Boiler monitoring data auditing method, system and equipment based on threshold national secret and storage medium

Abstract

The invention relates to a threshold national secret-based boiler monitoring data auditing method, system and device and a storage medium, and the method comprises the following steps: a data acquisition and processing unit which is used for obtaining infrared thermal images, oxide skin thickness and working vibration data, and generating an infrared thermal image data set and a key parameter data set; the thermal image analysis unit is used for carrying out abnormal mutagenesis analysis on global features and local detail features in the infrared thermal image data set; the key parameter analysis unit is used for analyzing the key parameter data set; the matching verification unit is used for finding out operation abnormal data matched with a second abnormal target feature formed by the first abnormal target feature according to historical operation data of the boiler; and the monitoring and early warning unit is used for generating early warning information from the abnormal boiler operation data and generating a management and control coordination scheme according to the generated early warning information, so that an auditing voucher is ensured, the quantum attack resistance of the key is improved, and the auditing efficiency is improved.

Description

TECHNICAL FIELD

[0001] The present application relates to the technical field of boiler monitoring data auditing, in particular to a boiler monitoring data auditing method, system and device based on threshold national cryptography and a storage medium. BACKGROUND

[0002] A thermal power plant, referred to as a power plant, is a plant that uses combustible materials as fuel to produce electric energy. The power plant includes a fuel system, a combustion system, a steam-water system, an electrical system and a control system. The most important equipment of the above-mentioned systems is a boiler, a steam turbine and a generator, which are installed in the main plant house of the power plant.

[0003] Due to the complex working conditions of high temperature and high pressure of the boiler, once the monitoring data is tampered with and the operation instruction is forged, a major safety accident may be caused.

[0004] The existing boiler safety auditing system may be evaded by the operation and maintenance personnel through the omission of abnormal data, so that the overpressure risk cannot be found during auditing, only the compliance of the collected data is verified, whether the sampling is continuous cannot be verified, there is an auditing loophole, the traditional key system has insufficient resistance to quantum attacks, the single-point permission of the administrator is misused and trust is invalid, and the auditing needs the auditor to check the plaintext log, resulting in a conflict between auditing compliance and privacy protection, and low auditing efficiency. SUMMARY

[0005] The boiler monitoring data auditing method, system and device based on threshold national cryptography provided by the present application solve the technical problem that the existing boiler safety auditing system may be evaded by the operation and maintenance personnel through the omission of abnormal data, so that the overpressure risk cannot be found during auditing, only the compliance of the collected data is verified, whether the sampling is continuous cannot be verified, there is an auditing loophole, the traditional key system has insufficient resistance to quantum attacks, the single-point permission of the administrator is misused and trust is invalid, and the auditing needs the auditor to check the plaintext log, resulting in a conflict between auditing compliance and privacy protection, and low auditing efficiency.

[0006] To achieve the above-mentioned purpose, the present application adopts the following technical scheme: a boiler monitoring data auditing method based on threshold national cryptography, comprising the following steps: S1, acquiring boiler monitoring auditing input data and generating a key of the boiler monitoring auditing input data; S2, constructing an anti-quantum key encapsulation mechanism using lattice cryptography, and dividing the key into a plurality of key fragments, which are respectively stored in the hardware security module of a system administrator, a security auditor and a security administrator; S3, generating a valid SM3 threshold signature by collaborative calculation using a plurality of key fragments of the system administrator, the security auditor and the security administrator, and obtaining and outputting a key operation; S4. Perform structured processing on the output logs of the key operation and maintenance operations, generate proof π, and use proof π to generate privacy protection audit conclusions and aggregated hash values ​​of key operation and maintenance operation parameters. S5. Store the aggregated hash value of the privacy protection audit conclusion and key operation and maintenance parameters into the consortium blockchain optimized based on the SM3 algorithm, and output the privacy protection audit conclusion. S6. By verifying the validity of the proof π, determine whether the privacy protection audit conclusion and key operation and maintenance operations comply with the predefined access control policy.

[0007] Preferably, the formula for generating the key fragment in step S2 is as follows: ; in, For a complete quantum-resistant key, For the first Key fragments held by each character It is a polynomial function used to convert the complete key. Mapped to A fragment, , , , The random coefficients of the polynomial, This refers to the role number, where the roles are System Administrator, Security Auditor, and Security Administrator; The formula for calculating the partial signatures of each participant during the threshold signature process is as follows: ; in, For the first Random numbers generated for each character It is its inverse in the corresponding operation. The hash value of the collected data. A globally random number is generated through negotiation for all characters.

