A data storage and preservation processing method and system based on distributed storage technology
Patent Information
- Application Number
- CN202610801478.7
- Authority / Receiving Office
- CN · China
- Patent Type
- Patents(China)
- Current Assignee / Owner
- Filing Date
- 2026-06-04
- Publication Date
- 2026-09-15
- Estimated Expiration
- 2046-06-04
AI Technical Summary
[0003]针对上述所显示出来的问题,本发明提供了一种基于分布式存储技术的数据存证保全的处理方法及系统用以解决背景技术中提到的存证时间戳的可信度低、海量数据上链存证的成本极高、验证方式单一导致用户无法独立验证,降低了实用性和稳定性以及可靠性的问题
Smart Images

Figure CN122348814B_ABST
Abstract
Description
Technical Field
[0001] This invention relates to the field of data evidence preservation technology, and in particular to a data evidence preservation processing method and system based on distributed storage technology. Background Technology
[0002] Currently, with the acceleration of digitalization across society, the evidentiary value of electronic data in fields such as justice, finance, copyright, and supply chain is becoming increasingly prominent. Ensuring the integrity, authenticity, and time of creation of electronic data has become crucial for judicial evidence presentation and commercial dispute resolution. In recent years, blockchain technology, due to its decentralized, immutable, and traceable characteristics, has been attempted to be applied to the field of data storage. Some existing blockchain-based storage solutions directly write data hash values into the blockchain, utilizing its immutability to ensure the credibility of the hash values. However, these solutions still have the following problems: First, they often ignore the issue of the authority of timestamps; although the blockchain's own timestamps are immutable, they are not a legally trusted source of time. Second, directly or entirely uploading massive amounts of data to the blockchain is extremely costly and difficult to put into practical use. Third, existing solutions often lack mechanisms to protect data privacy; verification often requires the transmission of original data, making independent verification impossible for users. Once the platform service becomes unavailable or provides false verification results, users will lose their verification ability, significantly diminishing the value of the stored evidence. Summary of the Invention
[0003] To address the aforementioned problems, this invention provides a data preservation and storage method and system based on distributed storage technology to solve the issues mentioned in the background art, such as low reliability of data storage timestamps, extremely high cost of storing massive amounts of data on the blockchain, and the single verification method that prevents users from independently verifying data, thus reducing practicality, stability, and reliability.
[0004] A data preservation and authentication method based on distributed storage technology includes the following steps: The original electronic data to be stored is preprocessed to generate a first data packet containing data fingerprint, user identity and system time. The first data packet is hashed to obtain the first-level evidence fingerprint. Request a trusted timestamp service provider to issue a trusted timestamp for the first-level evidence fingerprint, combine the first-level evidence fingerprint, the content identifier of the original data and the trusted timestamp into a second data packet, perform a hash operation on the second data packet to generate the final evidence fingerprint; The final evidence fingerprint is broadcast to the blockchain network so that the nodes of the blockchain network can write the final evidence fingerprint into the block through the consensus mechanism and generate an evidence record containing the transaction hash and block height. Electronic evidence certificates are generated based on the evidence storage records, blockchain network identifiers, and storage time, and then returned to the user. Based on the electronic evidence certificate, the final evidence fingerprint is obtained from the blockchain network. The original electronic data provided by the user is re-hash calculated to obtain the verification fingerprint. The consistency between the verification fingerprint and the final evidence fingerprint is compared to obtain the verification conclusion on the integrity of the data and the reliability of the evidence storage time.
[0005] Preferably, the preprocessing of the original electronic data to be stored to generate a first data packet containing a data fingerprint, user identity, and system time, and the hash operation on the first data packet to obtain a first-level evidence fingerprint, includes: Obtain the original electronic data to be stored and the user identity information associated with that data; Perform hash operations on the original electronic data to generate a data fingerprint that represents its uniqueness and integrity; The data fingerprint, user identity information, and the currently acquired system time are combined to construct the first structured data packet; Perform a hash operation on the first structured data packet and output the hash value as the first-level evidence fingerprint.
[0006] Preferably, the step of requesting a trusted timestamp from a trusted timestamp service provider to issue a trusted timestamp for the first-level evidence fingerprint, combining the first-level evidence fingerprint, the content identifier of the original data, and the trusted timestamp into a second data packet, performing a hash operation on the second data packet to generate the final evidence fingerprint, includes: Initiate a request to a trusted timestamp service provider to issue a legally valid trusted timestamp for the first-level evidence fingerprint; Receive trusted timestamp data returned from a trusted timestamp service provider, which contains digital signature and time authentication information for the first-level evidence fingerprint; The first-level evidence fingerprint, the content identifier of the original data, and the trusted timestamp data are combined to construct a second structured data packet; A cryptographic hash operation is performed on the second structured data packet to generate the final evidence fingerprint, which serves as the final anchor point for the entire evidence preservation process.
[0007] Preferably, broadcasting the final evidence fingerprint to the blockchain network, so that the nodes of the blockchain network can write the final evidence fingerprint into the block through the consensus mechanism and generate an evidence record containing the transaction hash and block height, includes: The final evidence fingerprint and associated evidence metadata are constructed into a blockchain transaction data structure that conforms to the target blockchain network protocol. Broadcast the completed blockchain transaction data to the blockchain network; The distributed nodes in the blockchain network verify and reach consensus on blocks containing blockchain transaction data based on a predetermined consensus algorithm. After reaching consensus, the block is appended to the end of the blockchain. Extract and generate a notarization record containing the transaction hash and corresponding block height from the successfully recorded blockchain transactions, which serves as a certificate whose final notarization fingerprint has been immutably anchored.
[0008] Preferably, the step of generating an electronic evidence certificate based on the evidence storage record, blockchain network identifier, and evidence storage time, and returning it to the user, includes: The evidence storage time is determined based on the timestamp of the block where the evidence storage record is located or the associated trusted timestamp. By integrating evidence storage records, blockchain network identification information, and storage time, a structured electronic evidence storage certificate is generated. The electronic evidence certificate will be returned to the user.
[0009] Preferably, the step of obtaining the final evidence fingerprint from the blockchain network based on the electronic evidence certificate, re-performing a secondary hash calculation on the original electronic data provided by the user to obtain a verification fingerprint, comparing the consistency between the verification fingerprint and the final evidence fingerprint, and obtaining a verification conclusion on data integrity and the reliability of the evidence storage time includes: Receive a verification request, which includes the original electronic data to be verified and the corresponding electronic evidence certificate; Analyze the electronic evidence certificate and extract the blockchain transaction hash and blockchain network identifier contained therein; Access the corresponding blockchain network based on the blockchain network identifier, and use the transaction hash to query and obtain the final evidence fingerprint stored on the chain. The original electronic data to be verified is subjected to a second hash calculation process consistent with the evidence storage stage to obtain the verification fingerprint; The verification fingerprint is compared with the final evidence fingerprint obtained from the blockchain; A verification conclusion is generated based on the comparison results. If the two are consistent, it is determined that the original electronic data has remained intact since the notarization and the notarization time is reliable; if they are inconsistent, it is determined that the original electronic data has been tampered with or the notarization certificate is invalid.
