A method for a data flow utility infrastructure connector to access a blockchain platform
Patent Information
- Application Number
- CN202610810833.7
- Authority / Receiving Office
- CN · China
- Patent Type
- Applications(China)
- Current Assignee / Owner
- Filing Date
- 2026-06-05
- Publication Date
- 2026-09-29
AI Technical Summary
[0003]基于此,有必要针对连接器接入区块链时数字身份获取困难、配置繁琐、网络打通不便的问题,提供一种数据流通利用基础设施连接器接入区块链平台的方法
[0017]在其中一个实施例中,还包括异常处理步骤,所述异常处理步骤具体如下:当所述专属数字身份分发失败时,所述区域功能节点自动执行重试操作并向所述数据基础设施连接器反馈失败原因;当所述区块链平台对所述数据包验签失败时,所述区域功能节点将验签失败信息同步至所述数据基础设施连接器,支持所述数据基础设施连接器重新发送数据。通过设置异常处理机制,有效解决了现有技术中缺乏系统化容错能力、故障定位困难、数据上链成功率低且易丢失的问题,显著提升了系统的稳定性与可靠性。当专属数字身份分发失败时,区域功能节点自动执行重试操作,可有效规避单次网络波动、区块链平台临时负载过高等瞬时故障导致的接入失败,大幅减少人工干预成本;同时向数据基础设施连接器精准反馈失败原因,便于运维人员快速定位并解决设备信息错误、权限不足等根本性问题,缩短故障排查周期。当区块链平台验签失败时,区域功能节点及时将失败信息同步至对应连接器,支持数据重传,避免因数据传输过程中损坏、签名异常等问题导致的数据丢失,保障业务数据上链的完整性与连续性。该机制将异常处理集中在区域功能节点完成,无需每个连接器单独开发容错逻辑,统一了故障处理标准,形成了从身份接入到数据上链的闭环容错体系,大幅降低了大规模部署场景下的运维复杂度,确保系统能够持续稳定地提供数据上链服务。
Smart Images

Figure CN122845171A_ABST
Abstract
Description
Technical Field
[0001] This invention relates to the field of blockchain, and in particular to a method for connecting a data circulation and utilization infrastructure connector to a blockchain platform. Background Technology
[0002] In the context of the deep integration of blockchain technology and data infrastructure, data infrastructure needs to report various business data to the blockchain platform through core carrier connectors to achieve data storage, sharing, and traceability. In existing technologies, when connectors connect to the blockchain platform, they need to complete the registration and configuration of their blockchain digital identity themselves, manually obtaining digital identity certificates from local sources or digital certification centers. This identity acquisition process is cumbersome and has a high operational threshold. Simultaneously, they need to directly connect to the blockchain platform's network, completing network link debugging and data format adaptation. For cross-network, multi-type connectors, network connectivity is extremely difficult, and the inconsistent configuration standards of different connectors easily lead to problems such as identity authentication failure and poor data storage compatibility. Although solutions have emerged that use intermediary devices such as blockchain gateways and regional functional master nodes to proxy access, existing gateways only verify the digital identity already acquired by the terminal and check permissions, without distributing a unique digital identity to the terminal. The terminal still needs to manage its own certificate. Regional functional master nodes only focus on data interoperability within a local self-organizing network and do not involve access adaptation and identity authentication to the blockchain platform. Some gateways use their own identity to complete the data signing on the chain, which cannot achieve accurate traceability of data ownership and has the problem of unclear data responsibility definition. Summary of the Invention
[0003] Therefore, it is necessary to provide a method for connecting data circulation and utilization infrastructure connectors to blockchain platforms, addressing the problems of difficulty in obtaining digital identity, cumbersome configuration, and inconvenient network connectivity when connectors are connected to the blockchain.
[0004] A method for connecting a data circulation and utilization infrastructure connector to a blockchain platform, the method comprising the following steps: S1. The data infrastructure connector uses a regional functional node as an intermediary to apply for a unique digital identity from the blockchain platform. After obtaining the unique digital identity, the regional functional node sends it to the data infrastructure connector, enabling the data infrastructure connector to quickly access the blockchain platform. S2. The data infrastructure connector encrypts and digitally signs the collected business data using the exclusive digital identity to form a complete data packet; S3. The regional functional node starts the transparent proxy function, completes network link adaptation and data format relay, and proxies the data packet to the blockchain platform for storage.
[0005] The above-described method discloses a way for data circulation and utilization infrastructure connectors to access blockchain platforms. This method effectively solves problems existing in current technologies, such as cumbersome digital identity acquisition, complex blockchain information configuration, difficulties in cross-network integration, identity authentication failures, and poor data storage compatibility. It significantly reduces the access threshold and operating costs. By applying for and distributing exclusive digital identities through regional functional nodes, data infrastructure connectors do not need to register blockchain identities or manually obtain certificates, achieving true zero-configuration identity access and greatly simplifying the deployment process. Regional functional nodes provide transparent proxy on-chain processing, completing network link adaptation and data format relay. Connectors do not need to directly connect to the blockchain platform or debug protocols, effectively solving the pain point of high difficulty in accessing multiple types and cross-network connectors. Simultaneously, connectors use their exclusive digital identities to autonomously encrypt and sign data, ensuring data authenticity, integrity, and immutability. The blockchain platform can verify the signature via public key, avoiding the defects of unclear data ownership and difficulty in defining responsibility caused by proxy identity signing, and achieving accurate traceability of data sources. This method uses national cryptographic algorithms to ensure security throughout the entire process, supports distributed deployment and multi-platform adaptation, and can be widely applied to scenarios such as government affairs, industry, and finance. While improving the efficiency of data circulation infrastructure and blockchain platform integration, it reduces operation and maintenance costs and enhances system stability and security.
