Optical cable branching connection wiring safety management method and system based on blockchain technology

Abstract

This invention discloses a secure management method and system for optical cable branching and splicing cabling based on blockchain technology, belonging to the field of blockchain security technology. The method includes the following steps: constructing a consortium blockchain for optical cable branching and splicing cabling management; deploying branching facility nodes, operation and maintenance nodes, management nodes, and audit nodes at all levels; assigning a unique digital identity to each fiber core on the blockchain; and binding and storing the digital identity with the physical identifier of the corresponding fiber core connection point on the blockchain. The secure management method and system for optical cable branching and splicing cabling proposed in this invention deeply integrates a blockchain consortium blockchain architecture with optical cable branching and splicing cabling management, constructing a trusted and secure control system for the entire process. It possesses multiple practical and beneficial effects. The on-chain data storage and consensus verification mechanism ensures that core data such as fiber core connection relationships and service occupancy status are tamper-proof, achieving cross-node data synchronization and consistency, and significantly improving data authenticity and credibility.

Description

Technical Field

[0001] This invention relates to the field of blockchain security technology, specifically to a method and system for secure management of optical cable branching and splicing cabling based on blockchain technology. Background Technology

[0002] Fiber optic cable branching and splicing is a crucial aspect of the construction and operation of fiber optic communication networks. Multi-level branching fiber optic networks require hierarchical allocation and splicing management from the backbone fiber cores to the terminal access points, undertaking the core functions of network resource deployment and service transmission. Currently, the industry primarily uses on-site data collection and centralized platform management to conduct fiber core status monitoring, resource planning, allocation, and scheduling management to ensure the stable operation of the fiber optic network and meet service activation requirements. This is an important component of communication network infrastructure operation and maintenance.

[0003] The existing fiber optic branching and splicing cabling management system has room for optimization in long-term application. Under the centralized data management model, the cross-node synchronization efficiency of data such as fiber core connection information and service occupancy status is limited, and the data's reliable verification and anti-tampering capabilities need improvement. The historical records of fiber core scheduling and splicing operations lack standardized evidence storage methods, making it difficult to form a complete and traceable management loop. In multi-level branching networks, the status verification of fiber core resources and the identification of implicit resources are easily affected by data timeliness and accuracy. The coordination between resource optimization and allocation and operation and maintenance security control is insufficient, failing to fully meet the refined security management needs of large-scale networks. To address these issues, we propose a fiber optic branching and splicing cabling security management method and system based on blockchain technology. Summary of the Invention

[0004] To address the aforementioned technical issues, this paper provides a secure management method and system for optical cable branching and splicing cabling based on blockchain technology. This technical solution resolves the problems of the existing centralized management model for optical cable branching and splicing cabling, which suffers from low efficiency in cross-node synchronization of fiber core data, insufficient data credibility verification and anti-tampering capabilities, lack of standardized evidence storage for splicing scheduling operation records, inadequate traceability throughout the process, susceptibility of fiber core status verification and implicit resource identification to data influences, and insufficient coordination between resource allocation and security control, making it difficult to meet the needs of refined management.

[0005] To achieve the above objectives, the technical solution adopted by the present invention is as follows: A blockchain-based method for secure management of fiber optic branching and splicing cabling includes the following steps: S1. Construct an alliance chain for optical cable branching and splicing cabling management, complete the deployment of branching facility nodes, operation and maintenance nodes, management nodes and audit nodes at all levels, assign a unique digital identity on the chain to each fiber core, and bind and store the digital identity with the physical identifier of the corresponding fiber core connection point on the chain. S2. Obtain fiber core connection relationships and business occupancy status information signed by the operation and maintenance node's private key, and complete the information on-chain notarization and consortium chain consensus verification; obtain fiber core planning and allocation information that has been reviewed and notarized on the chain by the management node. S3. Based on the on-chain evidence of fiber core connection relationship, business occupancy status information and fiber core planning and allocation information, the business status of the fiber core flowing through each level of divergence is verified in reverse through multi-node cross-verification of the consortium chain, the hidden idle fiber core is identified, and the identification results are stored on the chain. S4. Based on the on-chain evidence-based fiber core planning and allocation information, business occupancy status information, implicit idle fiber core status and fiber core cascading path, construct an on-chain distributed digital resource map, generate an on-chain profile of implicit idle fiber cores and store it on the chain. S5. When receiving the demand for fiber core resources in the target area, it calls the preset smart contract, filters candidate fiber cores based on the on-chain digital resource map and the on-chain profile of hidden idle fiber cores, completes the scheduling security risk assessment, generates a scheduling guidance scheme, and stores all data on the chain.

[0006] Preferably, S1 includes: From the global topology database of the optical cable network, extract the basic attribute information of branch facilities, operation and maintenance entities, management entities, and auditing entities at all levels, and construct a basic information matrix of optical cable network nodes; The deployment parameters and registration rules of various nodes are extracted from the underlying framework configuration library of the consortium blockchain to complete the network deployment and on-chain registration of divergence facility nodes, operation and maintenance nodes, management nodes, and audit nodes, and generate unique on-chain addresses for various nodes. A digital identity generation model for fiber cores is built using a hash algorithm. The physical route, specifications, and source information of a single fiber core are input into the model to output a unique on-chain digital identity for each fiber core.

[0007] Preferably, S1 further includes: Extract the physical identification code corresponding to each fiber core connection point from the on-site deployment ledger of fiber core connection points, and establish a mapping relationship between physical identification and corresponding fiber cores; Using the vector concatenation method, the on-chain digital identity of a single fiber core is fused with the corresponding physical identifier code to obtain a joint vector of digital identity and physical identifier; Through the consensus algorithm of the consortium blockchain nodes, on-chain verification is performed on the joint vector of digital identity and physical identifier to complete the on-chain binding and storage of the fiber core digital identity and the corresponding physical identifier and the synchronization of all nodes.

[0008] Preferably, S2 includes: Data on fiber core splicing relationships, port correspondences, service activation status, and link connectivity status are extracted from the data collection ledgers collected by on-site mobile terminals to construct a dataset of fiber core connection relationships and service occupancy status. Using an asymmetric encryption algorithm, the private key of the operation and maintenance node is invoked to perform signature processing on the fiber core connection relationship and service occupancy status dataset, generating a corresponding signature verification file; Extract the original planned service area, planned purpose, and allocation level data of fiber cores from the fiber optic network planning and design documents, construct a fiber core planning and allocation information dataset, and complete the content review of the dataset through management nodes.

