Data tamper-proof storage management system based on blockchain and local encryption

Abstract

The application discloses a data tamper-proof storage management system based on a blockchain and local encryption. The system comprises a front-end acquisition layer, a transmission layer, a cloud core layer and a tamper-proof guarantee module. The front-end acquisition layer collects data and calculates local hash values using a local encryption chip to generate original data packets; the transmission layer transmits the encrypted data to the cloud; the cloud core layer encapsulates the data, local hash values and time stamps into new blocks after verification, associates the hash values of the previous blocks to form a hash chain and synchronizes the hash chain to a blockchain cluster for distributed storage; and the tamper-proof guarantee module triggers a tamper-proof verification engine when a terminal accesses, compares the local and cloud hash values and verifies the block height and hash chain integrity, and allows display or export if the verification is passed, and otherwise, an alarm is given. The application realizes tamper-proofing and precise traceability of the whole data storage process.

Description

Technical Field

[0001] This invention belongs to the field of data security storage and cloud computing technology, specifically relating to a data anti-tampering storage management system based on blockchain and local encryption. Background Technology

[0002] With the popularization of digital management and intelligent assessment systems, extremely high requirements have been placed on the authenticity, accuracy and immutability of exercise and assessment data in civil aviation security training, physical fitness assessment and various high-security training scenarios.

[0003] Currently, the mainstream technical solution in the field of training data management is "general-purpose wearable sports devices + centralized cloud management platform + basic encryption and log auditing". In this existing solution, general-purpose wearable sports devices (such as general-purpose wristbands or simple recorders) use built-in accelerometers and gyroscopes to count steps or measure distances. The data is uploaded to a mobile application or a centralized cloud server (such as general cloud storage services such as Alibaba Cloud and Tencent Cloud) via Bluetooth or wireless network. Administrators view results, statistics, and archive records through the management platform, and perform daily management through account passwords and basic role permissions.

[0004] However, in practical application scenarios (especially in rigorous assessment scenarios such as civil aviation security training), existing technical solutions have the following prominent shortcomings: First, the data source is easily tampered with or forged, lacking a "root trust" guarantee. Existing systems' data collection terminals (such as general-purpose wristbands or recorders) only perform simple data collection and transmission, lacking a data solidification mechanism at the source. This deficiency stems from the fact that the collection terminal is not equipped with dedicated encryption hardware to perform local hash verification and physical-level solidification of the original collected data. Before leaving the collection device or during local transmission, the data is easily tampered with by manually modifying device parameters, forging motion trajectories, or intercepting forged original data packets, making it impossible to guarantee the authenticity and originality of the data at the source.

[0005] Second, centralized cloud storage mechanisms have weak anti-tampering capabilities and cannot prevent tampering by internal personnel and administrators. Existing systems generally use centralized cloud databases for storage, with anti-tampering measures relying solely on basic transport layer encryption (such as TLS) and single hash verification. This deficiency stems from the fact that transport layer encryption and single hash verification only prevent third-party interception and tampering during network transmission. Once data enters the centralized cloud database, system super administrators or internal operations personnel with high-level privileges can directly log in to the database to modify, delete, or overwrite stored data or operation logs without leaving a trace. Even with basic operation logs, the log files in the centralized database can be tampered with or cleared by administrators, failing to create a strong anti-tampering loop.

[0006] Third, there is a lack of a real-time dynamic verification and accountability mechanism throughout the entire process, resulting in insufficient post-event auditing capabilities. Existing systems lack an automatic comparison engine for the integrity of data throughout its entire lifecycle when accessing, displaying, or exporting data. This deficiency stems from the fact that the existing system's access control and storage layers are isolated, lacking a verification mechanism that compares front-end source information (such as source fingerprints) with cloud storage status across levels and nodes in real time. Furthermore, it does not incorporate block height and hash chain integrity verification from distributed blockchain ledgers. Once data is tampered with or illegally altered in the storage medium, the system cannot proactively identify or issue immediate alerts, nor can it accurately pinpoint the tampering node and the responsible party, making it difficult to meet the compliance management requirements of high-security assessment data being "traceable, verifiable, and possessing non-repudiation validity." Summary of the Invention

[0007] The following provides a brief overview of one or more aspects to offer a basic understanding of them. This overview is not an exhaustive summary of all conceived aspects, nor is it intended to identify key or decisive elements of all aspects, nor to define the scope of any or all aspects. Its sole purpose is to present some concepts of one or more aspects in a simplified form to prepare for the more detailed descriptions that follow.

[0008] The purpose of this invention is to solve the above-mentioned problems and provide a data anti-tampering storage management system based on blockchain and local encryption. This system achieves hardware-level solidification of data fingerprints at the source to prevent forgery at the source, completely eliminates the risk of tampering by centralized administrators by utilizing a cloud-based distributed blockchain anti-tampering closed loop, and achieves real-time anti-tampering warnings and full-process traceability through local / cloud dual comparison and block height verification during data access.