[0010] Preferably, the process of broadcasting the final evidence fingerprint to the blockchain network also includes: Determine the user's evidence storage strategy label, and select multiple suitable execution chains from multiple downstream blockchain networks based on the evidence storage strategy label; Obtain the status information of each execution chain, and select multiple target execution chains based on the status information; Generate the anchor fingerprint of the original electronic data to be stored and broadcast the storage transaction data containing the anchor fingerprint to each target execution chain in parallel for storage, and obtain the first storage receipt from each target execution chain; When the preset batch triggering conditions are met, all fingerprints to be anchored and their corresponding first evidence receipts that have been successfully stored in the current batch period are aggregated to generate batch anchoring data. Submit the batch anchored data to the upstream blockchain network for notarization and obtain a second notarization receipt; In response to a user's evidence storage request, the system generates electronic evidence storage certificates for multiple target execution chains based on the index information related to this evidence storage in the first evidence storage receipt and the second evidence storage receipt, and returns them to the user.
[0011] Preferably, after generating the final evidence fingerprint, the process also includes: Determine the state transition logic for the original electronic data to be stored based on the evidence storage process; By combining preset identity information input parameters with user identity, the evidence preservation identity constraint for the original electronic data to be preserved is determined, and the first access control strategy for the blockchain network is determined based on the evidence preservation identity constraint. Initialization parameters are generated based on state transition logic and access control policies. Based on the final evidence fingerprint, a dedicated evidence management smart contract is deployed on the blockchain network using a pre-set smart contract template and initialization parameters. The final evidence fingerprint is bidirectionally and immutably linked to the deployment address of the evidence management smart contract to form an active evidence object, and the anchoring relationship is persistently stored on the blockchain. Based on the active evidence object, determine the query operation conditions for the final evidence fingerprint, and based on the query operation conditions, determine multiple operation objectives and the expected indicators for each operation objective. Based on multiple operational objectives and the expected metrics for each operational objective, a second access control strategy and query business logic are determined for the final stored fingerprint. The smart contract for evidence storage management provides a standardized function interface to the outside world and accepts external requests for the final evidence fingerprint. Based on the call request, and according to access control policies and query business logic, the external execution of operation instructions includes identity integrity verification, evidence validity disclosure, and multi-party collaborative confirmation. Receive operation feedback parameters from external sources, and determine the degree of matching between external query and unlock conditions for the final stored fingerprint based on the operation feedback parameters; Based on the matching degree of the query unlock conditions, a one-time access authorization credential is selectively generated and a query event for the final stored fingerprint is triggered.
[0012] Preferably, the step of determining the user's evidence storage strategy tag, and selecting suitable execution chains from multiple downstream blockchain networks based on the evidence storage strategy tag, includes: Receive the evidence storage mode selected by the user or the weight parameter defined by the user, and generate the corresponding evidence storage strategy label according to the evidence storage mode or weight parameter; The node status and transaction pool depth of each downstream blockchain network are collected in real time through active probing or subscription. Based on node status and transaction pool depth, a standardized state vector is formed that can be used for multi-attribute decision-making. The real-time state information of each downstream blockchain network is determined based on the standardized state vector. The weight vectors of multiple optimization objectives are determined based on the evidence storage strategy labels, and the optimization objectives correspond one-to-one with the indicators in the real-time status information. The real-time status information of each downstream blockchain network is weighted and standardized based on the weight vector to construct a weighted standardized decision matrix; Determine the positive and negative ideal solutions for each optimization objective and calculate the Euclidean distance between each downstream blockchain network and the positive and negative ideal solutions; The relative proximity of each downstream blockchain network is calculated based on distance and used as a comprehensive score for that downstream blockchain network. Select the top N downstream blockchain networks in terms of overall score as the appropriate execution chain.
[0013] Preferably, the step of obtaining the state information of each execution chain and selecting multiple target execution chains based on the state information includes: The network status indicators of each execution chain are collected in real time, and the network status indicators are normalized to form a standardized state vector for each execution chain. Construct a decision matrix for each execution chain based on the standardized state vector, perform positive standardization on the benefit-type indicators and negative standardization on the cost-type indicators within the decision matrix, and obtain a standardized decision matrix. Receive user network effect requests and determine the user's preference vector for multiple network optimization objectives based on the network effect requests; The candidate score for each execution chain is calculated based on the preference vector and the optimization response score of the network state index corresponding to each network optimization objective in the standardized decision matrix: in, Let represent the candidate score for the i-th execution chain, N represent the number of network optimization objectives, and j represent the j-th network optimization objective. Let be the user's preference vector for the j-th network optimization objective. Let be the optimization response score of the network state index corresponding to the j-th network optimization objective in the standardized decision matrix of the i-th execution chain. Let be the historical average optimization response score of the network state index corresponding to the j-th network optimization objective, and exp be the exponential function. Let be the load sensitivity coefficient of the i-th execution chain. This represents the real-time load rate of the i-th execution chain; Select the top N execution chains in the candidate scores as multiple target execution chains.
[0014] A data preservation and authentication processing system based on distributed storage technology, the system comprising: The first generation module is used to preprocess the original electronic data to be stored, generate a first data packet containing data fingerprint, user identity and system time, and perform a hash operation on the first data packet to obtain the first-level evidence fingerprint. The second generation module is used to request a trusted timestamp from a trusted timestamp service provider to issue a trusted timestamp for the first-level evidence fingerprint, combine the first-level evidence fingerprint, the content identifier of the original data and the trusted timestamp into a second data packet, perform a hash operation on the second data packet, and generate the final evidence fingerprint. The third generation module is used to broadcast the final evidence fingerprint to the blockchain network, so that the nodes of the blockchain network can write the final evidence fingerprint into the block through the consensus mechanism and generate an evidence record containing the transaction hash and block height. The fourth generation module is used to generate electronic evidence certificates based on the evidence storage record, blockchain network identifier, and evidence storage time, and return them to the user. The comparison and verification module is used to obtain the final evidence fingerprint from the blockchain network based on the electronic evidence certificate, re-perform a secondary hash calculation on the original electronic data provided by the user to obtain the verification fingerprint, compare the consistency between the verification fingerprint and the final evidence fingerprint, and obtain the verification conclusion on the integrity of the data and the reliability of the evidence storage time.
[0015] Other features and advantages of the invention will be set forth in the following description, and will be apparent in part from the description, or may be learned by practicing the invention. The objects and other advantages of the invention may be realized and obtained by means of the structures particularly pointed out in the written description and the accompanying drawings.
[0016] The technical solution of the present invention will be further described in detail below with reference to the accompanying drawings and embodiments. Attached Figure Description
[0017] The accompanying drawings are provided to further illustrate the invention and form part of the specification. They are used together with the embodiments of the invention to explain the invention and do not constitute a limitation thereof.
[0018] Figure 1 A flowchart illustrating the data preservation and authentication method based on distributed storage technology provided by this invention. Figure 2Another flowchart of a data preservation and authentication method based on distributed storage technology provided by the present invention; Figure 3 This is another flowchart of a data preservation and authentication method based on distributed storage technology provided by the present invention. Figure 4 This is a schematic diagram of the structure of a data preservation and authentication system based on distributed storage technology provided by the present invention. Detailed Implementation
[0019] Exemplary embodiments will now be described in detail, examples of which are illustrated in the accompanying drawings. When the following description relates to the drawings, unless otherwise indicated, the same numerals in different drawings denote the same or similar elements. The embodiments described in the following exemplary embodiments do not represent all embodiments consistent with this disclosure. Rather, they are merely examples of apparatuses and methods consistent with some aspects of this disclosure as detailed in the appended claims.