[0009] Preferably, S2 further includes: Using the PBFT consensus algorithm of the consortium blockchain, an on-chain data consensus verification model is built. The signed fiber core connection relationship and business occupancy status dataset, as well as the approved fiber core planning and allocation information dataset, are substituted into the model to output the data consensus verification result. Based on the Merkle tree structure, an on-chain evidence storage structure for two types of datasets is built to complete the on-chain immutable evidence storage for the two types of datasets that have passed verification. The consortium blockchain node synchronization protocol enables full node synchronization and cross-verification of two types of on-chain evidence datasets.

[0010] Preferably, S3 includes: From the on-chain stored fiber core planning and allocation information dataset, extract the cascade path of a single fiber core from the source connection point through various levels of branching points to the end branching point, and mark all branching facility nodes on the cascade path; Based on the sorting of branch facility nodes on the cascaded path, the reverse verification sequence from the end branch point to the source connection point is determined, and a reverse step-by-step verification path for a single fiber core is constructed. Extract the fiber core service status data corresponding to each branch facility node on the cascaded path from the on-chain stored fiber core service occupancy status dataset, and set the judgment criteria for non-hidden idle fiber cores. Following the reverse step-by-step verification path, the service status data of each branch facility node through which a single fiber core flows is verified node by node, and the full path verification result is output.

[0011] Preferably, S3 further includes: Using the full-path verification results of a single fiber core and the judgment criteria for non-hidden idle fiber cores as basic constraints, and taking the absence of service occupation at all nodes along the entire path as the core judgment condition, a decision model for identifying hidden idle fiber cores is built. Substitute the full on-chain evidence data of a single fiber core into the implicit idle fiber core identification decision model, and output the status judgment result of a single fiber core and the implicit idle fiber core identification list according to the basic constraints and core judgment conditions. Through the consortium blockchain consensus algorithm, the on-chain multi-node cross-verification of the implicit idle fiber core identification list is completed, and the identification list that passes the verification is stored on-chain and synchronized with all nodes.

[0012] Preferably, S4 includes: Based on the directed acyclic graph structure, a data structure for the on-chain distributed digital resource graph is built, integrating on-chain evidence-based fiber core planning and allocation information, business occupancy status information, implicit idle fiber core status, and fiber core cascade path data. Using a single fiber core as a graph node and the cascaded connection relationship of the fiber cores as graph edges, the on-chain distributed digital resource graph is constructed, and the on-chain dynamic update rules and full node synchronization rules of the graph are set. Define the dimensional standards for the on-chain profile of hidden idle fiber cores. The dimensional standards include physical routing information, divergence level information, idle duration information, and original planned service area information. Extract the on-chain data of the corresponding dimensions to generate the on-chain profile of a single hidden idle fiber core. Build an on-chain evidence storage structure for the implicit idle fiber core images, and complete the on-chain evidence storage and full node synchronization of all implicit idle fiber core images.

[0013] Preferably, S5 includes: Extract fiber core resource requirement parameters from the service activation requirement document of the target area. The parameters include the required number of fiber cores, link distance requirements, optical power threshold, and service activation time limit. Complete the on-chain storage of the requirement parameters. Set the trigger conditions for the smart contract, using the target area fiber core resource demand parameters stored on the chain as the trigger input, and call the preset fiber core scheduling smart contract; Based on the on-chain distributed digital resource map and the on-chain profile of implicit idle fiber cores, a fiber core demand-resource matching model is built. The fiber core resource demand parameters of the target area are substituted into the model, and a list of candidate implicit idle fiber cores that have been matched is output. Extract corresponding parameters from the historical scheduling operation data stored on the blockchain, build a scheduling security risk assessment model, substitute the candidate list of hidden idle fiber cores into the model, and output the scheduling security risk level of the corresponding fiber core. Using the scheduling security risk level meeting the preset threshold as a constraint, the candidate list of hidden idle fiber cores is screened to generate a fiber core scheduling guidance scheme for the target area, and the on-chain storage of data for the entire process of demand matching, risk assessment, and scheme generation is completed.

[0014] A blockchain-based optical fiber branching and splicing cabling security management system includes: The consortium blockchain underlying construction module, on-chain data storage and verification module, implicit idle fiber core identification module, on-chain resource graph construction module, and smart contract scheduling decision module; The underlying construction module of the consortium blockchain is used to build a consortium blockchain for optical cable branching and splicing management, complete the deployment of various nodes, assign a unique digital identity to the fiber core, and complete the on-chain binding and storage of the digital identity and the corresponding physical identifier. The on-chain data storage and verification module is electrically connected to the underlying construction module of the consortium blockchain. It is used to obtain and verify the fiber core connection relationship, business occupancy status information and fiber core planning and allocation information, and complete the on-chain storage of the two types of information. The hidden idle fiber core identification module is electrically connected to the on-chain data storage and verification module. It is used to identify hidden idle fiber cores and store them on the chain based on the on-chain storage information, and to verify the fiber core status in reverse step by step through multi-node cross-verification. The on-chain resource graph construction module is electrically connected to the hidden idle fiber core identification module, and is used to construct a distributed digital resource graph based on the full amount of on-chain information, generate an on-chain profile of the hidden idle fiber core and store it on the chain. The smart contract scheduling decision module is electrically connected to the on-chain resource graph construction module. It is used to receive fiber core resource requirements, call the smart contract to screen candidate fiber cores, complete the scheduling risk assessment, generate a scheduling guidance scheme, and store the entire process on the chain.

