A carbon metering data management system, method and medium

Abstract

The application discloses a kind of carbon metering data management system, method and medium, comprising: mutually isolated acquisition domain unit and external connection domain unit, signature aggregation unit and upload unit;Two domain units respectively include parameter storage subunit, accounting subunit, key derivation subunit and signature subunit, independently account according to the same original metering sample according to the solidified accounting parameter copy of this domain, and respectively with the domain accounting value as the key derivation input derivation signature private key component, generate signature component;Signature aggregation unit aggregates two signature components into the aggregate signature of upload data block, and the aggregate signature can be verified by the same signature public key only in the case where two domain accounting values are consistent, whereby, accounting consistency is forced to guarantee by the verifiability of signature, and does not depend on any single comparison logic in system, so that in the case where release logic is tampered with or accounting parameter is unilaterally changed, inconsistent data still cannot pass platform verification.

Description

Technical Field

[0001] This invention relates to the field of carbon metering and data security technology, specifically to a carbon metering data management system, method, and medium. Background Technology

[0002] As companies strive to achieve carbon peaking and carbon neutrality, they are required to upload on-site carbon emission measurement data to the carbon management platform via a carbon measurement system. This data serves as the foundation for carbon accounting, carbon trading, and carbon verification. The authenticity of the uploaded data directly determines the reliability of the accounting results; therefore, carbon measurement systems are generally required to have tamper-proof capabilities.

[0003] In existing technologies, to ensure that a carbon metering system can connect to an external network without being compromised by external intrusion, two isolated processing units are typically set up within the same system, with a secure data exchange channel between them. For example, existing technologies disclose IoT secure access systems with a multi-host architecture, which achieve network isolation and secure data exchange through a dedicated secure channel; other technologies disclose the use of a dual-channel structure within the data acquisition instrument, with a field-programmable gate array controlling a ferry switch to disconnect the transmission control protocol at the physical layer.

[0004] On the other hand, in order to improve the integrity of uploaded data, existing technologies also employ hardware-level identity verification, local anti-tampering storage, and summary on-chain evidence storage. In order to improve the reliability of the calculation results, existing technologies also employ the method of calculating the same emission source separately according to different calibers and comparing them according to the deviation threshold.

[0005] However, the above solutions share a common problem: whether the calculation results can be uploaded ultimately depends on the judgment result of a certain comparison or release logic within the system, and this comparison logic itself constitutes a single point of trust. Once an attacker gains control of this logic, or unilaterally modifies the calculation parameters such as emission factors involved in the calculation, even if the results of the two calculations are inconsistent, the tampered data can still be released and pass the platform's integrity verification; while the platform can only verify that the data has not been modified during transmission, and cannot determine whether the data was generated by a calculation process that has not been unilaterally tampered with. Summary of the Invention

[0006] This invention proposes a carbon metering data management system, method, and medium to solve the problems mentioned in the background.

[0007] To achieve the above objectives, the present invention adopts the following technical solution: A carbon metering data management system of the present invention includes a data acquisition unit, an external connection unit, a signature aggregation unit, and an upload unit, wherein the data acquisition unit and the external connection unit are isolated from each other; The acquisition domain unit includes: The first sampling acquisition subunit is used to acquire the original measurement samples; The first parameter storage subunit is used to permanently store a copy of the first accounting parameter. The first parameter storage subunit does not have a path to be accessed by the external domain unit. The first accounting subunit is used to perform accounting on the original metering sample based on the first accounting parameter copy to obtain the first accounting value; The first key derivation subunit is used to derive the first signature private key component by using the first calculation value as the first key derivation input. The first signature subunit is used to generate a first signature component using the first signature private key component; The external domain unit includes: The second sampling receiving subunit is used to receive the original metering sample; The second parameter storage subunit is used to permanently store a copy of the second accounting parameter. The second parameter storage subunit does not have a path to be accessed by the acquisition domain unit. The second accounting subunit is used to perform accounting on the original metering sample based on the copy of the second accounting parameter to obtain the second accounting value; The second key derivation subunit is used to derive the second signature private key component by using the second calculation value as the second key derivation input. The second signature subunit is used to generate a second signature component using the second signature private key component.

