CN113656839A

CN113656839A - Electronic academic certificate management system based on alliance chain

Info

Publication number: CN113656839A
Application number: CN202110133264.4A
Authority: CN
Inventors: 戴欢; 陈儒玉; 赵骏
Original assignee: Suzhou Chengdu Network Technology Co ltd; Suzhou University of Science and Technology
Current assignee: Suzhou Chengdu Network Technology Co ltd; Suzhou University of Science and Technology
Priority date: 2021-01-29
Filing date: 2021-01-29
Publication date: 2021-11-16

Abstract

The invention relates to an electronic academic stand license management system based on a alliance chain, and belongs to the technical field of block chains. The specific implementation scheme is as follows: a brand-new electronic academic degree license management system is provided, and colleges and universities and education departments are divided according to region and administrative levels based on an electronic academic degree license and a block chain technology, and college chains and department chains are respectively established. Based on a relay cross-link technology, data sharing and uplink among different block chains are realized, and a multi-channel multi-organization multi-level trust alliance chain architecture is formed. On the premise of ensuring the privacy and the safety of the academic degree information, the architecture improves the academic degree management and cross-department sharing efficiency, and provides a reliable solution for acquisition and sharing of the academic degree information.

Description

Electronic academic certificate management system based on alliance chain

Technical Field

The invention relates to the technical field of block chains, in particular to an electronic academic degree license management system based on a alliance chain.

Background

The degree certificate is a valid certificate issued by the education department for the granted person to reach the specified standard of learning experience and academic level. The Chinese academic degree information is independently stored by each college in early stage, and a physical anti-counterfeiting technology is used for manufacturing a academic degree certificate. The paper academic certificate needs higher labor cost in the links of certificate making, granting, verification and the like, and has certain risk of counterfeiting. Since 2001, the college and university academic degree information is changed to be uniformly electronically registered and managed by the education department, uniform verification can still be guaranteed under the condition that colleges and universities independently make certificates, and the problems that the academic degree certificate is easy to counterfeit and difficult to verify are effectively solved. However, the practical contradiction between the demand of credit electronization for improving the granting verification efficiency and credit paper filing is still not solved effectively. Although the manager can call the academic degree information of the relevant students from the database, the electronic certificate with the legal effectiveness equivalent to that of the paper certificate cannot be obtained. In the current multiple affairs handling, the academic degree certification is required to be provided, and a paper academic degree certificate and a corresponding copy are still required to be provided under the condition that a corresponding electronic certificate is not provided. In addition, most countries use the unique academic certificate number for the verification and query of academic degree information for a long time, and the authenticity of the certificate original cannot be checked.

In recent years, the electronic certificate plays a key role in the process of government affair informatization in China, and the electronic certificate also has huge application potential for academic certificates which need to realize information sharing and academic review across multiple departments. The electronic certificate gives up the entity nature, has the legal effectiveness equal to that of the paper certificate, effectively solves the problems of theft and loss of the certificate, and greatly reduces the certificate making cost. Meanwhile, by establishing a corresponding electronic certificate management platform, the handling and auditing process of the electronic academic certificate is far superior to that of a paper certificate, and the efficiency of transaction handling and information archiving is effectively improved.

Although the convenience and the economy of the academic certificate can be effectively improved by the electronic academic certificate, the counterfeit cost is reduced while the certificate making cost is reduced by the electronic academic certificate, and the certificate is verified by still adopting a traditional mode of inquiring the serial number of the academic certificate, so that the problem of certificate counterfeit cannot be fundamentally solved. In addition, in the scene of storing massive electronic academic degree licenses, the conventional database cannot ensure the safety and the expandability of the system. The centralized database authority functions are all centralized on a unique central management node, and once the system is invaded or internal personnel carry out malicious operation, the whole electronic academic certificate system is involved in risks. Therefore, a new technology is still needed to solve the hidden trouble of the electronic academic certificate and establish a new mode of academic certificate management system.

Disclosure of Invention

The purpose of the invention is as follows: aiming at the problems, the invention provides an electronic academic degree license management system based on a alliance chain.