[0015] Compared with the prior art, the beneficial effects of the present invention are as follows: The fiber optic cable branching and splicing cabling security management method and system proposed in this invention deeply integrates a blockchain consortium blockchain architecture with fiber optic cable branching and splicing cabling management to construct a full-process trusted and secure control system. It possesses multiple practical and beneficial effects. On-chain data storage and consensus verification mechanisms ensure the immutability of core data such as fiber core connection relationships and service occupancy status, achieving cross-node data synchronization and consistency, significantly improving data authenticity and credibility. On-chain binding of fiber core digital identity and physical identifier allows for precise correspondence between physical resources and digital information, eliminating information discrepancies between the physical and data layers. Multi-node cross-verification optimizes the fiber core status verification process, reliably identifying hidden idle fiber cores and improving the accuracy of resource identification. Distributed digital resource maps and on-chain fiber core profiles enable full-dimensional visual management of fiber core resources, providing a clear basis for resource scheduling. Smart contracts drive scheduling decisions, automatically completing candidate fiber core screening and scheduling risk assessment, simplifying operation processes and reducing human intervention errors. Attached Figure Description

[0016] Figure 1 This is a flowchart of the optical cable branching splicing cabling safety management method of the present invention; Figure 2 This is a block diagram of the optical cable branching splicing cabling safety management system of the present invention. Detailed Implementation

[0017] The following description is intended to disclose the invention and enable those skilled in the art to implement it. The preferred embodiments described below are merely examples, and other obvious variations will occur to those skilled in the art.

[0018] Reference Figure 1As shown, the optical cable branching and splicing cabling security management method based on blockchain technology includes the following steps: S1. Construct an alliance chain for optical cable branching and splicing cabling management, complete the deployment of branching facility nodes, operation and maintenance nodes, management nodes and audit nodes at all levels, assign a unique digital identity on the chain to each fiber core, and bind and store the digital identity with the physical identifier of the corresponding fiber core connection point on the chain. S1 includes: From the global topology database of the optical cable network, extract the basic attribute information of branch facilities, operation and maintenance entities, management entities, and auditing entities at all levels, and construct a basic information matrix of optical cable network nodes; The deployment parameters and registration rules for various nodes are extracted from the underlying framework configuration library of the consortium blockchain. The network deployment and on-chain registration of divergence facility nodes, operation and maintenance nodes, management nodes, and audit nodes are completed, and a unique on-chain address for each type of node is generated.

[0019] The unique on-chain address uses the ECDSA-secp256k1 asymmetric encryption algorithm to generate a public-private key pair. The public key undergoes double hashing with SHA-256 and RIPEMD-160, and then a 1-byte version prefix and a 4-byte checksum are added. Finally, the unique on-chain address with a length of 34 bytes is generated by Base58 encoding. The encoding format is fixed as a three-segment structure of version prefix, hash body, and checksum.

[0020] All nodes must submit a registration application including entity qualifications, hardware environment, and network access information. On-chain registration is only completed after dual-signature approval by the management node and audit node, and the admission approval results are synchronized to all nodes. Dissident facility nodes only have permissions to read on-chain data and report local facility status data. Operation and maintenance nodes have permissions to report business data, sign private keys, and schedule execution. Management nodes have permissions to approve node access, review planning data, deploy contracts, and configure permissions. Audit nodes have permissions to read all on-chain data, audit operations, and verify violations.

[0021] Transactions involving node access and permission changes require joint endorsement from both the management node and the audit node. Transactions involving business data reporting require dual endorsement from both the corresponding maintenance node and the node of the relevant divergent facility. Transactions involving planning data uploading to the blockchain require joint endorsement from at least two management nodes. For audit-related transactions, only the audit node has the authority to endorse.

[0022] A fiber optic core digital identity generation model is built using a hash algorithm. The physical route, specifications, and source information of a single fiber optic core are input into the model to output a unique on-chain digital identity for each core. The hash algorithm uses the SHA-256 hash function. Before inputting data into the model, standardization processing is performed: physical route information is converted into a fixed-length string containing the fiber segment number, branch facility level, and connection point coordinates; specifications are converted into a unified format numerical sequence containing the number of fiber cores, fiber type, operating wavelength, and attenuation coefficient; and source information is converted into a fixed-length code containing the starting equipment room number, ODF rack number, and port number. After standardization, bytes are concatenated according to a fixed order of source information, physical route, and specifications. After concatenation, the complete byte stream is subjected to a SHA-256 hash operation, outputting a 256-bit fixed-length hash value as the unique digital identity on the fiber optic core chain, ensuring global uniqueness and collision resistance for the digital identities of different fiber optic cores.

[0023] S1 further includes: Extract the physical identification code corresponding to each fiber core connection point from the on-site deployment ledger of fiber core connection points, and establish a mapping relationship between physical identification and corresponding fiber cores; Using the vector concatenation method, the on-chain digital identity of a single fiber core is fused with its corresponding physical identifier code to obtain a joint digital identity-physical identifier vector. The vector concatenation method first converts the 256-bit fiber core digital identity into a 256-dimensional binary feature vector and the physical identifier code into a 128-dimensional fixed-length binary feature vector. The fusion weight coefficient for the digital identity feature vector is set to 0.7, and the fusion weight coefficient for the physical identifier feature vector is set to 0.3. After weighting the two feature vectors respectively, they are horizontally concatenated in the order of the weighted digital identity vector first, followed by the weighted physical identifier vector, generating a 384-dimensional joint digital identity-physical identifier vector. The joint vector is stored on-chain in key-value pair format, with the fiber core digital identity as the key and the Base64 encoded result of the joint vector as the value.

[0024] Through a consortium blockchain node consensus algorithm, on-chain verification is performed on the digital identity-physical identifier joint vector to complete the on-chain binding and storage of the fiber core digital identity with its corresponding physical identifier and full node synchronization. The consensus algorithm adopts the PBFT consensus algorithm. The specific process is as follows: the client node initiates a binding transaction request to the master node, the master node broadcasts the transaction to all backup nodes, each node performs pre-verification on the format compliance of the joint vector, the uniqueness of the digital identity, and the uniqueness of the physical identifier mapping. After the pre-verification passes, it sends a preparation message to the master node. After the master node collects the preparation messages from more than two-thirds of the nodes, it broadcasts a commit message to all nodes, and each node completes the transaction execution and ledger update. The data synchronization between nodes is set to a fixed time window of 500ms. Cross-comparison of the ledger data of all nodes is completed within each synchronization cycle. When a network partition occurs, the nodes in the partition suspend ledger writing operations, retain the cache of transactions without consensus, and automatically trigger the view replacement mechanism after the network recovers, re-elect the master node, and perform partition data merging and consistency verification to ensure the eventual consistency of the ledger data.