[0009] The technical solution of the present invention is as follows: The present invention discloses a data anti-tampering storage management system based on blockchain and local encryption, including: a front-end acquisition layer, a transmission layer, a cloud core layer and an anti-tampering protection module; The front-end acquisition layer is used to collect data, calculate and generate a local hash value for the data through a local encryption chip, and package the data, the local hash value and the timestamp to generate an original data packet. The transport layer is used to encrypt the original data packet and generate a data integrity check code, and then transmit it to the cloud core layer through encrypted communication. The cloud core layer is used to perform transmission integrity verification on the received original data packets. After the verification is successful, the data, the local hash value, and the timestamp are encapsulated into a new block, and associated with the hash value of the previous block to form a hash chain, which is then synchronized to the blockchain storage node cluster for distributed storage. The anti-tampering protection module is used to trigger the data anti-tampering verification engine when it receives a terminal access request and the access permission verification passes. The data anti-tampering verification engine compares the local hash value generated by the front-end collection layer with the hash value stored in the cloud, and verifies the block height and hash chain integrity of the blockchain in the blockchain storage node cluster. If the verification passes, the data can be displayed or exported. If the verification fails, an alarm is triggered.

[0010] According to an embodiment of the data anti-tampering storage management system based on blockchain and local encryption of the present invention, the front-end acquisition layer includes: a lap counting acquisition terminal, an infrared sensor, a fitness tracker or heart rate monitoring module, a data verification unit, and the local encryption chip; The lap counting data acquisition terminal is used to collect lap counting data; The infrared sensor is used to collect data on the motion trajectory and the passing timing points; The fitness tracker or heart rate monitoring module is used to collect heart rate and exercise status data; The data verification unit is used to verify the collected raw data and filter out abnormal data. The local encryption chip employs a hardware encryption chip and incorporates a cryptographic hash algorithm to calculate and generate the local hash value from the verified original data, and stores the local hash value in a local cache. The cryptographic hash algorithm includes the SHA-256 algorithm and the Chinese national cryptographic algorithm SM3.

[0011] According to an embodiment of the data tamper-proof storage management system based on blockchain and local encryption of the present invention, the transmission layer includes an encrypted communication module, which is specifically used to: encrypt the original data packet using at least one of HTTPS protocol, TLS protocol, national cryptographic SM2 protocol or national cryptographic SM4 protocol, and then transmit it after attaching a data integrity check code generated based on the local hash value and the timestamp.

[0012] According to an embodiment of the data anti-tampering storage management system based on blockchain and local encryption of the present invention, the cloud core layer includes: a block generation unit, a counting data on-chain encapsulation module, a hash value chain storage module, and a distributed ledger synchronization unit; The block generation unit is used to encapsulate the data, the local hash value, and the timestamp into a new block after the transmission integrity verification of the original data packet is passed in the cloud. The circumstance counting data on-chain encapsulation module is used to encapsulate the circumstance counting data in a structured manner, including the original data, the local hash value, the timestamp, and the verification code, to ensure the integrity and traceability of the on-chain data; The hash value chain storage module is used to associate the hash value of the newly generated block with the hash value of the previous block and form a chain structure for storage. The distributed ledger synchronization unit is used to synchronize newly generated blocks to all nodes in the blockchain storage node cluster.

[0013] According to an embodiment of the data tamper-proof storage management system based on blockchain and local encryption of the present invention, the cloud core layer further includes a cloud management platform, which integrates: The access control module is used to finely manage the access permissions of terminals with different roles, including administrator terminals, instructor terminals, and read-only audit terminals. The data audit log module is used to record query, export, and modification operations on the data in real time and generate data audit logs. The data change tracing module is used to trace the entire lifecycle change records of the data based on the hash chain.

[0014] According to an embodiment of the data anti-tampering storage management system based on blockchain and local encryption of the present invention, the data audit log is archived on the blockchain along with the data and is stored in a distributed manner in the blockchain storage node cluster for a long period of time.

[0015] According to an embodiment of the data anti-tampering storage management system based on blockchain and local encryption of the present invention, when the verification fails, the anti-tampering protection module is further configured to: generate a tampering audit report containing the tampering time, tampering node and tampered data content, and send it to the administrator terminal.

[0016] According to an embodiment of the data anti-tampering storage management system based on blockchain and local encryption of the present invention, an edge computing preprocessing unit is further provided between the front-end acquisition layer and the transmission layer, which is used to perform real-time cleaning, noise reduction and outlier filtering on the acquired raw data before the local encryption chip calculates the hash value.

[0017] According to an embodiment of the data anti-tampering storage management system based on blockchain and local encryption of the present invention, an offline data caching and synchronization mechanism is further provided between the front-end acquisition layer and the cloud core layer, which is used to cache the original data packet and the local hash value locally when the network is interrupted, and automatically resume transmission to the cloud core layer after the network is restored.

[0018] According to an embodiment of the data anti-tampering storage management system based on blockchain and local encryption of the present invention, the cloud management platform further integrates an AI abnormal behavior detection module. The AI ​​abnormal behavior detection module is linked with the data audit log module, and automatically identifies abnormal access patterns of access during non-working hours or high-frequency queries by analyzing the data audit log and triggers an early warning.