The invention provides an electronic academic certificate management system based on a alliance chain, which is characterized in that: the system comprises an integral license management framework, a certificate authority trust chain, an electronic academic degree license data storage structure and a relay cross-chain mechanism.

Furthermore, the license management overall framework adopts a multi-organization multi-channel structure, a plurality of college organizations are divided according to regional positions, multi-level education department organizations are divided according to administrative levels, college chains and department chains are respectively established for the college organizations and the education department organizations, and the college organizations and the education department organizations participate in respective alliance chains to complete corresponding functional work.

Further, the Certificate Authority (CA) trust chain is implemented based on a Member Service Provider (MSP) and a Public Key Infrastructure (PKI), and a multi-level CA Authority is established in the department chain to issue digital certificates and finally point to a unique root CA Authority to guarantee the credibility of each sub-level CA Authority.

Further, the electronic academic degree license data storage structure comprises a world state database and block chain data; storing the key word information of the electronic academic degree license in the world state database based on a key value pair form so as to realize effective storage and quick object retrieval; the blockchain data comprises a blockhead, transaction data and metadata; storing the block hash value of the previous block in the block head to form a directional chain structure; after the transaction proposal in the transaction data is responsible for endorsement and signature by each education department, storing key information of the qualified electronic academic degree certificate, and storing the hash value of the upper chain electronic academic degree certificate in a Merkle tree structure; the metadata provides real-time status updates for the world status database.

Further, the relay cross-link mechanism establishes a relay group as a cross-link gateway, establishes a uniform and standard transaction format based on an Inter-block Communication Protocol (IBC), and realizes an electronic academic degree certificate cross-link data sharing and approval process according to a bidirectional transaction approval identifier.

The invention has the beneficial effects that:

the invention is based on a decentralized blockchain architecture, and a plurality of servers are distributed and deployed, so that the academic degree information deployed in the blockchain can be stored in a copy book of each server, and an attacker tampers with a small amount of node server data and cannot be acknowledged by the whole blockchain system, so that the intrusion is invalidated.

According to the block data structure, blocks containing transaction information are packaged according to the time stamp sequence to perform transaction and generate blocks, each block generates a unique block hash value according to related information of a block head to serve as a digital fingerprint of the block, and each block refers to the block head hash value of the previous block, so that a chain-type storage data structure is formed; any change in any tile in a chain will result in a broken chain structure due to the change in the hash value, and the copy book is no longer acknowledged, thereby ensuring that no change can be made after the degree information is written into the chain of tiles.

According to the invention, a third-party mechanism is not required to be trusted by the user, a unique identity authentication identifier is created for the user by using a cryptography technology, and all operations of the user can be executed after identity authentication, so that all operations of the academic degree information in the block chain system can be traced and inquired.

The electronic academic certificate is formulated based on a uniform standard format, and is encrypted by a Hash algorithm to obtain a binary Hash value with a fixed length and used as an authenticity verification certificate of the electronic academic certificate. The hash value has high-intensity collision resistance, and has extremely high difficulty in reversely deducing the original text and input sensitivity. When the original input data is changed randomly, the result of the hash value can be changed randomly, so that the complete reality of the original electronic certificate can be fundamentally ensured.

Drawings

In order to more clearly illustrate the technical solutions of the embodiments of the present invention, the drawings required to be used in the description of the embodiments are briefly introduced below, the drawings in the following description are only used as the embodiments of the present invention, and for those skilled in the art, other drawings may be obtained according to these drawings without any creative effort.

FIG. 1 is the overall architecture of the management system of the present invention;

FIG. 2 is a multi-level CA trust chain of the present invention;

FIG. 3 is an electronic academic degree license data structure of the present invention;

fig. 4 is a flow chart of the electronic degree license granting auditing according to the invention.

Detailed Description

In order to make the objects, technical solutions and advantages of the present invention clearer and more clear, the present invention is further described in detail below with reference to the accompanying drawings and embodiments, which are not to be construed as limiting the embodiments of the present invention.