[0025] S2. Obtain fiber core connection relationships and business occupancy status information signed by the operation and maintenance node's private key, and complete the information on-chain notarization and consortium chain consensus verification; obtain fiber core planning and allocation information that has been reviewed and notarized on the chain by the management node. S2 includes: Data on fiber core splicing relationships, port correspondences, service activation status, and link connectivity status are extracted from the data collection ledgers collected by on-site mobile terminals to construct a dataset of fiber core connection relationships and service occupancy status. Using an asymmetric encryption algorithm, the private key of the operations and maintenance node is invoked to perform signature processing on the fiber core connection relationship and service occupancy status dataset, generating a corresponding signature verification file. The asymmetric encryption algorithm adopts the ECDSA-secp256k1 algorithm, with a key length of 256 bits and the curve parameter adopting the secp256k1 standard curve. The signature process first performs a SHA-256 hash operation on the dataset to obtain a message digest, and then performs a signature operation on the message digest using the private key of the operations and maintenance node to generate 65 bytes of signature data containing the r value, s value, and recovery ID. The signature verification file adopts a fixed structure, containing four fields: dataset hash value, signature data, operations and maintenance node public key, and signature timestamp. The execution logic of the on-chain signature verification smart contract is as follows: the contract first extracts the public key from the verification file to restore the node address, verifies the validity of the on-chain permissions of the address, and then performs a signature verification operation using the public key, message digest, and signature data. If the signature verification is successful, a verification success result is returned; otherwise, the transaction execution is terminated.

[0026] From the fiber optic network planning and design documents, the original planned service area, planned purpose, and allocation level data of fiber cores are extracted to construct a fiber core planning and allocation information dataset. The content of the dataset is reviewed by the management node. The rule set used by the management node for review includes four core rules: consistency verification between planning data and global topology, compliance verification of fiber core allocation level, reasonableness verification of service area coverage, and matching verification between planned purpose and fiber core specifications. The verification script uses an on-chain executable smart contract script to automatically complete all verifications within the rule set. Manual review is only conducted on abnormal data that fails automatic verification. After the review is passed, the dataset is standardized using JSON format. Each data item includes a unique planning number, fiber core digital identity, planning attribute fields, review node signature, and review timestamp. Before on-chain notarization, version control is performed using an incrementing version number. Each version corresponds to a unique block height, and historical version data is tamper-proof and traceable.

[0027] S2 further includes: A data consensus verification model is built using the PBFT consensus algorithm in a consortium blockchain. The model incorporates signed fiber core connection relationships and business occupancy status datasets, as well as reviewed fiber core planning and allocation information datasets, to output the data consensus verification result. The PBFT consensus model's view replacement mechanism is set to automatically trigger view replacement when the master node fails to respond for more than three consensus cycles. Backup nodes broadcast view replacement messages, and after collecting view replacement messages from more than two-thirds of the nodes, the view number is incremented and a new master node is elected. The master node election rule is determined by the modulo operation result of the node address hash value and the view number. The node order is fixed, and the Byzantine fault tolerance threshold is set to no more than one-third of the total number of malicious nodes, ensuring the security and liveness of the consensus process.

[0028] Following the Merkle tree structure, an on-chain evidence storage structure is built for two types of datasets, completing the on-chain immutable evidence storage for the two types of datasets that have passed verification. The construction rules of the Merkle tree are as follows: using a single data record from each of the two datasets as a leaf node, performing a SHA-256 hash operation on each data record to generate a leaf node hash value, and concatenating the middle nodes in a fixed order with the left child node hash value first and the right child node hash value last, and then performing a SHA-256 hash operation. If the number of leaf nodes is odd, the hash value of the last leaf node is copied to make up the number. The final generated Merkle root hash value is embedded in a fixed field of the block header, occupying a 32-byte length in the block header, and is used for integrity verification of the block data.

[0029] The consortium blockchain node synchronization protocol enables full-node synchronization and cross-validation of two types of on-chain evidence datasets. The cross-validation checklist includes four core items: block height consistency verification, Merkle root hash value consistency verification, transaction signature validity verification, and data format compliance verification. If a verification fails, the node immediately terminates ledger synchronization, broadcasts the abnormal block information to all full nodes, triggers the full node ledger rollback strategy, rolls the ledger state back to the previous block height that passed verification, discards the abnormal block and subsequent non-consensus transaction data, and re-executes the block synchronization and verification process.

[0030] S3. Based on the on-chain evidence of fiber core connection relationship, business occupancy status information and fiber core planning and allocation information, the business status of the fiber core flowing through each level of divergence is verified in reverse through multi-node cross-verification of the consortium chain, the hidden idle fiber core is identified, and the identification results are stored on the chain. S3 includes: From the on-chain stored fiber core planning and allocation information dataset, the cascaded path of a single fiber core from the source connection point through various branching points to the terminal branching point is extracted, and all branching facility nodes on the cascaded path are marked. The path parsing algorithm adopts a depth-first traversal algorithm. For multi-level branching facility splitting scenarios, starting from the fiber core source connection point, the splitting ports and connection relationships of the fiber core at each branching facility are traversed according to the hierarchical order of the branching facilities. The algorithm distinguishes between primary / backup routes and branch routes in 1:N splitting scenarios. For the direct fusion configuration of optical fiber cores at the junction box, the fiber cores at both ends of the direct fusion are marked as continuous nodes of the same path. For the jumper configuration, the path nodes are matched through the correspondence of the jumper ports. The traversal and marking of all path nodes are completed, and the complete cascaded path of the fiber core is output.

[0031] Based on the sorting of branch facility nodes on the cascaded path, the reverse verification sequence from the end branch point to the source connection point is determined, and a reverse step-by-step verification path for a single fiber core is constructed. From the on-chain stored fiber core service occupancy status dataset, fiber core service status data corresponding to each branch facility node on the cascaded path is extracted, and a criterion for determining non-implicitly idle fiber cores is established. The service status data field has values ​​including 0 for unoccupied, 1 for officially occupied, 2 for pre-occupied, 3 for test occupied, and 4 for temporarily marked occupied. The criterion for determining non-implicitly idle fiber cores is that any node on the fiber core cascaded path with a service status value of any one of 1, 2, 3, or 4 is considered a non-implicitly idle fiber core. Among them, the pre-occupied state is the state where resources have been allocated but officially activated; the test occupied state is the state of temporary occupation during network testing; and the temporarily marked state is the state of being locked during fault investigation or engineering construction. These three edge cases are not included in the scope of implicitly idle fiber core identification.

