CN115471149A - Block chain-based distributed cross-border commodity tracing system and tracing method thereof - Google Patents
Block chain-based distributed cross-border commodity tracing system and tracing method thereof Download PDFInfo
- Publication number
- CN115471149A CN115471149A CN202210952324.XA CN202210952324A CN115471149A CN 115471149 A CN115471149 A CN 115471149A CN 202210952324 A CN202210952324 A CN 202210952324A CN 115471149 A CN115471149 A CN 115471149A
- Authority
- CN
- China
- Prior art keywords
- commodity
- information
- equipment
- module
- authority
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Withdrawn
Links
- 238000000034 method Methods 0.000 title claims abstract description 45
- 238000013500 data storage Methods 0.000 claims abstract description 11
- 238000007726 management method Methods 0.000 claims description 61
- 238000012795 verification Methods 0.000 claims description 31
- 238000004519 manufacturing process Methods 0.000 claims description 10
- 230000008569 process Effects 0.000 claims description 6
- 238000012423 maintenance Methods 0.000 abstract description 4
- 230000004048 modification Effects 0.000 description 2
- 238000012986 modification Methods 0.000 description 2
- 241000153282 Theope Species 0.000 description 1
- 238000007792 addition Methods 0.000 description 1
- 230000008859 change Effects 0.000 description 1
- 238000004891 communication Methods 0.000 description 1
- 238000010276 construction Methods 0.000 description 1
- 230000007547 defect Effects 0.000 description 1
- 238000012217 deletion Methods 0.000 description 1
- 230000037430 deletion Effects 0.000 description 1
- 238000010586 diagram Methods 0.000 description 1
- 230000006855 networking Effects 0.000 description 1
Images
Classifications
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
- G06Q10/00—Administration; Management
- G06Q10/08—Logistics, e.g. warehousing, loading or distribution; Inventory or stock management
- G06Q10/083—Shipping
- G06Q10/0833—Tracking
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F16/00—Information retrieval; Database structures therefor; File system structures therefor
- G06F16/20—Information retrieval; Database structures therefor; File system structures therefor of structured data, e.g. relational data
- G06F16/27—Replication, distribution or synchronisation of data between databases or within a distributed database system; Distributed database system architectures therefor
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
- G06F21/60—Protecting data
- G06F21/602—Providing cryptographic facilities or services
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
- G06F21/60—Protecting data
- G06F21/64—Protecting data integrity, e.g. using checksums, certificates or signatures
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
- H04L9/32—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials
- H04L9/3247—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials involving digital signatures
Landscapes
- Engineering & Computer Science (AREA)
- Theoretical Computer Science (AREA)
- Computer Security & Cryptography (AREA)
- Physics & Mathematics (AREA)
- General Physics & Mathematics (AREA)
- Business, Economics & Management (AREA)
- General Engineering & Computer Science (AREA)
- Databases & Information Systems (AREA)
- Economics (AREA)
- Computer Hardware Design (AREA)
- General Health & Medical Sciences (AREA)
- Bioethics (AREA)
- Health & Medical Sciences (AREA)
- Software Systems (AREA)
- Computing Systems (AREA)
- Marketing (AREA)
- Computer Networks & Wireless Communication (AREA)
- Development Economics (AREA)
- Signal Processing (AREA)
- Entrepreneurship & Innovation (AREA)
- Human Resources & Organizations (AREA)
- Data Mining & Analysis (AREA)
- Operations Research (AREA)
- Quality & Reliability (AREA)
- Strategic Management (AREA)
- Tourism & Hospitality (AREA)
- General Business, Economics & Management (AREA)
- Management, Administration, Business Operations System, And Electronic Commerce (AREA)
Abstract
The invention discloses a distributed cross-border commodity tracing system and a tracing method based on a block chain, which comprise a core data layer, a business middle platform layer and an application service layer; the core data layer deploys commodity traceability service nodes, and a distributed block chain is constructed through the commodity traceability service nodes; the business middle desk realizes the application service of information operation, authority and distributed data storage on the core data layer through a pluggable business component; the application service layer is linked with the operation equipment to construct different application services; the different application services comprise an equipment registration module, an equipment authority inquiry module, a plurality of commodity information input modules related to cross-border commodities and a commodity source tracing information inquiry module which are provided for the operating equipment; the commodity traceability information query module provides commodity traceability information query for the operating equipment. The method and the system can improve the unit operability and maintainability of the commodity supply chain, the energy and time cost of the user authority maintenance investment, and the feasibility and credibility of the traceability data.
Description
Technical Field
The invention relates to the technical field of block chains, in particular to a distributed cross-border commodity traceability system based on a block chain and a traceability method thereof.
Background
The current commodity traceability system has two modes basically: firstly, the unit of each commodity supply chain takes the unit as a center to construct a single commodity traceability system and content. Manufacturers, logistics transportation, distributors, sellers and the like all have respective traceability systems, and the defects that the whole supply chain traceability of commodities cannot be connected in series, data cannot be directly shared, and the traceability data can be tampered; in the centralized commodity traceability system, units of each supply chain must register and use traceability data on a designated system, so that the traceability efficiency is low, the maintenance cost is high, once the central system is broken down, the traceability system cannot be used directly, and the maintenance of the equipment authority and the user authority of the system invests more energy and time. The cross-border commodity is used as a special component of electronic commerce, the traceability of the commodity relates to supply chain related main bodies such as manufacturers, commodity supply chain merchants, foreign logistics enterprises, customs and the like, and higher requirements are put forward on the traceability of the commodity. The wide application of the block chain provides good technical conditions for cross-border commodity tracing.
