Blockchain-based industrial internet data security and traceability system and method
Patent Information
- Application Number
- CN202611041506.6
- Authority / Receiving Office
- CN · China
- Patent Type
- Applications(China)
- Current Assignee / Owner
- Filing Date
- 2026-07-14
- Publication Date
- 2026-10-30
AI Technical Summary
[0005]本发明提供一种基于区块链的工业互联网数据安全和追溯系统及方法，用于解决现有技术中工业互联网中不被泄露的情况下隐私数据难以有效追溯相关信息的问题
本发明提出了一种基于区块链的工业互联网数据安全和追溯系统及方法，本发明解决的是针对工业互联网中数据分享者和数据获得者二间通信复杂、数据交互存在安全隐患、个人身份信息容易泄露等问题，实现对工业互联网中数据有监督的存储和追踪。本发明结合区块链技术和加密技术，能够在不侵犯数据分享者和数据获得者身份隐私的情况下，对工业互联网中数据分享者和数据获得者的身份进行加密，对传输的数据也进行加密。并且利用区块链的去中心化、不可篡改和不可伪造等特点，确保数据的真实性和可靠性，能够很好的满足在工业互联网中数据交互的需求。本发明还可以应用于物联网、医疗网和车载网等领域。
Smart Images
Figure FT_1 
Figure FT_2 
Figure QLYQS_16
Abstract
Description
Technical Field
[0001] This invention relates to the field of nuclear power plant data security traceability technology, and in particular to a blockchain-based industrial internet data security and traceability system and method. Background Technology
[0002] With the rapid development of electronic, computer, and communication technologies, the Internet of Things (IoT) has gradually developed in recent years. The industrial sector is one of the most widespread applications of IoT technology, and the application scenarios for the Industrial Internet of Things (IIoT) are extremely diverse. Modern industrial systems rely on the application of Industrial Internet systems to achieve a higher level of data sharing, which necessitates data interaction through open networks.
[0003] However, such highly open networks are vulnerable to illegal attacks, leading to the destruction or loss of various types of data and severely impacting the normal operation of industrial systems. Ensuring the security of industrial internet data transmission has become a serious challenge. Therefore, achieving supervised storage and traceability of industrial internet data without disclosing enterprise privacy data is a crucial issue that urgently needs to be addressed.
[0004] Blockchain technology is a decentralized distributed storage technology, whose core characteristics are the immutability and decentralization of data. Based on these characteristics, information recorded on the blockchain possesses higher authenticity and reliability. Although data on the blockchain is difficult to tamper with, this characteristic also leads to its complete public disclosure. Currently, there is a lack of systems capable of effectively tracing relevant information while ensuring that privacy data is not leaked in the Industrial Internet. Summary of the Invention
[0005] This invention provides a blockchain-based industrial internet data security and traceability system and method to address the problem in existing technologies where privacy data is difficult to trace effectively without being leaked in the industrial internet.
[0006] The technical solution of the present invention is as follows: This invention proposes a blockchain-based industrial internet data security and traceability system. The system includes a system management center, a blockchain, and a gateway. The system management center generates keys and pseudonyms and distributes them to users. The gateway verifies the identity of the data sharer, and after successful verification, the gateway uploads the identity and encrypted data to the blockchain. The blockchain stores the encrypted data uploaded by the data sharer.
[0007] This invention proposes a blockchain-based method for industrial internet data security and traceability, the method comprising: Step 1: Register with the system; Step 1.1: Configure security parameters in the system management center A key is generated, and the system management center distributes the key to the data sharer through a secure channel; Step 1.2: The system management center generates a digital signature using an asymmetric encryption algorithm signature scheme; Step 1.3: The data sharer uploads their identity to the system management center and obtains a pseudonym; Step 1.4: The data acquirer uploads their identity to the system management center and obtains a pseudonym; Step Two: The data recipient uploads the data to the system; Step 3: The data recipient queries the system for data.
[0008] In some embodiments, step 1.1 specifically includes: Step 1.1: The system management center sets security parameters. A key is generated, and the system management center distributes the key to the data sharer through a secure channel; Step 1.1.1: The system management center, based on security parameters... Generate prime numbers Then calculate , ; Step 1.1.2: System Management Center Calculation As a modulus, the modulus length is a safety parameter. ; Step 1.1.3: Select System Management Center , making ; Step 1.1.4: Set the master key in the system management center ; Step 1.1.5: The system management center generates a public / private key pair for signing. The system management center randomly selects... Z N2 Given a multiplicative group modulo N, calculate Set public key private key ; Step 1.1.6: The system management center generates signature key pairs for i data sharers in batches. The system management center generates master keys and signature key pairs. KeyGen(λ,n) is a key generation function that takes a security parameter λ and the number of users n as inputs and outputs the system master private key msk; each user's signature key pair is (pk i , sk i ); Step 1.1.7: The system management center distributes the signature key pair to the data sharers through a secure channel.