[0032] Following the reverse step-by-step verification path, the service status data of each branch facility node through which a single fiber core flows is verified node by node, and the full path verification result is output. During the verification process, the fiber core service status data of the corresponding branch facility node is retrieved from the on-chain status database of the corresponding branch facility node in reverse path order, and compared field by field with the non-implicit idle fiber core judgment benchmark. When the on-chain data of some branch nodes is not synchronized in time due to network latency, the verification process triggers a waiting retry mechanism. The retry interval is set to 200ms, and the maximum number of retries is 3. If the data is still not synchronized after 3 retries, a timeout handling mechanism is triggered, the verification process of the current fiber core is terminated, the fiber core is marked as pending verification, and synchronized to the operation and maintenance node and management node. The verification process is retried after the data synchronization is completed.

[0033] S3 further includes: Using the full-path verification results of a single fiber core and the criteria for determining non-hidden idle fiber cores as basic constraints, and with the core criterion that all nodes along the entire path are free of service occupation, a decision model for identifying hidden idle fiber cores is constructed. The strictness of the core criterion is that all branch facility nodes along the fiber core cascade path, from the end branch point to the source connection point, must have service status data values ​​of 0, and there must be no pre-occupancy, test service, or temporary marked on-chain records to meet the core criterion. Fiber cores that have completed planning and allocation but have not actually activated services and have no on-chain occupation status records are uniformly classified as hidden idle fiber cores and included in the identification list.

[0034] Substitute the full on-chain evidence data of a single fiber core into the implicit idle fiber core identification decision model, and output the status judgment result of a single fiber core and the implicit idle fiber core identification list according to the basic constraints and core judgment conditions. Through a consortium blockchain consensus algorithm, the implicit idle fiber core identification list is cross-verified on-chain by multiple nodes. For the verified identification list, on-chain notarization and full node synchronization are performed. The verification data scope of the multi-node cross-verification includes the entire path business status data of the fiber core, planning and allocation data, and historical occupancy record data. The nodes participating in the verification include all divergent facility nodes of the corresponding path, the associated operation and maintenance node, at least two management nodes, and one audit node. The voting weight allocation principle is as follows: the voting weight of a single management node and audit node is 2, and the voting weight of a single operation and maintenance node and divergent facility node is 1. When the percentage of affirmative votes in the valid votes exceeds two-thirds, the identification list is deemed to have passed verification, and on-chain notarization is completed.

[0035] S4. Based on the on-chain evidence-based fiber core planning and allocation information, business occupancy status information, implicit idle fiber core status and fiber core cascading path, construct an on-chain distributed digital resource map, generate an on-chain profile of implicit idle fiber cores and store it on the chain. S4 includes: Following a directed acyclic graph (DAG) structure, a data structure for an on-chain distributed digital resource graph is constructed, integrating on-chain evidence-based fiber core planning and allocation information, business occupancy status information, implicit idle fiber core status, and fiber core cascading path data. Graph node attribute fields include fiber core digital identity, physical identifier code, specifications, planning attributes, business status, and idle status. Graph edge attribute fields include start node number, end node number, connection type, fusion splice / jump identifier, link attenuation value, and route length. The cascading path of the fiber core serves as the directed direction of the edges, pointing from the source node to the end node, creating a loop-free structure. Through the attribute mapping between nodes and edges, the full-dimensional on-chain data of the fiber cores is integrated to form a complete graph topology.

[0036] Using individual fiber cores as graph nodes and the cascading connections of fiber cores as graph edges, an on-chain distributed digital resource graph is constructed. On-chain dynamic update rules and full-node synchronization rules are defined for the graph. The triggering conditions for the graph's dynamic update rules include four scenarios: new fiber cores completing on-chain registration, fiber core reconnection completing connection relationship data upload to the chain, fiber core business status changes completing notarization, and updating the identification results of implicit idle fiber cores. Partial graph updates employ a transactional processing mechanism; multiple update operations within the same block are executed sequentially, and concurrent update requests are sorted by transaction timestamps to avoid data conflicts. The updated graph version number automatically increments, with each version corresponding to a unique block height. Historical version data is permanently retained. Full-node synchronization rules are bound to the block synchronization mechanism; after consensus is achieved for each block, full-node synchronization and consistency verification of the graph data are automatically triggered.

[0037] A dimensional standard is established for the on-chain profile of implicit idle fiber cores. This standard includes physical routing information, divergence level information, idle duration information, and original planned service area information. On-chain data for the corresponding dimensions is extracted to generate an on-chain profile for each implicit idle fiber core. The start and end times for calculating idle duration information are: the start time is the timestamp corresponding to the block where the fiber core's last business usage status was cleared, and the end time is the timestamp corresponding to the current block. Idle duration is calculated cumulatively in days. Physical routing information is expressed using latitude and longitude coordinates in the GCJ02 geographic coordinate system, including the coordinates of key nodes in the fiber core's full route and the length of the optical cable segment. Profile data is stored on-chain in key-value pair format, with the fiber core's digital identity as the primary key and the profile dimension data as the value. The LZ4 compression algorithm is used to compress the profile data to reduce on-chain storage usage.

[0038] An on-chain notarization structure for implicit idle fiber core profiles was established, completing the on-chain notarization and full node synchronization of all implicit idle fiber core profiles. The notarization structure adopts a prefix tree index design, using the fiber core's region code, branch level, and idle duration as the index prefix, and the fiber core's digital identity as the index suffix, constructing a multi-level distributed index. Index data and profile data are synchronously notified on the chain. Smart contracts can quickly retrieve implicit idle fiber core profiles that match the corresponding conditions through the index prefix, improving query and matching efficiency.

[0039] S5. When receiving the demand for fiber core resources in the target area, it calls the preset smart contract, filters candidate fiber cores based on the on-chain digital resource map and the on-chain profile of hidden idle fiber cores, completes the scheduling security risk assessment, generates a scheduling guidance scheme, and stores all data on the chain.