The prior art publication number is: CN111080311A discloses a commodity tracing method and device based on a block chain; registering and registering equipment information of each commodity tracing equipment in a commodity operation process in a alliance chain server or a public chain server, wherein the equipment information comprises equipment identification, equipment type and equipment position; obtaining commodity tracing information through the commodity tracing equipment; when the commodity tracing information contains privacy information, uploading the commodity tracing information to a alliance link server; when the commodity tracing information does not contain privacy information, uploading the commodity tracing information to a public link server; and the privacy information of the commodity is ensured not to be revealed when the commodity information is traced. However, how to trace the source of the cross-border commodity and how to set the blockchain nodes and the like are not disclosed correspondingly. Therefore, a commodity tracing system suitable for cross-border commodities is needed.
Disclosure of Invention
1. The technical problem to be solved is as follows:
aiming at the technical problems, the invention provides a distributed cross-border commodity tracing system based on a block chain and a tracing method thereof, which can improve the unit operability and maintainability of a commodity supply chain, reduce the energy and time cost for maintaining equipment authority and user authority, and increase the feasibility and credibility of tracing data.
2. The technical scheme is as follows:
a distributed cross-border commodity tracing system based on a block chain comprises a core data layer, a business middle platform layer and an application service layer; the method is characterized in that:
the core data layer is provided with a plurality of node devices of cross-border commodity supply chain related main bodies to form a node cluster; the cross-border commodity supply chain related main body is defined as equipment management enterprises, and each equipment management enterprise is provided with a corresponding commodity traceability service node, so that a distributed block chain is constructed through the commodity traceability service nodes; the related main bodies of the cross-border commodity supply chain comprise cross-border commodity related manufacturers, logistics transportation enterprises, customs, distributors and sellers;
the business middle platform layer realizes application service on the core data layer through a pluggable business component; the pluggable service component is provided with an application service module comprising an information operation module, an authority control module and a distributed data storage module through a commodity traceability management node; the pluggable service component comprises an information operation component, an authority control component and a distributed data component; the information operation module is used for providing related application interfaces for increasing, deleting, modifying and checking information data for the operation equipment; the authority control module is used for carrying out identity identification and authority control on information data operation of the operating equipment; the distributed data storage module is used for storing distributed data of the distributed cross-border commodity traceability system; the operating equipment is physical equipment of a server, a mobile phone and a computer which are deployed by a related main body of a cross-border commodity supply chain;
the application service layer is linked with the operation equipment and is combined with the pluggable service components to construct different service scene application services; the different business scene application services comprise an equipment registration module, an equipment authority inquiry module, a plurality of commodity information input modules related to cross-border commodities and a commodity source tracing information inquiry module which are provided for the operating equipment; the cross-border commodity-related commodity information input modules comprise a commodity customs information input module, a commodity production information input module, a commodity storage information input module, a commodity overseas logistics information input module, a commodity domestic logistics information input module and a commodity sales information input module; the equipment registration module is used for registering operation equipment users and maintaining and modifying information thereof; the device authority inquiry module is used for inquiring the information operation authority of the registered operation device; the cross-border commodity-related commodity information input modules are used for providing information operation authority management and information data operation services for operation equipment of different supply chain enterprises; the commodity traceability information query module provides commodity traceability information query for the operating equipment.
A distributed cross-border commodity source tracing method based on a block chain is characterized in that cross-border commodity source tracing service nodes are respectively deployed in equipment management enterprises of a plurality of cross-border commodity supply chain related main bodies of a core data layer, and the distributed block chain is constructed through the commodity source tracing service nodes; a commodity traceability management node and pluggable components required by cross-border commodity traceability information operation service are arranged on a business middle platform layer on a core data layer and are used as supports of a plurality of service modules; and then, the application service layer is adopted to provide authority management service and cross-border commodity traceability information operation service for the operation equipment based on pluggable components provided by the service middle platform layer.
Further, the device registration module is configured to implement a registration service for the operating device, and a registration process of the device registration module specifically includes the following steps:
the method comprises the following steps: respectively presetting trust information for the operating equipment and the commodity traceability management node; the preset trust information presets a public and private key pair (skey 1, pkey 1) for each operating device, and the public and private key pair (skey 1, pkey 1) is used for registration request and operation authority control of the device; wherein, skey1 is a preset private key and is stored in the operation equipment; the pkey1 is a preset public key and is stored in the commodity traceability management node of the corresponding main body of the block chain;
step two: generating registration request information of the operating device; the registration request information includes: a unique identification ID and identity key pair (skey 2, pkey 2) of the operating device; wherein, skey2 is a real private key, and pkey2 is a real public key; the identity key pair (skey 2, pkey 2) of the operating device is used for carrying out authentication and authority control use on the operating device after the device registration is finished;
step three: the operating device generates a registration request (pkey 2, ID); the real public key corresponding to the identifier ID of the operating device is pkey2, and a preset private key skey1 of the operating device is used to sign the registration request (pkey 2, ID), so as to obtain signature information sigmmessage = sign (skey 1, (pkey 2, ID)), where sign represents a signature operation; then, both a registration request (pkey 2, ID) and signature information sigMessage are sent to the block chain;
step four: after receiving an equipment registration request, a commodity traceability management node in a block chain network firstly detects whether the identification ID is registered, and if so, ignores the request; if the commodity tracing management node is not registered, verifying signature information sigMessage by using a preset public key pkey1 in the commodity tracing management node, and if the signature verification is passed, storing the registration request (pkey 2, ID) into the storage of the block chain to realize successful equipment registration; otherwise, the label check fails.