[0008] Preferably, the signature aggregation unit is used to aggregate the first signature component and the second signature component to obtain an aggregated signature of the uploaded data block, wherein the aggregated signature is configured such that: the aggregated signature can be verified by the same verification public key corresponding to the carbon metering system only when the first accounting value and the second accounting value are consistent; The upload unit, located in the external domain unit, is used to upload the upload data block carrying the aggregate signature to the carbon management platform.

[0009] Preferably, the acquisition domain unit further includes a first basic private key storage subunit for storing a first basic private key fragment; the external domain unit further includes a second basic private key storage subunit for storing a second basic private key fragment; the signature verification public key is jointly determined by the first basic private key fragment and the second basic private key fragment.

[0010] Preferably, the first key derivation subunit is used to determine the first signature private key component based on the sum of the hash values ​​of the first basic private key fragment and the first key derivation input; the second key derivation subunit is used to determine the second signature private key component based on the difference between the hash values ​​of the second basic private key fragment and the second key derivation input. The first key derivation subunit includes a first quantization submodule, used to quantize the first calculated value according to an agreed quantization precision; the second key derivation subunit includes a second quantization submodule, used to quantize the second calculated value according to the agreed quantization precision; the first key derivation input and the second key derivation input are respectively quantized values; The first key derivation input further includes a system identifier and a metering time window identifier, and the second key derivation input further includes the system identifier and the metering time window identifier.

[0011] Preferably, the first parameter storage subunit and the second parameter storage subunit are respectively used to store the accounting parameter copy carrying the version identifier, the first key derivation input also includes the version identifier of the first accounting parameter copy, and the second key derivation input also includes the version identifier of the second accounting parameter copy.

[0012] Preferably, the acquisition domain unit further includes a first parameter update verification subunit, and the external domain unit further includes a second parameter update verification subunit. The first parameter update verification subunit and the second parameter update verification subunit are used to independently verify the source credentials of the accounting parameter update instruction. If both verifications pass, the corresponding accounting parameter copies are updated respectively. If either verification fails, both retain the original accounting parameter copies. The acquisition domain unit further includes a mismatch handling subunit, which is used to generate a mismatch event record and trigger a local alarm when the status word indicates that the signature verification has failed; neither the first accounting subunit nor the second accounting subunit is used to correct the first accounting value or the second accounting value according to the status word; The acquisition domain unit further includes a chain-style evidence storage subunit, which is used to write the digest of the uploaded data block and the aggregated signature into the local evidence storage log, wherein the evidence storage record of the Nth frame contains the digest of the evidence storage record of the (N-1)th frame, and N is an integer greater than 1. The chain-style evidence storage sub-unit also includes a verification and retransmission sub-module, which is used to compare the evidence storage records in the local evidence storage log with the received records on the carbon management platform side frame by frame when a verification request is received, and to retransmit frames that are inconsistent or missing.

[0013] Preferably, it further includes a unidirectional physical channel unit connected between the first sampling acquisition subunit and the second sampling receiving subunit, used to transmit the original measurement sample from the acquisition domain unit to the external domain unit. The unidirectional physical channel unit does not physically have a path for transmitting data from the external domain unit to the acquisition domain unit. It also includes a narrowband receipt link unit, which is connected between the external domain unit and the acquisition domain unit, and is used to return the upload result status information to the acquisition domain unit. The narrowband receipt link unit is physically limited to carrying only a status word of a preset length. It also includes an interface self-identification unit, which includes: The link detection subunit is used to detect the link characteristics of the links connected to the network interface; The attribution determination subunit is used to determine whether the link accessed by the network interface is a business intranet link or a public network link based on the link characteristics. And a physical layer disable subunit, used to disable the network interface at the physical layer when the determination result is inconsistent with the preset affiliation of the network interface.