[0006] In one embodiment, step S1 includes: S11. The data infrastructure connector initiates an identity acquisition request to the regional functional node of its region. S12. The regional functional node verifies the legitimacy of the request to the data infrastructure connector. After the verification is successful, it initiates the exclusive digital identity registration application to the blockchain platform. S13. The blockchain platform generates the exclusive digital identity and returns it to the regional functional node; S14. The regional functional node sends the exclusive digital identity to the corresponding data infrastructure connector to complete the identity configuration of the data infrastructure connector.
[0007] By using regional functional nodes as proxies to complete the application, verification, generation, and distribution of digital identities, this approach fundamentally solves the prominent problems of existing technologies, such as connectors needing to register their own blockchain digital identities, manually obtain certificates, and experiencing cumbersome processes, high operational barriers, and inconsistent configuration standards. This significantly improves access efficiency. Connectors only need to initiate a simple request to their respective regional functional nodes, which then complete the legality verification and proxy registration without direct interaction with the blockchain platform, reducing the technical requirements for equipment and operators. Regional functional nodes verify the legality of connector information, effectively filtering unauthorized access devices, ensuring the trustworthiness of access entities, and improving overall system security. The blockchain platform generates a unique digital identity for each connector, which is accurately distributed and automatically configured by the nodes, achieving true zero-configuration identity access and avoiding authentication failures and link breakdowns caused by manual configuration errors. This process eliminates the need for connectors to manage certificates and connect to the blockchain network themselves, significantly reducing deployment and debugging workload, unifying identity management standards, and improving the consistency and reliability of access for multiple devices and types of connectors. Meanwhile, the exclusive identity lays the foundation for subsequent data signing and accurate traceability, ensuring that the entire process of data on-chain is trustworthy, verifiable, and traceable, and providing key support for secure data circulation and efficient evidence storage.
[0008] In one embodiment, the identity acquisition request of the data infrastructure connector includes the device identifier of the data infrastructure connector and the data infrastructure type information to which it belongs; the exclusive digital identity includes a public key, a private key, and an identity identifier. By carrying the device identifier and the data infrastructure type information to which it belongs in the identity acquisition request, accurate verification criteria for access subjects can be provided for regional functional nodes, ensuring that only legitimate and compliant data infrastructure connectors can enter the system, preventing unauthorized device access from the source, and improving the overall access security of the platform. The blockchain platform generates an exclusive digital identity containing a public key, a private key, and an identity identifier based on a trusted request, which can assign a unique and unforgeable blockchain identity credential to each connector, achieving accurate identity identification and providing complete key support for subsequent data encryption, signing, and verification. This design enables each connector to have an independent and trusted identity, avoiding the ambiguity in responsibility definition caused by shared or proxy identities, and, combined with an asymmetric encryption mechanism, ensures that data transmission and evidence storage are tamper-proof and verifiable throughout the entire process. Meanwhile, standardized identity information and request parameters unify access specifications, reduce the access adaptation costs of multiple types and cross-domain connectors, improve the efficiency of identity registration, distribution and management, and provide core guarantees for zero-configuration access, accurate data traceability and full-process security and controllability.
[0009] In one embodiment, step S2 includes: S21. After collecting business data, the data infrastructure connector performs format preprocessing on the raw data according to the data specifications of the blockchain platform. S22. The data infrastructure connector invokes the exclusive digital identity and uses an encryption algorithm to encrypt and digitally sign the preprocessed data; S23, The data infrastructure connector generates a complete data packet containing the original data, digital signature, and the exclusive digital identity.
[0010] By standardizing data preprocessing, enabling connectors to autonomously encrypt and sign data, and generating structured data packets, this system effectively addresses core pain points in existing technologies, such as poor data storage compatibility, ambiguous ownership of proxy-uploaded data, and difficulties in defining responsibility. This provides a core guarantee for secure and reliable data upload to the blockchain. Connectors preprocess raw data according to the unified specifications of the blockchain platform, unifying data standards from the source and avoiding upload failures and data parsing errors caused by incompatible data formats. This significantly improves the success rate and processing efficiency of data upload, while reducing the adaptation costs for different types of business data. Connectors use their own unique digital identity to complete data encryption and digital signatures, completely abandoning the traditional proxy gateway model of signing with its own identity. This ensures that each piece of data is bound to a unique connector identity, fundamentally solving the industry problems of unclear data ownership and difficulty in tracing responsibility. Generating a complete structured data packet containing raw data, digital signatures, and identity identifiers ensures the integrity and immutability of data transmission, facilitates rapid transfer between regional functional nodes, and enables efficient signature verification by the blockchain platform. This achieves a fully trustworthy and controllable data upload process from collection to on-chain, laying a solid foundation for subsequent data storage, sharing, and traceability.