Further, the device permission query service is performed on the operating device through the device permission query module, and the method specifically comprises the following steps:
step five: presetting trust information for the operating equipment and the commodity tracing management node, wherein the preset trust information presets a public and private key pair (skey 1, pkey 1) for each commodity tracing operating equipment, and the public and private key pair (skey 1, pkey 1) is used for registration request and operation authority control of the equipment; wherein, skey1 is a preset private key and is stored in the operation equipment; the pkey1 is a preset public key and is stored in the commodity traceability management node of the block chain;
step six: the operating equipment generates an equipment authority acquisition query request (pkey 2, ID) according to the unique identification ID and the identity key pair (skey 2, pkey 2) of the operating equipment; the equipment authority inquiry request is as follows: identifying a real public key pkey2 of the ID operation device, signing the operation authority control request (pkey 2, ID) by using the preset private key skey1 to obtain signature information sigMessage = sign (skey 1, (pkey 2, ID)), wherein the sign is signature operation; then sending the equipment authority inquiry request and the signature information sigMessage to a block chain network;
step seven: after receiving the device authority query request, the commodity traceability management node in the block chain network firstly detects whether the ID is registered, and if the ID is registered, the operation authority information operation of the operation device corresponding to the identification ID in the block chain is obtained through the authority control module, and the signature opMessage = sign (skey 2, (pkey 1, operation)); if the user does not register, setting the authority information operation as invalid, and signing opMessage = sign (skey 2, (pkey 1, operation)), and returning to the operation equipment end;
step eight: the operating equipment receives the operating authority information of the equipment authority query module, firstly verifies the signature information opMessage by using a preset public key pkey1, and if the signature information opMessage passes the verification, an operating request is made according to the operating authority information operation; if the verification is not passed, the information is ignored.
Further, the plurality of commodity information entry modules related to the cross-border commodity are respectively used for providing cross-border commodity information entry entries for the operating devices of different supply chain main bodies, and specifically include:
the operating equipment generates a cross-border commodity information entry operation data request (pkey 2, ID, ope) by using the unique identification ID, the identity key pair (skey 2, pkey 2) and the operation identification ope, and specifically operates as follows: identifying a real public key pkey2 of the operating device corresponding to the ID, signing the cross-border commodity information entry operation data request (pkey 2, ID, ope) by using a preset private key skey1 to obtain signature information ope Message = sign (skey 1, (pkey 2, ID, ope)), wherein sign is a signature operation, and then sending the operation data request and the signature information ope Message to a cross-border commodity information entry module of an application service layer;
after receiving a request of an operating device, a related commodity information input module of an application service layer firstly acquires a unique identifier ID of the device and sends a query request to an account book of a block chain to obtain a public key pkey1 of the operating device, the ID, the operating identifier ope and signature information ope Message are checked by using the obtained service public key pkey1 of the operating device, and if the check passes, an operating data request of the operating device is legal; otherwise, the label check is not passed;
after the commodity information input module obtains a legal operation data request, the operation equipment and the ope1 are sent to an authority control module of a platform layer in the service for authority verification, and if the authority verification is passed, data operation is carried out through the information operation module; if the rights verification fails, a rights error is returned.
Further, the commodity traceability information query module provides commodity traceability query entries for all access operation devices, wherein all the access devices comprise operation devices which are specified to be registered by a supply chain and operation devices which are not registered by the internet end; the commodity traceability information query specifically comprises the following steps:
the operation equipment sends a commodity traceability query request (goodsId), wherein the goodsId is a commodity unique code, and the request (goodsId) is sent to an information operation module of a platform layer in a service to perform commodity traceability query request information operation; the information operation module judges that the operation is public operation, signature verification is not needed, and the commodity tracing information is directly returned after being acquired from the commodity tracing service node of the block chain network; and if the commodity tracing information cannot be acquired, returning to be invalid.
3. Has the advantages that:
(1) The invention provides a distributed cross-border commodity traceability system based on a block chain, which is provided with a framework comprising a core data layer, a business middle platform layer and an application service layer; deploying a block chain network in a core business layer, and setting corresponding nodes for enterprises, customs and the like related to cross-border commodities to realize the construction of a distributed block chain; in a business middle platform layer, a commodity traceability management node is arranged to call and configure pluggable business components, so that services such as information operation, authority control, distributed data and the like are realized; the application service layer is directly linked with the specific physical equipment, and the specific tracing operation of the commodity is realized.
(2) The invention provides a distributed cross-border commodity tracing method based on a block chain, which is characterized in that specific functions of an equipment registration module, an equipment authority inquiry module, a commodity basic information input module, a commodity customs information input module, a commodity production information input module, a commodity warehousing information input module, a commodity overseas logistics information input module, a commodity domestic logistics information input module, a commodity sales information input module, a commodity tracing information query module and the like are provided for cross-border commodity related operating equipment on the basis of the framework. Meanwhile, the system can quickly respond to the requirement change and reduce the maintenance cost. The asymmetric encryption mode is used, and encryption algorithms with different keys are used for encryption and decryption, so that different operating devices have different communication passwords in the registration and authentication use processes, and system data is safer.
In conclusion, the distributed cross-border commodity tracing system and the tracing method provided by the invention improve the unit operability and maintainability of the commodity supply chain, reduce the energy and time cost for maintaining equipment authority and user authority, and increase the feasibility and credibility of tracing data.
Drawings
Fig. 1 is a schematic structural diagram of a distributed cross-border commodity traceability system based on a blockchain according to the present invention.
FIG. 2 is a flowchart of the distributed cross-border product tracing method based on the blockchain according to the present invention.
Fig. 3 is a flowchart of a device registration method of an internet operation device based on a block chain according to the present invention.
Fig. 4 is a flowchart of a device permission query method of an internet operation device based on a block chain according to the present invention.
Fig. 5 is a flowchart of a commodity information entry method of the internet operation device based on the blockchain according to the present invention.
Fig. 6 is a flowchart of a commodity traceability information query method of the internet operation device based on the blockchain according to the present invention.
Detailed Description
The present invention will be described in detail with reference to the accompanying drawings.