[0019] Compared with the prior art, the present invention has the following advantages: First, addressing the shortcomings of existing technologies where data sources are easily tampered with or forged, and lack "root trust" guarantees at the source: This invention configures a local encryption chip at the front-end acquisition layer, uses a cryptographic hash algorithm to calculate a local hash value for the acquired and verified data, and packages the data, the local hash value, and the timestamp to generate the original data packet. These technical features achieve hardware-level solidification of the data's "original fingerprint" at the acquisition end, completely blocking the possibility of the original data being tampered with or forged before leaving the acquisition device or during local transmission, thus constructing a full-process tamper-proof "root trust" guarantee at the source.

[0020] Secondly, addressing the shortcomings of existing centralized cloud storage mechanisms, such as weak tamper resistance and inability to prevent tampering by internal personnel and administrators, this invention verifies the integrity of received raw data packets through a cloud core layer. Upon successful verification, the data, local hash value, and timestamp are encapsulated into a new block, linked to the hash value of the previous block to form a hash chain, and synchronized to the blockchain storage node cluster for distributed storage. These technical features, through distributed ledger synchronization and hash chain storage mechanisms, eliminate the drawbacks of centralized single-point storage, ensuring that data, once written, is permanently fixed, immutable, and permanently traceable, completely eliminating the risk of unauthorized modification or deletion of the database by super administrators and internal maintenance personnel.

[0021] Third, addressing the shortcomings of existing technologies, such as the lack of a full-process real-time dynamic verification and accountability mechanism, and insufficient post-event auditing capabilities: This invention, through its anti-tampering protection module, triggers a data anti-tampering verification engine when it receives a terminal access request and the access permission verification passes. This engine automatically compares the local hash value generated by the front-end acquisition layer with the hash value stored in the cloud, and verifies the block height and hash chain integrity of the blockchain in the blockchain storage node cluster. If the verification passes, data display or export is allowed; if the verification fails, an alarm is triggered. These technical features achieve automated, cross-level dual verification of data during access and export, instantly verifying the authenticity and integrity of data without manual intervention. In the event of tampering, proactive warnings are issued, and the tampering node and responsible party are accurately located, greatly improving the efficiency and credibility of post-event traceability and compliance auditing. Attached Figure Description

[0022] The above-described features and advantages of the present invention will be better understood after reading the following detailed description of embodiments of the present disclosure in conjunction with the accompanying drawings. In the drawings, components are not necessarily drawn to scale, and components having similar related characteristics or features may have the same or similar reference numerals.

[0023] Figure 1 A schematic diagram of an embodiment of the data tamper-proof storage management system based on blockchain and local encryption of the present invention is shown.

[0024] Figure 2 It shows Figure 1 The diagram shows the overall operation flow of the system. Detailed Implementation

[0025] The present invention will now be described in detail with reference to the accompanying drawings and specific embodiments. It should be noted that the aspects described below with reference to the accompanying drawings and specific embodiments are merely exemplary and should not be construed as limiting the scope of protection of the present invention in any way.

[0026] Figure 1 This illustrates the principle of an embodiment of the data tamper-proof storage management system based on blockchain and local encryption according to the present invention. (Reference) Figure 1 The system in this embodiment includes the following modules: front-end acquisition layer, transmission layer, cloud core layer and anti-tampering protection module.

[0027] The front-end acquisition layer is connected to the transmission layer via a communication bus or near-field communication. The transmission layer is connected to the cloud core layer via an encrypted network channel. The terminal access layer is bidirectionally connected to the cloud core layer. The anti-tampering protection module is connected to the data interfaces of the front-end acquisition layer, the cloud core layer, and the blockchain storage node cluster, respectively, and is used to retrieve local hash values ​​and perform cross-level dual anti-tampering verification with cloud blockchain data.

[0028] The front-end acquisition layer is used to collect data and calculate local hash values ​​for the data using a local encryption chip. The data, local hash values, and timestamps are then packaged to generate the original data packets.

[0029] The front-end acquisition layer includes a lap counting acquisition terminal, an infrared sensor, a fitness tracker or heart rate monitoring module, a data verification unit, and a local encryption chip.

[0030] Inside the front-end acquisition layer, infrared sensors and fitness trackers or heart rate monitoring modules are connected to the data input of the data verification unit to transmit the collected motion trajectory data, timing data, heart rate, and motion status data to the data verification unit in real time. The output of the data verification unit is connected to the data input of the local encryption chip to transmit the verified and filtered raw data to the local encryption chip. The local encryption chip is connected to the lap counting acquisition terminal and the local cache data. The local encryption chip stores the calculated local hash value in the local cache, and the lap counting acquisition terminal packages the verified raw data, the local hash value, and the current timestamp into a raw data packet before outputting it to the transmission layer.

