TWI776590B - System, method and computer readable medium for authenticaion and transfer traceability of digital documents - Google Patents

Abstract

The present invention provides a system, method and computer readable medium for the authentication and transfer traceability of the original digital document. It mainly uses the smart contract of non-replaceable tokens to transform the digital document into a unique, indivisible and non-copyable digital asset, and uses a distributed file system to permanently store the original files of digital documents, and then integrate the user's public key certificate data to confirm the relationship between the digital document and its owner and transfer record, so it can be open, transparent, high-security, and high-efficiency. The easy-to-use solution realizes the original authentication mechanism and transfer traceability of digital documents.

Description

System, method and computer readable medium for verification and transfer traceability of digital documents

The present invention relates to block chain technology, in particular to systems, methods and computer-readable media for verification and transfer traceability of digital files.

In an environment where information flows more and more electronically, many documents are traded and stored digitally. However, compared with paper documents, a substantial authentication operation can be performed on the original to achieve authenticity verification. Because of the nature of digital documents, which can be easily copied and transferred, the preservation and verification of the uniqueness of digital documents, and the identification of their owners It is relatively difficult to identify and trace the owner's transfer records. For example, when the property right certificate is in the form of a digital file, it will be more difficult to verify the original of the property right certificate and identify the legal owner than to record it in a paper file.

Therefore, how to provide an open, transparent, high-security, high-efficiency, and easy-to-use solution to improve the reliability of the uniqueness of electronic documents and the traceability of transfer records is one of the urgent problems to be solved in the art.

In order to solve the above-mentioned problems, the present invention provides a system for verification and transfer traceability of digital documents, including: an identity verification component, which is used to maintain the user's registration data in the blockchain through the identity verification smart contract component, wherein, The registration data includes the user's public key certificate data and blockchain address, and the public key certificate data includes hash value, public key, expiry date and certificate status; file transfer element, used for Execute the original maintenance operation of the digital file according to the registration data of the user; the file token contract element, which is a file token used to maintain the digital file in the blockchain according to the original maintenance operation; and a distributed file The storage element is used to save the original file of the digital file and the index value of the file token.

In the above-mentioned system, the way of maintaining the registration data by the identity verification component includes a registration operation, and the execution method of the registration operation includes: causing the identity verification component to receive the registration data of the user, wherein the registration data further includes A digital signature encrypted with the public key certificate data and the blockchain address using the private key of the public key certificate data; enabling the authentication element to decrypt the public key certificate data using the public key of the public key certificate data a digital signature; and causing the authentication element to compare the decrypted content of the digital signature with the public key certificate data and the blockchain address, and if the result of the comparison is a match, cause the The identity verification component stores the registration data in the blockchain through the identity verification smart contract component.

In the above-mentioned system, the way that the identity verification element maintains the registration data includes a verification operation, and the execution method of the verification operation includes: causing the identity verification element to receive the blockchain address; and making the identity verification element according to the The blockchain address searches the corresponding registration data in the blockchain through the identity verification smart contract component, so that the identity verification component returns the content of the registration data.

In the above system, the original maintenance operation includes the creation operation of the digital file, and the execution method of the creation operation includes: causing the file transfer element to receive the original file and the blockchain address of the digital file; the document transfer element calls the authentication element to pass the authentication The certificate smart contract component queries the registration data in the blockchain based on the blockchain address to confirm that the blockchain address is consistent with the registered data; instruct the file transfer component to store the original file to a distributed file storage element; and causing the file transfer element to call the file token contract element to generate the file token of the digital file in the blockchain, so that the file transfer element is stored in the distributed file storage The element records the index value of the document token, wherein the index value is the hash value of the digital document.

In the above system, the document token includes token ontology information and metadata metadata, and the token ontology information includes the identification code of the digital document and the owner information representing the blockchain address, and The metadata metadata includes the creation time of the digital file, the hash value, the encrypted storage address, and the transaction time of the file token.

In the above-mentioned system, the original maintenance operation includes a transfer operation of the document token of the digital document, and the execution method of the transfer operation includes: enabling the document transfer element to receive the digital document input by the user. the identifier and the recipient blockchain address; make the document transfer element call the authentication smart contract element through the authentication element to look up the registration data in the blockchain to verify the recipient blockchain address is one of the registered blockchain addresses; causing the file transfer element to calculate a decryption key using the user's blockchain address, decrypt the encrypted storage address to obtain the storage address ; and causing the file transfer element to call the file token contract element to update the file token according to the recipient blockchain address, including: updating the owner information from the blockchain address to the recipient area block chain address; calculate the receiver encryption key according to the receiver block chain address, and update the encrypted storage address to the result of encrypting the storage address with the receiver encryption key; and update the transaction time .

In the above-mentioned system, it further includes: a document history smart contract element, which is used for storing the transfer record of the document token according to the result of executing the transfer operation by the document transfer element.

In the above system, it includes: the original verification and traceability component, which is used for the verification of the original of a specific document and the traceability of the transfer record, the original verification and the traceability of the transfer record of the specific document The execution method includes: causing the original verification and traceability component to calculate the hash value to be verified of the specific file; and then causing the document transfer component to confirm that the hash value to be verified is consistent with the index value stored in the distributed file storage component in the case of the document token contract element to retrieve the document token of the digital document; and if the hash value to be verified for that particular document matches the hash value of the document token, cause the original The verification and traceability component determines that the specific document is the legal original of the digital document, so that the original verification and traceability component calls the document history smart contract component to output the transfer record of the document token.