As shown in fig. 1 to fig. 6, a block chain-based distributed cross-border commodity tracing system includes a core data layer, a business middle platform layer, and an application service layer; the method is characterized in that:
the core data layer is provided with a plurality of node devices of cross-border commodity supply chain related main bodies to form a node cluster; the cross-border commodity supply chain related main body is defined as equipment management enterprises, and each equipment management enterprise is provided with a corresponding commodity traceability service node, so that a distributed block chain is constructed through the commodity traceability service nodes; the related main bodies of the cross-border commodity supply chain comprise cross-border commodity related manufacturers, logistics transportation enterprises, customs, distributors and sellers;
the business middle platform layer realizes application service on the core data layer through a pluggable business component; the pluggable service component is provided with an application service module comprising an information operation module, an authority control module and a distributed data storage module through a commodity traceability management node; the pluggable service component comprises an information operation component, an authority control component and a distributed data component; the information operation module is used for providing related application interfaces for increasing, deleting, modifying and checking information data for the operation equipment; the authority control module is used for carrying out identity identification and authority control on information data operation of the operating equipment; the distributed data storage module is used for storing distributed data of the distributed cross-border commodity traceability system; the operating equipment is physical equipment of a server, a mobile phone and a computer which are deployed by a related main body of a cross-border commodity supply chain;
the application service layer is linked with the operation equipment and is combined with the pluggable service components to construct different service scene application services; the different business scene application services comprise an equipment registration module, an equipment authority query module, a plurality of commodity information input modules related to cross-border commodities and a commodity traceability information query module which are provided for the operating equipment; the multiple commodity information input modules related to cross-border commodities comprise a commodity customs information input module, a commodity production information input module, a commodity storage information input module, a commodity overseas logistics information input module, a commodity domestic logistics information input module and a commodity sales information input module; the equipment registration module is used for registering operation equipment users and maintaining and modifying information thereof; the equipment authority inquiry module is used for inquiring the information operation authority of the registered operation equipment; the cross-border commodity-related commodity information input modules are used for providing information operation authority management and information data operation services for operation equipment of different supply chain enterprises; the commodity traceability information query module provides commodity traceability information query for the operating equipment.
A distributed cross-border commodity source tracing method based on a block chain is characterized in that cross-border commodity source tracing service nodes are respectively deployed in equipment management enterprises of a plurality of cross-border commodity supply chain related main bodies of a core data layer, and the distributed block chain is constructed through the commodity source tracing service nodes; a commodity traceability management node and pluggable components required by cross-border commodity traceability information operation service are arranged on a core data layer on a business middle platform layer and are used as supports of a plurality of service modules; and then, the application service layer is adopted to provide authority management service and cross-border commodity traceability information operation service for the operation equipment based on pluggable components provided by the service middle platform layer.
Further, the device registration module is configured to implement a registration service for the operating device, and the registration process specifically includes the following steps:
the method comprises the following steps: respectively presetting trust information for the operating equipment and the commodity traceability management node; the preset trust information presets a public and private key pair (skey 1, pkey 1) for each operating device, and is used for registration request and operation authority control of the device by using the public and private key pair (skey 1, pkey 1); wherein, skey1 is a preset private key and is stored in the operation equipment; the pkey1 is a preset public key and is stored in the commodity traceability management node of the corresponding main body of the block chain;
step two: generating registration request information of the operating device; the registration request information includes: a unique identification ID and identity key pair (skey 2, pkey 2) of the operating device; wherein, skey2 is a real private key, and pkey2 is a real public key; the identity key pair (skey 2, pkey 2) of the operating device is used for carrying out authentication and authority control use on the operating device after the device registration is finished;
step three: the operating device generates a registration request (pkey 2, ID); the real public key corresponding to the identifier ID of the operating device is pkey2, and a preset private key skey1 of the operating device is used to sign the registration request (pkey 2, ID), so as to obtain signature information sigmmessage = sign (skey 1, (pkey 2, ID)), where sign represents a signature operation; then, sending a registration request (pkey 2, ID) and signature information sigMessage to the block chain;
step four: after receiving the equipment registration request, the commodity traceability management node in the block chain network firstly detects whether the identification ID is registered, and if so, ignores the request; if the commodity tracing management node is not registered, verifying signature information sigMessage by using a preset public key pkey1 in the commodity tracing management node, and if the signature verification is passed, storing the registration request (pkey 2, ID) into the storage of the block chain to realize successful equipment registration; otherwise, the verification label fails.
Further, the device permission query service is performed on the operating device through the device permission query module, and the method specifically comprises the following steps:
step five: presetting trust information for the operating equipment and the commodity tracing management node, wherein the preset trust information presets a public and private key pair (skey 1, pkey 1) for each commodity tracing operating equipment and is used for registration request and operation authority control of the equipment by using the public and private key pair (skey 1, pkey 1); wherein, skey1 is a preset private key and is stored in the operation equipment; the pkey1 is a preset public key and is stored in the commodity traceability management node of the block chain;
step six: the operating equipment generates an equipment authority acquisition query request (pkey 2, ID) according to the unique identification ID and the identity key pair (skey 2, pkey 2) of the operating equipment; the equipment authority inquiry request is as follows: identifying a real public key pkey2 of the ID-identified operating device, signing the operation authority control request (pkey 2, ID) by using the preset private key skey1, and obtaining signature information sigmmessage = sign (skey 1, (pkey 2, ID)), wherein sign is a signature operation; then sending the equipment authority inquiry request and the signature information sigMessage to a block chain network;
step seven: after receiving the device authority query request, the commodity traceability management node in the block chain network firstly detects whether the ID is registered, and if the ID is registered, the operation authority information operation of the operation device corresponding to the identification ID in the block chain is obtained through the authority control module, and the signature opMessage = sign (skey 2, (pkey 1, operation)); if the user does not register, setting the authority information operation as invalid, and signing opMessage = sign (skey 2, (pkey 1, operation)), and returning to the operation equipment end;
step eight: the operating equipment receives the operating authority information of the equipment authority query module, firstly verifies the signature information opMessage by using a preset public key pkey1, and if the signature information opMessage passes the verification, an operating request is made according to the operating authority information operation; if the verification is not passed, the information is ignored.