[0020] A data preservation and authentication method based on distributed storage technology, such as... Figure 1 As shown, it includes the following steps: Step S101: Preprocess the original electronic data to be stored to generate a first data packet containing data fingerprint, user identity and system time, and perform a hash operation on the first data packet to obtain the first-level evidence fingerprint. Step S102: Request a trusted timestamp service provider to issue a trusted timestamp for the first-level evidence fingerprint; combine the first-level evidence fingerprint, the content identifier of the original data, and the trusted timestamp into a second data packet; perform a hash operation on the second data packet to generate the final evidence fingerprint. Step S103: Broadcast the final evidence fingerprint to the blockchain network so that the nodes of the blockchain network can write the final evidence fingerprint into the block through the consensus mechanism and generate an evidence record containing the transaction hash and block height. Step S104: Generate an electronic evidence certificate based on the evidence storage record, blockchain network identifier, and evidence storage time, and return it to the user; Step S105: Obtain the final evidence fingerprint from the blockchain network based on the electronic evidence certificate, re-perform a secondary hash calculation on the original electronic data provided by the user to obtain the verification fingerprint, compare the consistency between the verification fingerprint and the final evidence fingerprint, and obtain the verification conclusion on the integrity of the data and the reliability of the evidence storage time.
[0021] In this embodiment, the cryptographic hash function includes the SHA-256 algorithm or the SM3 algorithm.
[0022] In this embodiment, the trusted timestamp service provider is the National Time Service Center or a legally qualified third-party timestamp service provider.
[0023] In this embodiment, the first data packet and the second data packet refer to data units formed by serializing multiple data fields (such as hash values, identifiers, timestamps, etc.) according to a predetermined order and encoding rules, and participating in subsequent operations as a whole.
[0024] In this embodiment, the content identifier of the original data is an identifier in a content-addressable distributed storage system. It is generated by performing a cryptographic hash operation on the original data and conforms to a self-describing format, which can uniquely identify the data content without depending on the storage location.
[0025] In this embodiment, the blockchain network is at least one of a public blockchain, a consortium blockchain, or a private blockchain.
[0026] In this embodiment, the evidence storage time is taken from the block timestamp of the block where the evidence fingerprint is located.
[0027] In this embodiment, regardless of the size of the original electronic data, the result obtained after processing by the cryptographic hash function is a fixed-length data (32 bytes), i.e., microbyte level.
[0028] The working principle of the above technical solution is as follows: The original electronic data to be stored is preprocessed to generate a first data packet containing a data fingerprint, user identity, and system time. A hash operation is performed on the first data packet to obtain a first-level notarized fingerprint. A trusted timestamp service is requested to issue a trusted timestamp for the first-level notarized fingerprint. The first-level notarized fingerprint, the content identifier of the original data, and the trusted timestamp are combined into a second data packet. A hash operation is performed on the second data packet to generate the final notarized fingerprint. The final notarized fingerprint is broadcast to the blockchain network, enabling the nodes of the blockchain network to write the final notarized fingerprint into a block through a consensus mechanism and generate a notarized record containing transaction hashes and block heights. An electronic notarized certificate is generated based on the notarized record, the blockchain network identifier, and the notarization time, and returned to the user. Based on the electronic notarized certificate, the final notarized fingerprint is obtained from the blockchain network. A secondary hash calculation is performed on the original electronic data provided by the user to obtain a verification fingerprint. The consistency between the verification fingerprint and the final notarized fingerprint is compared to obtain a verification conclusion on data integrity and the credibility of the notarization time.
[0029] The beneficial effects of the above technical solution are as follows: By performing hash calculations on the original electronic data and only uploading the microbyte-level hash value to the blockchain, the exorbitant cost of directly uploading the original data to the blockchain is avoided, reducing the cost of evidence preservation. Furthermore, by introducing authoritative third-party trusted timestamps, whose legal validity has been recognized by judicial practice, combined with the traceability of blockchain, a complete chain of evidence is formed, ensuring the high credibility of the evidence preservation timestamps. Moreover, during the verification process, users can independently complete verification on the public blockchain using only the original data and the evidence preservation certificate; the process is transparent and effectively protects trade secrets and personal privacy. This solves the problems mentioned in the background technology, such as low credibility of evidence preservation timestamps, extremely high cost of uploading massive amounts of data to the blockchain for evidence preservation, and the single verification method preventing users from independently verifying, thus reducing practicality, stability, and reliability.
[0030] The above technical solution provides a specific embodiment as follows: A data preservation and authentication method based on distributed storage technology includes: Step 1: Data preprocessing and double hash calculation.
[0031] Specifically, the system receives the original electronic data D submitted by the user and calculates the data D using a cryptographic hash function (such as SHA-256, SM3) to generate the first-level hash value H_data = Hash(D). This data will also be used as the CID of the original electronic data D in subsequent data preprocessing calculations. Perform another hash operation on the first data packet P1 to generate a fixed-length digital fingerprint H_d=Hash(P1).
[0032] Step 2: Generate a trusted timestamp and combined evidence fingerprint 1. Request the National Time Service Center or an authoritative Trusted Timestamp Service (TSA) to issue a trusted timestamp T_tsa for H_d; 2. Combine H_d, the CID of the original data, and the timestamp T_tsa into a new structured data packet, namely the second data packet P={H_d,CID,T_tsa}. Perform a hash operation on the second data packet again to generate the final evidence fingerprint.
[0033] Step 3: Blockchain-based evidence storage and solidification 1. Broadcast the final notarized fingerprint and related metadata (such as timestamps and notarization party information) as transaction content to one or more blockchain networks; 2. The blockchain network packages transactions into blocks, generating a blockchain transaction hash (TxHash) and the corresponding block height (BlockHeight). This process primarily utilizes the blockchain's distributed consensus mechanism. Distributed network nodes collaborate with the blockchain consensus mechanism to ensure the immutability of node content, time, and history, guaranteeing the immutability of the H_final on-chain data and thus ensuring the global trustworthiness of the original data stored by the user.
[0034] Step 4: Generate and return the evidence storage certificate 1. The system monitors the blockchain network and, upon confirming a successful transaction, integrates key information to generate an electronic certificate of authenticity. The certificate includes: transaction hash TxHash (core), block height (BlockHeight), blockchain network identifier, and certificate of authenticity time (derived from the block timestamp). 2. Return this voucher to the user. It serves as the sole credential for verifying the integrity and duration of the original data (D).
[0035] Step 5: Evidence Verification 1. The user provides the original data file D and the certificate of evidence; 2. The verification system queries the corresponding transaction record from the blockchain based on the TxHash in the certificate and obtains the H_final stored on the chain; 3. The system re-executes the same operation as step one on the user-submitted file D: calculate H_data and H_d, combine P={H_d,CID,T_tsa}, and calculate H_final; Compare the recalculated H_final with the H_final obtained from the blockchain: if they match, it proves that the file has not been tampered with since the date of notarization, and the notarization time is reliable. If they do not match, it proves that the file has been tampered with or the notarization certificate is invalid.
[0036] In one embodiment, such as Figure 2 As shown, the preprocessing of the original electronic data to be stored generates a first data packet containing a data fingerprint, user identity, and system time. A hash operation is then performed on the first data packet to obtain a first-level evidence fingerprint, including: Step S201: Obtain the original electronic data of the certificate to be stored and the user identity information associated with the data; Step S202: Perform a hash operation on the original electronic data to generate a data fingerprint representing its uniqueness and integrity; Step S203: Combine the data fingerprint, user identity information, and the currently acquired system time to construct a first structured data packet; Step S204: Perform a hash operation on the first structured data packet and output the hash value as the first-level evidence fingerprint.
[0037] In this embodiment, the hash algorithm used to generate the data fingerprint is a cryptographically secure one-way hash function, which is either the SHA-256 algorithm or the SM3 national cryptographic hash algorithm.