In the above-mentioned system, it further includes: a decryption download element for downloading the original file of the digital file from the distributed file storage element, and the method for downloading the original file of the digital file includes: making the decryption download The component receives the identification code of the digital document and calculates the signing application data, wherein the signing application data is a signer of the identification code with the private key of the public key certificate data of the user; make the document token contract The component obtains the document token in the blockchain according to the identification code; the identity verification component obtains the registration information from the blockchain through the identity verification smart contract component according to the owner information recorded in the document token the public key, and then use the public key to decrypt the signing application data; if the signing application data is successfully decrypted, make the identity verification element calculate the decryption key with the blockchain address, and then use the decryption The key decrypts the encrypted storage address to obtain a storage address; and causes the decryption download element to download the original file of the digital file to the distributed file storage element using the storage address.

The present invention further provides a method for verification and transfer traceability of digital documents, including: enabling an identity verification component to maintain a user's registration data in the blockchain through an identity verification smart contract component, wherein the registration data includes the user's registration data. public key certificate data and blockchain address, and the public key certificate data includes hash value, public key, expiry date and certificate status; make the file transfer component execute the bit based on the registration data of the user Maintenance of the original of the document; The currency contract element maintains the file token of the digital file in the blockchain according to the original maintenance operation; and the distributed file storage element stores the original file of the digital file and the index value of the file token.

In the above-mentioned method, when the way of maintaining the registration data is a registration operation, the step of enabling the identity verification element to maintain the user's registration information in the blockchain through the identity verification smart contract element includes the following sub-steps: The identity verification element receives the registration data of the user, wherein the registration data further includes a digital signature encrypted with the public key certificate data and the blockchain address using the private key of the public key certificate data; causing the authentication element to decrypt the digital signature using the public key of the public key certificate data; and causing the authentication element to combine the decrypted content of the digital signature with the public key certificate data and the blockchain bit Address comparison, so that when the result of the comparison is consistent, the identity verification component stores the registration data in the blockchain through the identity verification smart contract component.

In the above-mentioned method, when the way of maintaining the registration data is the verification operation, the step of making the identity verification component maintain the user's registration data in the blockchain through the identity verification smart contract component includes the following sub-steps: The identity verification element receives the block chain address; and makes the identity verification element search the corresponding registration data in the block chain through the identity verification smart contract element according to the block chain address, so that the identity verification element returns Upload the content of the registration information.

In the above-mentioned method, when the original maintenance operation is the creation operation of the digital file, the step of making the file transfer element execute the original maintenance operation of the digital file according to the user's identity verification smart contract element includes the following steps: Sub-steps: make the file transfer element receive the original file and the blockchain address of the digital file; make the file transfer element call the authentication element through the authentication smart contract element based on the blockchain address query the registration data in the blockchain to confirm that the blockchain address matches that recorded in the registration data; cause the file transfer element to store the original file to the distributed file storage element; and make the file The transfer element calls the file token contract element to generate the file token of the digital file in the blockchain, so that the file transfer element is in the decentralized The file storage element records the index value of the file token, wherein the index value is a hash value of the digital file.

In the above method, the document token includes token ontology information and metadata metadata, and the token ontology information includes an identifier of the digital document and owner information representing the blockchain address, and The metadata metadata includes the creation time of the digital file, the hash value, the encrypted storage address, and the transaction time of the file token.

In the above method, when the original maintenance operation is the transfer operation of the document token of the digital document, the document transfer component executes the original maintenance of the digital document according to the identity verification smart contract component of the user The steps of the operation include the following sub-steps: causing the document transfer element to receive the identification code and recipient blockchain address of the digital document input by the user; making the document transfer element call the document transfer element through the identity verification element The identity verification smart contract element looks up the registration data in the blockchain to verify that the recipient blockchain address is one of the registered blockchain addresses; causes the file transfer element to use the usage Calculate the decryption key from the blockchain address of the recipient, decrypt the encrypted storage address to obtain the storage address; and make the file transfer element call the file token contract element to update according to the recipient blockchain address The file token includes: updating the owner information from the blockchain address to the recipient's blockchain address; calculating the recipient's encryption key according to the recipient's blockchain address, and encrypting the encryption key updating the storage address as a result of encrypting the storage address with the recipient encryption key; and updating the transaction time.

In the above-mentioned method, the method further comprises: making the document history smart contract component store the transfer record of the document token according to the result of the document transfer component performing the transfer operation.

In the above-mentioned method, it further includes: enabling the original verification and traceability component to perform the original verification and transfer record traceability of a specific document, which includes the following sub-steps: enabling the original verification and traceability component to calculate the hash value to be verified for the specific document; Having the file transfer element confirm that the hash value to be verified matches the index value stored by the distributed file storage element, make the file token contract element to retrieve the document token of the digital document; and, if the hash value to be verified for the particular document matches the hash value of the document token, cause the original verification and traceability element to determine that the particular document is the The legal original of the digital document, so that the original verification and traceability component calls the document history smart contract component to output the transfer record of the document token.

