CHI digital economy international top-level domain name server system and method based on future network / FN, OVXDM and FN / M routing

Abstract

The invention discloses a CHI digital economy international top-level domain name server system and method based on overlapping multiplexing of a future network and OVXDM and FN / M virtual-real routing. According to the system, through cooperation of a. CHI global root domain service and credible identification layer, OVXDM overlapping multiplexing, an FN / M virtual-real routing addressing layer, an endogenous security and credible tracing layer and a data interaction terminal, a. CHI domain name is upgraded from an address resolution symbol to a comprehensive service voucher integrating a credible identity, a routing strategy and a security requirement. According to the invention, the qualitative change of the network service from'connection 'to'high-quality, safe and compliant connection' is realized, the problems of disjunction of the existing system identifier and value, routing stiffness, safety loss and difficulty in cross-border management are effectively solved, and a solid network foundation facility is provided for prosperity of digital economy.

Description

TECHNICAL FIELD

[0001] The application discloses a CHI digital economy international top-level root domain name server system and method based on future network / FN and OVXDM overlapping multiplexing and FN / M routing, belongs to the field of future network and digital economy technology integration, and particularly relates to a CHI root domain name service system and method based on a future network (FN) technology system, which is specially used for an international top-level root domain name in the field of digital economy and is integrated with OV overlapping multiplexing and FN / M virtual-real routing technology. The system provides a network root service integrating trusted identification, accurate addressing, safe transmission and compliance governance for data element circulation, digital asset transaction, digital government affair collaboration and the like. BACKGROUND

[0002] With the digital economy becoming a new engine for global economic growth, the demand for market allocation of data elements, cross-domain transaction of digital assets, collaborative governance of digital government affairs and the like is increasing rapidly, which puts unprecedented requirements on network infrastructure.

[0003] 1. Disconnection between existing network identification and value: existing general top-level domain names such as.com and.net cannot carry the credit, data asset attributes and compliance level of digital economy subjects (such as data providers, digital asset exchanges and government platforms), and are difficult to support high-value digital businesses.

[0004] 2. Stiffening of addressing and routing: traditional IP routing is separated from root domain name or DNS resolution, and the path is fixed, which cannot meet the needs of efficient, low-latency and on-demand circulation of data elements, especially in cross-border scenarios, and efficiency and security are difficult to balance.

[0005] 3. Lack of security and trust: sensitive data (such as personal privacy data, enterprise operation data and government confidential data) generated in digital economic activities faces the risk of leakage and tampering in the process of transmission and storage, and lacks endogenous security mechanism and full-link traceability capability.

[0006] 4. Difficulty in cross-border governance collaboration: the regulatory policies of digital economy vary from country to country, and the existing system lacks built-in and dynamic compliance adaptation and regulatory interface, resulting in high compliance cost and high risk of cross-border digital business.

[0007] 5. Although future network technology provides new possibilities, there is no engineering or application scheme to deeply integrate it with the digital economy exclusive domain name system to form a network identification and routing integrated infrastructure solution for digital economy. SUMMARY

[0008] (I) Invention purpose.

[0009] The purpose of the present application is to overcome the defects of the prior art, provide a set of future network deep fusion OVXDM overlay multiplexing, FN / M virtual real routing technology.CHI root domain name service system and method. By building a "trusted identity layer, intelligent routing layer, security capability layer" three-layer integrated architecture, a new network root service is provided for digital economy, which has trusted identity, optimal path, endogenous security and compliance guarantee.

[0010] (II) Technical solutions.

[0011] 1. System composition.

[0012] The system of the present application takes.CHI as a digital economy exclusive international top-level root domain name system, and its core is composed of four levels and data interaction terminals.

[0013] 1.1, CHI global root domain service and trusted identity layer. Distributed root area management system: based on FN network, multiple root mirror nodes are deployed in the world, and.CHI root area data is maintained to ensure high availability and invulnerability.

[0014] 1.2, Digital economy trusted identity library: bind a multidimensional digital identity to each.CHI domain name, including: subject identity (enterprise, institution, platform), data asset type (data set, algorithm model, digital rights), compliance credit (supervision record number, cross-border qualification), service level agreement (SLA). The identity is the basis for intelligent routing and security policy decision.

[0015] 1.3, OVXDM overlay multiplexing, FN / M virtual real routing intelligent routing and addressing layer (core innovation).