[0008] Preferably, in step S3, the key fragments are synthesized into a complete signature using Lagrange interpolation, and the calculation formula for the complete signature is as follows: ; in, For the complete threshold signature after aggregation, For the set of characters who participated in the signing, As a participant The corresponding Lagrange interpolation coefficients, denoted as the elliptic curve order of the algorithm.

[0009] Preferably, when generating the aggregated hash value of key operation and maintenance parameters in step S4, the continuous Each parameter point is used as an audit window, and zk-SNARKs are used to generate proof π that all parameters within the window are compliant. The formula for calculating the aggregated hash value of the key operation and maintenance parameters is as follows: ; in, Aggregate hash values ​​for key operation and maintenance parameters. This is a Chinese national cryptographic SM3 hash function implemented based on arithmetic circuits. For the first Steam pressure values ​​at each sampling point For the first Furnace temperature values ​​at each sampling point For the first The boiler drum water level values ​​at each sampling point For the first Oxygen content in flue gas at each sampling point.

[0010] Preferably, the core compliance constraint formula for zk-SNARKs is as follows:

[0011] in, To constrain the coverage area of ​​all One sampling point, This is the minimum safe threshold for steam pressure. This is the rated threshold for steam pressure. This represents the minimum safe threshold for furnace temperature. This refers to the rated threshold temperature of the furnace. This is the minimum safe threshold for the boiler drum water level. This represents the maximum safe threshold for boiler drum water level. For the first The sampling point and the first The time interval between sampling points For the first The timestamp of each sampling point for The prime modulus preset for the circuit, Quantum-resistant key for acquisition nodes (and) pair).

[0012] Preferably, the consortium blockchain in S5 adopts a Fabric architecture based on the national cryptographic standard SM3, and the data of the consortium blockchain is encrypted and stored in SM3-CTR mode; The encryption formula for the SM3-CTR mode is as follows: ); in, The encrypted ciphertext, For the CTR mode of the national cryptographic SM4 algorithm, The SM3 symmetric key is dynamically generated by the TEE. For auditing window proofs of zk-SNARKs, This is the start timestamp of the audit window. This is the end timestamp of the audit window.

[0013] Preferably, the index formula for the consortium blockchain is as follows: ; in, For a unique index on the consortium blockchain, This is the unique equipment identifier for the boiler.

[0014] A system based on a threshold-based national cryptographic method for auditing boiler monitoring data includes: The data acquisition module is used to acquire boiler monitoring and audit input data and generate a key for the boiler monitoring and audit input data; The key management module is used to construct a quantum-resistant key encapsulation mechanism using lattice cryptography and divide the key into n key fragments, which are stored in the hardware security modules of the system administrator, security auditor, and security administrator respectively. The signature calculation module uses t key fragments from the system administrator, security auditor, and security administrator to collaboratively calculate and generate a valid SM3 threshold signature, and obtains and outputs key operation and maintenance operations. The proof generation module is used to perform structured processing on the logs of the key operation and maintenance operations output, generate proof π, and use proof π to generate privacy protection audit conclusions and aggregated hash values ​​of key operation and maintenance operation parameters. A trusted blockchain storage module is used to store the aggregated hash value of the privacy protection audit conclusion and key operation and maintenance parameters into a consortium blockchain optimized based on the SM3 algorithm, and output the privacy protection audit conclusion. The verification module is used to determine whether the privacy protection audit conclusions and key operation and maintenance operations comply with predefined access control policies by verifying the validity of the proof π.

[0015] A computer-readable storage medium storing a computer program that, when executed by a processor, causes the processor to perform the steps of the method described above.

[0016] A computer device includes a memory and a processor, the memory storing a computer program that, when executed by the processor, causes the processor to perform the steps of the method described above.

