A scientific and technological service data security encryption sharing service system

Abstract

The application discloses a kind of scientific and technological service data security encryption sharing service systems, including key management module, dynamic adjustment module, data traceability module, data encryption module, data decryption module, data monitoring module and block chain module, the key management module respectively with dynamic adjustment module, data encryption module, data decryption module and block chain module establish data connection;Method includes: step one, key management;Step two, encryption algorithm dynamic adjustment;Step three, optical communication data encryption transmission;Step four, data traceability;The dynamic adjustment module of the application is by evaluating communication reliability and optical communication data type dynamic adjustment encryption algorithm, not only improve the security, also optimize system performance, in reducing resource consumption while improving efficiency;The data traceability module of the application utilizes the tamper-proof characteristics of block chain to realize the traceability of optical communication data, to help determine the source of abnormal behavior.

Description

Technical Field

[0001] This invention relates to the field of data security technology, specifically to a technology service data security encryption and sharing service system. Background Technology

[0002] Optical communication is a communication method that uses light waves as carriers. It boasts advantages such as high bandwidth, low loss, and strong anti-interference capabilities, making it one of the main means of modern communication. To improve the security of optical communication data, existing encryption systems use encryption algorithms to encrypt data. However, these systems have the following drawbacks: First, the key generation, distribution, storage, and updating processes in the encryption system are at risk of being stolen, easily leading to key leakage. Second, because encryption algorithms are susceptible to being cracked, using a fixed encryption algorithm results in low security, and a fixed encryption algorithm cannot adapt to different data types and communication scenarios. Third, once a data leak or security incident occurs, existing optical communication technologies struggle to trace the source, making it difficult to determine the attacker's identity and attack path. Summary of the Invention

[0003] The purpose of this invention is to provide a secure encrypted sharing service system for technology service data to solve the problems mentioned in the background.

[0004] To achieve the above objectives, the present invention provides the following technical solution: a technology service data security encryption and sharing service system, comprising a key management module, a dynamic adjustment module, a data traceability module, a data encryption module, a data decryption module, a data monitoring module, and a blockchain module. The key management module establishes data connections with the dynamic adjustment module, the data encryption module, the data decryption module, and the blockchain module respectively. The dynamic adjustment module establishes data connections with the data encryption module and the data decryption module respectively. The data monitoring module and the data traceability module both establish data connections with the blockchain module.

[0005] Preferably, the key management module includes a key generation unit, a key storage unit, a key distribution unit, a key update unit, and a key verification unit.

[0006] Preferably, the dynamic adjustment module includes a communication reliability assessment unit, an attack frequency acquisition unit, an attack type acquisition unit, a data type identification unit, and an encryption algorithm adjustment unit.

[0007] Preferably, the data traceability module includes an information recording unit and a data traceability unit.

[0008] Preferably, the data monitoring module includes an anomaly detection unit, a behavior pattern recognition unit, an abnormal behavior alarm unit, and an abnormal behavior response unit.

[0009] A method for secure encryption of optical communication data based on blockchain technology includes the following steps: Step 1, key management; Step 2, dynamic adjustment of encryption algorithm; Step 3, encrypted transmission of optical communication data; and Step 4, data traceability. In step one above, a key is generated using the key management module, encrypted using the encryption function of the blockchain module, hashed, and the resulting encryption key and hash value are stored on the blockchain node. The key management module also provides key distribution, update, and verification services. In step two above, the dynamic adjustment module evaluates the communication reliability and optical communication data type, and then adjusts the encryption algorithm accordingly. In step three above, the data encryption module uses the key from step one and the adjusted encryption algorithm from step two to encrypt the optical communication data, and then sends it to the receiver. In step four above, the data monitoring module monitors abnormal behavior during optical communication data transmission and records the monitoring results on the blockchain. Once abnormal behavior is detected, the data tracing module is immediately used to trace the source of the abnormal behavior.