[0011] In one embodiment, the encryption algorithm is an asymmetric encryption algorithm; the digital signature includes a connector identity identifier, a data timestamp, and a data hash value. By employing an asymmetric encryption algorithm for data encryption and digital signature, and leveraging the cryptographic characteristic of public-private key separation, it ensures that only the connector holding the corresponding private key can generate a legitimate signature, technically eliminating the risks of signature forgery and identity impersonation, and guaranteeing the authenticity of data transmission and evidence storage. The digital signature integrates three key pieces of information: connector identity identifier, data timestamp, and data hash value. The identity identifier enables precise binding of the data source, solving the problems of ambiguous data ownership and responsibility definition in the proxy on-chain model; the data timestamp assigns a unique time stamp to each piece of data, ensuring that the data on-chain order cannot be tampered with and possesses non-repudiation; the data hash value can quickly verify data integrity, and any tampering with the original data will result in a hash value mismatch. This design constructs a multi-dimensional data security protection system, providing solid cryptographic support for data evidence storage, sharing, and traceability.
[0012] In one embodiment, step S3 includes: S31. The data infrastructure connector sends the data packet to the regional functional node of the region to which it belongs; S32. The regional functional node performs network link adaptation and data format relay on the data packet, and automatically adapts to the receiving protocol and data format of the blockchain platform; S33. The regional functional nodes will uniformly report the adapted data packets to the blockchain platform. S34. The blockchain platform verifies the signature information of the data packet using the public key of the data infrastructure connector. After the signature verification is successful, the data is uploaded to the blockchain for notarization, and the blockchain result is fed back to the regional functional node. S35. The regional functional node synchronizes the on-chain result to the corresponding data infrastructure connector.
[0013] By constructing an on-chain process of "connector-regional functional node-blockchain platform," the core pain points of existing technologies are fundamentally solved, such as connectors needing to directly connect to the blockchain platform, complex cross-network link debugging, high data format adaptation costs, and data ownership ambiguity caused by proxy identity signatures. This achieves efficient, secure, and controllable data on-chaining. The data infrastructure connector only needs to send data packets to its assigned regional functional node, without needing to establish a direct network connection with the blockchain platform. This completely avoids complex operations such as cross-network firewall configuration and dedicated line deployment, significantly reducing network connectivity difficulty and deployment costs. The regional functional node uniformly completes network link adaptation and data format relay, automatically matching the blockchain platform's receiving protocol and data standards. This eliminates the need for individual blockchain adaptation development for each connector, solving the problems of inconsistent configuration standards among different types of connectors and poor data storage compatibility. The blockchain platform uses the connector's own public key for signature verification, rather than the regional functional node's identity, ensuring the authenticity and non-repudiation of the on-chain data and technically clarifying the boundaries of data responsibility. Finally, the bidirectional synchronization of the on-chain results forms a complete business loop, enabling the connector to obtain the evidence storage status in real time, providing a reliable basis for subsequent data sharing and traceability. At the same time, the centralized proxy on-chain mode also significantly reduces the overall system operation and maintenance complexity.
[0014] In one embodiment, the regional functional nodes are deployed in a distributed manner according to geographical regions or industry sectors. Each regional functional node manages the data infrastructure connectors within a specific range, and a dedicated encrypted network link is established between the regional functional nodes and the blockchain platform. By distributing the regional functional nodes by geographical region or industry sector and establishing dedicated encrypted network links, the design effectively solves the problems of difficulty in large-scale connector cross-network access, high data transmission security risks, and insufficient system scalability in existing technologies, significantly improving the reliability and security of the overall architecture. Dividing the jurisdiction by geographical or industry dimensions enables connectors to access nearby, greatly reducing data transmission latency and network loss. It also supports hierarchical management and fault isolation; a single node failure will not affect the overall system operation, improving the stability of large-scale concurrent access. Each node independently manages connectors within a specific range, facilitating customized configuration according to the business needs of different regions or industries, unifying access standards and management specifications, and reducing the operational complexity of multiple types of connectors. The establishment of a dedicated encrypted network link between the regional functional nodes and the blockchain platform completely isolates the risks of public network transmission, ensuring the confidentiality and integrity of identity information and business data transmitted between the nodes and the platform.
[0015] In one embodiment, the generation of the exclusive digital identity and the digital signature of the data employ the national standard SM2 asymmetric encryption algorithm, the data transmission process employs the national standard SM4 symmetric encryption algorithm, and the data hash operation employs the national standard SM3 algorithm. By using a combination of national standard SM2, SM3, and SM4 algorithms to construct a full-process cryptographic security system, the system effectively solves the problems of insufficient independent controllability of cryptographic algorithms and lack of security compliance that may exist in existing technologies, providing a security guarantee that complies with national standards for the entire process of data on-chaining. The generation of the exclusive digital identity and the digital signature of the data employ the national standard SM2 asymmetric encryption algorithm, relying on my country's independently developed cryptographic standards, completely avoiding the backdoor risks that foreign algorithms may have, and ensuring the unforgeability and non-repudiation of identity credentials and signature information. The data transmission process employs the national standard SM4 symmetric encryption algorithm, which has higher encryption and decryption efficiency while ensuring the confidentiality of transmission, and can meet the needs of high-speed transmission of large-scale business data. The data hash operation employs the national standard SM3 algorithm, and the generated unique data digest can quickly verify data integrity, and any tampering with the original data will be accurately identified.