In the above-mentioned method, it further comprises: causing the decryption download element to download the original file of the digital file from the distributed file storage element, which includes the following sub-steps: making the decryption download element receive the identification code of the digital file and calculate Signing the application data, wherein the signing application data is the signer of the identification code with the private key of the public key certificate data of the user; make the document token contract element obtain the data in the blockchain according to the identification code the document token; make the identity verification component obtain the public key in the registration data from the blockchain through the identity verification smart contract component according to the owner information recorded in the document token, and then use the public key key to decrypt the signing application data; in the case that the signing application data is successfully decrypted, make the identity verification element calculate the decryption key with the blockchain address, and then use the decryption key to decrypt the encrypted storage address to obtain a storage address; and causing the decryption download element to download the original file of the digital file to the distributed file storage element using the storage address.

The present invention further provides a computer-readable medium, which is applied to a computing device or a computer, and stores an instruction to execute the above-mentioned method for verifying and transferring a digital file.

To sum up, the system, method and computer-readable medium for the verification and transfer traceability of the original digital document of the present invention mainly utilize the smart contract of non-replaceable tokens to convert the digital document into a unique, indivisible or duplicated digital document. Digital assets, and use a decentralized file system to permanently store the original files of digital files, and then integrate the user's public key certificate data to confirm the relationship between digital files and their owners and transfer records, so it can be open, transparent and highly secure. A flexible, efficient and easy-to-use solution to realize the original verification mechanism and transfer traceability of digital documents.

100: Authentication element

200: File transfer element

300: digital file

400: Document Token Contract Element

500: Original Verification and Traceability Elements

600: Blockchain

700: Decentralized Archive Storage Element

800: Decrypt download components

900: Document History Smart Contract Element

1000: Identity Verification Smart Contract Components

S201~S207: Steps

S301~S306: Steps

S401~S406: Steps

S501~S507: Steps

S601~S607: Steps

FIG. 1 is a schematic diagram showing the system of the present invention;

2A and 2B are partial step flow diagrams showing the method of the present invention;

FIG. 3 is a flowchart showing partial steps of the method of the present invention;

4 is a flowchart showing partial steps of the method of the present invention;

FIG. 5 is a flowchart showing partial steps of the method of the present invention; and

FIG. 6 is a flowchart showing partial steps of the method of the present invention.

The following specific examples illustrate the implementation of the present application, and those skilled in the art can easily understand other advantages and effects of the present application from the content disclosed herein. The structures, proportions, sizes, etc. shown in the drawings attached in this specification are only used to cooperate with the contents disclosed in the specification for the understanding and reading of those who are familiar with the art, and are not used to limit the conditions that can be implemented in this case. Therefore, any modification, change or adjustment should still fall within the scope that the technical content disclosed in this case can cover without affecting the effect that this case can produce and the purpose that can be achieved.

Figure 1 is a system architecture diagram of the verification and transfer traceability of the original digital documents in this case. It is mainly used to describe the implementation elements and their relationship with each other for saving, transferring, and verifying the digital files 300 produced by the user U through the blockchain 600 and the distributed file storage element 700 .

In this embodiment, the identity verification component 100 guides the user U's identity registration and verification-related applications through an application programming interface (API). In some embodiments, the applications provided by the identity verification component 100 include: user registration, access Block chain 600, using identity verification smart contract component 1000 to access user registration information, etc. Here, the identity verification smart contract element 1000 is a smart contract (eg, a piece of code) in the blockchain 600 that is responsible for dynamically maintaining user registration information, which can be regarded as an extension of the identity verification element 100 and is related to the identity verification element 100 Work together to execute related applications.

For example, the user registration application provided by the identity verification component 100 includes, for example, the following process: User U can request identity registration through the API provided by the identity verification component 100 ; Public key certificate data (for example, a natural person certificate containing identity information, which has corresponding public key and private key), blockchain address (for example, as the account address of the user U to access the blockchain 600 ), and digital signature (signature data encrypted with the private key of the public key certificate data) and other registration data; and when the identity verification component 100 passes the verification of the digital signature, the The public key certificate data and the blockchain address and other related data (as will be described in detail later) are recorded in the blockchain 600 using the identity verification smart contract element 1000 . In addition, the identity verification smart contract component 1000 can also be used to query the identity-related information of the user U in the subsequent process.

In some embodiments, the identity verification element 100 also maintains a certificate revocation list in the blockchain 600 (eg, through the identity verification smart contract element 1000 ), and is configured to periodically check the public key certificate data of the user U, And when the public key certificate data is expired, the identity verification smart contract component 1000 is used to update the certificate state value of the public key certificate data stored in the blockchain 600 .

In this embodiment, the file transfer component 200 guides the user U to perform original maintenance operations such as creation, storage, and transfer of the digital file 300 through the API. In some embodiments, the applications provided by the file transfer element 200 include: accessing the distributed file storage element 700, accessing the blockchain 600, connecting the authentication element 100, calling the file token contract element 400, and the like.

For example, when the user U creates a new digital file 300, it first calls the identity verification component 100 through the file transfer component 200 to verify the real identity of the user U (for example, through the identity verification smart contract component 1000). And while the digital file 300 is stored in the distributed file storage element 700, the file token contract element 400 is called to create a file token of the digital file 300 in the blockchain 600.