Further, the plurality of commodity information entry modules related to the cross-border commodity are respectively used for providing cross-border commodity information entry entries for the operating devices of different supply chain main bodies, and specifically include:
the operating equipment generates a cross-border commodity information entry operation data request (pkey 2, ID, ope) by using the unique identification ID, the identity key pair (skey 2, pkey 2) and the operation identification ope, and specifically operates as follows: identifying a real public key pkey2 of the operating device corresponding to the ID, signing the cross-border commodity information entry operation data request (pkey 2, ID, ope) by using a preset private key skey1 to obtain signature information ope Message = sign (skey 1, (pkey 2, ID, ope)), wherein sign is a signature operation, and then sending the operation data request and the signature information ope Message to a cross-border commodity information entry module of an application service layer;
after receiving a request of an operating device, a related commodity information input module of an application service layer firstly acquires a unique device identifier ID and sends a query request to an account book of a block chain to acquire a public key pkey1 of the operating device, the ID, the operation identifier ope and signature information ope Message are checked by using the acquired service public key pkey1 of the operating device, and if the signature passes, an operation data request of the operating device is legal; otherwise, the label check is not passed;
after the commodity information input module obtains a legal operation data request, the operation equipment and the ope1 are sent to an authority control module of a platform layer in the service for authority verification, and if the authority verification is passed, data operation is carried out through the information operation module; if the rights verification fails, a rights error is returned.
Further, the commodity traceability information query module provides commodity traceability query entries for all access operation devices, wherein all the access devices comprise operation devices appointed to be registered by a supply chain and operation devices unregistered by an internet terminal; the commodity traceability information query specifically comprises the following steps:
the operation equipment sends a commodity traceability query request (goodsId), wherein the goodsId is a commodity unique code, and the request (goodsId) is sent to an information operation module of a platform layer in a service to perform commodity traceability query request information operation; the information operation module judges that the operation is public operation, signature verification is not needed, and the commodity tracing information is directly returned after being acquired from the commodity tracing service node of the block chain network; and if the commodity tracing information cannot be acquired, returning to be invalid.
The specific embodiment is as follows:
as shown in fig. 1, the distributed cross-border product tracing system based on the blockchain is divided into a core data layer, a business middle platform layer and an application service layer in terms of execution function. The core data layer is mainly responsible for deploying commodity traceability service nodes by operation equipment of main bodies such as enterprises and customs related to cross-border commodities, and constructing a distributed block chain through the commodity traceability nodes to provide basic management support such as physical resources and node resources for a service middle platform layer.
The business middle platform layer mainly provides pluggable components (such as information operation, authority control, data storage and the like) support for the commodity traceability service on the core data layer. Specifically, the service center layer comprises an information operation module, an authority control module and a data storage module; the information operation module is used for providing information operation for the commodity traceability management service, the authority control module is used for providing authority control of information addition, deletion, modification and check for the commodity traceability management service, and the data storage module is used for storing distributed data.
The application service layer mainly realizes all application period management of the operating equipment, realizes functions of operating equipment access control, information data operation and the like based on the information operating module and the authority control module, realizes distributed scalable operation authority management of enterprise operating equipment related to cross-border commodities, and promotes high efficiency, credibility and safety of the operating equipment for supply chain enterprises and commodity tracing. Specifically, the application service layer comprises an equipment authority management module, a commodity basic information input module, a commodity customs information input module, a commodity production information input module, a commodity storage information input module, a commodity overseas logistics information input module, a commodity domestic logistics information input module, a commodity sales information input module and a commodity traceability information query module. The equipment authority management module is used for carrying out identity and authority control on the operating equipment, the commodity basic information input module is used for inputting commodity basic information of the operating equipment, the commodity customs information input module is used for inputting commodity customs information of the operating equipment, the commodity production information input module is used for inputting commodity production information of the operating equipment, the commodity storage information input module is used for inputting commodity storage information of the operating equipment, the commodity overseas logistics information input module is used for inputting commodity overseas logistics information of the operating equipment, the commodity domestic logistics information input module is used for inputting commodity domestic logistics information of the operating equipment, the commodity sales information input module is used for inputting commodity sales information of the operating equipment, and commodity traceability information query is used for inputting commodity source traceability information of the operating equipment.
According to the scheme, the authority management, the information input and the source tracing query service of enterprise equipment in a supply chain can be realized by carrying out equipment authority control, a commodity basic information input module, a commodity customs information input module, a commodity production information input module, a commodity storage information input module, a commodity overseas logistics information input module, a commodity domestic logistics information input module, a commodity sales information input module and a commodity source tracing information query module on operating equipment, and all basic requirements of the whole supply chain enterprise equipment from configuration networking to information operation are met.
As shown in fig. 2, the distributed cross-border product tracing method based on the blockchain according to the present invention includes the following steps:
s1, cross-border commodity tracing service nodes are respectively deployed for a plurality of main equipment management enterprises related to a cross-border commodity supply chain in a core data layer, and a distributed block chain is constructed through the commodity tracing service nodes.
And S2, providing pluggable component support for the operating equipment management service and the cross-border commodity tracing information operating service by adopting a business middle platform layer on a core data layer.
And S3, performing equipment identification and commodity traceability management service on the operating equipment by adopting the application service layer based on the pluggable components provided by the service middle platform layer.
In the above steps, the device registration module in the application service layer performs device registration on the operating device based on the authority control and information operation provided by the service center layer, such as the legend 3; an equipment authority query module in the application service layer queries equipment authority of the operating equipment based on authority control and information operation provided by the service console layer, as shown in fig. 4; a commodity basic information input module, a commodity customs information input module, a commodity production information input module, a commodity storage information input module, a commodity overseas logistics information input module, a commodity domestic logistics information input module and a commodity sales information input module in the application service layer verify and perform data operation on the input of the operation equipment based on authority control and information operation provided by the service center layer, as shown in FIG. 5; the commodity traceability information query module in the application service layer performs data query on traceability query of the operating device based on authority control and information operation provided by the service middle layer, as shown in fig. 6.
