52 / 2023-03-30 20:08:36

Data Security Protection of Intelligent Mine

intelligent mine, cryptographic technology, data security

Surveying and mapping geographical information are important parts of national basic data, the security of which is a matter of national security. Generally, this information includes three types of data. Secret data are used for secret-related people, public data are used for every person, and controlled data between these two types of data are used for private people. Generally, intelligent mine doesn’t have secret data. Intelligent mine will collect various data such as remote sensing images, SAR images, 3D point cloud, Global Navigation Satellite System (GNSS), underground pipe network, equipment operation, operating environment monitoring. These data are aggregated into a data center, which may become the controlled data. Theses controlled data are not allowable to be open access, while if they are open, it will cause some risks. Taking GNSS for example, we only pay attention to GNSS reference stations traditionally, the data of which are transmitted by private networks for security. Besides GNSS reference stations, GNSS receivers are applied for deformation monitoring, including landslide monitoring, oil rig monitoring, bridge monitoring, and high precision location services, including intelligent terminals, wearable devices and special vehicles. However, the security of GNSS monitoring stations are not focused on because they are generally distributed over a small area. With the increasing importance of data security and individual privacy, applications of GNSS receivers should be controlled; otherwise, they will cause security hazards.

To ensure both development and security, this study designed a technical innovation structure to upgrade the intelligent mine system with a cryptographic technique. It mainly focused on data transmission, data storage and data service. And we proposed a new multiple cryptographic fusion algorithm to achieve the encryption and decryption of intelligent mine data and services. First, varios intelligent mine sensors encrypts original data with an encryption key and obtains a public key from a intelligent mine data center to encrypt the intelligent mine data encryption key. After that, identity authentication of a intelligent mine sensor is carried out, and an SSL VPN is established between the intelligent mine sensors and a intelligent mine data center before the data of intelligent mine sensors are transmitted to the intelligent mine data center. Then, the intelligent minedata center decrypts the received data of intelligent mine sensors. A intelligent mine sensor integrated with a cryptographic module was developed to validate the structure in an open environment. The results showed that the developed intelligent mine sensor was successful in encrypting the data, and the intelligent mine data center was able to decrypt the data correctly. For the performance test, a cryptography server was able support the requirements of intelligent mine applications. In conclusion, the method was able to ensure the validity, confidentiality, integrity and non-repudiation of intelligent mine data and services. The proposed upgrading technology was suitable for coordinating intelligent mine development and security.