For another example, when the digital file 300 is transferred (for example, the digital file 300 is traded to a new user U), the pair of authentication elements 100 must also be called through the file transfer element 200 (for example, through the identity verification element 100). Verification of the smart contract element 1000) The new user U performs real identity verification, and calls the file token contract element 400 to execute the content change of the file token of the digital file 300 in the blockchain 600, and the storage of transactions and related transfer records. certificate, etc.

In some embodiments, the distributed file storage element 700 is implemented by the Inter Planetary File System (IPFS) for permanently storing the original files of the digital file 300 , however, the distributed file storage element 700 can also be any The storage system, equipment, database, etc., are not particularly limited in this document.

In other embodiments, the document history smart contract element 900 is similar to the identity verification smart contract element 1000, and is also a smart contract (eg, a piece of code) in the blockchain 600, which is used for corresponding user U to transfer files through a file The transfer operation of the digital file 300 executed by the component 200 dynamically records the certificate in the blockchain 600, and the transfer record content of the certificate includes but is not limited to: the creation time of the digital file 300 and the transaction time of the file token. , the blockchain address of the owner before and after the transaction of the file token, etc. In addition, the transfer record can be output by the user U in subsequent inquiries through the original verification and traceability component 500 .

In this embodiment, the file token contract element 400 is another smart contract in the blockchain 600 , which is used to manage the creation, transaction, change, and transfer records of the file token corresponding to the digital file 300 , etc. application. In some embodiments, the content of the file token of the digital file 300 mainly includes It includes two parts: token ontology information and metadata (metadata) metadata. Among them, the token ontology information records the unique identification code and owner information of the digital file 300; and the metadata metadata is exchanged with data such as JSON The format records the creation time of the digital file 300, the original hash value, the copy hash value, the encrypted IPFS address for storing the original, the encrypted IPFS address for storing the copy, and the transaction time of the file token.

In some embodiments, the file tokens managed by the file token contract element 400 are smart contracts for non-fungible tokens, such as ERC-721 standard tokens of the Ethereum blockchain. , therefore, each digital file 300 can be treated as a unique, indivisible or duplicate digital asset.

In this embodiment, the original verification and traceability component 500 uses the API to guide the user U to perform applications such as original verification or transfer record traceability for a specific digital file 300 .

For example, when the user U wants to verify the legitimacy of a specific document, he can input the hash of the specific document through the API provided by the original verification and traceability component 500 (also known as the client side of the original verification and traceability component 500 ). At this time, the original verification and traceability component 500 associates this hash value with the file token of each digital file 300 stored in the blockchain 600 (for example, by calling the file token contract component 400 through the file transfer component 200 to query the related file Tokens) to compare and return the content of the matching document tokens (including the aforementioned token ontology information and metadata metadata) to confirm the legitimacy of this particular document (that is, it belongs to a distributed file storage element) 700 any of the stored digital files 300).

For another example, when the user U wants to investigate the transfer record of a specific file (assumed to be any one of the known digital files 300 ), he can also input this data through the API provided by the original verification and traceability component 500 . The hash value of a specific file or the identification code of the file token. At this time, the original verification and traceability component 500 will find the file token corresponding to the digital file 300 from the blockchain 600 according to the hash value or identification code. And call the file history smart contract component 900 to return the transaction records that occurred in the digital file 300 recorded by the file token from the creation to the most recent period.

In the present embodiment, the decryption download element 800 is an online service for the user U (provided that he is confirmed as the owner of the digital file 300 ) to use the (authorized) decryption key and the data of the digital file 300 The encrypted IPFS address recorded by the file token for storing the original or the copy accesses and downloads the corresponding digital file 300 to the distributed file storage element 700 .

2A and 2B are flowcharts showing the steps of performing the identity registration and verification of the user U by the identity verification element 100 . To be more specific, FIG. 2A is a flow of steps related to identity registration, and FIG. 2B is a flow of steps related to identity verification. In addition, the steps shown in FIGS. 2A and 2B can be executed sequentially, and can also be executed separately at different times according to the needs of the user U (for example, when the user U uses the services of other components in the system of the present invention). is not particularly limited.

Referring first to FIG. 2A , the execution of the identity registration starts when the user U operates the API of the identity verification element 100 to submit a registration request. At this time, the identity verification component 100 receives the public key certificate data (for example, a natural person certificate containing identity information) uploaded by the user U at step S201 , the blockchain address (for example, as the user U accesses the block) Chain 600 account address), and digital signature (signature data encrypted with the private key of the public key certificate data) and other registration data. Next, the identity verification element 100 decrypts the digital signature (eg, using the public key of the public key certificate data) at step S202 and compares it with the public key certificate data and the blockchain address, and at step S203 After confirming that the comparison is correct, in step S204, the hash value, public key, valid date, certificate status and other information of the public key certificate data and the blockchain address are stored using the identity verification smart contract component 1000 into the blockchain 600, so as to complete the identity registration of the user U.

Next, referring to FIG. 2B , the execution of the identity verification can be performed continuously after step S204 in FIG. 2A , or according to the operational requirements of other elements of the system of the present invention. At this time, the identity verification component 100 or the document token contract component 400 (when the identity verification request is initiated by other components) receives the blockchain address to be queried input by the user U at step S205, to Start processing authentication requirements. Next, the identity verification component 100 or the document token contract component 400 calls the identity verification smart contract component 1000 in the blockchain 600 to query the relevant registration data (for example, the aforementioned user U's public key certificate data related content). Finally, the identity verification smart contract component 1000 returns the queried registration data (ie, the verification result) to the identity verification component 100 in step S207, and completes the identity verification operation.