As shown in figure 1, the electronic academic certificate management system based on the alliance chain is integrally constructed, a multi-organization multi-channel structure is adopted, a plurality of college organizations are divided according to regional positions, multi-level education department organizations are divided according to administrative levels, college chains and department chains are respectively established for the college organizations and the education department organizations, and the college organizations and the education department organizations participate in respective alliance chains to complete corresponding functional work. The framework mainly comprises the following parts:

and (5) organizing colleges. The college organizations are planned to be organized and divided according to provinces and cities of the colleges, so that the college organizations participate in maintaining the operation of college chains together. Each college node in the college organization is responsible for collecting relevant materials of students in each college, and can call a academic position awarding contract to make an electronic academic position certificate in a corresponding format for graduates meeting the conditions of awarding the academic position certificate. And the electronic academic certificate granted by colleges and universities can be shared by college nodes to an education department for auditing. In addition, the college nodes can provide verification and query functions of electronic degree licenses for the querier through the corresponding SDK/API.

And (5) organizing education departments. The nodes in the education department organization are divided into city level, provincial level and national level education department nodes according to the corresponding administrative levels. The city level education department nodes exist as edge nodes, are used for reducing the pressure of the auditing nodes, are responsible for collecting and integrating the electronic academic stand certificates and related information which are submitted by local colleges and universities, and are sent to the corresponding provincial level education department nodes. The provincial and national education department nodes are responsible for performing two-stage audit on the electronic degree certificate to be audited, and the electronic degree certificate which passes the audit is returned to the city level education department nodes step by step and then is redistributed to the college nodes. And the state level education management department still has the right to cancel all legality of the related electronic degree certificate by calling the certificate revocation contract.

College chains and department chains. The coexistence of double chains of the college chain and the department chain is realized through a double-channel structure, each channel has a member and an independent block chain file, and the two channels are mutually isolated on a logic level. The college chain is mainly responsible for storing the related information of the electronic academic certificate, and the department chain is used for managing the hash value of the qualified electronic academic certificate which is audited by the college awarding link and the multi-level education department. And the respective authority and function of colleges and universities and education departments are realized by mounting corresponding chain codes on the double chains.

And (5) sorting the groups. The sequencing group is formed by the sequencer nodes, does not participate in the transaction and related links of the alliance chain, and is mainly responsible for enabling the transaction sequencing of the whole block chain network to achieve consistency and packaging the transaction to generate a block. The sequencing group is constructed by utilizing the lateral expansibility of the sequencer nodes, thereby effectively avoiding transaction sequencing blockage and improving the transaction throughput rate of the whole network.

IPFS (interplanetary file system). The distributed file sharing system for storing and sharing the electronic academic degree license is characterized in that the college nodes store the electronic academic degree license into the IPFS, and share corresponding IPFS storage addresses and file fingerprints for the nodes of education departments, so that the electronic academic degree license is audited and signed, and the problem of high safety and low throughput efficiency of a block chain system is solved.

The user is queried. The inquiry users comprise student users and other users, the student users remotely access the block chain network through a Decentralized Application (DApp) client, can download personal electronic academic degree licenses and verify the authenticity after identity authentication, and can inquire related transaction information on the electronic academic degree licenses chain. For other users such as a user unit and the like, after the personal authorization of students is obtained, the authenticity verification can be carried out by using the electronic academic degree certificate; and under the condition that the permission of students is not obtained, the electronic degree certificate hash value can be only used for comparing in the block chain network to finish the authenticity verification, so that the privacy safety of the student degree information is ensured.

As shown in fig. 2, the identity authentication and management of the roles of colleges and universities and education departments in the federation chain are implemented based on Member Service Providers (MSPs) and Public Key Infrastructure (PKIs). Each node autonomously generates a public and private key pair, identity examination is carried out by sending a node public key and node related information to a Certificate Authority (CA) in a alliance chain, and a digital certificate is issued by the CA through the examined node to prove that the identity of the node is real and credible.

