Electronic official document evidence storage platform design method based on block chain

Abstract

The invention relates to an electronic official document evidence storage platform design method based on a block chain, and belongs to the technical field of computers. According to the electronic official document evidence storage platform, a one-main multi-side type block chain structure is constructed and comprises a block chain data layer, a block chain infrastructure layer, a block chain core layer, a block chain service layer and an application layer. The whole process of electronic official document circulation can be traced, the signed official document file cannot be tampered, and the problems that the file is easily tampered, and information is difficult to trace to the source in an existing electronic official document system are solved. An electronic official document evidence storage platform is constructed by using a block chain technology, an electronic official document system is transformed, original businesses of the electronic official document are reconstructed, files cannot be tampered, the official document data security is improved, the file circulation efficiency is improved, the service efficiency is promoted, and the system reliability is improved.

Description

Technical Field

[0001] This invention belongs to the field of computer technology, specifically relating to a design method for an electronic document storage platform based on blockchain. Background Technology

[0002] Information security is a significant issue in the in-depth application of electronic document systems. Traditional office systems primarily ensure information tamper-proofing through encrypted transmission protocols, fragmented encrypted storage, access control and operation logging, regular backups, and rapid recovery in areas such as network transmission, data storage, data operation, and disaster recovery backups. These protective measures are essentially constrained by a centralized management model, using centralized databases. All data security relies on the credibility of a particular organization and the strength of its underlying technology and management. Once a management vulnerability exists, the centralized approach makes it impossible to verify authenticity. For example, current electronic document systems can log operational activities, but this logging only stores data as a backup on the server, which is subject to tampering. It cannot confirm whether approved documents or system operation records have been altered or deleted.

[0003] Unlike traditional office systems' methods of evidence storage, blockchain organically combines cryptography, distributed systems, consensus mechanisms, and timestamps, possessing characteristics such as decentralization, immutability, and traceability. Blockchain mobilizes a large number of nodes to jointly record transactions through a consensus mechanism. Modifying data requires the unanimous consent of more than half of the nodes. This trust mechanism is not dependent on any particular organization or individual, but rather on the blockchain's operational mechanism itself. Blockchain-based information storage is a decentralized distributed system. In terms of data storage, the distributed, open structure enhances data consistency; in terms of data security, hash algorithms ensure the difficulty of data tampering, allowing verification of whether data has been altered, thus guaranteeing data security and reliability; in terms of data operations, the application of timestamps authenticates each data operation record, demonstrating the authenticity of the operation traces. Therefore, blockchain data possesses security, integrity, and authenticity, significantly increasing the cost and difficulty of data breaches and tampering. Summary of the Invention

[0004] (a) Technical problems to be solved The technical problem this invention aims to solve is how to provide a design method for an electronic document storage platform based on blockchain, in order to address the issue that traditional office systems rely on the credibility of a particular organization, the strength of the technology behind that organization, and the rigor of its management. In the event of management loopholes, the centralized approach makes it impossible to prove the authenticity of documents.