[0017] From the above technical solution can be known, from the above technical solution can be known, the present application provides a threshold national secret based on boiler monitoring data auditing method, system, equipment and storage medium. Compared with the prior art, the present application has the following advantages: by acquiring the boiler monitoring audit input data, and generating the key of the boiler monitoring audit input data, using lattice password to construct anti-quantum key encapsulation mechanism, and dividing the key into several key fragments, respectively stored in the hardware security module of the system administrator, the security auditor and the security administrator, using several system administrators, security auditors and security administrators' key fragments to generate effective SM3 threshold signature, getting and outputting the key operation and maintenance operation, structuring the log of the output key operation and maintenance operation, generating the proof pi, and using the proof pi to generate the privacy protection audit conclusion and the key operation and maintenance parameter aggregation hash value, storing the privacy protection audit conclusion and the key operation and maintenance parameter aggregation hash value into the SM3 algorithm optimized alliance block chain, outputting the privacy protection audit conclusion, verifying the effectiveness of the proof pi, judging whether the privacy protection audit conclusion and the key operation and maintenance operation meet the predefined access control policy, through the key fragments protected by the lattice password, ensuring the audit credentials, improving the anti-quantum attack ability of the key, and only verifying The window compliance can be confirmed, and the auditing efficiency is improved. BRIEF DESCRIPTION OF DRAWINGS

[0018] Figure 1 The flowchart of the present application based on threshold national secret boiler monitoring data auditing method is shown in the figure. Figure 2 The structure block diagram of the present application based on threshold national secret boiler monitoring data auditing system is shown in the figure.

[0019] The reference signs are as follows: Data acquisition module 111; key management module 112; signature calculation module 113; proof generation module 114; trusted block chain storage module 115; verification module 116. DETAILED DESCRIPTION

[0020] In order to make the purpose, technical scheme and advantages of the embodiments of the present application clearer, the technical scheme in the embodiments of the present application will be described clearly and completely below in combination with the drawings in the embodiments of the present application. Obviously, the described embodiments are part of the embodiments of the present application, not all the embodiments.

[0021] As Figure 1 shown, the threshold national secret based boiler monitoring data auditing method of the present embodiment includes the following steps: S1, acquiring the boiler monitoring audit input data, and generating the key of the boiler monitoring audit input data; S2. Use lattice cryptography to construct a quantum-resistant key encapsulation mechanism, and divide the key into several key fragments, which are stored in the hardware security modules of the system administrator, security auditor, and security administrator respectively. S3. Use the key fragments of several system administrators, security auditors and security administrators to collaboratively calculate and generate a valid SM3 threshold signature, obtain and output key operation and maintenance operations; S4. Perform structured processing on the logs of key operation and maintenance operations, generate proof π, and use proof π to generate privacy protection audit conclusions and aggregated hash values ​​of key operation and maintenance operation parameters. S5. Store the aggregated hash value of the privacy protection audit conclusion and key operation and maintenance parameters into the consortium blockchain optimized based on the SM3 algorithm, and output the privacy protection audit conclusion. S6. Verify the validity of π to determine whether the privacy protection audit conclusions and key operation and maintenance operations comply with the predefined access control policies.

[0022] Preferably, the formula for generating key fragments in S2 is as follows: ; in, For a complete quantum-resistant key, For the first Key fragments held by each character ( (At that time, there were five characters). It is a polynomial function used to convert the complete key. Mapped to There are fragments, and the polynomial degree is... Ensure that at least It takes several fragments to recover the complete key. , , , The random coefficients are multinomials to ensure the randomness of private key fragments and prevent the complete key from being deduced from a few fragments. This is a role number used to distinguish key fragments for different roles, namely system administrator, security auditor, and security administrator. It is a prime number of the elliptic curve field; The formula for calculating the partial signatures of each participant during threshold signature processing is as follows: ; in, For the first Random numbers generated for each character It is its inverse in the corresponding operation. The hash value of the collected data. A globally random number was generated through negotiation for all characters; In practical applications, Make each role only generate a local signature, unable to generate a complete signature alone, To ensure the uniqueness of each signature, prevent replay attacks, Ensure the mathematical legitimacy of the signature formula, which is the standard step of SM3 threshold signature, For binding the collected data with the signature, prevent the signature from being tampered with or reused, To ensure the consistency of the signature, avoid the aggregation of partial signatures generated by different roles.

[0023] Preferably, the key fragments in S3 are synthesized into a complete signature by Lagrange interpolation method, and the calculation formula of the complete signature is as follows: ; Among them, is the aggregated complete threshold signature, is the set of roles participating in the signature, is the participant Corresponding Lagrange interpolation coefficient, is the elliptic curve order of the algorithm.

[0024] Preferably, in S4, when generating the key operation parameter aggregation hash value, the continuous Parameter points are taken as an audit window, and the proof π that all parameters in the window are compliant is generated by zk-SNARKs; The calculation formula of the key operation parameter aggregation hash value is as follows: ; Among them, is the key operation parameter aggregation hash value, is the national SM3 hash function based on arithmetic circuit implementation, is the steam pressure value of the Sampling point, is the furnace temperature value of the Sampling point, is the drum water level value of the Sampling point, is the flue gas oxygen content of the Sampling point.