[0009] In some embodiments, the asymmetric encryption algorithm signature scheme in step 1.2 includes three algorithms: a key generation algorithm, a signature algorithm, and a verification algorithm.
[0010] In some embodiments, step 1.3 specifically includes: the data sharer submitting their real identity to the system management center. The system management center uses distributed double-gate trap public-key cryptography to generate pseudonyms based on the real identity of the data sharer. and identity key pair The system management center generates signature key pairs using an asymmetric encryption algorithm. and through a secure channel to send pseudonyms and identity key pair Send to data sharers Publish signing key pair To the blockchain; Step 1.4 specifically includes the data recipient submitting their real identity to the system management center. The system management center uses distributed double-gate trap public-key cryptography to generate pseudonyms. and identity key pair False names through secure channels and identity key pair Send to data recipients .
[0011] In some embodiments, step two specifically includes: Step 2.1: The data recipient shares their public key. Send to the data sharer; Step 2.2: The data sharer will use a pseudonym. Send to the data recipient; Step 2.3: The data sharer uses the public key Data is secured using distributed double-gate public-key cryptography technology in the system management center. Encrypt into ciphertext The data sharer sends a request. To the gateway, It is a signature generated from the data sharer's private key. For timestamps; Step 2.4: Gateway Inspection Request Timestamp Does it time out, if the request... Timestamp Timeout, request Will be rejected; Step 2.5: If timestamp Without timeout, the gateway verifies the identity of the data sharer and transmits the data to the blockchain.
[0012] In some embodiments, step 2.5 specifically includes the gateway querying the public key of the data sharer by searching the blockchain. and by executing an asymmetric encryption algorithm To verify the signature If verifying the signature If the response is correct, the gateway will send the ciphertext. and kana Uploaded to the blockchain and pseudonyms and ciphertext If the association returns an error, the request... It will be rejected.
[0013] In some embodiments, step three specifically includes Step 3.1: Data Acquirer By using pseudonyms of data sharers Invoking data query contracts on the blockchain; Step 3.2: Data Acquisition Through kana Query the blockchain and obtain the ciphertext ; Step 3.3: Data Acquisition The plaintext is obtained by decryption using distributed two-gate trap public-key cryptography in the system management center. .
[0014] In some embodiments, for users and data with problems, the method performs step four: the system performs data tracing.
[0015] In some embodiments, step four specifically includes: For dishonest data sharers, the system administration center can take action. To restore the true identity of the data sharer ; For problematic data, the system management center can execute... To recover the plaintext from the ciphertext .
[0016] The implementation of this invention has the following beneficial effects: This invention proposes a blockchain-based industrial internet data security and traceability system and method. It addresses issues such as complex communication between data sharers and data recipients, security vulnerabilities in data interaction, and the easy leakage of personal identity information in the industrial internet, enabling supervised storage and tracking of data. This invention combines blockchain and encryption technologies to encrypt the identities of data sharers and data recipients in the industrial internet without infringing on their privacy, and also encrypts the transmitted data. Furthermore, leveraging the decentralized, immutable, and unforgeable characteristics of blockchain, it ensures the authenticity and reliability of data, effectively meeting the data interaction needs in the industrial internet. This invention can also be applied to fields such as the Internet of Things (IoT), medical networks, and vehicle networks. Attached Figure Description
[0017] Figure 1 This is a schematic diagram of a blockchain-based industrial internet data security and traceability system proposed in an embodiment of the present invention; Figure 2 This is a flowchart of a blockchain-based industrial internet data security and traceability method proposed in an embodiment of the present invention. Detailed Implementation
[0018] The technical solution of the present invention will be clearly and completely described below with reference to the accompanying drawings and specific embodiments. Obviously, the described embodiments are only some embodiments of the present invention, and not all embodiments. Based on the embodiments of the present invention, all other embodiments obtained by those skilled in the art without creative effort are within the scope of protection of the present invention.
[0019] like Figures 1 to 2 As shown, this invention proposes a blockchain-based industrial internet data security and traceability system. The system includes a system management center, a blockchain, a gateway, data sharers, and data recipients. The system management center can be considered a trusted institution controlled by the government. The system management center is used to generate keys and pseudonyms and distribute them to users. The gateway verifies the identity of the data sharer; after successful verification, the gateway uploads the identity and encrypted data to the blockchain. The data sharer is responsible for encrypting and sharing data on the blockchain. The data recipient obtains the encrypted data by calling a query contract on the blockchain and decrypts it to obtain the plaintext.