And establishing a corresponding CA trust chain for the education department nodes in the department chain according to the management system of the tree structure. By establishing a unique root CA institution, digital certificates are issued only for nodes of the national level education department. The root CA mechanism signs the primary CA mechanism through the private key of the root CA mechanism, grants the sub CA mechanism the authority to issue the secondary digital certificate, and similarly, the primary CA mechanism can authorize the secondary CA mechanism to sign and issue the digital certificate. The CA trust chain minimizes the necessary dependence, so that the digital certificate relying party only needs to trust the root CA, thereby greatly simplifying the trust problem under the condition of multi-CA and reducing the verification cost. For the digital certificate issued by the subordinate CA mechanism, the identity of an issuer can be traced layer by layer until the root CA mechanism is traced finally, so that the authenticity and credibility of the digital certificate can be proved. Therefore, the trust chain puts a high demand on the security of the CA organization, and especially for the root CA organization, once the attack invasion occurs, the security and the trust of the whole trust chain are seriously affected. In order to reduce the possibility of malicious attacks on all levels of CA as much as possible, an isolation Registration Authority (RA) is established between the nodes and the CA authority, and the operations of information acquisition, pre-approval, digital certificate issuance and the like of the identity application nodes are all realized through the RA authority, so that the direct communication between the nodes and the CA authority is avoided, and the attack prevention pressure of the CA authority is reduced.

And a Certificate Transparent (CT) examination mechanism is also introduced to the nodes which issue the digital certificates, all the digital certificates issued by the CA organization must be written into the CT log in a public and transparent way, and the content written into the CT log is permanently preserved and cannot be tampered. Any certificate relying party can examine the digital certificate in the CT log and is used for supervising the condition that the CA organization issues the certificate by mistake or the certificate is used maliciously and the like. When a digital Certificate with a problem is found, a corresponding digital Certificate serial number (serial number) is written into a Certificate Revocation List (CRL) by a CA authority, and the digital Certificate with the problem is timely revoked, thereby providing security of the system.

As shown in fig. 3, the electronic academic certificate management system based on the alliance chain adopts a distributed book structure, which includes two parts, namely a world state database and block chain data. And the world state database generates a group of key value pairs for representing the current alliance chain state according to the corresponding information of the electronic academic certificate stored in the block structure. And generating a corresponding key value pair according to the qualified electronic degree license information stored in the block, and storing a corresponding student name, a graduation institution, a school number, a school degree and a current school degree state in the value, thereby realizing the effective storage and the quick retrieval of the system. The block structure comprises three parts of a block head (Header), transaction Data (Data) and Metadata (Metadata), wherein the block head records the block head hash of a previous block to form a directional chain structure; the hash value of a qualified electronic academic certificate, the file fingerprint of an original copy of an IPFS storage certificate and a storage address are stored in transaction data, and the uplink of the related data of each electronic academic certificate is subjected to final verification and then submitted by various college proposals (promosal) after being signed and endorsed by nodes of a plurality of education departments, so that the state response of the proposals can be returned; the metadata stores the read set and the write set, provides state update for the world state database, and contains related information generated by the blocks. In addition, in the transaction head of the transaction, a Merkle tree of all the uplink electronic degree certificates of the current block is stored, the Hash value of the electronic degree certificates is used as a leaf node of a binary tree structure, and when any transaction data in the whole block is changed, the change of a Merkle root node value can be caused, so that the invariance and the consistency of the certificate data are ensured.

Although the dual-channel structure provided by the invention has nodes capable of simultaneously operating two chains, the dual-channel is essentially two parallel block chains which are isolated from each other, and effective interaction cannot be carried out between the chains. In order to enable data sharing between different chains, a cross-chain mechanism Relay (Relay) technique is introduced. The relay technology establishes a relay group node which does not participate in transaction and is not responsible for block maintenance as a gateway between two chains, and uses an Inter-block Communication Protocol (IBC) to realize data transmission between different chains. Any blockchain transaction can be adaptively converted into a unified cross-chain transaction format based on the IBC protocol, so that the cross-chain transaction based on the unified communication format is realized.

As shown in fig. 4, the process of granting and auditing the electronic academic certificate based on the relay cross-link technology mainly includes the following steps: college nodes A in a college chain collect relevant academic degree information of a certain graduation due student, and after the college verifies that the student meets the academic degree granting conditions, an electronic academic degree license 1 with a unified standard specification is manufactured for the student. The college node A performs hash value processing on the electronic academic degree license original file, and is used for verifying the authenticity of the electronic academic degree license by students and other users and simultaneously failing to acquire any information so as to ensure the safety of academic degree information. Meanwhile, the college node a signs the hash value of the electronic academic certificate using its own node private key to prove the certificate to other nodes in the blockchain network for approval by the college.