[0038] In this embodiment, the combination method is any one of sequential concatenation, key-value pair encoding, or structured data serialization.
[0039] In this embodiment, a structured data packet refers to data organized according to a specific, public architecture or pattern, defined using JSON Schema, XML Schema, or Protobuf protocol, so that any system that follows the architecture can parse and extract the various fields without errors.
[0040] In this embodiment, user identity information includes at least one of a user unique identifier, a user public key, and a signed user identity statement.
[0041] In this embodiment, the currently obtained system time is the time obtained from the system clock of the client that initiated the evidence storage request, and its format is a UTC timestamp conforming to the ISO 8601 standard.
[0042] In this embodiment, the algorithm used to perform hash operations on the first structured data packet is the same as the hash algorithm used to generate the data fingerprint.
[0043] The beneficial effects of the above technical solution are as follows: by preprocessing the original electronic data and introducing user identity and system time information, the correlation and anti-replay attack capability of the evidence fingerprint are enhanced. The dual hash structure not only protects the integrity of the original electronic data, but also improves the uniqueness and traceability of the data fingerprint through context binding, laying the foundation for subsequent trusted timestamps and blockchain evidence storage.
[0044] In one embodiment, such as Figure 3 As shown, the step of requesting a trusted timestamp from a trusted timestamp service provider to issue a trusted timestamp for the first-level evidence fingerprint, combining the first-level evidence fingerprint, the content identifier of the original data, and the trusted timestamp into a second data packet, performing a hash operation on the second data packet to generate the final evidence fingerprint, includes: Step S301: Initiate a request to the trusted timestamp service provider to issue a legally valid trusted timestamp for the first-level evidence fingerprint; Step S302: Receive trusted timestamp data returned by a trusted timestamp service provider, which contains digital signature and time authentication information for the first-level evidence fingerprint; Step S303: Combine the first-level evidence fingerprint, the content identifier of the original data, and the trusted timestamp data to construct a second structured data packet; Step S304: Perform a cryptographic hash operation on the second structured data packet to generate the final evidence fingerprint, which serves as the final anchor point of the entire evidence preservation process.
[0045] In this embodiment, the trusted timestamp data includes a first-level evidence fingerprint signed with the private key of the timestamp service provider, the precise time synchronization, and the digital certificate information of the service provider.
[0046] In this embodiment, the content identifier of the original data is an identifier generated based on the original electronic data and used to uniquely identify and locate the data in the distributed storage network. Specifically, it is a unique content hash value implemented by CID or similar technology that conforms to the IPFS protocol.
[0047] In this embodiment, the combination method is to treat the first-level evidence fingerprint, content identifier, and trusted timestamp data as independent fields and serialize and encapsulate them according to a predefined order and format.
[0048] In this embodiment, the final fingerprint will be submitted to the blockchain network for evidence preservation and solidification.
[0049] The beneficial effects of the above technical solution are as follows: By introducing an authoritative and reliable timestamp service, it provides legally valid time proof for the stored data, solving the problem of time falsification in centralized systems. Furthermore, by re-hashing and fusing the timestamp with data fingerprints and content identifiers, the tamper-proof nature and time anchoring strength of the stored evidence are further enhanced, increasing its credibility in judicial evidence presentation.
[0050] In one embodiment, broadcasting the final evidence fingerprint to the blockchain network, so that the nodes of the blockchain network write the final evidence fingerprint into a block through a consensus mechanism and generate an evidence record containing the transaction hash and block height, includes: The final evidence fingerprint and associated evidence metadata are constructed into a blockchain transaction data structure that conforms to the target blockchain network protocol. Broadcast the completed blockchain transaction data to the blockchain network; The distributed nodes in the blockchain network verify and reach consensus on blocks containing blockchain transaction data based on a predetermined consensus algorithm. After reaching consensus, the block is appended to the end of the blockchain. Extract and generate a notarization record containing the transaction hash and corresponding block height from the successfully recorded blockchain transactions, which serves as a certificate whose final notarization fingerprint has been immutably anchored.
[0051] In this embodiment, the evidence storage metadata is used to describe auxiliary information of the evidence storage transaction, including at least one of the following: evidence storage initiator identifier, brief data description, and timestamp reference information.
[0052] In this embodiment, constructing a blockchain transaction data structure includes encoding the final evidence fingerprint as transaction call data, remarks field, or smart contract trigger parameters.
[0053] In this embodiment, broadcasting is achieved through a node client connected to the blockchain network, a public application programming interface, or a blockchain gateway service.
[0054] In this embodiment, the predetermined consensus algorithm is one of Proof-of-Work, Proof-of-Stake, or Byzantine Fault Tolerance consensus algorithms.
[0055] In this embodiment, the transaction hash is a unique identifier for blockchain transaction data in the blockchain network; the block height is the sequence position of the block containing the blockchain transaction data on the blockchain.
[0056] The beneficial effects of the above technical solution are as follows: By utilizing the distributed consensus mechanism of blockchain, the final evidence fingerprint is permanently, publicly, and immutably recorded on the chain, achieving decentralized storage and global trustworthiness of the evidence data. Furthermore, transaction hash and block height, as core elements of the evidence record, provide publicly available and independently searchable technical credentials for verification.
[0057] In one embodiment, generating an electronic evidence certificate based on the evidence storage record, blockchain network identifier, and storage time, and returning it to the user, includes: The evidence storage time is determined based on the timestamp of the block where the evidence storage record is located or the associated trusted timestamp. By integrating evidence storage records, blockchain network identification information, and storage time, a structured electronic evidence storage certificate is generated. The electronic evidence certificate will be returned to the user.
[0058] In this embodiment, the structured electronic evidence is a machine-readable file that conforms to a specific data exchange standard, which may include JSON, XML, or PDF document format.
[0059] In this embodiment, the electronic evidence certificate also includes the following information: a summary of the final evidence fingerprint, the name or type description of the original data, and a unique serial number of the evidence request.
[0060] In this embodiment, the electronic evidence certificate is returned to the user in the following ways: by responding through an application programming interface, by providing a downloadable link, or by storing it in an evidence list associated with the user's account for querying.
[0061] The beneficial effects of the above technical solution are as follows: by generating structured, machine-readable electronic evidence certificates and encapsulating key evidence information within them, users are provided with lightweight, portable, and easily verifiable evidence certificates. The certificates support multiple return methods, improving user experience and system flexibility.
[0062] In one embodiment, the step of obtaining the final evidence fingerprint from the blockchain network based on the electronic evidence certificate, re-performing a secondary hash calculation on the original electronic data provided by the user to obtain a verification fingerprint, comparing the consistency between the verification fingerprint and the final evidence fingerprint, and obtaining a verification conclusion on the data integrity and the reliability of the evidence storage time includes: Receive a verification request, which includes the original electronic data to be verified and the corresponding electronic evidence certificate; Analyze the electronic evidence certificate and extract the blockchain transaction hash and blockchain network identifier contained therein; Access the corresponding blockchain network based on the blockchain network identifier, and use the transaction hash to query and obtain the final evidence fingerprint stored on the chain. The original electronic data to be verified is subjected to a second hash calculation process consistent with the evidence storage stage to obtain the verification fingerprint; The verification fingerprint is compared with the final evidence fingerprint obtained from the blockchain; A verification conclusion is generated based on the comparison results. If the two are consistent, it is determined that the original electronic data has remained intact since the notarization and the notarization time is reliable; if they are inconsistent, it is determined that the original electronic data has been tampered with or the notarization certificate is invalid.