[0025] Preferably, the core compliance constraint formula of zk-SNARKs is as follows:

[0026] Among them, is the constraint covering all Sampling points in the window, a minimum safety threshold of the steam pressure, a rated threshold of the steam pressure, a minimum safety threshold of the furnace temperature, a rated threshold of the furnace temperature, a minimum safety threshold of the drum water level, a maximum safety threshold of the drum water level, a time interval between the th sampling point and the th sampling point, a timestamp of the th sampling point, a prime number module preset by the circuit, an anti-quantum key of the collection node, pairing.

[0027] Preferably, the alliance blockchain in S5 adopts a Fabric architecture based on the national standard SM3 modification, and the data of the alliance blockchain is encrypted and stored in an SM3-CTR mode; The encryption formula of the SM3-CTR mode is as follows: ); wherein, is the encrypted ciphertext, is the CTR mode of the national standard SM4 algorithm, is an SM3 symmetric key dynamically generated by the TEE, is a zk-SNARKs proof of the audit window, is a starting timestamp of the audit window, is an ending timestamp of the audit window.

[0028] Preferably, the index formula of the alliance blockchain is as follows: ; wherein, is a unique index on the alliance blockchain, is a unique device identification of the boiler.

[0029] In actual applications, the core parameter threshold of the boiler is as follows: , ; ; , ; ; ; the collection window duration is 12 hours, which is simplified to 5 sampling points; Threshold mechanism (t=3, n=5) 5 roles: operation group , security group , device group , production group , audit group , 3 people need to cooperate; Prime modulus , based on Kyber-768 algorithm to generate quantum-resistant key, simplified as in the example; Polynomial degree , randomly generated coefficients , ; ; Operation group : ; Security group : ; Device group : ; Production group : ; Audit group : ; Take three roles to cooperate, namely operation group, security group and device group; , converted to decimal: 439041101; ; Each role random number, , , ; Calculate the inverse element : ; ; ; Partial signature ; Similarly, ; ; Calculate Lagrange interpolation coefficients ; ; ; Aggregate complete signature ; As shown in Figure 2 , the system of the boiler monitoring data auditing method based on threshold national secret includes: A data acquisition module is configured to acquire boiler monitoring and auditing input data and generate a key of the boiler monitoring and auditing input data. A key management module is configured to use a lattice cryptography to construct a quantum-resistant key encapsulation mechanism and divide the key into n key fragments, which are respectively stored in hardware security modules of a system administrator, a security auditor and a security administrator. A signature calculation module is configured to cooperatively calculate an effective SM3 threshold signature using the key fragments of the t system administrator, the security auditor and the security administrator, obtain and output a critical operation. A proof generation module is configured to structurally process logs of the output critical operation, generate a proof π, and generate a privacy protection audit conclusion and a critical operation parameter aggregation hash value using the proof π. A trusted blockchain storage module is configured to store the privacy protection audit conclusion and the critical operation parameter aggregation hash value into a consortium blockchain based on an SM3 algorithm optimization, and output the privacy protection audit conclusion. A verification module is configured to verify the validity of the proof π, and determine whether the privacy protection audit conclusion and the critical operation meet a predefined access control policy.

[0030] A computer readable storage medium stores a computer program, and the computer program is executed by a processor to make the processor execute steps of the above method.

[0031] A computer device includes a memory and a processor, and the memory stores a computer program, and the computer program is executed by the processor to make the processor execute steps of the above method.

[0032] In summary, the present application provides a threshold national secret based boiler monitoring data auditing method, system, device and storage medium. Compared with the prior art, the present application has the following advantages: by acquiring the boiler monitoring auditing input data, generating the key of the boiler monitoring auditing input data, using lattice cryptography to construct a quantum-resistant key encapsulation mechanism, and dividing the key into several key fragments, which are respectively stored in the hardware security module of the system administrator, the security auditor and the security administrator, using several key fragments of the system administrator, the security auditor and the security administrator to cooperatively calculate to generate a valid SM3 threshold signature, obtaining and outputting the key operation and maintenance operation, structuring the log of the output key operation and maintenance operation, generating a proof π, and using the proof π to generate a privacy protection audit conclusion and a key operation and maintenance parameter aggregation hash value, storing the privacy protection audit conclusion and the key operation and maintenance parameter aggregation hash value in the SM3 algorithm optimized alliance blockchain, outputting the privacy protection audit conclusion, verifying the validity of the proof π, judging whether the privacy protection audit conclusion and the key operation and maintenance operation conform to the predefined access control policy, and ensuring the audit credentials through the lattice cryptography protected key fragments, improving the quantum attack resistance of the key, and verifying only the key operation and maintenance operation, so as to confirm the window compliance and improve the auditing efficiency. Therefore, the present application effectively overcomes the various shortcomings in the prior art and has high industrial utilization value.