[0014] Preferably, the interface self-identification unit further includes a prompt output subunit, used to output interface misconnection prompt information via the narrowband receipt link unit or the local display unit.

[0015] A carbon metering data management method, comprising: The same original measurement sample is provided to both the acquisition domain and the external domain. The acquisition domain calculates the original metering sample based on the first calculation parameter copy fixed in this domain to obtain the first calculation value, and uses the first calculation value as the first key derivation input to derive the first signature private key component and generate the first signature component; The external domain calculates the original metering sample based on the copy of the second calculation parameter fixed in this domain to obtain the second calculation value, and uses the second calculation value as the second key derivation input to derive the second signature private key component and generate the second signature component; The first signature component and the second signature component are aggregated to obtain an aggregated signature of the uploaded data block. The aggregated signature is configured such that it can be verified by the same public key corresponding to the carbon metering system only if the first accounting value and the second accounting value are consistent. The uploaded data block carrying the aggregated signature is uploaded to the carbon management platform via the external domain.

[0016] In another aspect, the present invention also discloses a computer-readable storage medium storing a computer program, which, when executed by a processor, causes the processor to perform the steps of the method described above.

[0017] As can be seen from the above technical solution, the present invention provides a carbon metering data management system. Compared with the prior art, the present invention has the following advantages: The present invention independently calculates the same original metering sample based on a copy of the calculation parameters fixed in this domain, and derives a signature private key component and a signature component respectively using the calculation value of this domain as the key derivation input; the two signature components are aggregated into an aggregate signature of the uploaded data block. The aggregate signature can only be verified by the same verification public key if the calculation values ​​of the two domains are consistent. The consistency of the calculation is forcibly guaranteed by the verifiability of the signature, without relying on any single comparison logic in the system. Therefore, if the release logic is tampered with or the calculation parameters are unilaterally modified, inconsistent data still cannot be verified by the platform. Attached Figure Description

[0018] Figure 1 This is a structural block diagram of the units and sub-units of a carbon metering data management system according to the present invention.

[0019] Figure 2 This is a schematic diagram illustrating the principle of dual-domain key derivation and signature aggregation of the present invention.

[0020] Figure 3 This is a schematic diagram illustrating the connection relationship between the unidirectional physical channel unit and the narrowband receipt link unit of the present invention.

[0021] Figure 4 This is a schematic diagram of the structure of the local evidence storage log generated by the chain-type evidence storage subunit of the present invention.

[0022] Figure 5 This is a schematic diagram illustrating the composition and workflow of the interface self-identification unit of the present invention.

[0023] Figure 6 This is a flowchart illustrating the reliable carbon measurement data uploading method of the present invention. Detailed Implementation

[0024] To make the objectives, technical solutions, and advantages of the embodiments of the present invention clearer, the technical solutions of the embodiments of the present invention will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are some embodiments of the present invention, but not all embodiments.

[0025] like Figure 1 As shown, the carbon metering system 100 in this embodiment includes a data acquisition unit 110, an external domain unit 120, a signature aggregation unit 130, and an upload unit 140. The data acquisition unit 110 and the external domain unit 120 are isolated from each other.

[0026] The acquisition domain unit 110 includes: The first sampling acquisition subunit 111 is used to acquire raw metering samples via the metering interface; optionally, the raw metering samples include activity level data and its corresponding timestamps and instrument identifiers, such as fuel consumption, electricity consumption or steam consumption.

[0027] The first parameter storage subunit 112 is used to store a copy of the first accounting parameter in a fixed manner; the copy of the first accounting parameter includes accounting parameters such as emission factor, oxidation rate, and calorific value, as well as their version identifier.

[0028] It should be noted that the first parameter storage subunit 112 is only connected to the components within the acquisition domain unit 110 in terms of hardware connection, and the external domain unit 120 does not have a path to read or write to it.

[0029] The first accounting subunit 113 is used to perform accounting on the original metering sample based on the copy of the first accounting parameters to obtain the first accounting value. .