[0005] (II) Technical Solution To address the aforementioned technical issues, this invention proposes a design method for an electronic document storage platform based on blockchain. The electronic document storage platform constructs a main-multi-side blockchain structure, including: a blockchain data layer, a blockchain infrastructure layer, a blockchain core layer, a blockchain service layer, and an application layer. Blockchain Data Layer: This refers to the data service cluster, which provides high-performance, distributed, and reliable storage and backup services for large-scale files. It is responsible for processing unstructured transfer files and sending / receiving records mirrored from the document system's business layer. These are recorded and stored by the blockchain data server and blockchain ledger server, respectively, to separate the transfer information office data ontology from the transfer trajectory information. At the same time, irreversible file retrieval and verification information is generated from the transfer file data ontology and packaged with version retention and exported log data into blocks to form a trusted associated record retrieval. Blockchain infrastructure layer: including national cryptographic algorithms, consensus mechanisms, smart contracts, P2P networks, and distributed ledgers; National cryptographic algorithms are used to establish trust relationships in an environment where no third-party institution is required. Consensus mechanisms are used in blockchain networks to reach a consensus and confirm the actions of each node in the system, such as verification, recording, and modification of transactions or states. Smart contracts are used to implement, compile, and deploy business logic in the form of code, and to complete the triggering and automatic execution of predetermined rules. P2P networks are used to provide network communication capabilities; Distributed ledgers are used for the storage of distributed data. Through the joint recording and maintenance of the ledger by different nodes, a mechanism for public management, tamper-proof, and trustworthy data is formed in the blockchain. The core layer of the blockchain includes node management, cross-chain management, consortium management, log monitoring, CA authentication management, smart contract management, and a blockchain explorer. Node management is used for node scaling up / down, node startup and shutdown, and monitoring of node operating status. Cross-chain management is used for cross-chain management, including cross-chain authentication, cross-chain exchange, cross-chain interoperability, and cross-chain data migration; it provides the ability to manage cross-chain contracts, cross-chain notarization, and cross-chain routing, and can establish or stop inter-chain communication, control the establishment of secure links between the blockchain and the external world, and manage trusted data access; Consortium management is used for consortium creation, underlying chain selection, and consortium chain admission / exit. It supports consortium monitoring, including consortium status, consortium topology graph, block browsing, transaction browsing, transaction rate, underlying chain distribution statistics, and cross-chain business analysis statistics. Log monitoring is used to record system behavior and upload it to the blockchain in real time; CA certification management is used to certify the security control permissions for blockchain consensus, node access, and participation in consensus. Smart contract management is used to support the management of the deployment, instantiation, update, and deactivation lifecycle phases of smart contracts. A blockchain explorer provides an integrated development environment for smart contracts; Blockchain service layer: includes standard interfaces, data on-chain, privacy protection, access control, secure sharing, and regulatory auditing; A standard interface for providing data for blockchain interaction to the application layer; Data is uploaded to the blockchain for broadcasting and verifying block data, and updating the blockchain after reaching a consensus; Privacy protection is used for tenant management and maintenance, identity authentication, access control and resource quota allocation in public management and service institutions. Access control is used to configure and manage account access permissions to chains and nodes, and to manage and configure different access connection methods and protocols to better provide client access and data transmission. Secure sharing is used to manage network security, including client and node communication, two-way authentication and reliable communication between nodes; and to manage data security and storage security. Regulatory auditing, used for regulatory auditing of blockchain users; Application layer: includes a file anti-tampering model and a full-process traceability model; the file anti-tampering model includes fingerprint extraction, on-chain evidence storage, and consistency comparison functions; the full-process traceability model includes operation evidence storage, data collection, and tracking and tracing functions.

[0006] (III) Beneficial Effects This invention proposes a design method for an electronic document storage platform based on blockchain. By designing a decentralized, distributed electronic document storage platform, this invention achieves traceability and protection throughout the entire electronic document circulation process, ensuring that signed documents are tamper-proof. This solves the problems of easy document tampering and difficulty in information traceability in existing electronic document systems. By using blockchain technology to build an electronic document storage platform, the electronic document system can be transformed and its original business processes reconstructed, resulting in the following construction benefits.

[0007] 1) Ensure the files are immutable, increasing the security of official document data. In blockchain, electronic documents are signed using an asymmetric encryption mechanism, and their hash values ​​are calculated and uploaded to the chain. Business records are linked together in a chain structure according to time. The hash value of the previous blockchain is put into the second blockchain, realizing the "block-to-block" nature of the blockchain. Any illegal modification to any document will inevitably cause a change in the hash value of all other data blocks, ensuring that the documents can be reliably preserved and verified.

[0008] 2) Improve document flow efficiency and promote service efficiency. The circulation and processing of official documents involves a series of interconnected and well-organized tasks, including document receipt, distribution, submission, processing, approval, circulation, drafting, review, finalization, and distribution. Within a blockchain, multiple users collaboratively create a smart contract. The smart contract program periodically checks the automaton's state; upon receiving a certain condition, it triggers a specific operation, verifies transactions that meet the conditions, and automatically executes and notifies users after all nodes in the network reach a consensus. Utilizing the characteristics of the smart contract system enables rapid document approval and confirmation, forming an efficient collaborative mechanism.

[0009] 3) The system's traceability information is reliable, increasing system reliability. The blockchain-based electronic document storage platform uses blockchain technology to reconstruct the original document processing procedures. The electronic document system, by calling the API interface provided by the storage platform, records and generates a blockchain record for each update of the document processing flow. By uploading data and status at different stages of document circulation to the blockchain, the authenticity of electronic documents is protected, and version retention and authenticity verification are performed. Attached Figure Description

[0010] Figure 1 This is a service architecture diagram of the present invention; Figure 2 This is a diagram of a primary-multiple-side blockchain structure of the present invention; Figure 3 This is a flowchart illustrating the core cross-chain interaction process of the present invention. Figure 4 This is a schematic diagram illustrating the principle of document anti-tampering implementation in this invention; Figure 5 This is a schematic diagram illustrating the principle of full-process traceability in this invention. Figure 6 This is a design diagram of the file anti-tampering interface of the present invention; Figure 7 This is a design diagram of the operation and evidence storage interface of the present invention. Detailed Implementation

[0011] To make the objectives, contents, and advantages of the present invention clearer, the specific embodiments of the present invention will be described in further detail below with reference to the accompanying drawings and examples.