[0016] 1.4, OVXDM service awareness engine: located at the access point, performs deep packet inspection (DPI) and context awareness on.CHI service requests from the terminal, and extracts service features (such as service type-data transaction / government query, delay requirement, data size, target region).

[0017] 1.5, FN virtual real routing addressing engine: receives the service features of the OV engine and queries the trusted identity library. Based on the ternary information of "service demand + network state + compliance strategy", the optimal forwarding path is dynamically calculated.

[0018] 1.6, "Real path": through SRv6 (segment routing) or deterministic IP technology in FN network, a hard pipe guarantee is established for high-value, low-latency services (such as real-time clearing of digital assets).

[0019] 1.7, "Virtual path": through OV technology, an encrypted overlay network is built on the public Internet to provide high cost-effective flexible transmission for mass, non-real-time services (such as public data open download).

[0020] Policy routing controller: Finally issue routing policy, return.CHI domain name resolution result (IP address) and calculated best path (SRv6 SID list or OV tunnel endpoint) to requester.

[0021] 2, Endogenous security and trusted traceability layer.

[0022] 2.1, National secret level end-to-end encryption module: Provide mandatory encryption based on SM2 / SM4 algorithm for all.CHI domain name communication data.

[0023] 2.2, FN block chain storage and audit module: Real-time write.CHI domain name registration, resolution record, routing path selection, key data exchange hash and other full life cycle events into block chain, form tamper-proof audit clues.

[0024] 3, Data interaction terminal (CHI intelligent version).

[0025] As the carrier of user access system, it is built-in.CHI protocol stack. It not only completes the traditional domain name resolution, but also receives and executes the "path instruction" from the system, and establishes an encrypted tunnel (FN / M or OV) on the terminal side. At the same time, it provides a friendly data asset publishing, searching and trading interface for digital economy subjects.

[0026] (Three) management method.

[0027] 1. The method described in the application is developed around the whole life cycle management of.CHI domain name, and the key processes are as follows.

[0028] 1.1, Process A: registration and trusted identification generation of.CHI domain name

[0029] 1.2, After the system verifies the qualification, not only allocates datamarket.chi domain name, but also generates a trusted identification containing {type: data exchange, compliance: record of financial supervision department, asset type: financial data, SLA: 99.99%} in the trusted identification library.

[0030] 2, Process B: intelligent routing and data interaction based on trusted identification (take cross-border data query as an example).

[0031] 2.1, A European research institution (user A) wants to query certain cross-border data on datamarket.chi.

[0032] 2.2, OV service awareness: the terminal of user A initiates a request, and the local OV engine identifies it as a "cross-border, medium-sensitive, real-time requirement high" data query service.

[0033] 3, FN / M virtual real routing: the addressing engine combines service characteristics and datamarket.chi trusted identification (high security and cross-border compliance requirements) to determine to use "real path". It calculates a FN network low latency path that crosses Europe and China to meet China's data export regulatory requirements.

[0034] 4, secure execution and evidence storage: path establishment, data transmission in encrypted pipeline. The key metadata of this query, "who, when, to whom, through what path, access what data", is hashed and stored on the chain after FN national encryption, and the data is efficiently, securely and compliantly delivered to user A. Advantages

[0035] 1. From "resolving domain name" to "defining path": upgrade.CHI domain name from simple address pointer to "comprehensive routing credential" containing business requirements, security policy and routing instructions, realize the qualitative change of network from "best effort" to "on-demand service".

[0036] 2, integrated routing and security: routing decision based on trusted identification makes security (encryption, path isolation) an endogenous ability of the network, rather than an exogenous addition, fundamentally improving the security of digital economic activities.

[0037] 3, cross-border data flow compliance: compliance strategy as one of the inputs of routing calculation can intelligently select paths that meet data export regulatory requirements, greatly reducing compliance risks and operational costs.

[0038] 4, flexible architecture for the future: the synergy of "real path" and "virtual path" meets the high standard requirements of key businesses and is compatible with the inclusiveness of the public Internet, making the system flexible for future evolution. BRIEF DESCRIPTION OF DRAWINGS

[0039] Figure 1 The figure is a schematic diagram of the overall architecture and core technology of the system. The main content is as follows: the figure shows the core architecture of the system, which is divided into three layers. Various digital applications applied to the terminal layer are accessed through.CHI intelligent terminals. The core service layer uses trusted identification and intelligent routing addressing to link the future network network infrastructure (FN real path and OV virtual path) to complete on-demand data transmission, and is protected by the security traceability layer throughout.