[0016] In one embodiment, the regional functional node is pre-configured with the communication protocols and data format standards of the blockchain platforms to be connected, supporting protocol and format adaptation and conversion for multiple types of blockchain platforms. A secure access channel based on a national cryptographic certificate challenge-response mode is established between the data infrastructure connector and the regional functional node. By embedding multi-blockchain platform protocol and format adaptation capabilities within the regional functional node, the protocol development and format debugging for each data infrastructure connector are eliminated, significantly reducing the technical threshold and development cost for multi-platform access. Simultaneously, it supports flexible expansion and connection to new blockchain platforms, possessing strong architectural scalability. The secure access channel between the data infrastructure connector and the regional functional node is established using a national cryptographic certificate challenge-response mode, achieving two-way identity authentication based on nationally independent and controllable cryptographic standards. This prevents unauthorized device access and man-in-the-middle attacks from the source, ensuring the confidentiality and integrity of identity requests and business data transmitted between the connector and the node. This design unifies the access standards for multiple types of connectors and constructs an end-to-end security protection system, enabling the system to securely and efficiently adapt to the diverse blockchain platform needs of different fields such as government affairs, industry, and finance, while reducing overall operational complexity.
[0017] In one embodiment, an exception handling step is also included, which specifically includes the following steps: when the distribution of the exclusive digital identity fails, the regional functional node automatically performs a retry operation and reports the reason for the failure to the data infrastructure connector; when the blockchain platform fails to verify the signature of the data packet, the regional functional node synchronizes the signature failure information to the data infrastructure connector, supporting the data infrastructure connector to resend the data. By setting up an exception handling mechanism, the problems of lack of systematic fault tolerance, difficulty in fault location, low data upload success rate and easy data loss in the prior art are effectively solved, significantly improving the stability and reliability of the system. When the distribution of the exclusive digital identity fails, the regional functional node automatically performs a retry operation, which can effectively avoid access failures caused by instantaneous failures such as single network fluctuations and temporary high load on the blockchain platform, greatly reducing the cost of manual intervention; at the same time, it accurately reports the reason for the failure to the data infrastructure connector, which facilitates maintenance personnel to quickly locate and solve fundamental problems such as incorrect equipment information and insufficient permissions, shortening the fault investigation cycle. When the blockchain platform fails to verify a signature, the regional functional nodes promptly synchronize the failure information to the corresponding connector, supporting data retransmission and preventing data loss due to data transmission corruption or signature anomalies. This ensures the integrity and continuity of business data on-chain. This mechanism centralizes anomaly handling at the regional functional nodes, eliminating the need for each connector to develop its own fault-tolerant logic. It unifies fault handling standards and forms a closed-loop fault-tolerant system from identity access to data on-chain, significantly reducing operational complexity in large-scale deployment scenarios and ensuring the system can continuously and stably provide data on-chain services. Attached Figure Description
[0018] Figure 1 A schematic diagram of the first process of a method for connecting a data circulation infrastructure connector to a blockchain platform; Figure 2 A schematic diagram of the second process for a method of connecting data circulation infrastructure connectors to a blockchain platform; Figure 3 A schematic diagram of the third process for a method of connecting a data circulation infrastructure connector to a blockchain platform; Figure 4 This is a schematic diagram of the fourth process of a method for connecting data circulation to a blockchain platform using an infrastructure connector. Detailed Implementation
[0019] To better understand the above-mentioned objectives, features, and advantages of the present invention, the present invention will be further described in detail below with reference to the accompanying drawings and specific embodiments. It should be noted that, unless otherwise specified, the embodiments and features described in these embodiments can be combined with each other.
[0020] Many specific details are set forth in the following description in order to provide a full understanding of the invention. However, the invention may also be practiced in other ways different from those described herein, and therefore the scope of protection of the invention is not limited to the specific embodiments disclosed below.
[0021] The following describes, with reference to the accompanying drawings, a method for connecting a data circulation and utilization infrastructure connector to a blockchain platform according to some embodiments of the present invention. Example
[0022] like Figures 1 to 4 As shown in the figure, this embodiment discloses a method for connecting a data circulation and utilization infrastructure connector to a blockchain platform, including the following steps: S1. The data infrastructure connector uses regional functional nodes as intermediaries to apply for exclusive digital identities from the blockchain platform. After obtaining the exclusive digital identities, the regional functional nodes send them to the data infrastructure connector, enabling the data infrastructure connector to quickly access the blockchain platform. S2, the data infrastructure connector encrypts and digitally signs the collected business data using a unique digital identity, forming a complete data packet; S3. The regional functional node starts the transparent proxy function, completes network link adaptation and data format relay, and reports the data packets to the blockchain platform for storage.