[0012] The purpose of this invention is to propose a platform design method that can utilize blockchain technology to realize electronic document storage and evidence preservation. It has the characteristics of decentralized nodes and distribution, can perform evidence storage and traceability protection, realize the traceability of the entire process of electronic document circulation, and ensure that the signed documents cannot be tampered with, thus providing security for the in-depth application of electronic document systems.

[0013] 1. Overall Architecture Figure 1 This invention provides a design method for a blockchain-based electronic document storage platform, such as... Figure 1 As shown, the platform consists of the following 5 layers: The blockchain data layer primarily refers to the data service cluster, providing high-performance, distributed, and reliable storage and backup services for large-scale files. It handles unstructured transfer files and sending / receiving records mirrored from the document system's business layer. These are recorded and authenticated by blockchain data servers (cluster, cloud) and blockchain ledger servers (cluster, cloud), achieving separation between the ontology of the transferred information office data and its transfer trajectory information. Simultaneously, irreversible file retrieval and verification information is generated from the transferred file data ontology and packaged with version retention and exported log data into blocks to form a trusted, associated record retrieval system.

[0014] Blockchain infrastructure layer: including national cryptographic algorithms, consensus mechanisms, smart contracts, P2P networks, and distributed ledgers.

[0015] National cryptographic algorithms are used to establish trust relationships in an environment where no third-party institution is required. Consensus mechanisms are used in blockchain networks to reach a consensus and confirm the actions of each node in the system, such as verification, recording, and modification of transactions or states. Smart contracts are used to implement, compile, and deploy business logic in the form of code, complete the triggering and automatic execution of predetermined rules, and minimize human intervention. P2P networks are used to provide network communication capabilities; Distributed ledgers are used for the storage of distributed data. Through the joint recording and maintenance of the ledger by different nodes, a mechanism for public management, tamper-proof, and trustworthy data is formed in the blockchain. The core layer of the blockchain includes node management, cross-chain management, consortium management, log monitoring, CA authentication management, smart contract management, and a blockchain explorer. Node management is used for node scaling up / down, node startup and shutdown, and monitoring of node operating status (including address, port, operating status, consensus status, etc.). Cross-chain management is used for cross-chain management, including cross-chain authentication, cross-chain exchange, cross-chain interoperability, and cross-chain data migration; it provides the ability to manage cross-chain contracts, cross-chain notarization, and cross-chain routing, and can establish or stop inter-chain communication, control the establishment of secure links between the blockchain and the external world, and manage trusted data access, etc. Consortium management is used for consortium creation, underlying chain selection, and consortium chain admission / exit. It supports consortium monitoring, including consortium status, consortium topology graph, block browsing, transaction browsing, transaction rate, underlying chain distribution statistics, and cross-chain business analysis statistics. Log monitoring is used to record system behavior and upload it to the blockchain in real time; CA certification management is used to certify the security control permissions for blockchain consensus, node access, and participation in consensus.

[0016] Smart contract management is used to support the management of the lifecycle stages of smart contracts, such as deployment, instantiation, update, and deactivation. A blockchain explorer supports functions such as contract development / debugging, automatic contract generation, contract compilation and automatic deployment, formal verification of contract security, visualization of contract runtime, contract sharing / review / release, contract version management, contract template export, and generation of contract code into visual components, providing an integrated development environment for smart contracts.

[0017] Blockchain service layer: includes standard interfaces, data on-chain, privacy protection, access control, secure sharing, and regulatory auditing; A standard interface for providing data for blockchain interaction to the application layer; Data is uploaded to the blockchain for broadcasting and verifying block data, and updating the blockchain after reaching a consensus; Privacy protection is used for tenant management and maintenance, identity authentication, access control and resource quota allocation in public management and service institutions. Access control is used to configure and manage account access permissions to chains and nodes, and to manage and configure different access connection methods and protocols to better provide client access and data transmission. Secure sharing is used to manage network security, including clients and nodes, two-way authentication and reliable communication between nodes; manage data security, such as using user private key signatures for transactions to ensure that transaction content cannot be tampered with; manage storage security, such as multi-node data storage, data synchronization mechanisms between nodes to ensure correct data replication, and provide data archiving tools; Regulatory auditing is used for the regulatory auditing of blockchain users, including management log auditing, behavior auditing, etc.

[0018] Application layer: includes file anti-tampering model and full-process traceability model.