FIG. 3 shows a flow of steps for the file transfer element 200 to execute the creation of the digital file 300 .

At step S301 , the user U inputs the original file of the digital file 300 and the blockchain address of the user U through the API of the file transfer element 200 . Based on the received blockchain address, the file transfer element 200 performs the identity verification of the user U by calling the identity verification element 100 in step S302 (as in the step shown in FIG. 2B above, through the identity verification element 100 or the file proxy The currency contract component 400 calls the identity verification smart contract component 1000 to look up the registration data in the blockchain 600). Next, after confirming that the identity verification is successful in step S303 (for example, confirming that the received blockchain address is consistent with the one recorded in the blockchain 600), the file transfer component 200 executes step S304 to transfer the digital file 300 (including its original file) is stored to the distributed file storage element 700 . At the same time, for the newly created digital file 300, the file transfer component 200 will call the file token contract component 400 in step S305 to create a corresponding file token in the blockchain 600 for the digital file 300, and in step S306, transfer the file The content of the token (the original hash value of the digital file 300 and/or copy hash value as an index) to the distributed file storage element 700 to complete the creation of the digital file 300 .

As mentioned above, the content of the file token of the digital file 300 created by the file token contract component 400 mainly includes two parts: the token ontology information and the metadata (metadata) metadata. Data such as identification code and owner information, in this embodiment, the owner information refers to the blockchain address used by the user U during registration; and the metadata metadata records the digital file 300 in a data exchange format such as JSON The creation time, the original hash value, the copy hash value, the encrypted IPFS address used to store the original copy, the encrypted IPFS address used to store the copy, and the transaction time of the file token. In some embodiments, the IPFS address used to store the original or copy of the digital file 300 is encrypted using an encryption/decryption key derived from owner information (blockchain address), and the encryption/decryption key's The calculation method adopts the SHA hash algorithm: SHA(SHA(Address)+ Key ₁ ). At this time, the owner information is brought into the Address field, and the fixed key value Key ₁ representing the system is used to perform SHA hash together. The encryption and decryption keys can be obtained by calculus. In other embodiments, the original hash value and/or the copy hash value of the above-mentioned digital file 300 is calculated by other hash algorithms different from the above-mentioned SHA hash algorithm, and the original hash value and/or the copy hash value is It is used as the index value of the file token corresponding to the digital file 300 when the distributed file storage element 700 is queried, for the subsequent verification of the original of the specific digital file 300 and the traceability of the transfer record in the blockchain 600. The search basis for the file token .

FIG. 4 discloses a flow of steps for the file transfer component 200 to perform transfer (transaction) of the digital file 300 .

First, the file transfer component 200 receives a transaction request from the user U (and the current owner of the digital file 300 ) at step S401 . At this point, the identity of the user U (ie, the owner of the digital file 300 ) who wants to perform the transfer of the digital file 300 has been verified (eg, according to the steps shown in FIG. 2B ) The process is to call the identity verification smart contract component 1000 through the identity verification component 100 or the document token contract component 400 to confirm that the blockchain address entered by the user U is correct), and compare the area through the document token contract component 400 The file token stored in the block chain 600 confirms that the user U is indeed the owner of the digital file 300, the user U (the owner) can input the file code of the digital file 300 through the API of the file transfer element 200 The blockchain address of the transaction object of the currency (receiver, that is, any user U other than the owner of the digital file 300), and assigns the identification code of the digital file 300 to be traded (such as the token recorded in the file token). content of the ontology information) to initiate the processing of the transaction request.

Next, the document transfer component 200 calls the identity verification smart contract component 1000 through the identity verification component 100 or the document token contract component 400 at step S402 to search the registration data in the blockchain 600 to verify the identity of the transaction object (receiver) (Similar to the step flow shown in FIG. 2B , confirming that the recipient's blockchain address is the real registrant), and confirming that the transaction object's identity verification is passed at step S403, the transaction of the digital file 300 is started.

Then, the file transfer element 200 calculates a decryption key (eg, the above-mentioned SHA hash algorithm) using the blockchain address of the owner of the digital file 300 in step S404, and uses the decryption key to transfer the digital file 300 to the Decrypt the encrypted original or copy IPFS address recorded by the file token (ie, obtain the original original or copy IPFS address).

Furthermore, the file transfer component 200 calls the file token contract component 400 in step S405 to update the content of the file token corresponding to the digital file 300 in the blockchain 600, including: using the blockchain token of the transaction object (receiver). address to calculate a new encryption key (also using the above-mentioned SHA hash algorithm), re-encrypt the original or copy IPFS address obtained by decryption and record it in the file token; change the owner information of the file token to the transaction object (receiver) blockchain address; and record transaction time of file tokens, etc.

Finally, the file transfer component 200 calls the file history smart contract component 900 in step S406 to update the transfer record of the file token of the digital file 300 (for example, record the updated content of the file token at step S405 ) and record it in Blockchain 600.