[0030] The first key derivation subunit 114 is used to derive the first signature private key component by using the first calculated value as the first key derivation input. Optionally, the first key derivation subunit 114 includes a first quantization submodule 1141, used to quantize the first calculated value according to an agreed quantization precision.

[0031] The first signature subunit 115 is used to generate a first signature component using the first signature private key component.

[0032] The first basic private key storage subunit 116 is used to store the first basic private key fragments. .

[0033] Optionally, the first basic private key storage subunit 116 is implemented by a security chip. The first basic private key fragment cannot be read out and can only be called within the chip by the first key derivation subunit 114.

[0034] The first parameter update verification subunit 117 is used to independently verify the source credentials of the parameter update instruction.

[0035] The mismatch handling subunit 118 is used to generate a mismatch event record and trigger a local alarm when the uploaded result status information indicates that the signature verification has failed.

[0036] The chain-based evidence storage subunit 119 is used to write the summary and aggregate signature of the uploaded data block into the local evidence storage log; the chain-based evidence storage subunit 119 may also include a verification and supplementary transmission submodule 1191.

[0037] External domain unit 120 includes: The second sampling receiving subunit 121 is used to receive the original measurement sample; the second parameter storage subunit 122 is used to permanently store a copy of the second calculation parameters, which the acquisition domain unit 110 does not have a path to read or write; the second calculation subunit 123 is used to calculate the same original measurement sample based on the copy of the second calculation parameters to obtain the second calculation value. The second key derivation subunit 124 is used to derive the second signature private key component by using the second calculation value as the second key derivation input, and may include the second quantization submodule 1241; the second signature subunit 125 is used to generate the second signature component; and the second basic private key storage subunit 126 is used to store the second basic private key fragments. ; and the second parameter update verification subunit 127.

[0038] It should be noted that the first and second accounting parameter copies are identical in content during initial configuration, but are respectively stored in their own dedicated storage sub-units in the two domains. Therefore, the first accounting sub-unit 113 and the second accounting sub-unit 123 constitute two truly independent accounting operations, rather than two calls to the same parameter set.

[0039] like Figure 2 As shown, in one possible implementation, let the base point of the elliptic curve be G, the order be n, and the signature verification public key on the carbon management platform side be:

[0040] The first key-derived sub-unit 114 determines the first signature private key component according to the following formula:

[0041] The second key derived subunit 124 determines the second signature private key component according to the following formula:

[0042]

[0043] in, For cryptographic hash functions, For the quantization function with agreed-upon quantization precision, For system identification, For marking the measurement time window, This is the version identifier for the accounting parameter copy.

[0044] The signature aggregation unit 130 aggregates the two signature components, and the equivalent private key corresponding to the resulting aggregated signature is:

[0045] The result is if and only if From time to time ,thereby Only aggregated signatures can pass the verification of public keys. Verification. On the other hand, if the copy of the accounting parameters of any domain is unilaterally modified, or the accounting process of any domain is tampered with, then Equivalent private key deviation Aggregated signatures will inevitably fail verification.

[0046] Understandably, this deviation... Since each domain's signature is determined by its own calculation value, neither domain possesses a fragment of the other's underlying private key, making it impossible to offset the deviation by unilaterally adjusting its signature components. Furthermore, because the verification public key contains no items related to the calculation value, the platform does not need to know them. or Verification can then be completed. Optionally, the signature aggregation unit 130 is set within the external domain unit 120 or in a separate aggregation module, and does not have access to the two basic private key fragments. Therefore, even if the signature aggregation unit 130 itself is tampered with, it cannot construct an aggregated signature that can be verified.

[0047] like Figure 3 As shown, the carbon metering system 100 also includes a unidirectional physical channel unit 150 and a narrowband receipt link unit 160. The unidirectional physical channel unit 150 is connected between the first sampling acquisition subunit 111 and the second sampling receiving subunit 121, and physically lacks a path for data transmission from the external domain unit 120 to the acquisition domain unit 110. The narrowband receipt link unit 160 is physically limited to carrying only a status word of a preset length (e.g., 1 byte), and is therefore insufficient to carry executable code or files. Optionally, the status word is used to indicate one of the following: successful upload, signature failure, link unavailable, or platform rejection.