[0020] A blockchain-based method for industrial internet data security and traceability, comprising: Step 1: Register with the system; Step 1.1: Configure security parameters in the system management center A key is generated, and the system management center distributes the key to the data sharer through a secure channel; Step 1.1.1: The system management center, based on security parameters... Generate prime numbers Then calculate , ; Step 1.1.2: System Management Center Calculation As a modulus, the modulus length is a safety parameter. ; Step 1.1.3: Select System Management Center , making ; Step 1.1.4: Set the master key in the system management center ; Step 1.1.5: The system management center generates a public / private key pair for signing. The system management center randomly selects... Z N2 Given a multiplicative group modulo N, calculate Set public key private key ; Step 1.1.6: The system management center generates signature key pairs for each of the i data sharers in batches. The system management center generates master keys and signature key pairs. KeyGen(λ,n) is a key generation function that takes the security parameter λ and the number of users n as inputs and outputs the system master private key msk; each user's signature key pair is (pk i ,sk i） ; Step 1.1.7: The system management center distributes the signature key pair to the data sharers through a secure channel.
[0021] Step 1.2: The system management center selects a secure asymmetric encryption algorithm (RSA) signature scheme to generate a digital signature. This scheme consists of three algorithms: key generation (KeyGen), signature (Sig), and verification (Ver).
[0022] Step 1.3: The data sharer submits their real identity to the system management center. The system management center uses distributed double-gate trap public-key cryptography to generate pseudonyms based on the real identity of the data sharer. and identity key pair and signature key pair Then it is sent to the data sharer through a secure channel. ,release To blockchain; Step 1.4: The data recipient submits their real identity to the system management center. Similarly, the system management center uses distributed double-gate public-key cryptography to generate pseudonyms. and key pair Then it is sent to the data recipient through a secure channel. .
[0023] Step Two: As Figure 2 As shown in step 2, the data acquirer uploads data to the system. Step 2.1: The data recipient will first share their public key. Send to the data sharer; Step 2.2: The data sharer will use their pseudonym. Send to the data recipient; Step 2.3: The data sharer uses the public key to transmit the uploaded data through the distributed double-gate public-key cryptography technology of the system management center. Encrypt into ciphertext Then the data sharer sends a request. Give to the gateway, It is a signature generated from the data sharer's private key; Step 2.4: Gateway Inspection Request Timestamp Does it time out, if the request... Timestamp Timeout, request Will be rejected; Step 2.5: If timestamp Without timeout, the gateway queries the blockchain to retrieve the public key of the data sharer. and by executing an asymmetric encryption algorithm To verify the signature If verifying the signature If the response is correct, the gateway will send the ciphertext. and kana Uploaded to the blockchain, and pseudonym and ciphertext If the association returns an error, the request... It will be rejected.
[0024] Step 3: As Figure 2 As shown in step 3, the data acquirer performs a data query; Step 3.1: The data recipient first uses the pseudonym of the data sharer. Invoke the blockchain data query contract; Step 3.2: Data Acquisition Through kana Query the blockchain and obtain the ciphertext ; Data acquirers The plaintext is obtained by decryption using distributed two-gate trap public-key cryptography in the system management center. .
[0025] like Figure 2 As shown in step 4, this system has a data traceability function, specifically as follows: For dishonest data sharers, the system administration center can take action. To restore the true identity of the data sharer Therefore, it means data sharers Inappropriate behavior can be tracked by the data management center; For problematic data, the system management center can execute... To recover the plaintext from the ciphertext .
[0026] The above embodiments merely illustrate several implementation methods of the present invention, and their descriptions are relatively specific and detailed, but they should not be construed as limiting the scope of the present invention. It should be noted that those skilled in the art can make various modifications and improvements without departing from the concept of the present invention, and these all fall within the protection scope of the present invention. Therefore, the protection scope of this patent should be determined by the appended claims.
Claims
1. A blockchain-based industrial internet data security and traceability system, characterized in that, The system includes a system management center, a blockchain, and a gateway. The system management center is used to generate keys and pseudonyms and distribute keys and pseudonyms to users. The gateway verifies the identity of the data sharer, and after successful verification, the gateway uploads the identity and encrypted data to the blockchain. The blockchain stores the encrypted data uploaded by the data sharer.