[0040] S5 includes: From the service activation requirement document for the target area, extract the fiber core resource requirement parameters for the target area. These parameters include the required number of fiber cores, link distance requirements, optical power threshold, and service activation time limit. Complete the on-chain notarization of these requirement parameters. The link distance requirement is calculated as the physical route length of the optical cable, i.e., the cumulative length of the entire optical cable segment from the service origin point to the access point in the target area, rather than the geographical straight-line distance. The reference model for the optical power threshold adopts the ITU-T G.652 standard single-mode fiber attenuation model. The attenuation calculation is based on the cumulative values ​​of the fiber fixed attenuation coefficient, fusion splice loss, patching loss, and splitter insertion loss. The optical power threshold is the sum of the minimum receiving sensitivity at the receiver and the system redundancy.

[0041] The smart contract is triggered by setting the conditions, using the on-chain notarized fiber core resource demand parameters of the target area as the trigger input, and invoking the preset fiber core scheduling smart contract. The fiber core scheduling smart contract is written in Go and deployed on all nodes of the consortium blockchain. Its core code logic includes five core stages: demand parameter parsing, graph data querying, fiber core matching and filtering, risk assessment, and solution generation. Key function interfaces include a demand parameter input interface, a graph data querying interface, a matching degree calculation interface, a risk assessment interface, and a solution output interface. The contract uses a state database query interface to call the index data of the on-chain distributed digital resource graph to perform the query and filtering of candidate fibers. The filtering algorithm uses a multi-dimensional weighted matching algorithm to output a list of candidate fibers that meet the requirements.

[0042] Based on the on-chain distributed digital resource map and the on-chain profile of implicit idle fiber cores, a fiber core demand-resource matching model is built. The model inputs the fiber core resource demand parameters for the target area and outputs a list of candidate implicit idle fiber cores after matching. The matching weight calculation rule is as follows: First, the four parameters—demanded fiber core quantity, link distance, optical power, and service activation time limit—are normalized using a min-max process, mapping the parameter values ​​to the 0-1 range. The weights for matching degree of demanded fiber core quantity are set to 0.3, link distance matching degree to 0.25, optical power matching degree to 0.25, and service activation time limit matching degree to 0.2. A weighted summation is then used to calculate the comprehensive matching degree score for each fiber core. Fiber cores are prioritized according to their scores from high to low, and those with a comprehensive score exceeding 0.6 are output as candidates for implicit idle fiber cores. The formula for calculating the comprehensive matching degree score is: ; Where S is the overall matching score, N is the normalized value of the matching score for the required number of fiber cores, L is the normalized value of the matching score for the link distance, P is the normalized value of the matching score for the optical power, and T is the normalized value of the matching score for the service activation time limit.

[0043] By extracting corresponding parameters from historical scheduling operation data stored on the blockchain, a scheduling security risk assessment model is built. The list of candidate implicitly idle fiber cores is then substituted into the model to output the scheduling security risk level of the corresponding fiber core. The assessment indicators include four core indicators: historical failure rate, fiber core aging degree, co-route redundancy risk, and service carrying concentration. The historical failure rate is quantified by the number of failures and cumulative failure duration of the optical cable segment to which the fiber core belongs in the past 12 months, with a value range of 0-1. The fiber core aging degree is quantified by the ratio of the fiber core's service life to its current attenuation value deviating from the standard value, with a value range of 0-1. Co-route redundancy risk is quantified by the proportion of core services carried by the optical cable segment along the same route, with a value range of 0-1. Service carrying concentration is quantified by the proportion of occupied fiber cores within the same branch facility, with a value range of 0-1. A weighted summation is used to calculate the comprehensive risk value. A risk value of 0-0.3 is considered low risk, 0.3-0.7 is medium risk, and 0.7-1 is high risk. The preset threshold is that the comprehensive risk value does not exceed 0.7.

[0044] Using a preset threshold as a constraint, the candidate list of implicitly available fiber cores is filtered to generate a fiber core scheduling guidance scheme for the target area. This completes the on-chain storage of data throughout the entire process of demand matching, risk assessment, and scheme generation. The decision tree logic is as follows: first, candidate fiber cores with a comprehensive risk value not exceeding 0.7 are filtered; then, they are sorted from highest to lowest comprehensive matching degree. The fiber core with the highest matching degree and sufficient quantity is selected as the primary scheme. When the scheduling security risk level of a matched fiber core exceeds the preset threshold, an alternative scheme generation strategy is automatically triggered, selecting low-risk fiber cores from the candidate list to form alternative schemes. If no matching low-risk fiber cores are available, a manual intervention mechanism is immediately triggered, pushing risk warnings and demand information to management and operation nodes, suspending the automatic scheduling process, and resuming subsequent operations only after manual review and confirmation. The data relationship throughout the entire process is as follows: using the on-chain notarized transaction hash of the requirement parameters as the root index, the input data, intermediate calculation results, and output data of each stage of requirement parsing, matching calculation, risk assessment, and solution generation are respectively generated into corresponding transaction hashes. All transaction hashes are linked to the root index in a chain, and all data is synchronously stored on the chain. After the event, the complete data of each stage of the entire process can be traced through the root index to ensure that the entire operation is traceable and tamper-proof.

[0045] refer to Figure 2 As shown, the optical cable branching and splicing cabling security management system based on blockchain technology includes: The consortium blockchain underlying construction module, on-chain data storage and verification module, implicit idle fiber core identification module, on-chain resource graph construction module, and smart contract scheduling decision module; The underlying construction module of the consortium blockchain is used to build a consortium blockchain for optical cable branching and splicing management, complete the deployment of various nodes, assign a unique digital identity to the fiber core, and complete the on-chain binding and storage of the digital identity and the corresponding physical identifier. The on-chain data storage and verification module is electrically connected to the consortium blockchain's underlying construction module. It is used to acquire and verify fiber core connection relationships, business occupancy status information, and fiber core planning and allocation information, completing on-chain storage of these two types of information. The modules communicate using the gRPC protocol, the data interface standard adopts the RESTful API specification, and the interface data format is uniformly JSON. In a distributed deployment scenario, remote calls between modules use the TLS 1.3 encrypted transmission protocol. Identity authentication is based on two-way authentication using node public and private key pairs. The caller and the callee must mutually verify each other's on-chain node address and permission credentials before establishing a communication connection. After completing node deployment, the consortium blockchain's underlying construction module transmits the node address and permission credentials to the on-chain data storage and verification module through the node information synchronization interface. Interface parameters include the node's on-chain address, node type, public key information, permission configuration file hash value, and node registration block height. All parameters are transmitted after being signed with the consortium blockchain's underlying construction module's private key to ensure data immutability.

