or a signature timestamp, is a logarithm function or a logarithm function with base 10, is a time mapping result.

6. The blockchain-based building project full life cycle information integrity assurance method according to claim 5, characterized in that, The identity fusion function is: wherein, is a sender-specific information transceiving address, is a receiver-specific information transceiving address, is an exclusive OR operator, is an identity fusion result.

7. The blockchain-based building project full life cycle information integrity assurance method according to claim 6, characterized in that, The encryption code is generated according to the second hash value and the identity signature label in step 2, that is, the identity signature label is generated by using the identity signature function, and the second hash value and the identity signature label are encrypted by using the encryption mechanism with the role signature factor to obtain the encryption code; wherein the identity signature function in the sender information processing is: wherein, is an identity signature tag, is a sender role identification, is a signature timestamp, is a base hash function, and || is a string concatenation operator.

8. The blockchain-based building project full life cycle information integrity assurance method according to claim 7, characterized in that, The information is broadcasted to all stakeholders by the information sender in step 3, which comprises the following steps: The information sender broadcasts to the receiver point by point, and then broadcasts to all other stakeholders in the network after receiving the feedback from the receiver; When the receiver finds that the broadcast element is missing, the sender sends a retransmission request containing the missing list, and the sender retransmits the missing element within a preset period.

9. The blockchain-based building project full life cycle information integrity assurance method according to claim 8, characterized in that, In the consensus and reward execution, the reward includes a basic virtual credit reward and an additional reward, the additional reward is determined according to the information verification accuracy of the participant in the last 30 days, the verification accuracy is the ratio of the correct verification times to the total verification times, when the verification accuracy is higher than 95%, the additional reward is 1.2 times of the basic virtual credit reward. 10.A blockchain-based building project full life cycle information integrity assurance system, characterized in that, The method comprises the following steps: The key address management module is used to set all stakeholders in the whole life cycle of the building project, generate a private key, a public key and a dedicated information transmission address for each stakeholder, and store the public key associated with the stakeholder role type, project participation authority and audited identity authentication file hash value. The information processing module is deployed on the information sender terminal, uploads the building project information to the cloud, generates a first hash value, combines the information transmission description and the first hash value, calls the time stable mapping function, the identity fusion function and the multi-mode feature binding hash function to generate a second hash value, calls the identity signature function to generate an identity signature label, and generates an encryption code. The broadcast receiving module includes a sending submodule and a receiving submodule; the sending submodule first broadcasts the information transmission description, the first hash value, the encryption code, the public key, the transmission address and the broadcast timestamp to the receiver point-to-point, and then broadcasts to all stakeholders in the network after receiving the feedback confirmation, and retransmits the missing elements within a preset time period after receiving the retransmission request; the receiving submodule verifies the broadcast integrity, downloads the building project information, calculates the first hash value and compares it with the broadcast value, if they are consistent, the information processing module is called to generate the receiver related data and trigger the sending submodule to broadcast; A multi-agent verification module receives the verification results and digital signatures of all stakeholders, and counts the number of passed verifications and the total number of verifications , calculates the verification pass rate R, and determines whether to enter the consensus process according to the comparison result of R and the 80% threshold. If R≤80%, a notification containing the verification pass rate, the list of stakeholders who failed the verification, and the corresponding verification opinions is generated and broadcasted. The consensus reward module packages the related data as a new information block and calculates the block hash value when R>80%, generates a mathematical problem according to the network computing power setting difficulty parameter N, receives the solution result of the participant and verifies it, gives the first correct solver the permission to add the block, and issues the basic virtual credit reward and the additional reward according to the information verification accuracy of the participant within a preset time period.

Images