[0023] This application discloses a method for data circulation and utilization infrastructure connectors to access blockchain platforms. This method effectively solves problems in existing technologies where connectors access blockchain platforms, such as cumbersome digital identity acquisition, complex blockchain information configuration, difficulties in cross-network integration, identity authentication failures, and poor data storage compatibility. It significantly reduces the access threshold and operating costs. By applying for and distributing exclusive digital identities through regional functional nodes, data infrastructure connectors do not need to register blockchain identities themselves or manually obtain certificates, truly achieving zero-configuration identity access and greatly simplifying the deployment process. Regional functional nodes provide transparent proxy on-chain processing, completing network link adaptation and data format relay. Connectors do not need to directly connect to the blockchain platform or debug protocols, effectively solving the pain point of high difficulty in accessing multiple types and cross-network connectors. Simultaneously, connectors use their exclusive digital identities to autonomously encrypt and sign data, ensuring data authenticity, integrity, and immutability. The blockchain platform can verify the signature via public key, avoiding the defects of unclear data ownership and difficulty in defining responsibility caused by proxy identity signing, and achieving accurate traceability of data sources. This method uses national cryptographic algorithms to ensure security throughout the entire process, supports distributed deployment and multi-platform adaptation, and can be widely applied to scenarios such as government affairs, industry, and finance. While improving the efficiency of data circulation infrastructure and blockchain platform integration, it reduces operation and maintenance costs and enhances system stability and security.
[0024] like Figure 1 and Figure 2 As shown, in addition to the features of the above embodiments, this embodiment further defines: step S1 includes: S11. The data infrastructure connector initiates an identity acquisition request to the regional functional nodes in its region. S12. The regional functional node verifies the legitimacy of the request to the data infrastructure connector. After the verification is successful, it initiates a registration application for a unique digital identity to the blockchain platform. S13. The blockchain platform generates a unique digital identity and returns it to the regional functional nodes; S14. The regional functional node sends its exclusive digital identity to the corresponding data infrastructure connector to complete the identity configuration of the data infrastructure connector.
[0025] By using regional functional nodes as proxies to complete the application, verification, generation, and distribution of digital identities, this approach fundamentally solves the prominent problems of existing technologies, such as connectors needing to register their own blockchain digital identities, manually obtain certificates, and experiencing cumbersome processes, high operational barriers, and inconsistent configuration standards. This significantly improves access efficiency. Connectors only need to initiate a simple request to their respective regional functional nodes, which then complete the legality verification and proxy registration without direct interaction with the blockchain platform, reducing the technical requirements for equipment and operators. Regional functional nodes verify the legality of connector information, effectively filtering unauthorized access devices, ensuring the trustworthiness of access entities, and improving overall system security. The blockchain platform generates a unique digital identity for each connector, which is accurately distributed and automatically configured by the nodes, achieving true zero-configuration identity access and avoiding authentication failures and link breakdowns caused by manual configuration errors. This process eliminates the need for connectors to manage certificates and connect to the blockchain network themselves, significantly reducing deployment and debugging workload, unifying identity management standards, and improving the consistency and reliability of access for multiple devices and types of connectors. Meanwhile, the exclusive identity lays the foundation for subsequent data signing and accurate traceability, ensuring that the entire process of data on-chain is trustworthy, verifiable, and traceable, and providing key support for secure data circulation and efficient evidence storage.
[0026] like Figure 2 As shown, in addition to the features of the above embodiments, this embodiment further defines: the identity acquisition request of the data infrastructure connector includes the device identifier of the data infrastructure connector and the data infrastructure type information to which it belongs; the exclusive digital identity includes a public key, a private key, and an identity identifier. By carrying the device identifier and the data infrastructure type information to which it belongs in the identity acquisition request, accurate verification basis for the access subject can be provided for regional functional nodes, ensuring that only legitimate and compliant data infrastructure connectors can enter the system, preventing illegal device access from the source, and improving the overall access security of the platform. The blockchain platform generates an exclusive digital identity containing a public key, a private key, and an identity identifier based on a trusted request, which can assign a unique and unforgeable blockchain identity credential to each connector, achieving accurate identity identification and providing complete key support for subsequent data encryption, signing, and verification. This design enables each connector to have an independent and trusted identity, avoiding the ambiguity of responsibility definition caused by shared or proxy identities, and, together with an asymmetric encryption mechanism, ensures that data transmission and evidence storage are tamper-proof and verifiable throughout the entire process. Meanwhile, standardized identity information and request parameters unify access specifications, reduce the access adaptation costs of multiple types and cross-domain connectors, improve the efficiency of identity registration, distribution and management, and provide core guarantees for zero-configuration access, accurate data traceability and full-process security and controllability.
[0027] like Figure 1 and Figure 3 As shown, in addition to the features of the above embodiments, this embodiment further defines step S2 as including: S21. After collecting business data, the data infrastructure connector performs format preprocessing on the raw data in accordance with the data specifications of the blockchain platform. S22. The data infrastructure connector invokes a dedicated digital identity and uses encryption algorithms to encrypt and digitally sign the pre-processed data; S23. The data infrastructure connector generates a complete data package containing the raw data, digital signature, and exclusive digital identity.