[0063] The beneficial effects of the above technical solution are: users can complete the verification without relying on the original evidence storage platform. By re-executing the same hash calculation and comparing it with the on-chain record, the integrity of the data and the credibility of the evidence storage time are publicly and transparently verified, which enhances the credibility of the system.
[0064] In one embodiment, the process of broadcasting the final evidence fingerprint to the blockchain network further includes: Determine the user's evidence storage strategy label, and select multiple suitable execution chains from multiple downstream blockchain networks based on the evidence storage strategy label; Obtain the status information of each execution chain, and select multiple target execution chains based on the status information; Generate the anchor fingerprint of the original electronic data to be stored and broadcast the storage transaction data containing the anchor fingerprint to each target execution chain in parallel for storage, and obtain the first storage receipt from each target execution chain; When the preset batch triggering conditions are met, all fingerprints to be anchored and their corresponding first evidence receipts that have been successfully stored in the current batch period are aggregated to generate batch anchoring data. Submit the batch anchored data to the upstream blockchain network for notarization and obtain a second notarization receipt; In response to a user's evidence storage request, the system generates electronic evidence storage certificates for multiple target execution chains based on the index information related to this evidence storage in the first evidence storage receipt and the second evidence storage receipt, and returns them to the user.
[0065] The beneficial effects of the above technical solution are as follows: by introducing multi-chain collaboration and hierarchical anchoring mechanisms, the reliability, resilience, and cost efficiency of the system are improved. Dynamically selecting the execution chain and combining it with batch anchoring ensures both the real-time nature and economy of evidence storage, while providing an ultimate root of trust through the upper-level anchor chain, effectively mitigating the risk of single-chain failure.
[0066] In one embodiment, after generating the final evidence fingerprint, the method further includes: Determine the state transition logic for the original electronic data to be stored based on the evidence storage process; By combining preset identity information input parameters with user identity, the evidence preservation identity constraint for the original electronic data to be preserved is determined, and the first access control strategy for the blockchain network is determined based on the evidence preservation identity constraint. Initialization parameters are generated based on state transition logic and access control policies. Based on the final evidence fingerprint, a dedicated evidence management smart contract is deployed on the blockchain network using a pre-set smart contract template and initialization parameters. The final evidence fingerprint is bidirectionally and immutably linked to the deployment address of the evidence management smart contract to form an active evidence object, and the anchoring relationship is persistently stored on the blockchain. Based on the active evidence object, determine the query operation conditions for the final evidence fingerprint, and based on the query operation conditions, determine multiple operation objectives and the expected indicators for each operation objective. Based on multiple operational objectives and the expected metrics for each operational objective, a second access control strategy and query business logic are determined for the final stored fingerprint. The smart contract for evidence storage management provides a standardized function interface to the outside world and accepts external requests for the final evidence fingerprint. Based on the call request, and according to access control policies and query business logic, the external execution of operation instructions includes identity integrity verification, evidence validity disclosure, and multi-party collaborative confirmation. Receive operation feedback parameters from external sources, and determine the degree of matching between external query and unlock conditions for the final stored fingerprint based on the operation feedback parameters; Based on the matching degree of the query unlock conditions, a one-time access authorization credential is selectively generated and a query event for the final stored fingerprint is triggered.
[0067] In this embodiment, an active evidence object refers to a digital entity formed by a two-way binding relationship between the evidence fingerprint and its exclusive evidence management smart contract address, which can autonomously manage its life cycle on the blockchain and respond to external interactions.
[0068] In this embodiment, state transition logic refers to computer-executable code predefined in the evidence management smart contract that specifies the conditions and rules for the transition of evidence between different states (such as 'pending effectiveness', 'valid', 'expired').
[0069] In this embodiment, the evidence storage identity constraint refers to the restrictions imposed on the identity involved in the evidence storage operation, such as requiring the evidence storage party to provide a specific digital certificate, meet multi-factor authentication, or belong to a specific organization. These constraints can be translated into access control conditions in smart contracts.
[0070] In this embodiment, the first access control policy refers to a set of rules that define which external addresses (or what conditions they meet) can perform specific operations (such as querying, verifying, or requesting detailed information) on the stored evidence. It is usually implemented by conditional statements and permission mapping tables in smart contracts.
[0071] In this embodiment, the query operation conditions refer to the prerequisites that must be met when querying the stored evidence, such as the queryer must provide valid identity credentials, and the stored evidence must be in a queryable state. These conditions are implemented in the smart contract through conditional statements; the query function is only allowed to be executed if the conditions are met.
[0072] In this embodiment, the operational objective refers to the desired outcome achieved through a smart contract function call, such as verifying evidence, obtaining evidence status, or updating evidence information. The expected metric refers to the quantifiable standard associated with the operational objective, such as a 100% success rate for verification operations or a response time of less than 1 second for query operations. These metrics can be used to evaluate the execution performance of the smart contract.
[0073] In this embodiment, the operation feedback parameter refers to the parameter contained in the data returned after the smart contract function is executed or in the triggered on-chain event, which is used to indicate the result of the operation execution.
[0074] In this embodiment, when the query operation conditions include multiple sub-conditions, the query unlock condition matching degree is represented as the ratio of the number of satisfied sub-conditions to the total number of sub-conditions. In a smart contract, the matching degree can be calculated through condition judgment, and the query is only allowed to be executed when the matching degree reaches a threshold.
[0075] In this embodiment, a one-time access authorization credential is a temporary authorization mechanism. The credential can be issued through a smart contract event or returned by a contract function. The external account holding the credential can perform a specific operation once within a certain period of time.
[0076] The beneficial effects of the above technical solution are as follows: by binding the stored evidence data with smart contracts, the active management and automated governance of stored evidence are achieved. The contracts can encode complex lifecycle rules, access control policies, and condition triggering logic, enabling the stored evidence to have state awareness, rule execution, and process auditing capabilities, thereby improving the intelligence and compliance level of evidence storage.
[0077] In one embodiment, before preprocessing the original electronic data to be stored to generate a first data packet containing a data fingerprint, user identity, and system time, and performing a hash operation on the first data packet to obtain the first-level evidence fingerprint, the method further includes: A statement of the publicly available attributes of the original electronic data to be certified; Extract private information from the original electronic data to be stored, use the private information as private input, and generate a zero-knowledge proof in a secure local environment using the zero-knowledge proof parameters corresponding to the public attribute declaration. Generate a data integrity commitment to the original electronic data to be stored, and a commitment to the validity of the proof of zero-knowledge proof; The public attribute declaration, data integrity commitment, and proof validity commitment are combined and processed to generate a privacy-preserving fingerprint, which is then submitted to the blockchain network for storage. Based on the on-chain evidence storage results, a verifiable privacy-preserving certificate containing public attribute statements and dual commitments is generated.
[0078] In this embodiment, the zero-knowledge proof parameters include an arithmetic circuit file pre-compiled to prove a specific public attribute statement, and a public reference string required by the zero-knowledge proof system.
[0079] In this embodiment, a secure local environment refers to an execution environment within a computing device controlled by the user who has evidence, which ensures that private inputs are not leaked to any third party.
[0080] In this embodiment, private information refers to the data portion used to generate zero-knowledge proofs but which needs to be kept confidential, and is divided into two categories: (1) Complete original data: When the public attribute statement involves proof of the overall attributes of the data, the private information is the complete original electronic data.
[0081] (2) Sensitive Fields: When the public attribute declaration only involves specific fields in the data, the private information consists of relevant fields extracted from the original data D. Extraction methods include: For structured data: parse the data format and extract field values from the specified path; For unstructured data: locate and extract specific content using predefined parsing rules.