FIG. 5 shows a flow of steps for the decryption and download component 800 to perform the download of the digital file 300 . At this time, the user U who can decrypt and download the digital file 300 must be the real owner, so the following steps will explain the process from the user U submitting the download application to the completion of the download.

First in step S501 , the client (eg, API) of the decrypted download element 800 can combine the identification code of the digital file 300 submitted by the user U (such as the one recorded in the owner record of the file token) into application data.

Next, the client of the decrypted download element 800 signs the application data with the private key corresponding to the public key certificate data of the user U in step S502, and uses the identification code of the digital file 300 and the signed application data to decrypt the application data. The server of the download element 800 proposes an application procedure for downloading the digital file 300 .

Then, the server of the decryption download element 800 searches for and retrieves the corresponding file token in the blockchain 600 through the file token contract element 400 according to the identification code submitted by the user U in step S503 .

The decryption download element 800 further calls the identity verification element 100 in step S504 to use the identity verification smart contract element 1000 to search (using the owner information recorded in the file token) the public key certificate data of the user U recorded in the blockchain 600 The corresponding public key is used to decrypt and verify the application data after signing, so as to confirm the real owner of the user U-factor bit file 300 .

Next, when it is determined in step S505 that the verification of the application data is passed (that is, the signed application data is successfully decrypted by using the public key), the identity verification component 100 can use the obtained document token to record the owner (user U) in step S506 Compute the decryption key (e.g. using the SHA hash described above) Algorithm), and use this decryption key to decrypt the original or copy IPFS address recorded in the file token and return it to the decryption download element 800.

Finally, in step S507 , the decryption download element 800 can download the digital file 300 from the IPFS address of the obtained original or copy of the digital file 300 to the distributed file storage element 700 , so that the user U can obtain the original file content of the digital file 300 .

FIG. 6 discloses an embodiment in which the original verification and traceability component 500 performs the original verification of a specific digital document 300 or the traceability of the transfer record. At this time, since the original verification and traceability component 500 is used to provide a public service, any user U (regardless of whether it has registered with the blockchain 600 in advance) can report to the original verification and traceability component 500 with the specific document held by him or her. Make a request to verify legality or retroactively transfer records.

First, the client (eg, API) of the original verification and traceability component 500 calculates the hash value (ie, the hash value to be verified) of the specific file that the user U wants to verify in step S601 . At this time, the method of calculating the hash value to be verified is the same as the hash algorithm used to establish the original hash value or the duplicate hash value when the file token contract component 400 creates the file token, and is not described herein.

Next, the client of the original verification and traceability component 500 submits a request for the original verification and traceability transfer record to the server of the original verification and traceability component 500 according to the hash value to be verified of the specific document in step S602, and the original verification and traceability are performed. The element 500 will call the file transfer element 200 to the distributed file storage element 700 to inquire whether there is a file token corresponding to the relevant digital file 300 based on the hash value to be verified as the index value, and then call the file token contract element 400 to the blockchain. 600 The corresponding file token is retrieved.

Then, in the case where the existence of the file token is confirmed in step S603 (that is, the specific file is one of the digital files 300 stored by the distributed file storage element 700), the original verification and traceability are performed. The file 500 is further analyzed in step S604 by comparing the hash value to be verified calculated at step S601 with the hash value of the original or copy recorded in the file token, so as to confirm that the specific file is indeed the legal original of the digital file 300 (ie, Digital files that have not been forged or illicitly altered 300).

Furthermore, when step S605 confirms the validity of the specific file, the original verification and traceability component 500 will further call the file history smart contract component 900 in step S606 to output all transfer records of the file token corresponding to the specific file, And in step S607, the file token itself and its transfer record corresponding to the specific file are returned for the user U to read.

Each of the above-mentioned components can be software, hardware or firmware; in the case of hardware, it can be a processing unit, processor, computer or server with data processing and computing capabilities; in the case of software or firmware, It may include instructions executable by a processing unit, processor, computer or server.

The present invention further discloses a computer-readable medium, which is applied to a computing device or computer having a processor (eg, CPU, GPU, etc.) and/or memory, and stores instructions, and can utilize the computing device or computer The computer-readable medium is executed by a processor and/or a memory, so as to execute the above steps when the computer-readable medium is executed.

To sum up, the system, method and computer-readable medium for the verification and transfer traceability of the original digital document of the present invention mainly utilize the smart contract of non-replaceable tokens to convert the digital document into a unique, indivisible or duplicated digital document. Digital assets, and use a decentralized file system to permanently store the original files of digital files, and then integrate the user's public key certificate data to confirm the relationship between digital files and their owners and transfer records, so it can be open, transparent and highly secure. A flexible, efficient and easy-to-use solution to realize the original verification mechanism and transfer traceability of digital documents.

The above-mentioned embodiments are only used to illustrate the effect of this case, rather than to limit this case. Modifications and changes are made in the form. Therefore, the scope of protection of the rights in this case should be listed in the scope of the patent application described later.