[0019] Document tamper-proofing includes fingerprint extraction, on-chain evidence storage, and consistency comparison functions.

[0020] Among them, fingerprint extraction is used to generate digital fingerprints for documents; on-chain evidence storage is used to write information from each step of the document circulation process into the blockchain for trusted evidence storage; and consistency comparison is used to verify whether the document has been tampered with.

[0021] By connecting to the official document management system, when a secretary assists a leader in office work, the secretary's fingerprint and voiceprint information can be uploaded to the blockchain, thus binding the individual's real identity to the information, making the information difficult to tamper with. At the same time, the corresponding permission control logic of the smart contract is invoked to prevent unauthorized access. When a file is lost on a certain node or some nodes, the data can also be recovered by synchronizing information from other nodes.

[0022] The entire process is traceable, including operation evidence storage, data collection, and traceability functions.

[0023] Among them, operation notarization is used to notarize and record all operations related to the entire lifecycle of a file on the blockchain, and add digital signatures to prevent repudiation afterward, providing a data foundation for the entire process of file tracking; data aggregation is used to summarize the operation records related to the notarized file identifier on the blockchain, forming the complete operation history of the file, and writing it to off-chain storage, improving the efficiency and flexibility of data query and analysis; and tracing and source verification is used to list, track and verify the legality of the entire lifecycle of file operations based on the notarized data on the blockchain.

[0024] By connecting to the official document management system, information from each step of the document circulation process can be written into the blockchain for reliable storage, enabling end-to-end, full-process traceability and auditing of historical changes and circulation information of official documents. At the same time, by utilizing the characteristics of blockchain smart contracts, the circulation status can be monitored in real time, making it easier to identify work stagnation points and achieve rapid approval and confirmation of documents.

[0025] 2. One-main-multiple-side blockchain structure A "one-main-multiple-sidechain" blockchain structure is constructed, focusing on document processing. Metadata and data files are set up for each node throughout the entire business lifecycle, enabling real-time on-chain recording of information-based office data and the status of the entire workflow. This ensures the authenticity, integrity, security, and availability of records on the chain. Data storage primarily employs sharding redundancy algorithms and distributed storage to guarantee data security and ensure system load balancing. Verification and subsequent services are enclosed within the system, written into blocks, and become part of the blockchain. Furthermore, the "one-main-multiple-sidechain" architecture is essentially a cross-chain solution, employing a layered structure to address the three characteristics of "decentralization, security, and efficiency" individually. The main chain maintains stability and security, while sidechains are optimized according to specific scenarios.

[0026] like Figure 2 As shown, a layered structure is adopted, allowing office data to be transferred between the main chain and side chains, enabling interoperability among the various side chains. The side chain layer employs pluggable technology and a hybrid high-efficiency consensus algorithm, allowing for the integration of different side chains based on different business scenarios, offering great flexibility. While side chains sacrifice some decentralization, they can significantly improve performance.

[0027] Timestamps are used to authenticate each data operation record and can show the authenticity of the operation traces.

[0028] The core process of cross-chain interaction between main and side chains is as follows: Figure 3 As shown, the following process enables cross-chain interaction initiated by the main chain to the side chain and returns a receipt to the main chain: First, the main chain initiates a cross-chain transaction to the relay chain for the side chain. Upon receiving the request, the relay chain verifies the transaction with the distributed storage system. It uses distributed hashing to query and determine whether the cross-chain data is trustworthy, ensuring the authenticity of the cross-chain data. If the verification is successful, a transaction data hash is generated for the side chain and the relevant content is uploaded to the side chain via cross-chain routing. Otherwise, the illegal transaction is rolled back and the cross-chain interaction ends.

[0029] In a cross-chain system, the relay chain is a crucial component for connecting specific types of blockchains and forwarding cross-chain messages. It primarily provides core functions such as cross-chain transaction monitoring, execution, and routing. Cross-chain transactions are initiated by users on the main chain, which release a cross-chain event in a specific format. Upon receiving the submitted cross-chain transaction, the cross-chain transaction routing function transmits the transaction to the relay chain through a shared Merkle tree directory.

[0030] (A Merkle tree is a data storage structure. A blockchain is a chain-like storage structure composed of blocks. The header of each block contains the hash value of the previous block. Each block has a Merkle tree structure and is stamped with a unique timestamp. By utilizing the characteristics of the Merkle tree structure and the relationship between the timestamp and the block, it is ensured that each block is linked in chronological order and the data is not easily tampered with, allowing for the traceability of block information.) 2. File anti-tampering model Each block in a blockchain contains the hash values ​​of all data packets from the previous block. Calculating the hash value of the current block also includes the data fingerprint hash value of the previous block, forming a link. Therefore, once the data in any block changes, the hash values ​​of all subsequent connected blocks will change. All nodes can instantly detect data tampering, and the tampered blockchain data cannot pass legitimacy verification, thus ensuring the immutability of blockchain data. Based on the immutable nature of blockchain, tamper-proofing of documents in electronic document systems can be achieved, such as... Figure 4 As shown, the process is divided into three parts: fingerprint extraction, on-chain evidence storage, and consistency comparison.