[0040] Figure 2Flow chart of.CHI domain registration and trusted identity generation. The main content is as follows: this figure describes in detail the “trusted” source of.CHI domain. Registration is not only the allocation of a name, but also the auditing and digitizing process of the subject identity, asset type and compliance qualification, generating a trusted identity for subsequent intelligent routing decision.

[0041] Figure 3 Flow chart of intelligent routing and data interaction based on trusted identity. The main content is as follows: this figure vividly shows the innovative routing mechanism of the system core. The path of a.CHI request is not fixed, but is dynamically determined by business characteristics and target trusted identity, realizing the leap from “connectivity” to “high-quality connectivity” of network services. DETAILED DESCRIPTION

[0042] Embodiment 1: System architecture deployment.

[0043] With reference to Figure 1 , CHI global root domain service node needs to be deployed in the core hub cities (such as Beijing, Shanghai, Frankfurt, Singapore) of FN network. OVXDM overlap multiplexing, FN / M virtual and real routing intelligent routing and addressing engine as software defined network (SDN) controller, deployed in regional network center. Data interaction terminal (CHI intelligent version) is distributed in the form of software or built-in various digital application platforms.

[0044] Embodiment 2: High security transaction of digital asset exchange.

[0045] With reference to Figure 3 , a digital asset exchange assetex.chi (trusted identity: {type: exchange, asset: digital art, SLA: 99.999%}). When two institutions conduct large amount of digital art property transfer, the transaction request initiated by the terminal is recognized by OV engine as “extremely high value, zero tolerance delay”. The addressing engine combines this feature with the high SLA identity of the target, and decisively selects FN real path to establish a transoceanic deterministic low latency channel, ensuring that the transaction instruction is completed instantly and accurately, and the whole process is recorded by blockchain.

[0046] Embodiment 3: Open access of public data.

[0047] A government open data platform opendata.chi (trusted identity: {type: government, asset: public data, SLA: 99.9%}). When the public massively and concurrently downloads non-sensitive statistical data, the system intelligently selects OV virtual path to build an efficient distribution network on the public Internet, saving network resources while ensuring service.

Claims

1. A CHI digital economy international top-level domain name server system based on future network and OVXDM overlapping multiplexing, FN / M virtual-physical routing / M virtual-physical routing, characterized in that, The system is dedicated to .CHI domain name service management and includes: 1.1 CHI Global Root Domain Service and Trusted Identifier Layer, used to manage the .CHI root zone and generate and bind multi-dimensional trusted identifiers for each domain name; 1.2 OVXDM Overlapping Multiplexing, FN / M Virtual and Physical Routing Intelligent Routing and Addressing Layer, used to dynamically select FN physical path or OV virtual path for data transmission based on the characteristics of service requests and the trusted identifier of the target domain name; 1.

3. Intrinsic security and trusted traceability layer, used to provide end-to-end encryption and full-link blockchain evidence storage for the system; 1.4 Data Interaction Terminal, CHI Smart Edition, used to initiate requests, execute routing policies and provide a user interface.

2. The system according to claim 1, characterized in that, The OVXDM overlapping multiplexing, FN / M virtual and physical routing intelligent routing and addressing layer further includes: 2.1 OV Business Awareness Engine, used to parse the context and characteristics of business requests; 2.2 The FN virtual-physical routing engine is used to calculate and select the optimal transmission path based on service characteristics and trusted identifiers; 2.3 Policy routing controller, used to issue path instructions to the terminal.

3. The system according to claim 1, characterized in that, The trusted identifier includes multiple pieces of information such as the type of digital economy entity, data asset attributes, compliance qualifications, and service level agreements.

4. A domain name service management method based on the system of claim 1, characterized in that, The method includes: 4.1 Domain Registration and Identifier Generation Steps: Receive registration application, verify qualifications, generate trusted identifier and bind it to .CHI domain; 4.2 Intelligent Routing and Data Interaction Steps: Receive business requests, perceive business characteristics, dynamically select transmission paths based on the trusted identifier of the target domain name, and perform secure transmission and evidence storage.

Images