[0010] Preferably, in step one, the key generation unit in the key management module uses a smart contract to call a secure random number generation function to generate a key with sufficient randomness and length; the key storage unit encrypts the key and hashes the encrypted key using the blockchain's cryptographic hash function, with the hash value serving as the key's integrity verification value; the encrypted key and hash value are stored on the blockchain nodes; the key distribution unit uses a smart contract on the blockchain to distribute the key; the key update unit sets the rules and time intervals for key updates through a smart contract; when the update conditions are met, the smart contract automatically triggers the key generation unit to generate a new key and destroy the old key; the key verification unit verifies the key before use, specifically by first calculating the hash value of the key and then comparing it with the hash value stored on the blockchain; if they match, the key is intact; otherwise, the key has been tampered with.

[0011] Preferably, in step two, the dynamic adjustment module uses the attack frequency acquisition unit to acquire the frequency of abnormal behavior within a set time period, uses the attack type acquisition unit to acquire the type of abnormal behavior within a set time period, the communication reliability assessment unit assesses the communication reliability based on the frequency and type of abnormal behavior, uses the data type identification unit to identify the optical communication data type, and the encryption algorithm adjustment unit calls encryption algorithms with different characteristics to combine based on the communication reliability assessment results and the optical communication data type.

[0012] Preferably, the optical communication data types include video stream data, voice stream data, and text stream data.

[0013] Preferably, in step four, the anomaly detection unit in the data monitoring module trains an anomaly detection model using machine learning algorithms. By learning from a large amount of normal optical communication data and known attack data, the model can automatically identify abnormal behaviors that differ from normal behaviors. The behavior pattern recognition unit learns from the behavior patterns of various devices and users in the optical communication system to establish a normal behavior pattern library. When a new behavior is detected, it is compared with the pattern library. If it does not match any normal pattern, it is judged as an abnormal behavior. The abnormal behavior alarm unit combines the detection results of the anomaly detection unit and the behavior pattern recognition unit to determine whether the abnormal behavior is valid. If it is judged as an abnormal behavior, an alarm is issued and the abnormal behavior response unit initiates data tracing; otherwise, no action is taken. The information recording unit of the data tracing module records each optical communication data transmission on the blockchain. Once a security event occurs, the data tracing unit determines the source and transmission path of the data.

[0014] Compared with existing technologies, the beneficial effects of this invention are as follows: the key management module of this invention utilizes blockchain technology to improve the security of key management and reduce the risk of key leakage; the dynamic adjustment module of this invention dynamically adjusts the encryption algorithm by evaluating communication reliability and optical communication data types, which not only improves security but also optimizes system performance, improving efficiency while reducing resource consumption; the data traceability module of this invention utilizes the immutability of blockchain to achieve traceability of optical communication data, thereby helping to determine the source of abnormal behavior. Attached Figure Description

[0015] Figure 1 This is a system structure block diagram of the present invention; Figure 2 This is a block diagram of the key management module of the present invention; Figure 3 This is a block diagram of the dynamic adjustment module structure of the present invention; Figure 4 This is a block diagram of the data traceability module of the present invention; Figure 5 This is a block diagram of the data monitoring module structure of the present invention; Figure 6 This is a flowchart of the method of the present invention.

[0016] In the diagram: 1. Key Management Module; 11. Key Generation Unit; 12. Key Storage Unit; 13. Key Distribution Unit; 14. Key Update Unit; 15. Key Verification Unit; 2. Dynamic Adjustment Module; 21. Communication Reliability Assessment Unit; 22. Attack Frequency Acquisition Unit; 23. Attack Type Acquisition Unit; 24. Data Type Identification Unit; 25. Encryption Algorithm Adjustment Unit; 3. Data Traceability Module; 31. Information Recording Unit; 32. Data Traceability Unit; 4. Data Encryption Module; 5. Data Decryption Module; 6. Data Monitoring Module; 61. Anomaly Detection Unit; 62. Behavior Pattern Recognition Unit; 63. Abnormal Behavior Alarm Unit; 64. Abnormal Behavior Response Unit; 7. Blockchain Module. Detailed Implementation

[0017] The technical solutions of the embodiments of the present invention will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only some embodiments of the present invention, and not all embodiments. Based on the embodiments of the present invention, all other embodiments obtained by those skilled in the art without creative effort are within the scope of protection of the present invention.