[0048] In addition, when the status word indicates that the signature verification has failed, the mismatch handling subunit 118 only generates an event record and an alarm. Neither the first accounting subunit 113 nor the second accounting subunit 123 modifies their respective accounting values ​​according to the status word and regenerates the aggregate signature, so as to avoid forming a "trial and error until success" bypass.

[0049] like Figure 4 As shown, in the local evidence log generated by the chain evidence storage subunit 119, the evidence storage record of the Nth frame contains a summary of the evidence storage record of the (N-1)th frame, which causes the deletion or replacement of any intermediate frame to cause the subsequent chain verification to fail; the verification and retransmission submodule 1191 is used to compare with the records received by the platform side frame by frame when a verification request is received, and to retransmit inconsistent or missing frames.

[0050] like Figure 5As shown, the carbon metering system 100 also includes an interface self-identification unit 170, which includes: a link detection subunit 171, used to detect the link characteristics of the link accessed by the network interface, the link characteristics may include the address allocation behavior of the peer device, gateway reachability, and public network characteristic response; an attribution determination subunit 172, used to determine whether the link accessed by the interface is a business intranet link or a public network link based on the link characteristics; a physical layer disable subunit 173, used to disable the network interface at the physical layer if the determination result is inconsistent with the preset attribution of the interface; and a prompt output subunit 174, used to output interface misconnection prompt information via the narrowband receipt link unit 160 or the local display unit.

[0051] Therefore, even if an operator mistakenly connects an interface that should be connected to the business intranet to a public network, the interface will not establish a link, thus preventing the data collection side from being directly exposed.

[0052] It is understood that the acquisition domain unit 110 and the external domain unit 120 can be implemented by two independent processors, or by two execution environments on the same processor that are forcibly isolated by hardware. This application does not limit this.

[0053] like Figure 6 As shown in the figure, a carbon metering data management method according to an embodiment of this application includes: The same original measurement sample is provided to both the acquisition domain and the external domain. The acquisition domain calculates the original metering sample based on the copy of the first accounting parameter fixed in this domain to obtain the first accounting value, and uses the first accounting value as the first key derivation input to derive the first signature private key component and generate the first signature component; The external domain calculates the original metering sample based on the copy of the second calculation parameter fixed in this domain to obtain the second calculation value, and uses the second calculation value as the second key derivation input to derive the second signature private key component and generate the second signature component; The first signature component and the second signature component are aggregated to obtain the aggregate signature of the uploaded data block. The aggregate signature is configured such that it can be verified by the same verification public key corresponding to the carbon metering system only if the first accounting value and the second accounting value are consistent. The uploaded data block carrying the aggregated signature is uploaded to the carbon management platform via the external domain.

[0054] In another aspect, this embodiment also discloses a computer-readable storage medium storing a computer program, which, when executed by a processor, causes the processor to perform the steps of the method described above.

[0055] In the above embodiments, implementation can be achieved, in whole or in part, through software, hardware, firmware, or any combination thereof. When implemented in software, it can be implemented, in whole or in part, as a computer program product. A computer program product includes one or more computer instructions. When the computer program instructions are loaded and executed on a computer, all or part of the flow or function according to the embodiments of this application is generated. The computer can be a general-purpose computer, a special-purpose computer, a computer network, or other programmable device. The computer instructions can be stored in a computer-readable storage medium or transmitted from one computer-readable storage medium to another. For example, computer instructions can be transmitted from one website, computer, server, or data center to another website, computer, server, or data center via wired (e.g., coaxial cable, fiber optic, digital subscriber line (DSL)) or wireless (e.g., infrared, wireless, microwave, etc.) means. The computer-readable storage medium can be any available medium that a computer can access or a data storage device such as a server or data center that integrates one or more available media. The available medium can be a magnetic medium (e.g., floppy disk, hard disk, magnetic tape), an optical medium (e.g., DVD), or a semiconductor medium (e.g., solid-state disk), etc.