[0031] The lap counting data acquisition terminal, deployed at the air security training site, is the source device for lap counting data, responsible for collecting lap counting data (such as number of laps, time, location, etc.) from the trainees.

[0032] Infrared sensors are used to collect data on the movement trajectory of trainees and the passage of timing points, providing a basis for lap counting.

[0033] A fitness tracker or heart rate monitoring module is worn by trainees to collect heart rate and exercise status data (such as speed and acceleration) to assist in evaluating training effectiveness.

[0034] The data verification unit is used to perform preliminary verification on the collected raw data to ensure the integrity and validity of the data, and to filter out invalid or abnormal data.

[0035] The local encryption chip uses a hardware encryption chip with a built-in cryptographic hash algorithm to perform local hash calculation on the verified original data, generate a local hash value, and store the local hash value in the local cache, thereby realizing the local solidification of the data's "original fingerprint" and preventing the source data from being tampered with. The cryptographic hash algorithm includes the SHA-256 algorithm and the national cryptographic SM3 algorithm.

[0036] The lap counting terminal, infrared sensor, and fitness tracker / heart rate monitoring module transmit raw data to the data verification unit. The verified data, along with the hash value generated by the local encryption chip, enters the raw data hash calculation stage to form a raw data packet with a hash value, which is then transmitted down to the transmission layer.

[0037] The transport layer is used to encrypt the raw data packets and generate data integrity check codes, which are then transmitted to the cloud core layer via encrypted communication.

[0038] The transport layer includes an encrypted communication module, which is specifically used to: encrypt the original data packets using at least one of the following protocols: HTTPS, TLS, SM2, or SM4, to prevent the data from being eavesdropped on, tampered with, or forged during transmission; and attach a data integrity check code generated based on the local hash value and timestamp before transmission, for use in the cloud to verify whether the data has been tampered with during transmission.

[0039] The raw data packets with hash values ​​from the front-end acquisition layer are processed by the encrypted communication module, transmitted via HTTPS / TLS encryption, and with an attached data integrity check code before being sent down to the cloud core layer.

[0040] The cloud core layer is used to verify the transmission integrity of received raw data packets. After successful verification, the data, local hash value, and timestamp are encapsulated into a new block, which is then linked with the hash value of the previous block to form a hash chain and synchronized to the blockchain storage node cluster for distributed storage. The blockchain storage node cluster, a distributed cluster composed of multiple blockchain nodes, is the core carrier for data tamper-proofing, ensuring the distributed storage and immutability of data.

[0041] The cloud core layer includes: a block generation unit, a circumstance data on-chain encapsulation module, a hash value chain storage module, and a distributed ledger synchronization unit.

[0042] Within the core cloud layer, the data input of the blockchain data encapsulation module is connected to the output of the transmission layer. This module receives raw data packets that have passed integrity verification and encapsulates the raw data, local hash value, and timestamp in a structured manner before transmitting them to the block generation unit. The block generation unit is connected to the hash value chain storage module. It encapsulates the data into new blocks and transmits them to the hash value chain storage module. The hash value chain storage module retrieves the hash value of the previous block and associates it with the hash value of the new block to form a hash chain structure. It then sends the associated block data to the distributed ledger synchronization unit. The data output of the distributed ledger synchronization unit is connected to the ledger storage interface of each node in the blockchain storage node cluster via a P2P network, used to synchronize new blocks to all nodes for distributed storage.

[0043] The block generation unit is used to encapsulate the data, local hash value, and timestamp into a new block after the integrity of the original data packet has been verified in the cloud, in preparation for uploading to the blockchain.

[0044] The lap count data on-chain encapsulation module is used to encapsulate the lap count data in a structured manner, including the original data (including data collected by infrared sensors, sports bracelets or heart rate monitoring modules), the local hash value, the timestamp, and the verification code, to ensure the integrity and traceability of the on-chain data.

[0045] The hash value chain storage module is used to associate the hash value of a newly generated block with the hash value of the previous block to form a chain structure storage. The chain structure storage is a chain storage of "block-hash-block". Any data tampering will destroy the hash chain.

[0046] The distributed ledger synchronization unit is used to synchronize newly generated blocks to all nodes in the blockchain storage node cluster, ensuring consistency of ledgers across nodes and preventing single-point tampering.

[0047] Preferably, the cloud core layer also includes a cloud management platform, which integrates: The access control module is used to finely manage the access permissions of terminals with different roles, including administrator terminals, instructor terminals, and read-only audit terminals, to prevent unauthorized operations from causing data tampering. The data audit log module is used to record query, export, and modification operations on the data in real time, and generate data audit logs for post-event traceability and responsibility determination. The data change traceability module is used to trace the entire lifecycle of data changes based on a hash chain, ensuring that every data operation is traceable and verifiable.

[0048] Data audit logs are archived on the blockchain along with the data and stored in a distributed manner on a blockchain storage node cluster for a long period of time.

[0049] In addition, the core layer of the cloud also includes a data visualization module, which visualizes lap data and training data in the form of charts, reports and other formats to assist in training management and decision-making.