As shown in fig. 3, the method for registering the operating device by the device registration module in the application service layer based on the information operation and the authority control provided by the service center layer specifically includes: the method comprises the steps of presetting trust information through Internet operation equipment, generating identification through a cryptography method, and storing identification information on a block chain. The preset trust information of various internet operation devices can prevent the access of counterfeit devices; the Internet operation equipment generates identity public and private key information and defines a unique equipment ID; signing the public key + ID by using preset trust information of the operating equipment, and sending the public key + ID to a commodity traceability service node of the block chain; after verifying the validity of the equipment request by using preset trust information, the commodity traceability service node of the block chain inquires that the equipment is unregistered, and writes the equipment public key + ID information into a data storage module of the block chain. The method specifically comprises the following substeps:
generating a unique ID and identity key pair (skey 2, pkey 2) of the operating device; wherein, skey2 is a real private key, and pkey2 is a real public key; the identity key pair (skey 2, pkey 2) of the operating device is used for carrying out device authentication and authority control after the device registration is finished;
the operating device generates a registration request (pkey 2, ID), and the process of the registration request is as follows: identifying a real public key pkey2 of the ID-identified operating device, signing the registration request (pkey 2, ID) by using the preset private key skey1 to obtain signature information sigMessage = sign (skey 1, (pkey 2, ID)), wherein sign is a signature operation, and then sending the registration request and the signature information sigMessage to a block chain;
after receiving a device registration request, a device management node in a block chain network firstly detects whether the ID is registered, and if so, ignores the request; if the registration is not carried out, verifying signature information sigMessage by using the preset public key pKey1, and if the signature verification is passed, storing the registration request (pKey 2, ID) into the storage of the block chain; otherwise, the label check fails.
As shown in fig. 4, the device authority query module in the application service layer queries the authority of the operating device based on the information operation and authority control provided by the service center layer, and performs identity verification on the internet operating device through the device authority query module in the application service layer. The method specifically comprises the following steps: the Internet operation equipment signs the service data by using the real private key to generate identity verification information, sends the identity verification information to the block chain node server, sends a real public key corresponding to the equipment through the inquiry of an account book in the block chain, and checks the signature of the signature information by using the real public key. If the identity authentication is passed, returning an authority inquiry result; if the authentication is not passed, the return authority query fails. The method for inquiring the equipment authority comprises the following steps:
the operating equipment generates an operation authority control acquisition request (pkey 2, ID) by using the unique ID and the identity key pair (skey 2, pkey 2), wherein the operation authority control acquisition request is as follows: identifying a real public key pkey2 of the ID-identified operating device, signing the operation authority control request (pkey 2, ID) by using the preset private key skey1 to obtain signature information sigMessage = sign (skey 1, (pkey 2, ID)), wherein sign is a signature operation, and then sending the operation authority control request and the signature information sigMessage to a block chain;
after receiving the operation authority control request, the device management node in the block chain network firstly detects whether the ID is registered, and if the ID is registered, the device management node acquires operation authority information operation of the ID in the block chain through an authority control module, and signs an opMessage = sign (skey 2, (pkey 1, operation)); if the mobile terminal is not registered, setting operation = null, and signing an opMessage = sign (skey 2, (pkey 1, operation)), and returning to the operating device;
the operating equipment receives the operating authority information of the equipment authority management module, firstly verifies the signature information opMessage by using a preset public key pkey1, and if the signature information opMessage passes the verification, an operating request is made according to the operating authority information operation; if the verification is not passed, the information is ignored.
As shown in fig. 5: the commodity basic information input module, the commodity customs information input module, the commodity production information input module, the commodity storage information input module, the commodity overseas logistics information input module, the commodity domestic logistics information input module and the commodity sales information input module in the application service layer authenticate and execute the input operation of the operation equipment based on the information operation and the authority control provided by the service platform layer, and the method comprises the following steps:
the operation device generates a commodity basic information entry operation data request (pkey 2, ID, ope) by using the unique ID, the identity key pair (skey 2, pkey 2) and the operation identifier ope, and the specific operation is as follows: identifying a real public key pkey2 of an ID operating device, signing the basic commodity information entry operation data request (pkey 2, ID, ope) by using the preset private key skey1 to obtain signature information ope Message = sign (skey 1, (pkey 2, ID, ope)), wherein sign is a signature operation, and then sending the operation data request and the signature information ope Message to a basic commodity information entry module of an application service layer;
after receiving a request of an operating device, a commodity basic information input module of an application service layer firstly acquires a device ID and sends a query request to an account book of a block chain to obtain a public key pkey1 of the operating device, the ID, an operation identifier ope and signature information ope Message are checked by using the obtained service public key pkey1 of the operating device, and if the check passes, an operation data request of the operating device is legal; otherwise, the label check is not passed;
after the commodity basic information input module obtains a legal operation data request, the operation equipment and the ope are sent to an authority control module of a platform layer in a business for authority verification, and if the authority verification is passed, data operation is carried out through the information operation module; if the rights verification fails, a rights error is returned.
As shown in fig. 6, the commodity tracing information query module of the application service layer provides a commodity tracing query entry for all access operation devices, where all the access devices include an operation device designated and registered by a supply chain enterprise and an operation device unregistered at an internet end. The commodity traceability information query specifically comprises:
the operation equipment sends a commodity traceability query request (goodsId) which is a commodity unique code, and sends the request (goodsId) to an information operation module of a platform layer in a service for commodity traceability query; the information operation module judges that the operation is public operation, signature verification is not needed, and the tracing information of the commodity is directly returned after being acquired from the commodity tracing service node of the block chain network; and if the tracing information of the commodity cannot be acquired, returning to be invalid.
Although the present invention has been described with reference to the preferred embodiments, it should be understood that various changes and modifications can be made therein by those skilled in the art without departing from the spirit and scope of the invention as defined by the appended claims.