[0031] Fingerprint extraction: After a person processes a file, the file data itself is used as input, and a hash value is calculated using a hash algorithm (such as MD5, SHA256, etc.). This hash value serves as the file's digital fingerprint. Due to the collision-resistant nature of hash algorithms, there is a one-to-one correspondence between the digital fingerprint and the file data, making it impossible for anyone to forge.

[0032] On-chain evidence storage: After extracting the digital fingerprint of the file, construct... ,in It is the unique identifier of the file, and This becomes the digital fingerprint of the file, which is then transmitted via a blockchain transaction. It is written to the blockchain. Because the blockchain is immutable, once the document is recorded on the blockchain, its digital fingerprint cannot be altered.

[0033] Consistency verification: To verify whether a file has been tampered with, after receiving the file, a person handling the process first calculates its digital fingerprint locally using a hash algorithm. Then, using the file's unique identifier As an index, it allows for on-chain lookup of the stored digital fingerprint. ,if If the file is intact, it has not been tampered with; otherwise, it has been tampered with.

[0034] 3. Full-process traceability model Blockchain, with its immutable and multi-party maintained technical characteristics, can be considered a highly trusted data storage device for recording and preserving important business events. Furthermore, blockchain's linear data structure with temporal relationships allows for timestamping of on-chain data. Based on blockchain's immutable and traceable characteristics, end-to-end traceability of electronic document systems can be achieved, such as... Figure 5 As shown, the process is divided into three parts: operation evidence preservation, data collection, and traceability.

[0035] Operation evidence storage: Operation evidence storage refers to storing and recording all relevant operations throughout the entire lifecycle of a file on the blockchain, providing a data foundation for end-to-end file tracking. The blockchain data structure is as follows: ,in It is the unique identifier of the file. It refers to the type of operation (such as drafting, approval, countersigning, etc.). This is the data fingerprint of the file after this operation. It is the operator's digital signature. The core of the operation evidence preservation process is "completeness," that is, every operation related to the file is fully recorded. The addition of a digital signature ensures that the operator cannot deny the operation afterward.

[0036] Data Aggregation: To improve query efficiency during end-to-end file tracking, it is necessary to periodically aggregate on-chain evidence-based data. Data aggregation uses the file's unique identifier as an index, summarizing all operation records related to that identifier stored on the chain to form the file's complete operation history. This data can be written to an off-chain relational database or big data platform to build a "mirror" of the on-chain data. Then, leveraging the indexing, association, and parallel processing capabilities provided by relational databases and big data platforms, the data can be flexibly and comprehensively queried and analyzed.

[0037] Traceability and source verification: Traceability and source verification is a process of listing, tracking, and verifying the legality of all operations performed on a file throughout its entire lifecycle, based on on-chain evidence-based data. Based on the data stored on the blockchain, the queryer can obtain all historical operation records of the file, including key information such as the type of operation, operation time, operation result, and operator identity. Due to the immutability of the blockchain and the introduction of digital signature technology, the retrieved information is completely reliable. In the event of business anomalies, the legality of each step can be checked, enabling precise accountability. Furthermore, the traceability and source verification process supports multiple strategies, such as tracing by operation type, by time, and by operator identity, to meet different business needs.

[0038] 4. File anti-tampering interface design The interface is used to connect the electronic document storage platform and the document management system. For example, when storing document circulation information and secretary identity, it is necessary to call the on-chain storage interface in the document anti-tampering interface. When verification is required, the integrity verification interface is called.

[0039] At the software design level, the file anti-tampering model package provides two basic interfaces: an on-chain evidence storage interface and an integrity verification interface. The on-chain evidence storage interface encapsulates the fingerprint extraction and on-chain evidence storage processes, taking the processed file data and the file's unique identifier as input. If the evidence storage is successful, it outputs True; if it fails, it outputs False. The integrity verification interface encapsulates the consistency comparison process, taking the file data to be verified and the file's unique identifier as input. If the file has not been tampered with, it outputs True; if the file has been tampered with, it outputs False. Specifically... Figure 6 As shown.