[0050] After the encrypted data packets from the transport layer are received by the cloud, they undergo integrity verification. Once the verification is successful, they are processed by the block generation unit, the blockchain encapsulation of the counting data, and the chained storage of the hash value to form a new block. Then, they are synchronized to all blockchain nodes through the distributed ledger synchronization unit. At the same time, the cloud management platform realizes the control and display of data through modules such as permission management, data auditing, and visualization.

[0051] The terminal access layer includes: Administrator terminal: For use by system administrators, with the highest privileges, capable of performing operations such as system configuration, user management, and permission allocation; Instructor Terminal: For use by air security training instructors, it can query and export lap count data and training data of trainees to assist in training management; Audit terminal: For auditors to use, with read-only audit permissions, can view data audit logs and data change records, used for compliance audits.

[0052] After each terminal passes identity authentication and permission verification, it sends a data access request to the cloud management platform. The cloud management platform allows or denies access according to the rules of the permission management module. After authorized access, the data is displayed or exported through the visualization module, and the operation behavior is recorded in the data audit log module.

[0053] The anti-tampering protection module triggers the data anti-tampering verification engine when it receives a terminal access request and the access permission verification passes. The engine compares the local hash value generated by the front-end acquisition layer with the hash value stored in the cloud to verify whether the data has been tampered with during transmission and storage. It also verifies the block height and hash chain integrity of the blockchain in the blockchain storage node cluster to verify whether the data stored on the blockchain has been tampered with. If the verification passes, the data can be displayed or exported; if the verification fails, an alarm is triggered. When anti-tampering verification is required, the data anti-tampering verification engine obtains the local hash value from the front-end acquisition layer and the cloud hash value and blockchain block information from the cloud core layer. After comparison and verification, it outputs the verification result to ensure the authenticity and integrity of the data.

[0054] When the verification fails, the anti-tampering protection module generates a tampering audit report containing the tampering time, tampering node, and tampered data content, and sends it to the administrator terminal.

[0055] Preferably, an edge computing preprocessing unit is also provided between the front-end acquisition layer and the transmission layer. This unit is used to clean, reduce noise, and filter outliers in real time on the acquired raw data before the hash value is calculated by the local encryption chip, thereby reducing invalid data uploaded to the blockchain and improving system efficiency.

[0056] Ideally, an offline data caching and synchronization mechanism is also provided between the front-end acquisition layer and the cloud core layer. This mechanism is used to cache the original data packets and local hash values ​​locally when the network is interrupted, and automatically resume transmission to the cloud core layer after the network is restored.

[0057] Ideally, the cloud management platform also integrates an AI abnormal behavior detection module. This module works in conjunction with the data audit log module to automatically identify abnormal access patterns such as access during non-working hours or high-frequency queries and trigger alerts by analyzing the data audit logs.

[0058] Figure 2 It shows Figure 1 The overall operation flow of the system is shown below. (Reference) Figure 2 The overall operation steps of the system in this embodiment are described in detail below.

[0059] Step 1: Air defense training begins, and the loop counting and data acquisition terminal is started.

[0060] When training begins, the lap counting terminal, infrared sensor, and fitness tracker or heart rate monitoring module in the front-end acquisition layer are activated and enter the data acquisition preparation state.

[0061] Step 2: The infrared sensor collects lap count data, and the motion module simultaneously collects training status data.

[0062] Infrared sensors collect real-time data on the trainee's movement trajectory and passing time points; fitness trackers or heart rate monitoring modules simultaneously collect heart rate and movement status data.

[0063] Step 3: The local encryption chip generates a unique hash value for the original data and stores it in the local cache.

[0064] The data verification unit verifies the collected raw data and filters out abnormal data; the local encryption chip uses a hardware encryption chip and has a built-in cryptographic hash algorithm (such as SHA-256 algorithm or national cryptographic SM3 algorithm) to calculate a local hash value for the verified raw data and store the local hash value in the local cache to solidify the source data fingerprint; the counting and acquisition terminal packages the verified raw data, the local hash value and the real-time generated timestamp into a raw data packet.

[0065] Step 4: The encrypted communication module transmits the original data, hash value, and timestamp to the cloud.

[0066] The encrypted communication module in the transport layer uses at least one of the following protocols: HTTPS, TLS, SM2, or SM4 to encrypt the raw data packets generated by the front-end acquisition layer, and attaches a data integrity check code generated based on the local hash value and timestamp, and transmits it to the cloud core layer through encrypted communication.

[0067] Step 5: The cloud receives the data, verifies the transmission integrity first (by comparing the checksum).

[0068] After receiving the original data packet transmitted by the encrypted communication module, the cloud core layer performs a transmission integrity check on the original data packet based on the data integrity check code to verify whether the data has been tampered with or lost during transmission.

[0069] Step 6: Verify whether it passes.

[0070] The cloud core layer verifies the transmission integrity result. If the verification fails, proceed to step 7 of the exception handling process; if the verification passes, proceed to step 8 of the on-chain process.