[0018] Please see the appendix Figure 1 -Appendix Figure 5This invention provides an embodiment of a technology service data security encryption and sharing service system, comprising a key management module 1, a dynamic adjustment module 2, a data traceability module 3, a data encryption module 4, a data decryption module 5, a data monitoring module 6, and a blockchain module 7. The key management module 1 establishes data connections with the dynamic adjustment module 2, the data encryption module 4, the data decryption module 5, and the blockchain module 7. The dynamic adjustment module 2 establishes data connections with the data encryption module 4 and the data decryption module 5. The data monitoring module 6 and the data traceability module 3 both establish data connections with the blockchain module 7. The key management module 1 is used to manage keys, the dynamic adjustment module 2 is used to adjust encryption algorithms, and the data traceability module 3 is used to trace data sources. The data encryption module 4 is used for encrypting optical communication data, the data decryption module 5 is used for decrypting optical communication data, the data monitoring module 6 is used for monitoring optical communication data with abnormal behavior, and the blockchain module 7 is used for providing data storage services. The key management module 1 includes a key generation unit 11, a key storage unit 12, a key distribution unit 13, a key update unit 14, and a key verification unit 15. The key generation unit 11 is used to generate keys with sufficient randomness and length, the key storage unit 12 is used for encrypted storage of the keys, the key distribution unit 13 is used for key distribution, the key update unit 14 is used to trigger the key generation unit 11 to generate new keys, and the key verification unit 15 is used to verify the keys before use. A dynamic adjustment module is also included. The 2 module includes a communication reliability assessment unit 21, an attack frequency acquisition unit 22, an attack type acquisition unit 23, a data type identification unit 24, and an encryption algorithm adjustment unit 25. The attack frequency acquisition unit 22 acquires the frequency of abnormal behavior within a set time period; the attack type acquisition unit 23 acquires the types of abnormal behavior within a set time period; the communication reliability assessment unit 21 assesses communication reliability based on the frequency and type of abnormal behavior; the data type identification unit 24 identifies the optical communication data type; and the encryption algorithm adjustment unit 25 combines encryption algorithms with different characteristics based on the communication reliability assessment results and the optical communication data type. The data traceability module 3 includes an information recording unit 31 and a data traceability unit 32. The information recording unit 31 is used to record information such as sender, receiver, timestamp, and hash value of data content on the blockchain. The data tracing unit 32 is used to determine the source and transmission path of the data. The data monitoring module 6 includes an anomaly detection unit 61, a behavior pattern recognition unit 62, an abnormal behavior alarm unit 63, and an abnormal behavior response unit 64. The anomaly detection unit 61 is used to identify abnormal behavior, the behavior pattern recognition unit 62 is used to identify abnormal behavior, and the abnormal behavior alarm unit 63 combines the identification results of the anomaly detection unit 61 and the behavior pattern recognition unit 62 to determine whether the abnormal behavior is valid. If it is determined to be an abnormal behavior, an alarm is issued and data tracing is initiated through the abnormal behavior response unit 64. Otherwise, no action is taken.