[0033] In the above embodiments, all or part of the embodiments can be realized by software, hardware, firmware or any combination thereof. When realized by software, all or part of the embodiments can be realized in the form of a computer program product. The computer program product includes one or more computer instructions. When the computer instructions are loaded and executed on a computer, all or part of the processes or functions described in the embodiments of the present application are generated. The computer can be a general-purpose computer, a special-purpose computer, a computer network or other programmable devices. The computer instructions can be stored in a computer readable storage medium or transmitted from one computer readable storage medium to another, for example, the computer instructions can be transmitted from one website, computer, server or data center to another website, computer, server or data center through a wired (such as coaxial cable, optical fiber, digital subscriber line (DSL)) or wireless (such as infrared, wireless, microwave, etc.) manner. The computer readable storage medium can be any available medium that can be accessed by a computer or a data storage device such as a server, data center, etc. integrated with one or more available media. The available medium can be a magnetic medium (such as a floppy disk, a hard disk, a magnetic tape), an optical medium (such as a DVD), or a semiconductor medium (such as a solid state disk (SSD)) and the like.

[0034] It is to be noted that, in the present text, the relative terms such as first and second, and the like are used merely to differentiate one entity or operation from another entity or operation, without necessarily requiring or implying any such actual relationship or order between such entities or operations. Moreover, the terms "comprising", "containing", or any other variant thereof are intended to cover a non-exclusive inclusion, such that a process, method, article, or apparatus that comprises a list of elements does not include only those elements in the list, but can also include other elements not expressly listed or inherent to such process, method, article, or apparatus. Without more limitations, an element defined by the phrase "comprising a" does not exclude the existence of additional identical elements in the process, method, article, or apparatus that includes the element.

[0035] Each of the embodiments in the present specification is described in a relevant manner, and the same or similar parts between the embodiments can be referred to each other. Each of the embodiments focuses on the difference from other embodiments. In particular, for the system embodiments, since they are basically similar to the method embodiments, they are described more simply, and the relevant parts can be referred to the part of the description of the method embodiments.

[0036] The above embodiments are only used to illustrate the technical solutions of the present application, rather than limiting them. Although the present application has been described in detail with reference to the foregoing embodiments, those of ordinary skill in the art should understand that they can still modify the technical solutions recorded in the foregoing embodiments, or make equivalent replacements for some technical features. Such modifications or replacements do not make the essence of the corresponding technical solutions deviate from the spirit and scope of the technical solutions of the embodiments of the present application.

Claims

1. A method for auditing boiler monitoring data based on threshold national security standards, characterized in that: Includes the following steps: S1. Obtain boiler monitoring audit input data and generate the key for the boiler monitoring audit input data; S2. Use lattice cryptography to construct a quantum-resistant key encapsulation mechanism, and divide the key into several key fragments, which are stored in the hardware security modules of the system administrator, security auditor, and security administrator respectively. S3. Using the key fragments of several system administrators, security auditors and security administrators, a valid SM3 threshold signature is generated through collaborative computation, and key operation and maintenance operations are obtained and output. S4. Perform structured processing on the output logs of the key operation and maintenance operations, generate proof π, and use proof π to generate privacy protection audit conclusions and aggregated hash values ​​of key operation and maintenance operation parameters. S5. Store the aggregated hash value of the privacy protection audit conclusion and key operation and maintenance parameters into the consortium blockchain optimized based on the SM3 algorithm, and output the privacy protection audit conclusion. S6. By verifying the validity of the proof π, determine whether the privacy protection audit conclusion and key operation and maintenance operations comply with the predefined access control policy.

2. The boiler monitoring data auditing method based on threshold national cryptography as described in claim 1, characterized in that: The formula for generating the key fragment in S2 is as follows: ； in, For a complete quantum-resistant key, For the first Key fragments held by each character It is a polynomial function used to convert the complete key. Mapped to A fragment, , , , The random coefficients of the polynomial, This refers to the role number, where the roles are System Administrator, Security Auditor, and Security Administrator; The formula for calculating the partial signatures of each participant during the threshold signature process is as follows: ； in, For the first Random numbers generated for each character It is its inverse in the corresponding operation. The hash value of the collected data. A globally random number is generated through negotiation for all characters.