[0056] It should be noted that, in this document, relational terms such as "first" and "second" are used merely to distinguish one entity or operation from another, and do not necessarily require or imply any such actual relationship or order between these entities or operations. Furthermore, the terms "comprising," "including," or any other variations thereof are intended to cover non-exclusive inclusion, such that a process, method, article, or apparatus that comprises a list of elements includes not only those elements but also other elements not expressly listed, or elements inherent to such a process, method, article, or apparatus. Without further limitations, an element defined by the phrase "comprising one..." does not exclude the presence of other identical elements in the process, method, article, or apparatus that includes the element.

[0057] The various embodiments in this specification are described in a related manner. Similar or identical parts between embodiments can be referred to mutually. Each embodiment focuses on describing the differences from other embodiments. In particular, the system embodiments are basically similar to the method embodiments, so the description is relatively simple; relevant parts can be referred to the descriptions of the method embodiments.

[0058] The above embodiments are only used to illustrate the technical solutions of the present invention, and are not intended to limit it. Although the present invention has been described in detail with reference to the foregoing embodiments, those skilled in the art should understand that modifications can still be made to the technical solutions described in the foregoing embodiments, or equivalent substitutions can be made to some of the technical features. Such modifications or substitutions do not cause the essence of the corresponding technical solutions to deviate from the spirit and scope of the technical solutions of the embodiments of the present invention.

Claims

1. A carbon metering data management system, characterized in that, It includes a data acquisition unit, an external connection unit, a signature aggregation unit, and an upload unit, wherein the data acquisition unit and the external connection unit are isolated from each other; The acquisition domain unit includes: The first sampling acquisition subunit is used to acquire the original measurement samples; The first parameter storage subunit is used to permanently store a copy of the first accounting parameter. The first parameter storage subunit does not have a path to be accessed by the external domain unit. The first accounting subunit is used to perform accounting on the original metering sample based on the first accounting parameter copy to obtain the first accounting value; The first key derivation subunit is used to derive the first signature private key component by using the first calculation value as the first key derivation input. The first signature subunit is used to generate a first signature component using the first signature private key component; The external domain unit includes: The second sampling receiving subunit is used to receive the original metering sample; The second parameter storage subunit is used to permanently store a copy of the second accounting parameter. The second parameter storage subunit does not have a path to be accessed by the acquisition domain unit. The second accounting subunit is used to perform accounting on the original metering sample based on the copy of the second accounting parameter to obtain the second accounting value; The second key derivation subunit is used to derive the second signature private key component by using the second calculation value as the second key derivation input. The second signature subunit is used to generate a second signature component using the second signature private key component.

2. The carbon metering data management system according to claim 1, characterized in that: The signature aggregation unit is used to aggregate the first signature component and the second signature component to obtain an aggregated signature of the uploaded data block. The aggregated signature is configured such that it can be verified by the same verification public key corresponding to the carbon metering system only when the first accounting value and the second accounting value are consistent. The upload unit, located in the external domain unit, is used to upload the upload data block carrying the aggregate signature to the carbon management platform.

3. A carbon metering data management system according to claim 2, characterized in that: The acquisition domain unit further includes a first basic private key storage subunit for storing a first basic private key fragment; the external domain unit further includes a second basic private key storage subunit for storing a second basic private key fragment; the signature verification public key is jointly determined by the first basic private key fragment and the second basic private key fragment.

4. A carbon metering data management system according to claim 3, characterized in that: The first key derivation subunit is used to determine the first signature private key component based on the sum of the hash values ​​of the first basic private key fragment and the first key derivation input; The second key derivation subunit is used to determine the second signature private key component based on the difference between the hash value of the second basic private key fragment and the hash value of the second key derivation input; The first key derivation subunit includes a first quantization submodule, used to quantize the first calculated value according to a predetermined quantization precision; The second key derivation subunit includes a second quantization submodule, used to quantize the second calculated value according to the agreed quantization precision; the first key derivation input and the second key derivation input are the quantized values, respectively. The first key derivation input further includes a system identifier and a metering time window identifier, and the second key derivation input further includes the system identifier and the metering time window identifier.