[0019] Please see Figure 6 The present invention provides an embodiment of a method for secure encryption of optical communication data based on blockchain technology, comprising: step one, key management; step two, dynamic adjustment of encryption algorithm; step three, encrypted transmission of optical communication data; and step four, data traceability. In step one above, the key management module 1 generates a key, which is then encrypted using the encryption function of the blockchain module 7. The key is then hashed, and the resulting encrypted key and hash value are stored on the blockchain nodes. The key management module 1 also provides key distribution, update, and verification services. Specifically, the key generation unit 11 in the key management module 1 uses a smart contract to call a secure random number generation function to generate a key with sufficient randomness and length. The key storage unit 12 encrypts the key and hashes it using the blockchain's cryptographic hash function. The hash value serves as the key's integrity verification value, and the encrypted key and hash value are stored on the blockchain nodes. The key distribution unit 13 uses a smart contract on the blockchain to distribute the key. The key update unit 14 sets the rules and time intervals for key updates through a smart contract. When the update conditions are met, the smart contract automatically triggers the key generation unit 11 to generate a new key and destroy the old key. The key verification unit 15 verifies the key before use. Specifically, it calculates the hash value of the key and compares it with the hash value stored on the blockchain. If they match, the key is intact; otherwise, the key has been tampered with. In step two above, the dynamic adjustment module 2 evaluates communication reliability and optical communication data types, and then adjusts the encryption algorithm accordingly. Specifically, the dynamic adjustment module 2 uses the attack frequency acquisition unit 22 to acquire the frequency of abnormal behavior within a set time period, and the attack type acquisition unit 23 to acquire the types of abnormal behavior within the set time period. The communication reliability assessment unit 21 assesses communication reliability based on the frequency and type of abnormal behavior, and the data type identification unit 24 identifies the optical communication data type. The encryption algorithm adjustment unit 25 combines encryption algorithms with different characteristics based on the communication reliability assessment results and the optical communication data type. Optical communication data types include video stream data, voice stream data, and text stream data. In step three above, the data encryption module 4 uses the key from step one and the adjusted encryption algorithm from step two to encrypt the optical communication data, and then sends it to the receiver. In step four above, the data monitoring module 6 monitors abnormal behaviors during optical communication data transmission and records the monitoring results on the blockchain. Once an abnormal behavior is detected, the data tracing module 3 immediately traces the abnormal behavior. The anomaly detection unit 61 in the data monitoring module 6 trains an anomaly detection model using machine learning algorithms. By learning from a large amount of normal optical communication data and known attack data, the model can automatically identify abnormal behaviors that differ from normal behaviors. The behavior pattern recognition unit 62 learns from the behavior patterns of various devices and users in the optical communication system to establish a normal behavior pattern library. When a new behavior is detected, it is compared with the pattern library. If it does not match any normal pattern, it is judged as an abnormal behavior. The abnormal behavior alarm unit 63 combines the detection results of the anomaly detection unit 61 and the behavior pattern recognition unit 62 to determine whether the abnormal behavior is valid. If it is judged as an abnormal behavior, an alarm is issued and the abnormal behavior response unit 64 initiates data tracing; otherwise, no action is taken. The information recording unit 31 of the data tracing module 3 records each optical communication data transmission on the blockchain. Once a security event occurs, the data tracing unit 32 determines the source and transmission path of the data.