[0028] By standardizing data preprocessing, enabling connectors to autonomously encrypt and sign data, and generating structured data packets, this system effectively addresses core pain points in existing technologies, such as poor data storage compatibility, ambiguous ownership of proxy-uploaded data, and difficulties in defining responsibility. This provides a core guarantee for secure and reliable data upload to the blockchain. Connectors preprocess raw data according to the unified specifications of the blockchain platform, unifying data standards from the source and avoiding upload failures and data parsing errors caused by incompatible data formats. This significantly improves the success rate and processing efficiency of data upload, while reducing the adaptation costs for different types of business data. Connectors use their own unique digital identity to complete data encryption and digital signatures, completely abandoning the traditional proxy gateway model of signing with its own identity. This ensures that each piece of data is bound to a unique connector identity, fundamentally solving the industry problems of unclear data ownership and difficulty in tracing responsibility. Generating a complete structured data packet containing raw data, digital signatures, and identity identifiers ensures the integrity and immutability of data transmission, facilitates rapid transfer between regional functional nodes, and enables efficient signature verification by the blockchain platform. This achieves a fully trustworthy and controllable data upload process from collection to on-chain, laying a solid foundation for subsequent data storage, sharing, and traceability.
[0029] like Figure 3 As shown, in addition to the features of the above embodiments, this embodiment further specifies that: the encryption algorithm is an asymmetric encryption algorithm; the digital signature includes a connector identity identifier, a data timestamp, and a data hash value. By employing an asymmetric encryption algorithm for data encryption and digital signature, and utilizing the cryptographic characteristic of public-private key separation, it ensures that only the connector holding the corresponding private key can generate a legitimate signature, technically eliminating the risks of signature forgery and identity impersonation, and guaranteeing the authenticity of data transmission and evidence storage. The digital signature integrates three key pieces of information: connector identity identifier, data timestamp, and data hash value. The identity identifier enables precise binding of the data source, solving the problems of ambiguous data ownership and responsibility definition in the proxy on-chain model; the data timestamp assigns a unique time stamp to each piece of data, ensuring that the data on-chain order cannot be tampered with and possesses non-repudiation; the data hash value can quickly verify data integrity, and any tampering with the original data will result in a hash value mismatch. This design constructs a multi-dimensional data security protection system, providing solid cryptographic support for data evidence storage, sharing, and traceability.
[0030] like Figure 1 and Figure 4 As shown, in addition to the features of the above embodiments, this embodiment further defines step S3 as including: S31. The data infrastructure connector sends data packets to the regional functional nodes of its region. S32. Regional functional nodes perform network link adaptation and data format relay for data packets, automatically adapting to the receiving protocol and data format of the blockchain platform. S33. Regional functional nodes will uniformly report the adapted data packets to the blockchain platform. S34. The blockchain platform verifies the signature information of the data packet through the public key of the data infrastructure connector. After the signature is verified, the data is uploaded to the blockchain for storage and the result is fed back to the regional functional node. S35, the regional functional nodes will synchronize the on-chain results to the corresponding data infrastructure connectors.
[0031] By constructing an on-chain process of "connector-regional functional node-blockchain platform," the core pain points of existing technologies are fundamentally solved, such as connectors needing to directly connect to the blockchain platform, complex cross-network link debugging, high data format adaptation costs, and data ownership ambiguity caused by proxy identity signatures. This achieves efficient, secure, and controllable data on-chaining. The data infrastructure connector only needs to send data packets to its assigned regional functional node, without needing to establish a direct network connection with the blockchain platform. This completely avoids complex operations such as cross-network firewall configuration and dedicated line deployment, significantly reducing network connectivity difficulty and deployment costs. The regional functional node uniformly completes network link adaptation and data format relay, automatically matching the blockchain platform's receiving protocol and data standards. This eliminates the need for individual blockchain adaptation development for each connector, solving the problems of inconsistent configuration standards among different types of connectors and poor data storage compatibility. The blockchain platform uses the connector's own public key for signature verification, rather than the regional functional node's identity, ensuring the authenticity and non-repudiation of the on-chain data and technically clarifying the boundaries of data responsibility. Finally, the bidirectional synchronization of the on-chain results forms a complete business loop, enabling the connector to obtain the evidence storage status in real time, providing a reliable basis for subsequent data sharing and traceability. At the same time, the centralized proxy on-chain mode also significantly reduces the overall system operation and maintenance complexity.
[0032] like Figure 1As shown, in addition to the features of the above embodiments, this embodiment further specifies that: regional functional nodes are deployed in a distributed manner according to geographical regions or industry sectors, each regional functional node manages data infrastructure connectors within a specific range, and a dedicated encrypted network link is established between the regional functional nodes and the blockchain platform. By designing the regional functional nodes to be deployed in a distributed manner according to geographical regions or industry sectors and establishing a dedicated encrypted network link, the problems of difficulty in cross-network access for large-scale connectors, high data transmission security risks, and insufficient system scalability in existing technologies are effectively solved, significantly improving the reliability and security of the overall architecture. Dividing the jurisdiction by geographical or industry dimensions enables connectors to access nearby, greatly reducing data transmission latency and network loss, while supporting hierarchical management and fault isolation. The failure of a single node will not affect the operation of the entire system, improving the stability of large-scale concurrent access. Each node independently manages connectors within a specific range, facilitating customized configuration according to the business needs of different regions or industries, unifying access standards and management specifications, and reducing the operational complexity of multiple types of connectors. The establishment of a dedicated encrypted network link between the regional functional nodes and the blockchain platform completely isolates the risks of public network transmission, ensuring the confidentiality and integrity of identity information and business data transmitted between the nodes and the platform.