2. A blockchain-based method for industrial internet data security and traceability, wherein the method employs the system described in claim 1, characterized in that, The method includes: Step 1: Register with the system; Step 1.1: Configure security parameters in the system management center A key is generated, and the system management center distributes the key to the data sharer through a secure channel; Step 1.2: The system management center generates a digital signature using an asymmetric encryption algorithm signature scheme; Step 1.3: The data sharer uploads their identity to the system management center and obtains a pseudonym; Step 1.4: The data acquirer uploads their identity to the system management center and obtains a pseudonym; Step 2: The data recipient uploads the data to the system; Step 3: The data recipient queries the system for data.
3. The blockchain-based industrial internet data security and traceability method according to claim 2, characterized in that, Step 1.1 specifically includes: Step 1.1: The system management center sets security parameters. A key is generated, and the system management center distributes the key to the data sharer through a secure channel; Step 1.1.1: The system management center, based on security parameters... Generate prime numbers Then calculate , ; Step 1.1.2: System Management Center Calculation As a modulus, the modulus length is a safety parameter. ; Step 1.1.3: Select System Management Center , making ; Step 1.1.4: Set the master key in the system management center ; Step 1.1.5: The system management center generates a public / private key pair for signing. The system management center randomly selects... Z N2 Given a multiplicative group modulo N, calculate Set public key private key ; Step 1.1.6: The system management center generates signature key pairs for i data sharers in batches. The system management center generates master keys and signature key pairs. KeyGen(λ,n) is a key generation function that takes the security parameter λ and the number of users n as inputs and outputs the system master private key msk; each user's signature key pair is (pk i , sk i ); Step 1.1.7: The system management center distributes the signature key pair to the data sharers through a secure channel.
4. The blockchain-based industrial internet data security and traceability method according to claim 3, characterized in that, The asymmetric encryption algorithm signature scheme in step 1.2 includes three algorithms: a key generation algorithm, a signature algorithm, and a verification algorithm.
5. A blockchain-based industrial internet data security and traceability method according to claim 4, characterized in that: Step 1.3 specifically includes: the data sharer submitting their real identity to the system management center. The system management center generates pseudonyms using distributed double-gate trap public-key cryptography based on the real identity of the data sharer. and identity key pair The system management center generates signature key pairs using an asymmetric encryption algorithm. and through a secure channel to send pseudonyms and identity key pair Send to data sharers Publish signing key pair To the blockchain; step 1.4 specifically includes the data recipient submitting their real identity to the system management center. The system management center uses distributed double-gate trap public-key cryptography to generate pseudonyms. and identity key pair False names through secure channels and identity key pair Send to data recipients .
6. A blockchain-based industrial internet data security and traceability method according to claim 5, characterized in that, Step two specifically includes: Step 2.1: The data recipient shares their public key. Send to the data sharer; Step 2.2: The data sharer will use a pseudonym. Send to the data recipient; Step 2.3: The data sharer uses the public key Data is secured using distributed double-gate public-key cryptography technology in the system management center. Encrypt into ciphertext The data sharer sends a request. To the gateway, It is a signature generated from the data sharer's private key. For timestamps; Step 2.4: Gateway Inspection Request Timestamp Does it time out, if the request... Timestamp Timeout, request Will be rejected; Step 2.5: If timestamp Without timeout, the gateway verifies the identity of the data sharer and transmits the data to the blockchain.
7. A blockchain-based industrial internet data security and traceability method according to claim 6, characterized in that, Step 2.5 specifically involves the gateway querying the public key of the data sharer by searching the blockchain. and by executing an asymmetric encryption algorithm To verify the signature If verifying the signature If the response is correct, the gateway will send the ciphertext. and kana Uploaded to the blockchain, and pseudonyms and ciphertext If the association returns an error, the request... It will be rejected.
8. A blockchain-based industrial internet data security and traceability method according to claim 7, characterized in that, Step three specifically includes Step 3.1: Data Acquirer By using pseudonyms of data sharers Invoking data query contracts on the blockchain; Step 3.2: Data Acquirer Through kana Query the blockchain and obtain the ciphertext ; Step 3.3: Data Acquisition The plaintext is obtained by decryption using distributed two-gate trap public-key cryptography in the system management center. .
9. A blockchain-based industrial internet data security and traceability method according to claim 1, characterized in that, For users and data with problems, the method proceeds to step four: the system performs data tracing.
10. A blockchain-based industrial internet data security and traceability method according to claim 9, characterized in that, Step four specifically includes: For dishonest data sharers, the system management center can execute... To restore the true identity of the data sharer ; For problematic data, the system management center can execute... To recover the plaintext from the ciphertext .