[0020] Based on the above, the advantages of this invention are as follows: When in use, the key generation unit 11 in the key management module 1 uses a smart contract to call a secure random number generation function to generate a key with sufficient randomness and length; the key storage unit 12 encrypts the key, using the blockchain's cryptographic hash function to hash the encrypted key, with the hash value serving as the key's integrity verification value; the encrypted key and hash value are stored on the blockchain nodes; the key distribution unit 13 uses a smart contract on the blockchain to distribute the key; and the key update unit 14 sets the rules and time intervals for key updates through a smart contract, and updates the key when the update conditions are met. When a security risk is detected, the smart contract automatically triggers the key generation unit 11 to generate a new key and destroy the old key. For example, when a security risk is detected, the smart contract can automatically trigger a key update operation to ensure secure communication. The key verification unit 15 is used to verify the key before it is used. Specifically, it first calculates the hash value of the key and then compares it with the hash value stored on the blockchain. If the two match, the key is intact; otherwise, the key has been tampered with. By distributing key information across multiple nodes on the blockchain, even if some nodes are attacked, the key will not be completely leaked, ensuring the randomness and security of the key and facilitating key verification. The dynamic adjustment module 2 uses the attack frequency acquisition unit 22 to acquire the frequency of abnormal behavior within a set time period, and the attack type acquisition unit 23 to acquire the type of abnormal behavior within a set time period. The acquired frequency and type of abnormal behavior are derived from the information recorded on the blockchain by the data monitoring module 6. The communication reliability assessment unit 21 assesses communication reliability based on the frequency and type of abnormal behavior. For example, different threshold ranges are set for the frequency of different types of abnormal behavior to achieve reliability scoring. The data type identification unit 24 identifies the optical communication data type. The encryption algorithm adjustment unit 25 calls encryption algorithms with different characteristics to combine based on the communication reliability assessment results and the optical communication data type. For example, for optical communication data types with high transmission latency requirements, a fast encryption algorithm is used. If the communication reliability is good during this period, a simple encryption algorithm can be used. The encryption algorithm adjustment unit 25 calls encryption algorithms or combinations of encryption algorithms based on the characteristics of speed and simplicity. The information recording unit 31 of the data traceability module 3 records each optical communication data transmission on the blockchain. Once a security event occurs, the data traceability unit 32 can quickly determine the source and transmission path of the data. The data encryption module 4 is used to perform data encryption operations, and the data decryption module 5 is used to perform data decryption operations.The anomaly detection unit 61 in the data monitoring module 6 uses machine learning algorithms to train an anomaly detection model. By learning from a large amount of normal optical communication data and known attack data, the model can automatically identify abnormal behaviors that differ from normal behavior. For example, it can use algorithms such as support vector machines and neural networks, taking various features of optical communication data, such as traffic features, signal features, and protocol features, as input to train the model to distinguish between normal behavior and attack behavior. The behavior pattern recognition unit 62 learns from the behavior patterns of various devices and users in the optical communication system to establish a normal behavior pattern library. When a new behavior is detected, it is compared with the pattern library. If it does not match any normal pattern, it is judged as an abnormal behavior. For example, for a... A specific optical communication device exhibits certain patterns in its communication time, communication targets, and data transmission volume under normal circumstances. If behavior significantly deviates from these patterns, it may indicate an anomaly caused by an attack. The abnormal behavior alarm unit 63 combines the detection results of the anomaly detection unit 61 and the behavior pattern recognition unit 62 to determine if an abnormal behavior is established. If it is determined to be abnormal, an alarm is issued, and data tracing is initiated through the abnormal behavior response unit 64. Otherwise, no action is taken. For example, the abnormal behavior alarm unit 63 uses data fusion technology to fuse the detection results of the anomaly detection unit 61 and the behavior pattern recognition unit 62 to output the final result. The blockchain module 7 is used to provide data storage services.

[0021] It will be apparent to those skilled in the art that the present invention is not limited to the details of the exemplary embodiments described above, and that the invention can be implemented in other specific forms without departing from its spirit or essential characteristics. Therefore, the embodiments should be considered in all respects as exemplary and non-limiting, and the scope of the invention is defined by the appended claims rather than the foregoing description. Thus, all variations falling within the meaning and scope of equivalents of the claims are intended to be included within the present invention. No reference numerals in the claims should be construed as limiting the scope of the claims.

Claims

1. A technology service data security encryption sharing service system, comprising a key management module (1), a dynamic adjustment module (2), a data traceability module (3), a data encryption module (4), a data decryption module (5), a data monitoring module (6), and a blockchain module (7), characterized in that: The key management module (1) establishes data connections with the dynamic adjustment module (2), the data encryption module (4), the data decryption module (5) and the blockchain module (7) respectively. The dynamic adjustment module (2) establishes data connections with the data encryption module (4) and the data decryption module (5) respectively. The data monitoring module (6) and the data traceability module (3) both establish data connections with the blockchain module (7).

2. The technology service data security encryption sharing service system according to claim 1, characterized in that: The key management module (1) includes a key generation unit (11), a key storage unit (12), a key distribution unit (13), a key update unit (14), and a key verification unit (15).

3. The technology service data security encryption sharing service system according to claim 1, characterized in that: The dynamic adjustment module (2) includes a communication reliability assessment unit (21), an attack frequency acquisition unit (22), an attack type acquisition unit (23), a data type identification unit (24), and an encryption algorithm adjustment unit (25).

4. The technology service data security encryption sharing service system according to claim 1, characterized in that: The data traceability module (3) includes an information recording unit (31) and a data traceability unit (32).