[0071] Step 7: Refuse to receive, and send feedback to the data acquisition terminal to retransmit.

[0072] When the transmission integrity verification in step 5 fails, the cloud core layer refuses to receive the data packet and sends an error message to the front-end acquisition layer's data collection terminal, triggering a data retransmission mechanism.

[0073] Step 8: The blockchain storage node encapsulates the data into a new block and associates it with the hash value of the previous block.

[0074] The cloud core layer's data encapsulation module performs structured encapsulation on verified data (including original data, local hash value, timestamp, and checksum); the block generation unit encapsulates the encapsulated data into new blocks; and the hash value chain storage module associates the hash value of the newly generated block with the hash value of the previous block to form a chain structure storage.

[0075] Step 9: The distributed ledger is synchronized to all nodes to complete the on-chain storage of data.

[0076] The distributed ledger synchronization unit synchronizes newly generated blocks to all nodes in the blockchain storage node cluster, completing the distributed ledger storage and ledger consistency synchronization, and realizing the immutability and distributed persistence of data.

[0077] Step 10: The cloud management platform records data storage operation logs, including the operator, time, and data content.

[0078] Once the data is uploaded to the blockchain, the data audit log module in the cloud management platform records the data storage operation behavior in real time and generates a data audit log containing the operator, time, and data content.

[0079] Step 11: Terminal access request (query / export data).

[0080] Administrator terminals, instructor terminals, or read-only audit terminals can initiate data query or export access requests to the cloud management platform in the cloud core layer.

[0081] Step 12: The permission management module verifies access permissions; if no permission is granted, the request is denied.

[0082] The access control module in the cloud management platform performs identity authentication and fine-grained permission verification for role-based terminals. If the accessing role does not have the corresponding permissions (such as unauthorized access or unauthorized operation), the access request is denied.

[0083] Step 13: If authorized, retrieve the data and trigger the data anti-tampering verification engine (compare local cloud hash + block height).

[0084] If the access permission verification passes, the data anti-tampering verification engine in the anti-tampering protection module is triggered. The data anti-tampering verification engine compares the local hash value generated by the front-end acquisition layer with the hash value stored in the cloud, and verifies the block height and hash chain integrity of the blockchain in the blockchain storage node cluster.

[0085] Step 14: Has the data been tampered with?

[0086] The data anti-tampering verification engine determines whether the double verification passes. If the verification determines that the data has been tampered with (i.e., the verification fails), it proceeds to steps 15 and 17 of the exception handling process; if the verification passes, it proceeds to step 16 of the data display / export process.

[0087] Step 15: Trigger an alarm and generate a tampering audit report.

[0088] When step 14 determines that the verification fails (i.e. the data has been tampered with), the anti-tampering protection module triggers a system alarm, generates a tampering audit report containing the tampering time, tampering node, and tampered data content, and sends it to the administrator terminal.

[0089] Step 16: Display / export the data and record the access log.

[0090] If the dual verification passes, the anti-tampering protection module allows the data to be displayed or exported to the requesting role terminal (administrator terminal, instructor terminal, or read-only audit terminal); at the same time, the data audit log module of the cloud management platform records the operation behavior and logs of this access.

[0091] Step 17: Manual review to trace the tampered nodes.

[0092] When verification reveals that data has been tampered with, the administrator terminal, in conjunction with the data change tracing module and data audit log module of the cloud management platform, retrieves the hash chain history records in the blockchain storage node cluster to locate the node and responsible person that tampered with the data, and performs manual review and tracing.

[0093] Step 18: Archive the data throughout its entire lifecycle and store it permanently on the blockchain node.

[0094] After the training and data management process is completed, the data audit logs recorded by the data audit log module are archived on the blockchain along with the data and stored in a distributed manner in the blockchain storage node cluster for a long time, so as to achieve full life cycle verifiability.

[0095] In one specific embodiment, the system of the present invention is particularly suitable for application scenarios such as aviation security training, physical fitness assessment of civil aviation practitioners, and digital training systems.

[0096] Air security training includes various specialized assessment subjects such as shuttle runs, tactical slalom runs, and long-distance runs (such as the 3000-meter run). Infrared sensors in the front-end data acquisition layer are deployed at specific timing points or turnaround points on the training site, enabling real-time and accurate collection of physical data and movement trajectories of air security trainees as they pass through these points. Combined with heart rate, speed, and acceleration data collected by fitness trackers or heart rate monitoring modules, this overcomes the significant lap counting errors (typically 1-2 laps) caused by general-purpose sports equipment failing to trigger at turnaround points or missing slalom runs. It eliminates the possibility of cheating by falsifying movement trajectories or manually modifying parameters, ensuring the accuracy and fairness of the air security assessment.

[0097] The physical fitness scores of civil aviation security personnel are directly related to their professional qualifications and civil aviation safety, and therefore have extremely high compliance requirements regarding data authenticity and immutability. By using a local encryption chip in the front-end acquisition layer to locally solidify the original data of the civil aviation security training cycle with a "source fingerprint," and then storing and distributing it in the cloud core layer through a blockchain storage node cluster using hash chaining, this completely eliminates the possibility of instructors, system administrators, or maintenance personnel manually modifying civil aviation security assessment scores or altering or deleting operation logs.