[0046] The implicit idle fiber core identification module is electrically connected to the on-chain data storage and verification module. Based on on-chain evidence information, it performs reverse step-by-step verification of fiber core status through multi-node cross-verification to identify implicit idle fiber cores and store them on the blockchain. The implicit idle fiber core identification module obtains the verified business status dataset and planning allocation dataset from the on-chain data storage and verification module via an on-chain cross-chain query interface. The query interface supports multi-dimensional queries based on fiber core digital identity, block height, time range, and regional range. Query requests must include the signature credential of the node to which the identification module belongs. After verifying permissions, the on-chain data storage and verification module returns the complete data and verification hash value of the corresponding dataset.

[0047] The on-chain resource graph construction module is electrically connected to the implicit idle fiber core identification module. It is used to construct a distributed digital resource graph based on all on-chain information, generate an on-chain profile of the implicit idle fiber core, and store it on the blockchain. When generating the on-chain profile of the implicit idle fiber core, the on-chain resource graph construction module employs a dual-write synchronization strategy with the consortium blockchain state database. Profile data is first written to a local cache, and simultaneously, an on-chain transaction is initiated with the consortium blockchain. After transaction consensus is achieved, the consortium blockchain state database and the local cache data are updated synchronously. If transaction consensus fails, the local cache data is rolled back, ensuring strong consistency between the on-chain state database and the local data.

[0048] The smart contract scheduling decision module is electrically connected to the on-chain resource graph construction module. It receives fiber core resource requirements, invokes smart contracts to screen candidate fiber cores, completes scheduling risk assessment, generates scheduling guidance schemes, and stores the entire process on the blockchain. When the smart contract scheduling decision module invokes a preset smart contract, it uses the consortium blockchain's native chaincode invocation method. The invocation process is as follows: the module constructs a transaction proposal including the function name, input parameter data, and the signature of the calling node, and sends it to a preset endorsing node. The endorsing node executes the smart contract and returns the endorsement signature result. After collecting signature results that conform to the endorsement strategy, the module constructs a formal transaction and sends it to the sorting node. The sorting node completes transaction sorting and block packaging, broadcasts it to all nodes to execute ledger updates, and completes the transaction on-chain.

[0049] The foregoing has shown and described the basic principles, main features, and advantages of the present invention. Those skilled in the art should understand that the present invention is not limited to the above embodiments. The embodiments and descriptions in the specification are merely principles of the invention. Various changes and modifications can be made to the invention without departing from its spirit and scope, and all such changes and modifications fall within the scope of the claimed invention. The scope of protection claimed by the present invention is defined by the appended technical solutions and their equivalents.

Claims

1. A method for managing the security of cable branching connection wiring based on blockchain technology, characterized in that, Includes the following steps: S1. Construct an alliance chain for optical cable branching and splicing cabling management, complete the deployment of branching facility nodes, operation and maintenance nodes, management nodes and audit nodes at all levels, assign a unique digital identity on the chain to each fiber core, and bind and store the digital identity with the physical identifier of the corresponding fiber core connection point on the chain. S2. Obtain fiber core connection relationships and business occupancy status information signed by the operation and maintenance node's private key, and complete the information on-chain notarization and consortium chain consensus verification; obtain fiber core planning and allocation information that has been reviewed and notarized on the chain by the management node. S3. Based on the on-chain evidence of fiber core connection relationship, business occupancy status information and fiber core planning and allocation information, the business status of the fiber core flowing through each level of divergence is verified in reverse through multi-node cross-verification of the consortium chain, the hidden idle fiber core is identified, and the identification results are stored on the chain. S4. Based on the on-chain evidence-based fiber core planning and allocation information, business occupancy status information, implicit idle fiber core status and fiber core cascading path, construct an on-chain distributed digital resource map, generate an on-chain profile of implicit idle fiber cores and store it on the chain. S5. When receiving the demand for fiber core resources in the target area, it calls the preset smart contract, filters candidate fiber cores based on the on-chain digital resource map and the on-chain profile of hidden idle fiber cores, completes the scheduling security risk assessment, generates a scheduling guidance scheme, and stores all data on the chain. 2.The blockchain technology-based optical cable branching splice wiring safety management method of claim 1, wherein S1 includes: From the global topology database of the optical cable network, extract the basic attribute information of branch facilities, operation and maintenance entities, management entities, and auditing entities at all levels, and construct a basic information matrix of optical cable network nodes; The deployment parameters and registration rules of various nodes are extracted from the underlying framework configuration library of the consortium blockchain to complete the network deployment and on-chain registration of divergence facility nodes, operation and maintenance nodes, management nodes, and audit nodes, and generate unique on-chain addresses for various nodes. A digital identity generation model for fiber cores is built using a hash algorithm. The physical route, specifications, and source information of a single fiber core are input into the model to output a unique on-chain digital identity for each fiber core. 3.The blockchain technology-based cable breakout connection wiring security management method of claim 2, wherein, S1 further includes: Extract the physical identifier code corresponding to each fiber core connection point from the on-site deployment ledger of fiber core connection points, and establish a mapping relationship between physical identifiers and corresponding fiber cores; Using the vector concatenation method, the on-chain digital identity of a single fiber core is fused with the corresponding physical identifier code to obtain a joint vector of digital identity and physical identifier; Through the consensus algorithm of the consortium blockchain nodes, on-chain verification is performed on the joint vector of digital identity and physical identifier to complete the on-chain binding and storage of the fiber core digital identity and the corresponding physical identifier and the synchronization of all nodes. 4.The method of claim 3, wherein, S2 includes: Data on fiber core splicing relationships, port correspondences, service activation status, and link connectivity status are extracted from the data collection ledgers collected by on-site mobile terminals to construct a dataset of fiber core connection relationships and service occupancy status. Using an asymmetric encryption algorithm, the private key of the operation and maintenance node is invoked to perform signature processing on the fiber core connection relationship and service occupancy status dataset, generating a corresponding signature verification file; Extract the original planned service area, planned purpose, and allocation level data of fiber cores from the fiber optic network planning and design documents, construct a fiber core planning and allocation information dataset, and complete the content review of the dataset through management nodes. 5.The blockchain technology based cable breakout connection wiring security management method of claim 4, wherein, S2 further includes: Using the PBFT consensus algorithm of the consortium blockchain, an on-chain data consensus verification model is built. The signed fiber core connection relationship and business occupancy status dataset, as well as the reviewed fiber core planning and allocation information dataset, are substituted into the model to output the data consensus verification result. Based on the Merkle tree structure, an on-chain evidence storage structure for two types of datasets is built to complete the on-chain immutable evidence storage for the two types of datasets that have passed verification. The consortium blockchain node synchronization protocol enables full node synchronization and cross-verification of two types of on-chain evidence datasets. 6.The blockchain technology based optical cable branching splice wiring security management method according to claim 5, wherein, S3 includes: From the on-chain stored fiber core planning and allocation information dataset, extract the cascade path of a single fiber core from the source connection point through various levels of branching points to the end branching point, and mark all branching facility nodes on the cascade path; Based on the sorting of branch facility nodes on the cascaded path, the reverse verification sequence from the end branch point to the source connection point is determined, and a reverse step-by-step verification path for a single fiber core is constructed. Extract the fiber core service status data corresponding to each branch facility node on the cascade path from the on-chain stored fiber core service occupancy status dataset, and set the judgment criteria for non-hidden idle fiber cores. Following the reverse step-by-step verification path, the service status data of each branch facility node through which a single fiber core flows is verified node by node, and the full path verification result is output. 7.The blockchain technology based cable breakout connection wiring security management method of claim 6, wherein, S3 further includes: Using the full-path verification results of a single fiber core and the judgment criteria for non-hidden idle fiber cores as basic constraints, and taking the absence of service occupation at all nodes along the entire path as the core judgment condition, a decision model for identifying hidden idle fiber cores is built. Substitute the full on-chain evidence data of a single fiber core into the implicit idle fiber core identification decision model, and output the status judgment result of a single fiber core and the implicit idle fiber core identification list according to the basic constraints and core judgment conditions. Through the consortium blockchain consensus algorithm, the on-chain multi-node cross-verification of the implicit idle fiber core identification list is completed, and the identification list that passes the verification is stored on-chain and synchronized with all nodes.