5. The technology service data security encryption sharing service system according to claim 1, characterized in that: The data monitoring module (6) includes an anomaly detection unit (61), a behavior pattern recognition unit (62), an abnormal behavior alarm unit (63), and an abnormal behavior response unit (64).

6. A method for secure encryption of optical communication data based on blockchain technology, comprising: step one, key management; step two, dynamic adjustment of encryption algorithm; step three, encrypted transmission of optical communication data; and step four, data traceability; characterized in that: In step one above, the key is generated by the key management module (1), and the key is encrypted using the encryption function of the blockchain module (7). Then, the key is hashed and the resulting encryption key and hash value are stored on the nodes of the blockchain. The key management module (1) also provides key distribution, update and verification services. In step two above, the dynamic adjustment module (2) evaluates the communication reliability and optical communication data type, and then adjusts the encryption algorithm accordingly. In step three above, the data encryption module (4) uses the key in step one and the adjusted encryption algorithm in step two to encrypt the optical communication data, and then sends it to the receiver. In step four above, the data monitoring module (6) monitors abnormal behavior during optical communication data transmission and records the monitoring results on the blockchain. Once abnormal behavior is detected, the data tracing module (3) is immediately used to trace the abnormal behavior.

7. A method for secure encryption of optical communication data based on blockchain technology according to claim 6, characterized in that: In step one, the key generation unit (11) in the key management module (1) uses a smart contract to call a secure random number generation function to generate a key with sufficient randomness and length; the key storage unit (12) encrypts the key and uses the blockchain's cryptographic hash function to hash the encrypted key. The hash value is used as the integrity verification value of the key, and the encrypted key and hash value are stored on the blockchain node; the key distribution unit (13) uses a smart contract on the blockchain to distribute the key; the key update unit (14) sets the key update rules and time interval through a smart contract. When the update conditions are met, the smart contract automatically triggers the key generation unit (11) to generate a new key and destroy the old key; the key verification unit (15) is used to verify the key before using the key. Specifically, it first calculates the hash value of the key and then compares it with the hash value stored on the blockchain. If the two are consistent, it means that the key is complete; otherwise, it means that the key has been tampered with.

8. A method for secure encryption of optical communication data based on blockchain technology according to claim 6, characterized in that: In step two, the dynamic adjustment module (2) uses the attack frequency acquisition unit (22) to acquire the frequency of abnormal behavior within a set time period, uses the attack type acquisition unit (23) to acquire the type of abnormal behavior within a set time period, the communication reliability assessment unit (21) assesses the communication reliability based on the frequency and type of abnormal behavior, uses the data type identification unit (24) to identify the optical communication data type, and the encryption algorithm adjustment unit (25) calls encryption algorithms with different characteristics to combine based on the communication reliability assessment results and the optical communication data type.

9. A method for secure encryption of optical communication data based on blockchain technology according to claim 8, characterized in that: The optical communication data types include video stream data, voice stream data, and text stream data.

10. A method for secure encryption of optical communication data based on blockchain technology according to claim 6, characterized in that: In step four, the anomaly detection unit (61) in the data monitoring module (6) trains the anomaly detection model using machine learning algorithms. By learning from a large amount of normal optical communication data and known attack data, the model can automatically identify abnormal behaviors that are different from normal behaviors. The behavior pattern recognition unit (62) learns from the behavior patterns of various devices and users in the optical communication system and establishes a normal behavior pattern library. When a new behavior is detected, it is compared with the pattern library. If it does not match any normal pattern, it is judged as an abnormal behavior. The abnormal behavior alarm unit (63) combines the detection results of the anomaly detection unit (61) and the behavior pattern recognition unit (62) to determine whether the abnormal behavior is valid. If it is judged as an abnormal behavior, an alarm is issued and the abnormal behavior response unit (64) initiates data tracing. Otherwise, no action is taken. The information recording unit (31) of the data tracing module (3) records each optical communication data transmission on the blockchain. Once a security event occurs, the data tracing unit (32) determines the source and transmission path of the data.

Images