100: Authentication element

200: File transfer element

300: digital file

400: Document Token Contract Element

500: Original Verification and Traceability Elements

600: Blockchain

700: Decentralized Archive Storage Element

800: Decrypt download components

900: Document History Smart Contract Element

1000: Identity Verification Smart Contract Components

Claims (19)

A system for verification and transfer traceability of digital documents, comprising: an identity verification element, which maintains a user's address in a blockchain through an identity verification smart contract element, including a blockchain address and a public key with a hash value , the registration data of the public key certificate data of the validity date and certificate status; the file transfer element is based on the identity verification element through the identity verification smart contract element to maintain the user's including this area in the blockchain The blockchain address and the registration data of the public key certificate data with the hash value, the public key, the validity date and the certificate status perform the maintenance of the original of the digital file; the document token contract element is based on the The file transfer element maintains the user's including the blockchain address with the hash value, public key, expiry date and certificate status in the blockchain through the authentication smart contract element for the authentication element. The original maintenance operation of the digital file performed by the registration data of the public key certificate data of the user maintains the file token of the digital file in the blockchain; and a distributed file storage element, which stores the digital file. The original file and the index value of the file token. The system of claim 1, wherein the method of maintaining the registration data by the identity verification element comprises a registration operation, and the execution method of the registration operation comprises: causing the identity verification element to receive the registration information of the user, wherein, The registration data further includes a digital signature encrypted with the public key certificate data and the blockchain address using the private key of the public key certificate data; the public key to decrypt the digital signature; and cause the authentication element to compare the decrypted content of the digital signature with the public key certificate data and the blockchain address, and if the result of the comparison is consistent, cause the authentication element to Registration data is stored on the blockchain through the identity verification smart contract element. The system of claim 1, wherein the manner in which the identity verification element maintains the registration data includes a verification operation, and the verification operation is performed in a manner comprising: causing the identity verification element to receive the blockchain address; and causing the identity verification element to receive the blockchain address; and The identity verification component searches the corresponding registration data in the blockchain through the identity verification smart contract component according to the blockchain address, so that the identity verification component returns the content of the registration data. The system of claim 1, wherein the original maintenance operation includes a creation operation of the digital file, and the execution mode of the creation operation includes: causing the file transfer element to receive the original file and the block of the digital file chain address; make the document transfer element call the authentication element through the authentication smart contract element to query the registration data in the blockchain based on the blockchain address to confirm the blockchain address and the The registration information matches those recorded in the registration data; cause the file transfer element to store the original file in the distributed file storage element; and make the file transfer element call the file token contract element to produce the digital file in the blockchain the file token, so that the file transfer element records the index value of the file token in the distributed file storage element, wherein the index value is a hash value of the digital file. The system of claim 1, wherein the document token includes token ontology information and metadata metadata, wherein the token ontology information includes an identifier for the digital document and an address representing the blockchain , and the metadata metadata includes the creation time of the digital file, the hash value, the encrypted storage address, and the transaction time of the file token. The system of claim 5, wherein the original maintenance operation includes a transfer operation of the document token of the digital file, and the execution method of the transfer operation includes: causing the document transfer component to receive the identification code and recipient blockchain address of the digital document input by the user; to cause the document transfer component to call the identity verification smart contract component through the identity verification component to find the block the registration data in the chain to verify that the recipient blockchain address is one of the registered blockchain addresses; cause the file transfer element to calculate using the user's blockchain address decrypting the key, decrypting the encrypted storage address to obtain the storage address; and causing the file transfer element to call the file token contract element according to the recipient blockchain address to update the file token, further comprising: The owner information is updated from the blockchain address to the recipient's blockchain address; the recipient's encryption key is calculated according to the recipient's blockchain address, and the encrypted storage address is updated to the recipient's blockchain address. the result of encrypting the storage address with the user's encryption key; and updating the transaction time. The system according to claim 6, further comprising: a document history smart contract element, which is used for storing the transfer record of the document token according to the result of executing the transfer operation by the document transfer element. The system as described in claim 7 further includes: an original verification and traceability component, which is used to perform the original verification and transfer record traceability of a specific document, and the execution methods for the original verification and transfer record traceability of the specific document include: Let the original verification and traceback element calculate the hash value to be verified for the specific document; in the case where the document transfer element confirms that the hash value to be verified matches the index value stored in the distributed file storage element, make the The document token contract element retrieves the document token of the digital document; and in the event that the hash value to be verified for the particular document matches the hash value of the document token, causes the original verification and traceability element to determine the the specified document is the legal original of the digital document so that the original The verification and traceability component calls the document history smart contract component to output the transfer record of the document token. The system of claim 5, further comprising: a decryption download element for downloading the original file of the digital file from the distributed file storage element, the method of downloading the original file of the digital file comprising: making The decryption download element receives the identification code of the digital document and calculates the signature application data, wherein the signature application data is signed by the identification code with the private key of the public key certificate data of the user; make the document The token contract element obtains the document token in the blockchain according to the identification code; causes the identity verification element to obtain the document token from the blockchain through the identity verification smart contract element according to the owner information recorded in the document token the public key in the registration data, and then use the public key to decrypt the signing application data; in the case of successful decryption of the signing application data, make the identity verification element calculate the decryption key with the blockchain address, and then decrypting the encrypted storage address using the decryption key to obtain a storage address; and instructing the decryption download element to download the original file of the digital file to the distributed file storage element using the storage address. A method for verification and transfer traceability of digital documents, comprising: enabling an