[0082] In this embodiment, the combination process refers to concatenating multiple fields according to a predetermined serialization format and then calculating the hash value.
[0083] The beneficial effects of the above technical solution are as follows: by introducing zero-knowledge proof technology, data storage and verification under privacy protection are achieved. Users can prove that their data meets specific attributes without exposing the original data content, and selectively disclose some information when necessary.
[0084] In one embodiment, determining the user's evidence storage policy tag, and selecting suitable execution chains from multiple downstream blockchain networks based on the evidence storage policy tag, includes: Receive the evidence storage mode selected by the user or the weight parameter defined by the user, and generate the corresponding evidence storage strategy label according to the evidence storage mode or weight parameter; The node status and transaction pool depth of each downstream blockchain network are collected in real time through active probing or subscription. Based on node status and transaction pool depth, a standardized state vector is formed that can be used for multi-attribute decision-making. The real-time state information of each downstream blockchain network is determined based on the standardized state vector. The weight vectors of multiple optimization objectives are determined based on the evidence storage strategy labels, and the optimization objectives correspond one-to-one with the indicators in the real-time status information. The real-time status information of each downstream blockchain network is weighted and standardized based on the weight vector to construct a weighted standardized decision matrix; Determine the positive and negative ideal solutions for each optimization objective and calculate the Euclidean distance between each downstream blockchain network and the positive and negative ideal solutions; The relative proximity of each downstream blockchain network is calculated based on distance and used as a comprehensive score for that downstream blockchain network. Select the top N downstream blockchain networks in terms of overall score as the appropriate execution chain.
[0085] In this embodiment, the evidence storage mode refers to a preset evidence storage strategy template, including but not limited to cost-priority mode, speed-priority mode, security-priority mode, reliability-priority mode, or balanced mode. Each evidence storage mode corresponds to a set of predefined optimization target weight vectors. When a user selects an evidence storage mode, the system converts the mode into a corresponding evidence storage strategy label according to a preset mapping relationship; when a user customizes weight parameters, the system directly converts the user-input weight parameter set into evidence storage strategy labels.
[0086] In this embodiment, the active probing method includes initiating a remote procedure call request to the blockchain node via JSON-RPC, gRPC, or REST API. The subscription method includes subscribing to events such as newHeads (new block header) and pendingTransactions (pending transactions) of the node via WebSocket connection to receive real-time notifications of node status changes.
[0087] In this embodiment, node status includes at least one of the following indicators: node synchronization status, current block height, number of active peer nodes, node software version, and network latency. Transaction pool depth includes: the current number of pending transactions, the maximum transaction pool capacity, and the real-time load rate calculated from both.
[0088] In this embodiment, forming a standardized state vector includes: removing outliers, filling missing values, and smoothing the collected raw data; then, using the minimum-maximum normalization method to map each index to the [0,1] interval, forming a standardized state vector with uniform dimensions.
[0089] In this embodiment, the multi-attribute decision-making uses the approximation-ideal-solution ranking method. This algorithm determines the comprehensive ranking by calculating the relative distances between each selected scheme and the positive and negative ideal solutions.
[0090] In this embodiment, the correspondence between optimization objectives and indicators in real-time status information is as follows: cost optimization objective corresponds to transaction fee indicator, speed optimization objective corresponds to confirmation latency indicator, security optimization objective corresponds to security score indicator, reliability optimization objective corresponds to historical stability indicator, and load balancing objective corresponds to real-time load rate indicator. Each optimization objective can be associated with one or more indicators, and weight vectors are allocated accordingly.
[0091] In this embodiment, weighted standardization refers to: first, standardizing the original data to obtain a standardized decision matrix, and then multiplying the weight vector with the standardized matrix to obtain a weighted standardized decision matrix.
[0092] In this embodiment, the positive ideal solution is composed of the optimal values of each indicator: the maximum value is taken for benefit-type indicators, and the minimum value is taken for cost-type indicators. The negative ideal solution is composed of the worst values of each indicator: the minimum value is taken for benefit-type indicators, and the maximum value is taken for cost-type indicators. The positive and negative ideal solutions are extracted from the weighted standardized decision matrix.
[0093] In this embodiment, the closer the relative proximity is to 1, the closer the downstream blockchain network is to the ideal solution, and the better its overall performance.
[0094] In this embodiment, N is a preset number of redundant evidence storage items, which can be dynamically adjusted according to the evidence storage strategy label. For a reliability-first strategy, N is taken as a larger value to increase redundancy; for a cost-first strategy, N is taken as a smaller value to reduce costs.
[0095] The beneficial effects of the above technical solution are as follows: by receiving the evidence storage mode selected by the user or the weight parameters defined by the user, the corresponding evidence storage strategy label is generated according to the evidence storage mode or weight parameters, which realizes the accurate mapping between user needs and chain selection, improves adaptability, and further, sorting by relative proximity to the positive and negative ideal solutions, rather than simple weighted summation, avoids the bias caused by subjective weighting, and the sorting result is more robust, realizing the foundation for multi-chain redundant evidence storage.
[0096] In one embodiment, obtaining the state information of each execution chain and selecting multiple target execution chains based on the state information includes: The network status indicators of each execution chain are collected in real time, and the network status indicators are normalized to form a standardized state vector for each execution chain. Construct a decision matrix for each execution chain based on the standardized state vector, perform positive standardization on the benefit-type indicators and negative standardization on the cost-type indicators within the decision matrix, and obtain a standardized decision matrix. Receive user network effect requests and determine the user's preference vector for multiple network optimization objectives based on the network effect requests; The candidate score for each execution chain is calculated based on the preference vector and the optimization response score of the network state index corresponding to each network optimization objective in the standardized decision matrix: in, Let represent the candidate score for the i-th execution chain, N represent the number of network optimization objectives, and j represent the j-th network optimization objective. Let be the user's preference vector for the j-th network optimization objective. Let be the optimization response score of the network state index corresponding to the j-th network optimization objective in the standardized decision matrix of the i-th execution chain. Let be the historical average optimization response score of the network state index corresponding to the j-th network optimization objective, and exp be the exponential function. Let be the load sensitivity coefficient of the i-th execution chain. This represents the real-time load rate of the i-th execution chain; Select the top N execution chains in the candidate scores as multiple target execution chains.
[0097] In this embodiment, the candidate score for each execution chain is represented as the final numerical value used for ranking.
[0098] In this embodiment, network optimization objectives include: cost, network latency, and network security.
[0099] In this embodiment, the load sensitivity coefficient is represented as a configurable system parameter for each execution chain, used to adjust the intensity of the load impact.
[0100] In this embodiment, the optimized response score refers to the normalized performance score of each execution chain on each network optimization objective.
[0101] In this embodiment, network status indicators include, but are not limited to, the following five categories: (a) Cost indicator: average gas cost per transaction; (b) Speed indicator: average time required for transaction confirmation, or estimated confirmation probability for the next N blocks; (c) Security indicator: comprehensive score based on total network computing power / total staking value, number of active nodes, and historical fault-free runtime; (d) Load indicator: ratio of the number of pending transactions in the current transaction pool to the capacity limit; (e) Reliability indicator: recent API availability percentage based on health check results.
[0102] In this embodiment, the real-time load rate is obtained by monitoring the ratio of the transaction throughput on each execution chain to the theoretical upper limit.