5. A carbon metering data management system according to claim 4, characterized in that: The first parameter storage subunit and the second parameter storage subunit are respectively used to store the accounting parameter copy carrying the version identifier. The first key derivation input also includes the version identifier of the first accounting parameter copy, and the second key derivation input also includes the version identifier of the second accounting parameter copy.

6. A carbon metering data management system according to claim 5, characterized in that: The acquisition domain unit further includes a first parameter update verification subunit, and the external domain unit further includes a second parameter update verification subunit. The first parameter update verification subunit and the second parameter update verification subunit are used to independently verify the source credentials of the accounting parameter update instruction. If both verifications pass, the corresponding accounting parameter copies are updated respectively. If either verification fails, both retain the original accounting parameter copies. The acquisition domain unit further includes a mismatch handling subunit, which is used to generate a mismatch event record and trigger a local alarm when the status word indicates that the signature verification has failed; neither the first accounting subunit nor the second accounting subunit is used to correct the first accounting value or the second accounting value according to the status word; The acquisition domain unit further includes a chain-style evidence storage subunit, which is used to write the digest of the uploaded data block and the aggregated signature into the local evidence storage log, wherein the evidence storage record of the Nth frame contains the digest of the evidence storage record of the N-1th frame. The chain-style evidence storage sub-unit also includes a verification and retransmission sub-module, which is used to compare the evidence storage records in the local evidence storage log with the received records on the carbon management platform side frame by frame when a verification request is received, and to retransmit frames that are inconsistent or missing.

7. A carbon metering data management system according to claim 6, characterized in that: It also includes a unidirectional physical channel unit connected between the first sampling acquisition subunit and the second sampling receiving subunit, used to transmit the original measurement sample from the acquisition domain unit to the external domain unit. The unidirectional physical channel unit does not physically have a path for transmitting data from the external domain unit to the acquisition domain unit. It also includes a narrowband receipt link unit, which is connected between the external domain unit and the acquisition domain unit, and is used to return the upload result status information to the acquisition domain unit. The narrowband receipt link unit is physically limited to carrying only a status word of a preset length. It also includes an interface self-identification unit, which includes: The link detection subunit is used to detect the link characteristics of the links connected to the network interface; The attribution determination subunit is used to determine whether the link accessed by the network interface is a business intranet link or a public network link based on the link characteristics. And a physical layer disable subunit, used to disable the network interface at the physical layer when the determination result is inconsistent with the preset affiliation of the network interface.

8. A carbon metering data management system according to claim 7, characterized in that: The interface self-identification unit also includes a prompt output subunit, which is used to output interface misconnection prompt information via the narrowband receipt link unit or the local display unit.

9. A carbon measurement data management method, applied to a carbon measurement data management system according to any one of claims 1-8, characterized in that, include: The same original measurement sample is provided to both the acquisition domain and the external domain. The acquisition domain calculates the original metering sample based on the first calculation parameter copy fixed in this domain to obtain the first calculation value, and uses the first calculation value as the first key derivation input to derive the first signature private key component and generate the first signature component; The external domain calculates the original metering sample based on the copy of the second calculation parameter fixed in this domain to obtain the second calculation value, and uses the second calculation value as the second key derivation input to derive the second signature private key component and generate the second signature component; The first signature component and the second signature component are aggregated to obtain an aggregated signature of the uploaded data block. The aggregated signature is configured such that it can be verified by the same public key corresponding to the carbon metering system only if the first accounting value and the second accounting value are consistent. The uploaded data block carrying the aggregated signature is uploaded to the carbon management platform via the external domain.

10. A computer-readable storage medium storing a computer program, characterized in that, When the computer program is executed by a processor, the processor performs the steps of the method as described in claim 9.

Images