Claims (6)
1. A distributed cross-border commodity tracing system based on a block chain comprises a core data layer, a business middle platform layer and an application service layer; the method is characterized in that:
the core data layer is provided with a plurality of node devices of cross-border commodity supply chain related main bodies to form a node cluster; the cross-border commodity supply chain related main body is defined as equipment management enterprises, and each equipment management enterprise is provided with a corresponding commodity traceability service node, so that a distributed block chain is constructed through the commodity traceability service nodes; the related main bodies of the cross-border commodity supply chain comprise cross-border commodity related manufacturers, logistics transportation enterprises, customs, distributors and sellers;
the business middle platform layer realizes application service on the core data layer through a pluggable business component; the pluggable service component is provided with an application service module comprising an information operation module, an authority control module and a distributed data storage module through a commodity traceability management node; the pluggable service component comprises an information operation component, an authority control component and a distributed data component; the information operation module is used for providing related application interfaces for increasing, deleting, modifying and checking information data for the operation equipment; the authority control module is used for carrying out identity identification and authority control on information data operation of the operating equipment; the distributed data storage module is used for storing distributed data of the distributed cross-border commodity traceability system; the operating equipment is physical equipment of a server, a mobile phone and a computer which are deployed by a related main body of a cross-border commodity supply chain;
the application service layer is linked with the operation equipment and is combined with the pluggable service components to construct different service scene application services; the different business scene application services comprise an equipment registration module, an equipment authority query module, a plurality of commodity information input modules related to cross-border commodities and a commodity traceability information query module which are provided for the operating equipment; the multiple commodity information input modules related to cross-border commodities comprise a commodity customs information input module, a commodity production information input module, a commodity storage information input module, a commodity overseas logistics information input module, a commodity domestic logistics information input module and a commodity sales information input module; the equipment registration module is used for registering operation equipment users and maintaining and modifying information thereof; the device authority inquiry module is used for inquiring the information operation authority of the registered operation device; the multiple commodity information input modules related to cross-border commodities are used for providing information operation authority management and information data operation services for operation equipment of different supply chain enterprises; the commodity traceability information query module provides commodity traceability information query for the operating equipment.
2. A distributed cross-border product tracing method based on a blockchain, which applies the distributed cross-border product tracing system based on a blockchain as claimed in claim 1, wherein: deploying cross-border commodity tracing service nodes respectively in equipment management enterprises of a plurality of cross-border commodity supply chain related main bodies of a core data layer, and constructing a distributed block chain through the commodity tracing service nodes; a commodity traceability management node and pluggable components required by cross-border commodity traceability information operation service are arranged on a core data layer on a business middle platform layer and are used as supports of a plurality of service modules; and then, the application service layer is adopted to provide authority management service and cross-border commodity tracing information operation service for the operation equipment based on pluggable components provided by the service middle platform layer.
3. The distributed cross-border commodity tracing method based on the blockchain as claimed in claim 2, wherein the method comprises the following steps: the device registration module is used for realizing registration service for the operating device, and the registration process specifically comprises the following steps:
the method comprises the following steps: respectively presetting trust information for the operating equipment and the commodity traceability management node; the preset trust information presets a public and private key pair (skey 1, pkey 1) for each operating device, and is used for registration request and operation authority control of the device by using the public and private key pair (skey 1, pkey 1); wherein, skey1 is a preset private key and is stored in the operation equipment; the pkey1 is a preset public key and is stored in the commodity traceability management node of the corresponding main body of the block chain;
step two: generating registration request information of the operating device; the registration request information includes: a unique identification ID and identity key pair (skey 2, pkey 2) of the operating device; wherein, skey2 is a real private key, and pkey2 is a real public key; the identity key pair (skey 2, pkey 2) of the operating device is used for carrying out authentication and authority control use on the operating device after the device registration is finished;
step three: the operating device generates a registration request (pkey 2, ID); the real public key corresponding to the identifier ID of the operating device is pkey2, and a preset private key skey1 of the operating device is used to sign the registration request (pkey 2, ID), so as to obtain signature information sigmmessage = sign (skey 1, (pkey 2, ID)), where sign represents a signature operation; then, sending a registration request (pkey 2, ID) and signature information sigMessage to the block chain;
step four: after receiving an equipment registration request, a commodity traceability management node in a block chain network firstly detects whether the identification ID is registered, and if so, ignores the request; if the commodity tracing management node is not registered, verifying signature information sigMessage by using a preset public key pkey1 in the commodity tracing management node, and if the signature verification is passed, storing the registration request (pkey 2, ID) into the storage of the block chain to realize successful equipment registration; otherwise, the label check fails.
4. The distributed cross-border commodity tracing method based on the blockchain as claimed in claim 3, wherein: the method for inquiring the equipment authority of the operating equipment through the equipment authority inquiring module specifically comprises the following steps:
step five: presetting trust information for the operating equipment and the commodity tracing management node, wherein the preset trust information presets a public and private key pair (skey 1, pkey 1) for each commodity tracing operating equipment, and the public and private key pair (skey 1, pkey 1) is used for registration request and operation authority control of the equipment; wherein, skey1 is a preset private key and is stored in the operation equipment; the pkey1 is a preset public key and is stored in the commodity traceability management node of the block chain;
step six: the operating equipment generates an equipment authority acquisition query request (pkey 2, ID) according to the unique identification ID and the identity key pair (skey 2, pkey 2) of the operating equipment; the equipment authority inquiry request is as follows: identifying a real public key pkey2 of the ID-identified operating device, signing the operation authority control request (pkey 2, ID) by using the preset private key skey1, and obtaining signature information sigmmessage = sign (skey 1, (pkey 2, ID)), wherein sign is a signature operation; then sending the equipment authority inquiry request and the signature information sigMessage to a block chain network;
step seven: after receiving the device authority query request, the commodity traceability management node in the block chain network firstly detects whether the ID is registered, and if the ID is registered, the operation authority information operation of the operation device corresponding to the identification ID in the block chain is obtained through the authority control module, and the signature opMessage = sign (skey 2, (pkey 1, operation)); if the user does not register, setting the authority information operation as invalid, and signing opMessage = sign (skey 2, (pkey 1, operation)), and returning to the operation equipment end;
step eight: the operating equipment receives the operating authority information of the equipment authority query module, firstly verifies the signature information opMessage by using a preset public key pkey1, and if the signature information opMessage passes the verification, an operating request is made according to the operating authority information operation; if the authentication is not passed, the information is ignored.