[0040] 5. Traceability Interface Design The interface is used for the connection between the electronic document storage platform and the document management system. The application layer tracking and tracing function needs to call the tracking and tracing interface to record and trace document changes.

[0041] At the software design level, the operation evidence preservation process can be completed by monitoring the business system's API interface, recording relevant file operations on the blockchain for evidence preservation; the data collection process can be implemented as a blockchain application layer tool, periodically summarizing and organizing on-chain data, placing it in more efficient storage for easy utilization; and the tracing and source tracking process can be encapsulated as a functional interface, with the input being a unique file identifier and tracing strategy, and the output being the corresponding operation record. Specifically, as follows... Figure 7 As shown.

[0042] This invention designs a decentralized, distributed electronic document storage platform to protect the authenticity and traceability of documents, enabling full traceability of the electronic document circulation process and ensuring that signed documents are tamper-proof. This solves the problems of easy document tampering and difficulty in tracing information in existing electronic document systems. By using blockchain technology to build an electronic document storage platform, the electronic document system can be transformed and its original business processes reconstructed, resulting in the following construction benefits.

[0043] 1) Ensure the files are immutable, increasing the security of official document data. In blockchain, electronic documents are signed using an asymmetric encryption mechanism, and their hash values ​​are calculated and uploaded to the chain. Business records are linked together in a chain structure according to time. The hash value of the previous blockchain is put into the second blockchain, realizing the "block-to-block" nature of the blockchain. Any illegal modification to any document will inevitably cause a change in the hash value of all other data blocks, ensuring that the documents can be reliably preserved and verified.

[0044] 2) Improve document flow efficiency and promote service efficiency. The circulation and processing of official documents involves a series of interconnected and well-organized tasks, including document receipt, distribution, submission, processing, approval, circulation, drafting, review, finalization, and distribution. Within a blockchain, multiple users collaboratively create a smart contract. The smart contract program periodically checks the automaton's state; upon receiving a certain condition, it triggers a specific operation, verifies transactions that meet the conditions, and automatically executes and notifies users after all nodes in the network reach a consensus. Utilizing the characteristics of the smart contract system enables rapid document approval and confirmation, forming an efficient collaborative mechanism.

[0045] 3) The system's traceability information is reliable, increasing system reliability. The blockchain-based electronic document storage platform uses blockchain technology to reconstruct the original document processing procedures. The electronic document system, by calling the API interface provided by the storage platform, records and generates a blockchain record for each update of the document processing flow. By uploading data and status at different stages of document circulation to the blockchain, the authenticity of electronic documents is protected, and version retention and authenticity verification are performed.

[0046] The above description is only a preferred embodiment of the present invention. It should be noted that for those skilled in the art, several improvements and modifications can be made without departing from the technical principles of the present invention, and these improvements and modifications should also be considered within the scope of protection of the present invention.

Claims

1. A design method for an electronic document storage platform based on blockchain, characterized in that, The electronic document storage platform is constructed with a primary and multiple side blockchain structure, including: a blockchain data layer, a blockchain infrastructure layer, a blockchain core layer, a blockchain service layer, and an application layer. Blockchain Data Layer: This refers to the data service cluster, which provides high-performance, distributed, and reliable storage and backup services for large-scale files. It is responsible for processing unstructured transfer files and sending / receiving records mirrored from the document system's business layer. These records are stored and evidenced by the blockchain data server and the blockchain ledger server, achieving the separation of the transfer information office data ontology and the transfer trajectory information. At the same time, irreversible file retrieval and verification information is generated from the transfer file data ontology and packaged with version retention and exported log data into blocks to form a trusted associated record retrieval. Blockchain infrastructure layer: including national cryptographic algorithms, consensus mechanisms, smart contracts, P2P networks, and distributed ledgers; National cryptographic algorithms are used to establish trust relationships in an environment where no third-party institution is required. Consensus mechanism is used by nodes in a blockchain network to reach a consensus on the verification, recording, and modification of transactions or states performed in the system. Smart contracts are used to implement, compile, and deploy business logic in the form of code, and to complete the triggering and automatic execution of predetermined rules. P2P networks are used to provide network communication capabilities; Distributed ledgers are used for the storage of distributed data. Through the joint recording and maintenance of the ledger by different nodes, a mechanism for public management, tamper-proof, and trustworthy data is formed in the blockchain. The core layer of the blockchain includes node management, cross-chain management, consortium management, log monitoring, CA authentication management, smart contract management, and a blockchain explorer. Node management is used for node scaling up / down, node startup and shutdown, and monitoring of node operating status. Cross-chain management is used for cross-chain management, including cross-chain authentication, cross-chain exchange, cross-chain interoperability, and cross-chain data migration; it provides the ability to manage cross-chain contracts, cross-chain notarization, and cross-chain routing, and can establish or stop inter-chain communication, control the establishment of secure links between the blockchain and the external world, and manage trusted data access; Consortium management is used for consortium creation, underlying chain selection, and consortium chain admission / exit. It supports consortium monitoring, including consortium status, consortium topology graph, block browsing, transaction browsing, transaction rate, underlying chain distribution statistics, and cross-chain business analysis statistics. Log monitoring is used to record system behavior and upload it to the blockchain in real time; CA certification management is used to certify the security control permissions for blockchain consensus, node access, and participation in consensus. Smart contract management is used to support the management of the deployment, instantiation, update, and deactivation lifecycle phases of smart contracts. A blockchain explorer provides an integrated development environment for smart contracts; Blockchain service layer: includes standard interfaces, data on-chain, privacy protection, access control, secure sharing, and regulatory auditing; A standard interface for providing data for blockchain interaction to the application layer; Data is uploaded to the blockchain for broadcasting and verifying block data, and updating the blockchain after reaching a consensus; Privacy protection is used for tenant management and maintenance, identity authentication, access control and resource quota allocation in public management and service institutions. Access control is used to configure and manage account access permissions to chains and nodes, and to manage and configure different access connection methods and protocols to better provide client access and data transmission. Secure sharing is used to manage network security, including client and node communication, two-way authentication and reliable communication between nodes; and to manage data security and storage security. Regulatory auditing, used for regulatory auditing of blockchain users; Application layer: includes a file anti-tampering model and a full-process traceability model; the file anti-tampering model includes fingerprint extraction, on-chain evidence storage, and consistency comparison functions; the full-process traceability model includes operation evidence storage, data collection, and tracking and tracing functions.