identity verification element to maintain a user's address in a blockchain through an identity verification smart contract element and a block chain address and a hash value, a public key, The registration data of the public key certificate data of the validity date and certificate status; make the file transfer component maintain the user's including the blockchain according to the identity verification component through the identity verification smart contract component address with the hash value, public key, expiry date and the registration data of the public key certificate data of the certificate status four perform the original maintenance operation of the digital document; make the document token contract element transfer the element according to the document to the identity verification element through the identity verification smart contract element in The digit executed by the registration data of the user including the blockchain address and the public key certificate data with the hash value, public key, expiry date and certificate status is maintained in the blockchain The original maintenance operation of the file maintains the file token of the digital file in the blockchain; and causes the distributed file storage element to store the original file of the digital file and the index value of the file token. The method of claim 10, wherein when the method of maintaining the registration data is a registration operation, the step of enabling the identity verification element to maintain the user's registration information in the blockchain through the identity verification smart contract element comprises the following steps: Sub-step: make the authentication element receive the registration data of the user, wherein the registration data further includes encrypting the public key certificate data and the blockchain address with the private key of the public key certificate data the digital signature; causing the authentication element to decrypt the digital signature using the public key of the public key certificate data; and causing the authentication element to combine the decrypted contents of the digital signature with the public key certificate data and The block chain address is compared, and when the result of the comparison is consistent, the identity verification element is made to store the registration data in the block chain through the identity verification smart contract element. The method of claim 10, wherein when the method of maintaining the registration data is a verification operation, the step of enabling the identity verification element to maintain the user's registration information in the blockchain through the identity verification smart contract element comprises the following steps: sub-step: causing the authentication element to receive the blockchain address; and The identity verification component searches the corresponding registration data in the blockchain through the identity verification smart contract component according to the blockchain address, so that the identity verification component returns the content of the registration data. The method of claim 10, wherein when the original maintenance operation is a creation operation of the digital document, the document transfer component executes the original maintenance operation of the digital document according to the identity verification smart contract component of the user The steps include the following sub-steps: causing the document transfer element to receive the original file and the blockchain address of the digital document; causing the document transfer element to call the identity verification element through the identity verification smart contract element based on the The blockchain address queries the registration data in the blockchain to confirm that the blockchain address is consistent with that recorded in the registration data; instruct the file transfer element to store the original file to the distributed file storage element ; and cause the file transfer element to call the file token contract element to generate the file token of the digital file in the blockchain, so that the file transfer element records the file token in the distributed file storage element the index value, wherein the index value is the hash value of the digital file. The method of claim 10, wherein the document token includes token ontology information and metadata metadata, wherein the token ontology information includes an identifier for the digital document and an address representing the blockchain , and the metadata metadata includes the creation time of the digital file, the hash value, the encrypted storage address, and the transaction time of the file token. The method of claim 14, wherein when the original maintenance operation is a transfer operation of the document token of the digital document, the instructing document transfer component executes the authentication smart contract component according to the identity of the user The step of maintaining the original of the digital file includes the following sub-steps: enabling the file transfer element to receive the identification code and the recipient's blockchain address of the digital file input by the user; causing the document transfer component to call the identity verification smart contract component through the identity verification component to look up the registration data in the blockchain to verify that the recipient blockchain address is the one of the registered blockchain addresses one of: having the file transfer element compute a decryption key using the user's blockchain address, decrypt the encrypted storage address to obtain a storage address; and make the file transfer element rely on the recipient The blockchain address calls the file token contract element to update the file token, further comprising: updating the owner information from the blockchain address to the recipient blockchain address; according to the recipient block The chain address calculates the recipient encryption key and updates the encrypted storage address to the result of encrypting the storage address with the recipient encryption key; and updates the transaction time. The method according to claim 15, further comprising: causing the document history smart contract component to record the transfer record of the document token according to the result of the document transfer component performing the transfer operation. The method described in claim 16, further comprising: causing the original verification and traceability component to perform the original verification and transfer record traceability of a specific document, including the following sub-steps: causing the original verification and traceability component to calculate the pending verification of the specific document Hash value; in the case of having the file transfer element confirm that the hash value to be verified matches the index value stored in the distributed file storage element, make the file token contract element retrieve the file code of the digital file and, if the hash value to be verified of the particular document matches the hash value of the document token, cause the original verification and traceability component to determine that the particular document is the legal original of the digital document, so that the original The verification and traceability component calls the document history smart contract component to output the transfer record of the document token. The method of claim 14, further comprising: causing the decryption download element to download the original file of the digital file from the distributed file storage element, comprising the following sub-steps: causing the decryption download element to receive the identification of the digital file code and calculate the signing application data, wherein the signing application data is the signer of the identification code with the private key of the public key certificate data of the user; make the document token contract element obtain the area according to the identification code The document token in the blockchain; make the identity verification component obtain the public key in the registration data from the blockchain through the identity verification smart contract component according to the owner information recorded in the document token, and then use The public key decrypts the signing application data; in the case that the signing application data is successfully decrypted, make the identity verification element calculate the decryption key with the blockchain address, and then use the decryption key to store the encrypted storage address decrypting to obtain a storage address; and causing the decrypted download element to download the original file of the digital file to the distributed file storage element using the storage address. A computer-readable medium used in a computing device or a computer and storing instructions for executing the method for verifying and transferring a digital file as described in any one of claims 10 to 18.

Images