[0098] The cloud-based core layer's cloud management platform can configure dedicated lap counting rules for different air security training subjects and automatically correlate and compare lap counting data with air security physical fitness assessment standards (such as the number of qualified laps and the time required to meet the standard). Instructor terminals at the terminal access layer can retrieve scores, and read-only audit terminals can perform compliance audits. In the event of assessment disputes or qualification reviews, the anti-tampering protection module triggers the anti-tampering verification engine for dual verification, ensuring that the entire process of air security training lap counting data has credible evidence, traceability, and non-repudiation legal validity, meeting the civil aviation industry's regulatory requirements for "secure storage, permanent traceability, and security" of sensitive data.

[0099] Although the methods described above are illustrated and depicted as a series of actions for the sake of simplicity, it should be understood and appreciated that these methods are not limited by the order of the actions, as some actions may occur in a different order and / or concurrently with other actions from the illustrations and descriptions herein or not illustrated and described herein but which may be understood by those skilled in the art, according to one or more embodiments.

[0100] Those skilled in the art will further appreciate that the various illustrative logic blocks, modules, circuits, and algorithm steps described in conjunction with the embodiments disclosed herein can be implemented as electronic hardware, computer software, or a combination of both. To clearly illustrate this interchangeability between hardware and software, the various illustrative components, blocks, modules, circuits, and steps are described above in a generalized manner in terms of their functionality. Whether such functionality is implemented as hardware or software depends on the specific application and the design constraints imposed on the overall system. Those skilled in the art may implement the described functionality in different ways for each specific application, but such implementation decisions should not be construed as departing from the scope of the invention.

[0101] The various illustrative logic blocks, modules, and circuits described in conjunction with the embodiments disclosed herein can be implemented or performed using a general-purpose processor, a digital signal processor (DSP), an application-specific integrated circuit (ASIC), a field-programmable gate array (FPGA) or other programmable logic device, discrete gate or transistor logic, discrete hardware components, or any combination thereof designed to perform the functions described herein. The general-purpose processor may be a microprocessor, but in alternatives, it may be any conventional processor, controller, microcontroller, or state machine. The processor may also be implemented as a combination of computing devices, such as a combination of a DSP and a microprocessor, multiple microprocessors, one or more microprocessors cooperating with a DSP core, or any other such configuration.

[0102] The steps of the methods or algorithms described in conjunction with the embodiments disclosed herein may be embodied directly in hardware, in a software module executed by a processor, or in a combination of both. The software module may reside in RAM memory, flash memory, ROM memory, EPROM memory, EEPROM memory, registers, hard disk, removable disk, CD-ROM, or any other form of storage medium known in the art. An exemplary storage medium is coupled to a processor such that the processor can read and write information to / from the storage medium. In an alternative, the storage medium may be integrated into the processor. The processor and storage medium may reside in an ASIC. The ASIC may reside in a user terminal. In an alternative, the processor and storage medium may reside as discrete components in the user terminal.

[0103] In one or more exemplary embodiments, the described functionality may be implemented in hardware, software, firmware, or any combination thereof. If implemented in software as a computer program product, the functionality may be stored or transmitted as one or more instructions or code on or through a computer-readable medium. A computer-readable medium includes both computer storage media and communication media, encompassing any medium that facilitates the transfer of a computer program from one location to another. A storage medium may be any available medium accessible to a computer. By way of example and not limitation, such a computer-readable medium may include RAM, ROM, EEPROM, CD-ROM or other optical disc storage, disk storage or other magnetic storage devices, or any other medium that can be used to carry or store desired program code in the form of instructions or data structures and is accessible to a computer. Any connection is also legitimately referred to as a computer-readable medium. For example, if the software is transmitted from a website, server, or other remote source using coaxial cable, fiber optic cable, twisted pair, digital subscriber line (DSL), or wireless technologies such as infrared, radio, and microwave, then the coaxial cable, fiber optic cable, twisted pair, DSL, or wireless technologies such as infrared, radio, and microwave are included in the definition of a medium. As used in this article, disk and disc include compact discs (CDs), laser discs, optical discs, digital multi-purpose discs (DVDs), floppy disks, and Blu-ray discs. Disks typically reproduce data magnetically, while discs reproduce data optically using lasers. Combinations of these should also be included within the scope of computer-readable media.

[0104] The prior description of this disclosure is provided to enable any person skilled in the art to make or use this disclosure. Various modifications to this disclosure will be apparent to those skilled in the art, and the general principles defined herein may be applied to other variations without departing from the spirit or scope of this disclosure. Therefore, this disclosure is not intended to be limited to the examples and designs described herein, but should be accorded the widest scope consistent with the principles and novel features disclosed herein.