2. The design method of the blockchain-based electronic document storage platform as described in claim 1, characterized in that, The blockchain explorer supports functions such as contract development / debugging, automatic contract generation, contract compilation and automatic deployment, formal verification of contract security, visualization of contract runtime, contract sharing / review / release, contract version management, contract export templates, and generation of contract code into visual components.

3. The design method of the blockchain-based electronic document storage platform as described in claim 1, characterized in that, Fingerprint extraction is used to generate digital fingerprints for documents; on-chain evidence storage is used to write information from each step of the document circulation process into the blockchain for trusted evidence storage; consistency comparison is used to verify whether the document has been tampered with; by connecting to the document management system, when a secretary assists the leader in office work, the secretary's fingerprint and voiceprint information is uploaded to the blockchain, so that the individual's real identity is bound to the information, making the information difficult to tamper with; at the same time, the corresponding permission control logic of the smart contract is called to prevent unauthorized access; when a file is lost on a certain node or some nodes, the data can also be recovered by synchronizing information from other nodes.

4. The design method of the blockchain-based electronic document storage platform as described in claim 1, characterized in that, Operation notarization is used to notarize and record all operations related to the entire lifecycle of a file on the blockchain, adding digital signatures to prevent repudiation and providing a data foundation for end-to-end file tracking; data aggregation uses the file's unique identifier as an index to summarize the notarized operation records related to that identifier on the blockchain, forming the file's complete operation history, and writes it to off-chain storage, improving the efficiency and flexibility of data query and analysis; tracing and source verification uses the notarized data on the blockchain to list, track, and verify the legality of all operations throughout the file's lifecycle.

5. The design method of the blockchain-based electronic document storage platform as described in any one of claims 1-4, characterized in that, The proposed main-multiple-side blockchain structure adopts a layered structure, allowing office data to be transferred between the main chain and side chains, enabling interoperability among the various side chains. The side chain layer uses pluggable technology and a hybrid high-efficiency consensus algorithm, allowing different side chains to be connected according to different business scenarios. The side chains sacrifice some decentralization but significantly improve performance. Timestamps are used to authenticate each data operation record and can show the authenticity of the operation traces; The core process of cross-chain interaction between the main chain and the side chain is as follows: First, the main chain initiates a cross-chain transaction to the relay chain for the side chain. After receiving the request, the relay chain verifies the transaction with the distributed storage system and uses distributed hashing to query and determine whether the cross-chain data is trustworthy, ensuring the authenticity of the cross-chain data. If the verification is successful, a transaction data hash is generated for the side chain and the relevant content is uploaded to the side chain via cross-chain routing. Otherwise, the illegal transaction is rolled back and the cross-chain interaction ends. In the cross-chain system, the relay chain is an important component that connects to specific types of blockchains and forwards cross-chain messages. It provides functions such as cross-chain transaction listening, cross-chain transaction execution, and cross-chain transaction routing. Cross-chain transactions are initiated by users on the main chain, which throws a cross-chain event in a specific format. After receiving the submitted cross-chain transaction, the cross-chain transaction routing function transmits the transaction to the relay chain through the directory on the shared Merkle tree.