[0103] The beneficial effects of the above technical solution are as follows: By establishing a chain selection algorithm based on multi-objective dynamic optimization, intelligent, adaptive, and load-balanced chain selection is achieved. By comprehensively considering multiple dimensions such as cost, latency, and security, and combining real-time load adjustment, the system can make optimal decisions in a dynamically changing network environment, improving overall service quality and resource utilization efficiency.
[0104] In one embodiment, this embodiment also discloses a data preservation and authentication processing system based on distributed storage technology, such as... Figure 4 As shown, the system includes: The first generation module 401 is used to preprocess the original electronic data to be stored, generate a first data packet containing data fingerprint, user identity and system time, perform hash operation on the first data packet to obtain the first-level evidence fingerprint. The second generation module 402 is used to request a trusted timestamp from a trusted timestamp service provider to issue a trusted timestamp for the first-level evidence fingerprint, combine the first-level evidence fingerprint, the content identifier of the original data and the trusted timestamp into a second data packet, perform a hash operation on the second data packet, and generate the final evidence fingerprint. The third generation module 403 is used to broadcast the final evidence fingerprint to the blockchain network so that the nodes of the blockchain network can write the final evidence fingerprint into the block through the consensus mechanism and generate an evidence record containing the transaction hash and block height. The fourth generation module 404 is used to generate electronic evidence certificates based on the evidence storage record, blockchain network identifier and evidence storage time, and return them to the user; The comparison and verification module 405 is used to obtain the final evidence fingerprint from the blockchain network based on the electronic evidence certificate, re-perform a secondary hash calculation on the original electronic data provided by the user to obtain the verification fingerprint, compare the consistency between the verification fingerprint and the final evidence fingerprint, and obtain the verification conclusion on the integrity of the data and the reliability of the evidence storage time.
[0105] The working principle and beneficial effects of the above technical solution have been explained in the method embodiments, and will not be repeated here.
[0106] Those skilled in the art should understand that the "first" and "second" in this invention simply refer to different application stages.
[0107] Other embodiments of this disclosure will readily occur to those skilled in the art upon consideration of the specification and practice of the disclosure herein. This application is intended to cover any variations, uses, or adaptations of this disclosure that follow the general principles of this disclosure and include common knowledge or customary techniques in the art not disclosed herein. The specification and examples are to be considered exemplary only, and the true scope and spirit of this disclosure are indicated by the following claims.
[0108] It should be understood that this disclosure is not limited to the precise structures described above and shown in the accompanying drawings, and various modifications and changes can be made without departing from its scope. The scope of this disclosure is limited only by the appended claims.
Claims
1. A data preservation and authentication method based on distributed storage technology, characterized in that, Includes the following steps: The original electronic data to be stored is preprocessed to generate a first data packet containing data fingerprint, user identity and system time. The first data packet is hashed to obtain the first-level evidence fingerprint. Request a trusted timestamp service provider to issue a trusted timestamp for the first-level evidence fingerprint, combine the first-level evidence fingerprint, the content identifier of the original data and the trusted timestamp into a second data packet, perform a hash operation on the second data packet to generate the final evidence fingerprint; The final evidence fingerprint is broadcast to the blockchain network so that the nodes of the blockchain network can write the final evidence fingerprint into the block through the consensus mechanism and generate an evidence record containing the transaction hash and block height. Electronic evidence certificates are generated based on the evidence storage records, blockchain network identifiers, and storage time, and then returned to the user. Based on the electronic evidence certificate, the final evidence fingerprint is obtained from the blockchain network. A second hash calculation is then performed on the original electronic data provided by the user to obtain a verification fingerprint. The consistency between the verification fingerprint and the final evidence fingerprint is compared to obtain a verification conclusion on the data integrity and the reliability of the evidence storage time. The process of broadcasting the final evidence fingerprint to the blockchain network also includes: Determine the user's evidence storage strategy label, and select multiple suitable execution chains from multiple downstream blockchain networks based on the evidence storage strategy label; Obtain the status information of each execution chain, and select multiple target execution chains based on the status information; Generate the anchor fingerprint of the original electronic data to be stored and broadcast the storage transaction data containing the anchor fingerprint to each target execution chain in parallel for storage, and obtain the first storage receipt from each target execution chain; When the preset batch triggering conditions are met, all fingerprints to be anchored and their corresponding first evidence receipts that have been successfully stored in the current batch period are aggregated to generate batch anchoring data. Submit the batch anchored data to the upstream blockchain network for notarization and obtain a second notarization receipt; In response to a user's evidence storage request, the system generates electronic evidence storage certificates for multiple target execution chains based on the index information related to this evidence storage in the first evidence storage receipt and the second evidence storage receipt, and returns them to the user.
2. The data preservation and authentication method based on distributed storage technology according to claim 1, characterized in that, The process involves preprocessing the original electronic data to be stored to generate a first data packet containing a data fingerprint, user identity, and system time. A hash operation is then performed on the first data packet to obtain a first-level evidence fingerprint, including: Obtain the original electronic data to be stored and the user identity information associated with that data; Perform hash operations on the original electronic data to generate a data fingerprint that represents its uniqueness and integrity; The data fingerprint, user identity information, and the currently acquired system time are combined to construct the first structured data packet; Perform a hash operation on the first structured data packet and output the hash value as the first-level evidence fingerprint.
3. The data preservation and authentication method based on distributed storage technology according to claim 1, characterized in that, The step of requesting a trusted timestamp service provider to issue a trusted timestamp for the first-level evidence fingerprint involves combining the first-level evidence fingerprint, the content identifier of the original data, and the trusted timestamp into a second data packet, performing a hash operation on the second data packet, and generating the final evidence fingerprint, including: Initiate a request to a trusted timestamp service provider to issue a legally valid trusted timestamp for the first-level evidence fingerprint; Receive trusted timestamp data returned from a trusted timestamp service provider, which contains digital signature and time authentication information for the first-level evidence fingerprint; The first-level evidence fingerprint, the content identifier of the original data, and the trusted timestamp data are combined to construct a second structured data packet; A cryptographic hash operation is performed on the second structured data packet to generate the final evidence fingerprint, which serves as the final anchor point for the entire evidence preservation process.
4. The data preservation and authentication method based on distributed storage technology according to claim 1, characterized in that, The step of broadcasting the final evidence fingerprint to the blockchain network, so that the nodes of the blockchain network can write the final evidence fingerprint into the block through the consensus mechanism and generate an evidence record containing the transaction hash and block height, includes: The final evidence fingerprint and associated evidence metadata are constructed into a blockchain transaction data structure that conforms to the target blockchain network protocol. Broadcast the completed blockchain transaction data to the blockchain network; The distributed nodes in the blockchain network verify and reach consensus on blocks containing blockchain transaction data based on a predetermined consensus algorithm. After reaching consensus, the block is appended to the end of the blockchain. Extract and generate a notarization record containing the transaction hash and corresponding block height from the successfully recorded blockchain transaction records, as a certificate that the final notarization fingerprint has been immutably anchored; The process of generating electronic evidence certificates based on evidence storage records, blockchain network identifiers, and storage time, and returning them to the user, includes: The evidence storage time is determined based on the timestamp of the block where the evidence storage record is located or the associated trusted timestamp. By integrating evidence storage records, blockchain network identification information, and storage time, a structured electronic evidence storage certificate is generated. The electronic evidence certificate will be returned to the user.