8. The method for secure management of optical cable branching and splicing cabling based on blockchain technology according to claim 7, characterized in that, S4 includes: Based on the directed acyclic graph structure, a data structure for the on-chain distributed digital resource graph is built, integrating on-chain evidence-based fiber core planning and allocation information, business occupancy status information, implicit idle fiber core status, and fiber core cascade path data. Using a single fiber core as a graph node and the cascaded connection relationship of the fiber cores as graph edges, the on-chain distributed digital resource graph is constructed, and the on-chain dynamic update rules and full node synchronization rules of the graph are set. Define the dimensional standards for the on-chain profile of hidden idle fiber cores. The dimensional standards include physical routing information, divergence level information, idle duration information, and original planned service area information. Extract the on-chain data of the corresponding dimensions to generate the on-chain profile of a single hidden idle fiber core. Build an on-chain evidence storage structure for the implicit idle fiber core images, and complete the on-chain evidence storage and full node synchronization of all implicit idle fiber core images.

9. The method for secure management of optical cable branching and splicing cabling based on blockchain technology according to claim 8, characterized in that, S5 includes: Extract fiber core resource requirement parameters from the service activation requirement document of the target area. The parameters include the required number of fiber cores, link distance requirements, optical power threshold, and service activation time limit. Complete the on-chain storage of the requirement parameters. Set the trigger conditions for the smart contract, using the target area fiber core resource demand parameters stored on the chain as the trigger input, and call the preset fiber core scheduling smart contract; Based on the on-chain distributed digital resource map and the on-chain profile of implicit idle fiber cores, a fiber core demand-resource matching model is built. The fiber core resource demand parameters of the target area are substituted into the model, and a list of candidate implicit idle fiber cores that have been matched is output. Extract corresponding parameters from the historical scheduling operation data stored on the blockchain, build a scheduling security risk assessment model, substitute the candidate list of hidden idle fiber cores into the model, and output the scheduling security risk level of the corresponding fiber core. Using the scheduling security risk level meeting the preset threshold as a constraint, the candidate list of hidden idle fiber cores is screened to generate a fiber core scheduling guidance scheme for the target area, and the on-chain storage of data for the entire process of demand matching, risk assessment, and scheme generation is completed.

10. A safety management system for optical cable branching and splicing cabling based on blockchain technology, characterized in that, include: The consortium blockchain underlying construction module, on-chain data storage and verification module, implicit idle fiber core identification module, on-chain resource graph construction module, and smart contract scheduling decision module; The underlying construction module of the consortium blockchain is used to build a consortium blockchain for optical cable branching and splicing management, complete the deployment of various nodes, assign a unique digital identity to the fiber core, and complete the on-chain binding and storage of the digital identity and the corresponding physical identifier. The on-chain data storage and verification module is electrically connected to the underlying construction module of the consortium blockchain. It is used to obtain and verify the fiber core connection relationship, business occupancy status information and fiber core planning and allocation information, and complete the on-chain storage of the two types of information. The hidden idle fiber core identification module is electrically connected to the on-chain data storage and verification module. It is used to identify hidden idle fiber cores and store them on the chain based on the on-chain storage information, and to verify the fiber core status in reverse step by step through multi-node cross-verification. The on-chain resource graph construction module is electrically connected to the hidden idle fiber core identification module, and is used to construct a distributed digital resource graph based on the full amount of on-chain information, generate an on-chain profile of the hidden idle fiber core and store it on the chain. The smart contract scheduling decision module is electrically connected to the on-chain resource graph construction module. It is used to receive fiber core resource requirements, call the smart contract to screen candidate fiber cores, complete the scheduling risk assessment, generate a scheduling guidance scheme, and store the entire process on the chain.

Images