6. The design method of the blockchain-based electronic document storage platform as described in claim 5, characterized in that, The file anti-tampering model includes: Each block in a blockchain contains the hash values ​​of all data packets from the previous block. When calculating the hash value of the current block, the hash value of the data fingerprint from the previous block is also included, forming a link. Once the data in any block changes, the hash values ​​of all subsequent connected blocks will change. All nodes can immediately detect data tampering, and the tampered blockchain data cannot pass the legitimacy verification, thus ensuring the immutability of blockchain data. The file anti-tampering model specifically consists of three processes: fingerprint extraction, on-chain evidence storage, and consistency comparison. Fingerprint extraction: After a person processes a file, the file data itself is used as input, and a hash value is calculated using a hash algorithm. This hash value serves as the digital fingerprint of the file. Due to the collision-resistant nature of the hash algorithm, there is a one-to-one correspondence between the digital fingerprint and the file data, making it impossible for anyone to forge. On-chain evidence storage: After extracting the digital fingerprint of the file, construct... ,in It is the unique identifier of the file, and This becomes the digital fingerprint of the file, which is then transmitted via a blockchain transaction. Once written to the blockchain, the digital fingerprint of the document cannot be tampered with because the blockchain is immutable. Consistency verification: To verify whether a file has been tampered with, after receiving the file, a person handling the process first calculates its digital fingerprint locally using a hash algorithm. Then, using the file's unique identifier As an index, it allows for on-chain lookup of the stored digital fingerprint. ,if If the file is intact, it has not been tampered with; otherwise, it has been tampered with.

7. The design method of the blockchain-based electronic document storage platform as described in claim 6, characterized in that, The full-process traceability model includes three processes: operation evidence storage, data collection, and traceability. Operation Evidence Storage: Operation evidence storage refers to storing and recording all relevant operations throughout the entire lifecycle of a file on the blockchain, providing a data foundation for end-to-end file tracking; the blockchain data structure is as follows: ,in It is the unique identifier of the file. It is the type of operation. This is the data fingerprint of the file after this operation. It is the operator's digital signature; the core of the operation evidence preservation process is "completeness", that is, all related operations on the file are fully recorded; and the addition of digital signature can ensure that the operator cannot deny it afterward. Data aggregation: Regularly aggregate on-chain evidence data; Data aggregation uses the file's unique identifier as an index to summarize the operation records related to that identifier stored on the chain, forming the complete operation history of the file; Traceability: Traceability is a process of listing, tracking, and verifying the legality of all operations on a file throughout its entire lifecycle, based on on-chain evidence data. Based on the data stored on the blockchain, the queryer can obtain all historical operation records of the file, including the type of operation, the time of operation, the result of operation, and key information about the operator's identity. It supports multiple strategies, including tracing by operation type, tracing by time, and tracing by operator identity.

8. The design method of the blockchain-based electronic document storage platform as described in claim 7, characterized in that, After data is collected, it can be written to an off-chain relational database or big data platform to build a "mirror" of the on-chain data. Then, by utilizing the indexing, association, and parallel processing capabilities provided by relational databases and big data platforms, the data can be flexibly and comprehensively queried and analyzed.

9. The design method of the blockchain-based electronic document storage platform as described in claim 7, characterized in that, The file anti-tampering model package provides two basic interfaces: the on-chain evidence storage interface and the integrity verification interface. The on-chain evidence storage interface encapsulates the fingerprint extraction and on-chain evidence storage processes. It takes the processed file data and the file's unique identifier as input. If the evidence storage is successful, it outputs True; if the evidence storage fails, it outputs False. The integrity verification interface encapsulates the consistency comparison process. It takes the file data to be verified and the file's unique identifier as input. If the file has not been tampered with, it outputs True; if the file has been tampered with, it outputs False.

10. The design method of the blockchain-based electronic document storage platform as described in claim 7, characterized in that, The operation evidence storage process is completed through the monitoring business system API interface, and the relevant file operations are recorded on the blockchain for evidence storage; the data collection process is implemented as a blockchain application layer tool, which regularly summarizes and sorts the on-chain data, and puts the on-chain data in a more efficient storage for easy use; and the tracking and tracing process is encapsulated as a functional interface, with the input being the file's unique identifier and tracking strategy, and the output being the corresponding operation record.

Images