Claims

1. A data tamper-proof storage and management system based on blockchain and local encryption, characterized in that, include: Front-end acquisition layer, transmission layer, cloud core layer and anti-tampering protection module; The front-end acquisition layer is used to collect data, calculate and generate a local hash value for the data through a local encryption chip, and package the data, the local hash value and the timestamp to generate an original data packet. The transport layer is used to encrypt the original data packet and generate a data integrity check code, and then transmit it to the cloud core layer through encrypted communication. The cloud core layer is used to verify the transmission integrity of the received original data packet. After the verification is successful, the data, the local hash value and the timestamp are encapsulated into a new block and associated with the hash value of the previous block to form a hash chain, which is then synchronized to the blockchain storage node cluster for distributed storage. The anti-tampering protection module is used to trigger the data anti-tampering verification engine when a terminal access request is received and the access permission verification is passed. The data anti-tampering verification engine compares the local hash value generated by the front-end acquisition layer with the hash value stored in the cloud, and verifies the block height and hash chain integrity of the blockchain in the blockchain storage node cluster. If the verification passes, the data can be displayed or exported. If the verification fails, an alarm will be triggered.

2. The data tamper-proof storage management system based on blockchain and local encryption as described in claim 1, characterized in that, The front-end acquisition layer includes: a lap counting acquisition terminal, an infrared sensor, a fitness tracker or heart rate monitoring module, a data verification unit, and the local encryption chip; The lap counting data acquisition terminal is used to collect lap counting data; The infrared sensor is used to collect data on the motion trajectory and the passing of timing points; The fitness tracker or heart rate monitoring module is used to collect heart rate and exercise status data; The data verification unit is used to verify the collected raw data and filter out abnormal data. The local encryption chip employs a hardware encryption chip and incorporates a cryptographic hash algorithm to calculate and generate the local hash value from the verified original data, and stores the local hash value in a local cache. The cryptographic hash algorithm includes the SHA-256 algorithm and the Chinese national cryptographic algorithm SM3.

3. The data tamper-proof storage management system based on blockchain and local encryption according to claim 1, characterized in that, The transport layer includes an encrypted communication module, which is specifically used to: encrypt the original data packet using at least one of the HTTPS protocol, TLS protocol, national cryptographic SM2 protocol or national cryptographic SM4 protocol, and then transmit it after attaching a data integrity check code generated based on the local hash value and the timestamp.

4. The data tamper-proof storage management system based on blockchain and local encryption as described in claim 1, characterized in that, The cloud core layer includes: a block generation unit, a circumstance data on-chain encapsulation module, a hash value chain storage module, and a distributed ledger synchronization unit; The block generation unit is used to encapsulate the data, the local hash value, and the timestamp into a new block after the transmission integrity verification of the original data packet is passed in the cloud. The circumstance counting data on-chain encapsulation module is used to encapsulate the circumstance counting data in a structured manner, including the original data, the local hash value, the timestamp, and the verification code, to ensure the integrity and traceability of the on-chain data; The hash value chain storage module is used to associate the hash value of the newly generated block with the hash value of the previous block and form a chain structure for storage. The distributed ledger synchronization unit is used to synchronize newly generated blocks to all nodes in the blockchain storage node cluster.

5. The data tamper-proof storage management system based on blockchain and local encryption according to claim 1, characterized in that, The cloud core layer also includes a cloud management platform, which integrates: The access control module is used to finely manage the access permissions of terminals with different roles, including administrator terminals, instructor terminals, and read-only audit terminals. The data audit log module is used to record query, export, and modification operations on the data in real time and generate data audit logs. The data change tracing module is used to trace the entire lifecycle change records of the data based on the hash chain.

6. The data tamper-proof storage management system based on blockchain and local encryption according to claim 5, characterized in that, The data audit logs are archived on the blockchain along with the data and stored in a distributed manner in the blockchain storage node cluster for a long period of time.

7. The data tamper-proof storage management system based on blockchain and local encryption according to claim 1, characterized in that, When the anti-tampering protection module determines that the verification fails, it is also used to: generate a tampering audit report containing the tampering time, tampering node, and tampered data content, and send it to the administrator terminal.

8. The data tamper-proof storage management system based on blockchain and local encryption according to claim 1, characterized in that, An edge computing preprocessing unit is also provided between the front-end acquisition layer and the transmission layer, which is used to perform real-time cleaning, noise reduction and outlier filtering on the acquired raw data before the local encryption chip calculates the hash value.

9. The data tamper-proof storage management system based on blockchain and local encryption according to claim 1, characterized in that, An offline data caching and synchronization mechanism is also provided between the front-end acquisition layer and the cloud core layer, which is used to cache the original data packet and the local hash value locally when the network is interrupted, and automatically resume transmission to the cloud core layer after the network is restored.

10. The data tamper-proof storage management system based on blockchain and local encryption according to claim 5, characterized in that, The cloud management platform also integrates an AI abnormal behavior detection module, which works in conjunction with the data audit log module to automatically identify abnormal access patterns such as access during non-working hours or high-frequency queries and trigger warnings by analyzing the data audit log.

Images