5. The distributed cross-border commodity tracing method based on the blockchain as claimed in claim 4, wherein: the multiple commodity information entry modules related to the cross-border commodity are respectively used for providing cross-border commodity information entry entries for operating devices of different supply chain main bodies, and specifically include:
the operating equipment generates a cross-border commodity information entry operation data request (pkey 2, ID, ope) by using the unique identification ID, the identity key pair (skey 2, pkey 2) and the operation identification ope, and specifically operates as follows: identifying a real public key pkey2 of the operating device corresponding to the ID, signing the cross-border commodity information entry operation data request (pkey 2, ID, ope) by using a preset private key skey1 to obtain signature information ope Message = sign (skey 1, (pkey 2, ID, ope)), wherein sign is a signature operation, and then sending the operation data request and the signature information ope Message to a cross-border commodity information entry module of an application service layer;
after receiving a request of an operating device, a related commodity information input module of an application service layer firstly acquires a unique identifier ID of the device and sends a query request to an account book of a block chain to obtain a public key pkey1 of the operating device, the obtained public key pkey1 of the operating device is used for checking the unique identifier ID of the device, the operating identifier ope and the signature information ope Message, and if the check passes, the operation data request of the operating device is legal; otherwise, the label check is not passed;
after the commodity information input module obtains a legal operation data request, the operation equipment and the ope1 are sent to an authority control module of a platform layer in the service for authority verification, and if the authority verification is passed, data operation is carried out through the information operation module; if the rights verification fails, a rights error is returned.
6. The distributed cross-border commodity tracing method based on the blockchain as claimed in claim 5, wherein: the commodity tracing information query module provides commodity tracing query entries for all access operation devices, wherein all the access operation devices comprise a supply chain appointed registered operation device and an internet end unregistered operation device; the commodity traceability information query specifically comprises the following steps:
sending a commodity source tracing inquiry request (goodsId) by operating equipment, wherein the goodsId is a unique commodity code, and sending the request (goodsId) to an information operating module of a service middle platform layer for carrying out commodity source tracing inquiry operation; the information operation module judges that the operation is public operation, signature verification is not needed, and the commodity tracing information is directly returned after being acquired from the commodity tracing service node of the block chain network; and if the commodity tracing information cannot be acquired, returning to be invalid.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202210952324.XA CN115471149A (en) | 2022-08-09 | 2022-08-09 | Block chain-based distributed cross-border commodity tracing system and tracing method thereof |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202210952324.XA CN115471149A (en) | 2022-08-09 | 2022-08-09 | Block chain-based distributed cross-border commodity tracing system and tracing method thereof |
Publications (1)
| Publication Number | Publication Date |
|---|---|
| CN115471149A true CN115471149A (en) | 2022-12-13 |
Family
ID=84365758
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN202210952324.XA Withdrawn CN115471149A (en) | 2022-08-09 | 2022-08-09 | Block chain-based distributed cross-border commodity tracing system and tracing method thereof |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN115471149A (en) |
-
2022
- 2022-08-09 CN CN202210952324.XA patent/CN115471149A/en not_active Withdrawn
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN110958118B (en) | Certificate authentication management method, device, equipment and computer readable storage medium | |
| CN108667612B (en) | Trust service architecture and method based on block chain | |
| US20160164884A1 (en) | Cryptographic verification of provenance in a supply chain | |
| CN101977184B (en) | Multi-identity selection landing device and service system | |
| CN113271311B (en) | Digital identity management method and system in cross-link network | |
| WO2022193984A1 (en) | Cross-chain data transmission method and apparatus, and computer device, storage medium and computer program product | |
| CN111327426B (en) | Data sharing method and related device, equipment and system | |
| CN101951385B (en) | Service switching method for electronic transaction platform | |
| CN111612619A (en) | Storage sharing platform based on block chain and storage transaction method | |
| TW202240445A (en) | De-centralized data authorization control system capable of transferring read token from block chain subsystem to data requester device | |
| CN111292057A (en) | Service processing method based on block chain | |
| CN114553440B (en) | Cross-data center identity authentication method and system based on block chain and attribute signature | |
| CN103020542A (en) | Technology for storing secret information for global data center | |
| CN113141404B (en) | Intelligent gateway and data sharing system | |
| CN112235290A (en) | Block chain-based Internet of things equipment management method and first Internet of things equipment | |
| CN115471149A (en) | Block chain-based distributed cross-border commodity tracing system and tracing method thereof | |
| CN114978668B (en) | Cross-chain data entity identity management and authentication method and system | |
| CN102957539A (en) | Digital signature management and verification system and method for distributed software | |
| WO2021254282A1 (en) | Blockchain-based interconnection method and apparatus, and computer storage medium | |
| Chen et al. | A secure 2G-RFID-Sys mechanism for applying to the medical emergency system | |
| TW202240444A (en) | De-centralized data authorization control system capable of indirectly transferring read token through third-party service subsystem | |
| TW202240442A (en) | De-centralized data authorization control system capable of forwarding token request through third-party service subsystem | |
| CN108228280A (en) | The configuration method and device of browser parameters, storage medium, electronic equipment | |
| TW202240443A (en) | De-centralized data authorization control system capable of flexibly adjusting data authorization policy | |
| JPH11163853A (en) | Authentication system |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| WW01 | Invention patent application withdrawn after publication |
Application publication date: 20221213 |
|
| WW01 | Invention patent application withdrawn after publication |