[0033] like Figure 1 As shown, in addition to the features of the above embodiments, this embodiment further specifies that: the generation of the exclusive digital identity and the digital signature of the data adopt the national cryptographic standard SM2 asymmetric encryption algorithm, the data transmission process adopts the national cryptographic standard SM4 symmetric encryption algorithm, and the data hash operation adopts the national cryptographic standard SM3 algorithm. By using the combination of national cryptographic standards SM2, SM3, and SM4 algorithms to construct a full-process cryptographic security system, the problem of insufficient independent controllability of cryptographic algorithms and lack of security compliance that may exist in the existing technology is effectively solved, providing a security guarantee that complies with national standards for the entire process of data on-chaining. The generation of the exclusive digital identity and the digital signature of the data adopt the national cryptographic standard SM2 asymmetric encryption algorithm. Relying on my country's independently developed cryptographic standard, it completely avoids the backdoor risks that foreign algorithms may have, ensuring the non-forgeability and non-repudiation of identity credentials and signature information. The data transmission process adopts the national cryptographic standard SM4 symmetric encryption algorithm, which has higher encryption and decryption efficiency while ensuring the confidentiality of transmission, and can meet the needs of high-speed transmission of large-scale business data. The data hash operation adopts the national cryptographic standard SM3 algorithm, and the generated unique data digest can quickly verify the integrity of the data, and any tampering with the original data will be accurately identified.
[0034] like Figure 1As shown, in addition to the features of the above embodiments, this embodiment further specifies that: the regional functional nodes are pre-configured with the communication protocols and data format standards of the blockchain platforms to be connected, supporting protocol and format adaptation and conversion for multiple types of blockchain platforms; a secure access channel based on the national cryptographic certificate challenge-response mode is established between the data infrastructure connector and the regional functional nodes. By embedding the protocol and format adaptation capabilities of multiple blockchain platforms in the regional functional nodes, it is not necessary to develop and debug the protocols and formats of each blockchain platform separately for each data infrastructure connector, which greatly reduces the technical threshold and development cost of multi-platform access, while supporting flexible expansion and connection to new blockchain platforms, and has extremely strong architectural scalability. The secure access channel between the data infrastructure connector and the regional functional nodes is established using the national cryptographic certificate challenge-response mode, and two-way identity authentication is achieved based on the nationally independent and controllable cryptographic standard, eliminating illegal device access and man-in-the-middle attacks from the source, and ensuring the confidentiality and integrity of identity requests and business data transmitted between the connector and the nodes. This design not only unifies the access standards for multiple types of connectors, but also builds an end-to-end security protection system, enabling the system to securely and efficiently adapt to the diverse blockchain platform needs of different fields such as government affairs, industry, and finance, while reducing the overall operation and maintenance complexity.
[0035] like Figure 1As shown, in addition to the features of the above embodiments, this embodiment further includes an exception handling step, which is as follows: When the distribution of the exclusive digital identity fails, the regional functional node automatically performs a retry operation and reports the reason for the failure to the data infrastructure connector; when the blockchain platform fails to verify the signature of the data packet, the regional functional node synchronizes the signature failure information to the data infrastructure connector, supporting the data infrastructure connector to resend the data. By setting up an exception handling mechanism, the problems of lack of systematic fault tolerance, difficulty in fault location, low data upload success rate and easy loss in the prior art are effectively solved, significantly improving the stability and reliability of the system. When the distribution of the exclusive digital identity fails, the regional functional node automatically performs a retry operation, which can effectively avoid access failures caused by instantaneous failures such as single network fluctuations and temporary high load on the blockchain platform, greatly reducing the cost of manual intervention; at the same time, it accurately reports the reason for the failure to the data infrastructure connector, which facilitates the operation and maintenance personnel to quickly locate and solve fundamental problems such as incorrect equipment information and insufficient permissions, shortening the fault investigation cycle. When the blockchain platform fails to verify a signature, the regional functional nodes promptly synchronize the failure information to the corresponding connector, supporting data retransmission and preventing data loss due to data transmission corruption or signature anomalies. This ensures the integrity and continuity of business data on-chain. This mechanism centralizes anomaly handling at the regional functional nodes, eliminating the need for each connector to develop its own fault-tolerant logic. It unifies fault handling standards and forms a closed-loop fault-tolerant system from identity access to data on-chain, significantly reducing operational complexity in large-scale deployment scenarios and ensuring the system can continuously and stably provide data on-chain services.
[0036] The technical features of the above embodiments can be combined in any way. For the sake of brevity, not all possible combinations of the technical features in the above embodiments are described. However, as long as there is no contradiction in the combination of these technical features, they should be considered to be within the scope of this specification.