For the electronic academic certificate 1 which is to be granted by the college node A, the college sends the electronic academic certificate to the IPFS for storage, the IPFS end returns the storage address of the file and the file fingerprint generated by the IPFS, and the node with the storage address of the IPFS and the file fingerprint can check the original copy of the electronic academic certificate. After the college node a finishes student information acquisition, granting condition examination, electronic degree certificate making and IPFS storage, the college node a finishes the process of quasi-granting of the college node, and needs to share the certification material to be granted to the education department node B in the department chain for auditing.

The college chain sends transactions in the IBC protocol format, provides the IPFS storage address of the electronic degree license 1, the file fingerprint, the hash value signature and the digital certificate of the college node A, and designates a receiver as an education department node B in the department chain. And the nodes in the relay group monitor and send the monitored data to the B node of the education department in the department chain, and after the B node confirms that the IBC format transaction is received, the cross-chain sharing of the data is completed.

And the education department B extracts the original file of the electronic academic certificate 1 by using the IPFS storage address and the file fingerprint sent by the college node A. Meanwhile, the digital certificate of the college node A is used for decrypting the signed hash value, the identity of the college node A is verified, and the decrypted hash value is obtained. And the education department B performs hash value processing on the electronic academic certificate 1 again, compares the processed hash value with the decrypted hash value to determine whether the hash value sent by the college node A is real, credible and not tampered. After verification is completed, the provincial education department and the national education department verify, signature is carried out on the hash value signed by the college node A according to the sequence of college-provincial level-national level by utilizing an ordered multi-signature algorithm, and the signature is deployed in a department chain to prove that the electronic degree certificate passes the granting and verifying process. Meanwhile, the certificate hash value subjected to multiple signatures is synchronously returned to a college node A in a college chain, and the node deploys the signature hash value to the college chain in the same way.

Claims

1. The utility model provides an electron academic or vocational study license management system based on alliance chain which characterized in that: the system comprises an integral license management framework, a certificate authority trust chain, an electronic academic degree license data storage structure and a relay cross-chain mechanism.

2. A league chain based electronic academic certificate management system according to claim 1, wherein: the license management overall framework adopts a multi-organization multi-channel structure, a plurality of college organizations are divided according to regional positions, multi-level education department organizations are divided according to administrative levels, college chains and department chains are respectively established for the college organizations and the education department organizations, and the college organizations and the education department organizations participate in respective alliance chains to complete corresponding functional work.

3. A league chain based electronic academic certificate management system according to claim 1, wherein: the Certificate Authority (CA) trust chain is realized based on a Member Service Provider (MSP) and a Public Key Infrastructure (PKI), a multi-level CA mechanism is established in a department chain to be responsible for signing and issuing a digital certificate, and finally the multi-level CA mechanism points to a unique root CA mechanism to ensure the credibility of each sub-level CA mechanism.

4. A league chain based electronic academic certificate management system according to claim 1, wherein: the electronic academic degree license data storage structure comprises a world state database and block chain data;

storing the key word information of the electronic academic degree license in the world state database based on a key value pair form so as to realize effective storage and quick object retrieval;

the block chain data comprises a block head, transaction data and metadata, and the block head stores a block hash value of a previous block to form a directional chain structure; after the transaction proposal in the transaction data is responsible for endorsement and signature by each education department, storing key information of the qualified electronic academic degree certificate, and storing the hash value of the upper chain electronic academic degree certificate in a Merkle tree structure; the metadata provides real-time status updates for the world status database.

5. A league chain based electronic academic certificate management system according to claim 1, wherein: the relay cross-link mechanism establishes a relay group as a cross-link gateway, establishes a unified transaction format based on a cross-link Communication Protocol (IBC), and realizes cross-link data sharing and approval process of the electronic academic certificate according to a bidirectional transaction approval identifier.