3. The boiler monitoring data auditing method based on threshold national cryptography as described in claim 2, characterized in that: In S3, the key fragments are synthesized into a complete signature using Lagrange interpolation. The formula for calculating the complete signature is as follows: ； in, For the complete threshold signature after aggregation, For the set of characters who participated in the signing, As a participant The corresponding Lagrange interpolation coefficients, denoted as the elliptic curve order of the algorithm.

4. The boiler monitoring data auditing method based on threshold national cryptography as described in claim 1, characterized in that: When generating the aggregated hash value of key operation and maintenance parameters in S4, the continuous Each parameter point is used as an audit window, and zk-SNARKs are used to generate proof π that all parameters within the window are compliant. The formula for calculating the aggregated hash value of the key operation and maintenance parameters is as follows: ； in, Aggregate hash values ​​for key operation and maintenance parameters. This is a Chinese national cryptographic SM3 hash function implemented based on arithmetic circuits. For the first Steam pressure values ​​at each sampling point For the first Furnace temperature values ​​at each sampling point For the first The boiler drum water level values ​​at each sampling point For the first Oxygen content in flue gas at each sampling point.

5. The boiler monitoring data auditing method based on threshold national cryptography as described in claim 1, characterized in that: The core compliance constraint formula for zk-SNARKs is as follows: in, To constrain the coverage area of ​​all One sampling point, This is the minimum safe threshold for steam pressure. This is the rated threshold for steam pressure. This represents the minimum safe threshold for furnace temperature. This refers to the rated threshold temperature of the furnace. This is the minimum safe threshold for the boiler drum water level. This represents the maximum safe threshold for boiler drum water level. For the first The sampling point and the first The time interval between sampling points For the first The timestamp of each sampling point for The prime modulus preset for the circuit, A quantum-resistant key for the acquisition node.

6. The boiler monitoring data auditing method based on threshold national cryptography according to claim 1, characterized in that: The consortium blockchain in S5 adopts a Fabric architecture based on the national cryptographic standard SM3, and the data of the consortium blockchain is encrypted and stored in SM3-CTR mode. The encryption formula for the SM3-CTR mode is as follows: ）； in, The encrypted ciphertext, For the CTR mode of the national cryptographic SM4 algorithm, The SM3 symmetric key is dynamically generated by the TEE. For auditing window proofs of zk-SNARKs, This is the start timestamp of the audit window. This is the end timestamp of the audit window.

7. The boiler monitoring data auditing method based on threshold national cryptography as described in claim 6, characterized in that: The indexing formula for the consortium blockchain is as follows: ； in, For a unique index on the consortium blockchain, This is the unique equipment identifier for the boiler.

8. A system applying the boiler monitoring data auditing method based on threshold national cryptography as described in claims 1-7, characterized in that, include: The data acquisition module is used to acquire boiler monitoring and audit input data and generate a key for the boiler monitoring and audit input data; The key management module is used to construct a quantum-resistant key encapsulation mechanism using lattice cryptography and divide the key into n key fragments, which are stored in the hardware security modules of the system administrator, security auditor, and security administrator respectively. The signature calculation module uses t key fragments from the system administrator, security auditor, and security administrator to collaboratively calculate and generate a valid SM3 threshold signature, and obtains and outputs key operation and maintenance operations. The proof generation module is used to perform structured processing on the logs of the key operation and maintenance operations output, generate proof π, and use proof π to generate privacy protection audit conclusions and aggregated hash values ​​of key operation and maintenance operation parameters. A trusted blockchain storage module is used to store the aggregated hash value of the privacy protection audit conclusion and key operation and maintenance parameters into a consortium blockchain optimized based on the SM3 algorithm, and output the privacy protection audit conclusion. The verification module is used to determine whether the privacy protection audit conclusions and key operation and maintenance operations comply with predefined access control policies by verifying the validity of the proof π.

9. A computer-readable storage medium storing a computer program, characterized in that, When the computer program is executed by a processor, it causes the processor to perform the steps of the method as described in any one of claims 1 to 7.

10. A computer device comprising a memory and a processor, wherein the memory stores a computer program, characterized in that, When the computer program is executed by the processor, it causes the processor to perform the steps of the method as described in any one of claims 1 to 7.

Images