5. The data preservation and authentication method based on distributed storage technology according to claim 1, characterized in that, The process involves obtaining the final evidence fingerprint from the blockchain network based on the electronic evidence certificate, performing a secondary hash calculation on the original electronic data provided by the user to obtain a verification fingerprint, comparing the consistency between the verification fingerprint and the final evidence fingerprint, and obtaining verification conclusions on data integrity and the reliability of the evidence storage time. This includes: Receive a verification request, which includes the original electronic data to be verified and the corresponding electronic evidence certificate; Analyze the electronic evidence certificate and extract the blockchain transaction hash and blockchain network identifier contained therein; Access the corresponding blockchain network based on the blockchain network identifier, and use the transaction hash to query and obtain the final evidence fingerprint stored on the chain. The original electronic data to be verified is subjected to a second hash calculation process consistent with the evidence storage stage to obtain the verification fingerprint; The verification fingerprint is compared with the final evidence fingerprint obtained from the blockchain; A verification conclusion is generated based on the comparison results. If the two are consistent, it is determined that the original electronic data has remained intact since the notarization and the notarization time is reliable; if they are inconsistent, it is determined that the original electronic data has been tampered with or the notarization certificate is invalid.
6. The data preservation and authentication method based on distributed storage technology according to claim 1, characterized in that, After generating the final evidence fingerprint, the process also includes: Determine the state transition logic for the original electronic data to be stored based on the evidence storage process; By combining preset identity information input parameters with user identity, the evidence preservation identity constraint for the original electronic data to be preserved is determined, and the first access control strategy for the blockchain network is determined based on the evidence preservation identity constraint. Initialization parameters are generated based on state transition logic and access control policies. Based on the final evidence fingerprint, a dedicated evidence management smart contract is deployed on the blockchain network using a pre-set smart contract template and initialization parameters. The final evidence fingerprint is bidirectionally and immutably linked to the deployment address of the evidence management smart contract to form an active evidence object, and the anchoring relationship is persistently stored on the blockchain. Based on the active evidence object, determine the query operation conditions for the final evidence fingerprint, and based on the query operation conditions, determine multiple operation objectives and the expected indicators for each operation objective. Based on multiple operational objectives and the expected metrics for each operational objective, a second access control strategy and query business logic are determined for the final stored fingerprint. The smart contract for evidence storage management provides a standardized function interface to the outside world and accepts external requests for the final evidence fingerprint. Based on the call request, and according to access control policies and query business logic, the external execution of operation instructions includes identity integrity verification, evidence validity disclosure, and multi-party collaborative confirmation. Receive operation feedback parameters from external sources, and determine the degree of matching between external query and unlock conditions for the final stored fingerprint based on the operation feedback parameters; Based on the matching degree of the query unlock conditions, a one-time access authorization credential is selectively generated and a query event for the final stored fingerprint is triggered.
7. The data preservation and authentication method based on distributed storage technology according to claim 1, characterized in that, The step of obtaining the status information of each execution chain and selecting multiple target execution chains based on the status information includes: The network status indicators of each execution chain are collected in real time, and the network status indicators are normalized to form a standardized state vector for each execution chain. Construct a decision matrix for each execution chain based on the standardized state vector, perform positive standardization on the benefit-type indicators and negative standardization on the cost-type indicators within the decision matrix, and obtain a standardized decision matrix. Receive user network effect requests and determine the user's preference vector for multiple network optimization objectives based on the network effect requests; The candidate score for each execution chain is calculated based on the preference vector and the optimization response score of the network state index corresponding to each network optimization objective in the standardized decision matrix: in, Let represent the candidate score for the i-th execution chain, N represent the number of network optimization objectives, and j represent the j-th network optimization objective. Let be the user's preference vector for the j-th network optimization objective. Let be the optimization response score of the network state index corresponding to the j-th network optimization objective in the standardized decision matrix of the i-th execution chain. Let be the historical average optimization response score of the network state index corresponding to the j-th network optimization objective, and exp be the exponential function. Let be the load sensitivity coefficient of the i-th execution chain. This represents the real-time load rate of the i-th execution chain; Select the top N execution chains in the candidate scores as multiple target execution chains.
8. The data preservation and authentication method based on distributed storage technology according to claim 1, characterized in that, The process of determining the user's evidence storage policy tag, and selecting suitable execution chains from multiple downstream blockchain networks based on the evidence storage policy tag, includes: Receive the evidence storage mode selected by the user or the weight parameter defined by the user, and generate the corresponding evidence storage strategy label according to the evidence storage mode or weight parameter; The node status and transaction pool depth of each downstream blockchain network are collected in real time through active probing or subscription. Based on node status and transaction pool depth, a standardized state vector is formed that can be used for multi-attribute decision-making. The real-time state information of each downstream blockchain network is determined based on the standardized state vector. The weight vectors of multiple optimization objectives are determined based on the evidence storage strategy labels, and the optimization objectives correspond one-to-one with the indicators in the real-time status information. The real-time status information of each downstream blockchain network is weighted and standardized based on the weight vector to construct a weighted standardized decision matrix; Determine the positive and negative ideal solutions for each optimization objective and calculate the Euclidean distance between each downstream blockchain network and the positive and negative ideal solutions; The relative proximity of each downstream blockchain network is calculated based on distance and used as a comprehensive score for that downstream blockchain network. Select the top N downstream blockchain networks in terms of overall score as the appropriate execution chain.
9. A data preservation and authentication processing system based on distributed storage technology, characterized in that, The system includes: The first generation module is used to preprocess the original electronic data to be stored, generate a first data packet containing data fingerprint, user identity and system time, and perform a hash operation on the first data packet to obtain the first-level evidence fingerprint. The second generation module is used to request a trusted timestamp from a trusted timestamp service provider to issue a trusted timestamp for the first-level evidence fingerprint, combine the first-level evidence fingerprint, the content identifier of the original data and the trusted timestamp into a second data packet, perform a hash operation on the second data packet, and generate the final evidence fingerprint. The third generation module is used to broadcast the final evidence fingerprint to the blockchain network, so that the nodes of the blockchain network can write the final evidence fingerprint into the block through the consensus mechanism and generate an evidence record containing the transaction hash and block height. The fourth generation module is used to generate electronic evidence certificates based on the evidence storage record, blockchain network identifier, and evidence storage time, and return them to the user. The comparison and verification module is used to obtain the final evidence fingerprint from the blockchain network based on the electronic evidence certificate, re-perform a secondary hash calculation on the original electronic data provided by the user to obtain the verification fingerprint, compare the consistency between the verification fingerprint and the final evidence fingerprint, and obtain the verification conclusion on the integrity of the data and the reliability of the evidence storage time. The process of broadcasting the final evidence fingerprint to the blockchain network also includes: Determine the user's evidence storage strategy label, and select multiple suitable execution chains from multiple downstream blockchain networks based on the evidence storage strategy label; Obtain the status information of each execution chain, and select multiple target execution chains based on the status information; Generate the anchor fingerprint of the original electronic data to be stored and broadcast the storage transaction data containing the anchor fingerprint to each target execution chain in parallel for storage, and obtain the first storage receipt from each target execution chain; When the preset batch triggering conditions are met, all fingerprints to be anchored and their corresponding first evidence receipts that have been successfully stored in the current batch period are aggregated to generate batch anchoring data. Submit the batch anchored data to the upstream blockchain network for notarization and obtain a second notarization receipt; In response to a user's evidence storage request, the system generates electronic evidence storage certificates for multiple target execution chains based on the index information related to this evidence storage in the first evidence storage receipt and the second evidence storage receipt, and returns them to the user.
Citation Information
Patent Citations
Electronic evidence storage system based on block chain
CN111177172A
Electronic file evidence storage method and system based on trusted timestamp, terminal and medium
CN116318717A
Industrial consumer goods carbon footprint credible tracing method and system based on block chain
CN121098861A