[0037] The embodiments described above are merely illustrative of several implementations of the present invention, and while the descriptions are relatively specific and detailed, they should not be construed as limiting the scope of the invention patent. It should be noted that those skilled in the art can make various modifications and improvements without departing from the concept of the present invention, and these all fall within the protection scope of the present invention. Therefore, the protection scope of this invention patent should be determined by the appended claims.
Claims
1. A method for connecting a data circulation infrastructure connector to a blockchain platform, characterized in that, The method for connecting data circulation to a blockchain platform using an infrastructure connector includes the following steps: S1. The data infrastructure connector uses a regional functional node as an intermediary to apply for a unique digital identity from the blockchain platform. After obtaining the unique digital identity, the regional functional node sends it to the data infrastructure connector, enabling the data infrastructure connector to quickly access the blockchain platform. S2. The data infrastructure connector encrypts and digitally signs the collected business data using the exclusive digital identity to form a complete data packet; S3. The regional functional node starts the transparent proxy function, completes network link adaptation and data format relay, and proxies the data packet to the blockchain platform for storage.
2. The method for connecting a data circulation and utilization infrastructure connector to a blockchain platform according to claim 1, characterized in that, Step S1 includes: S11. The data infrastructure connector initiates an identity acquisition request to the regional functional node of its region. S12. The regional functional node verifies the legitimacy of the request to the data infrastructure connector. After the verification is successful, it initiates the exclusive digital identity registration application to the blockchain platform. S13. The blockchain platform generates the exclusive digital identity and returns it to the regional functional node; S14. The regional functional node sends the exclusive digital identity to the corresponding data infrastructure connector to complete the identity configuration of the data infrastructure connector.
3. The method for connecting a data circulation and utilization infrastructure connector to a blockchain platform according to claim 2, characterized in that, The identity acquisition request of the data infrastructure connector includes the device identifier of the data infrastructure connector and the data infrastructure type information to which it belongs; The exclusive digital identity includes a public key, a private key, and an identity identifier.
4. The method for connecting a data circulation and utilization infrastructure connector to a blockchain platform according to claim 1, characterized in that, Step S2 includes: S21. After collecting business data, the data infrastructure connector performs format preprocessing on the raw data according to the data specifications of the blockchain platform. S22. The data infrastructure connector invokes the exclusive digital identity and uses an encryption algorithm to encrypt and digitally sign the preprocessed data; S23, The data infrastructure connector generates a complete data packet containing the original data, digital signature, and the exclusive digital identity.
5. The method for connecting a data circulation and utilization infrastructure connector to a blockchain platform according to claim 4, characterized in that, The encryption algorithm is an asymmetric encryption algorithm; The digital signature includes a connector identity, a data timestamp, and a data hash value.
6. The method for connecting a data circulation and utilization infrastructure connector to a blockchain platform according to claim 1, characterized in that, Step S3 includes: S31. The data infrastructure connector sends the data packet to the regional functional node of the region to which it belongs; S32. The regional functional node performs network link adaptation and data format relay on the data packet, and automatically adapts to the receiving protocol and data format of the blockchain platform; S33. The regional functional nodes will uniformly report the adapted data packets to the blockchain platform. S34. The blockchain platform verifies the signature information of the data packet using the public key of the data infrastructure connector. After the signature verification is successful, the data is uploaded to the blockchain for notarization, and the blockchain result is fed back to the regional functional node. S35. The regional functional node synchronizes the on-chain result to the corresponding data infrastructure connector.
7. The method for connecting a data circulation and utilization infrastructure connector to a blockchain platform according to claim 1, characterized in that, The regional functional nodes are deployed in a distributed manner according to geographical regions or industry sectors. Each regional functional node manages the data infrastructure connectors within a specific range, and a dedicated encrypted network link is established between the regional functional nodes and the blockchain platform.
8. The method for connecting a data circulation and utilization infrastructure connector to a blockchain platform according to claim 1, characterized in that, The generation of the exclusive digital identity and the digital signature of the data adopt the national cryptographic SM2 asymmetric encryption algorithm, the data transmission process adopts the national cryptographic SM4 symmetric encryption algorithm, and the data hash operation adopts the national cryptographic SM3 algorithm.
9. The method for connecting a data circulation and utilization infrastructure connector to a blockchain platform according to claim 1, characterized in that, The functional nodes in the region are pre-configured with the communication protocols and data format standards of the blockchain platforms that need to be connected, which can support the adaptation and conversion of protocols and formats of multiple types of blockchain platforms. A secure access channel based on the national cryptographic certificate challenge-response mode is established between the data infrastructure connector and the regional functional node.
10. The method for connecting a data circulation and utilization infrastructure connector to a blockchain platform according to claim 1, characterized in that, It also includes an exception handling step, which is as follows: When the distribution of the exclusive digital identity fails, the regional functional node automatically performs a retry operation and reports the reason for the failure to the data infrastructure connector; When the blockchain platform fails to verify the signature of the data packet, the regional functional node will synchronize the signature failure information to the data infrastructure connector, supporting the data infrastructure connector to resend the data.