WO2021134897A1 - Blockchain supply chain transaction hidden dynamic supervision system and method - Google Patents

Abstract

Disclosed are a blockchain supply chain transaction hidden dynamic supervision system and method. The system comprises: a supervision institution node device, which is used for transmitting a plurality of signature parameters when a signature parameter application of a core enterprise node device is received; the core enterprise node device, which is used for encrypting a payable using a Pedeersen commitment to obtain a confidential transaction, calculating a proof parameter by using a Bulletproof range proof and on the basis of the plurality of signature parameters and a random number, and signing the confidential transaction and the proof parameter and chaining same; a first-level supplier node device, which is used for receiving transaction data and decrypting same, wherein the supervision institution node device is also used for acquiring the confidential transaction and the proof parameter and determining the payable on the basis of the proof parameter so as to realize supervision of the payable; and a blockchain supply chain platform, which is used for storing the transaction data and verifying the correctness of the transaction data and the signature. By means of the method, a payable in a blockchain supply chain can be encrypted and chained to avoid privacy leakage, and the payable is supervised.

Description

Block chain supply chain transaction hidden dynamic supervision system and method Technical field

The present invention relates to the technical field of block chains, in particular to a dynamic supervision system and method for block chain supply chain transaction hiding.

Background technique

The existing blockchain supply chain system connects core enterprise node equipment, supplier node equipment, factor node equipment, and bank node equipment through the blockchain. When core enterprise node equipment, supplier node equipment, factorer node equipment, and bank node equipment are used as blockchain nodes to join the blockchain supply chain system, they need to be authorized to join, and there is a certain degree of trust between the blockchain nodes Basically, the credibility of the data is enhanced by the way of transaction data on the chain such as accounts receivable, bill vouchers, and mortgage goods vouchers.

However, these transaction data often contain commercial secrets, and the transaction data is written on the chain, resulting in the leakage of commercial secrets and personal privacy, and there is no supervision by regulatory agencies.

Therefore, it is necessary to provide a hidden dynamic supervision scheme for blockchain supply chain transactions.

Summary of the invention

The main purpose of the present invention is to provide a block chain supply chain transaction hidden dynamic supervision system and method, which aims to solve the technical problem of privacy leakage and no supervision caused by the clear text of transaction data in the block chain supply chain.

In order to achieve the above-mentioned objective, the first aspect of the present invention provides a blockchain supply chain transaction hidden dynamic supervision system, the system includes:

The supervisory authority node device is used to send multiple signature parameters when receiving a signature parameter application from the core enterprise node device;

The core enterprise node device is used to use Pedersen's commitment to encrypt the payables promised by the core enterprise to the first-tier supplier to obtain confidential transactions; use Bulletproof range certification to calculate the certification parameters based on the multiple signature parameters and the generated random numbers; Sign the confidential transaction and the certification parameters and upload the signed transaction data to the blockchain supply chain platform;

A first-level supplier node device, configured to use the blockchain supply chain platform to receive the transaction data, decrypt it, and output it to the first-level supplier;

The regulatory agency node device is also used to obtain the transaction data from the blockchain supply chain platform; obtain confidential transactions and certification parameters in the transaction data, and determine the confidential transaction based on the certification parameters Payables in to achieve the supervision of said payables;

The blockchain supply chain platform is used to store the transaction data; verify the correctness of the transaction data and the legitimacy of the signature of the regulatory agency node device.

According to an optional embodiment of the present invention, the multiple signature parameters include a first signature parameter, a second signature parameter, and a third signature parameter, and the random number includes a first random number and a second random number;

The use of Pedersen's commitment to encrypt the payables promised by the core enterprise to the first-tier suppliers to obtain confidential transactions includes:

Use Pedersen to promise to obtain confidential transactions based on the payable and the first random number encryption;

The core enterprise node equipment uses the Bulletproof range to prove that the calculation proof parameters based on the multiple signature parameters and the generated random numbers include:

Calculating the first calculation number and the second calculation number based on the transaction data;

Use Bulletproof range proof to calculate the first proof parameter based on the first calculation number, the second calculation number, and the second random number;

Using the Bulletproof range proof to calculate a second proof parameter based on the first signature parameter, the second signature parameter, and the third signature parameter;

The target certification parameter is calculated based on the first calculation number and the second signature parameter.

According to an optional embodiment of the present invention, the calculating target certification parameters based on the first calculation number and the second signature parameter includes:

Sending the first certification parameter and the second certification parameter to the regulatory agency node device, and receiving the first public parameter replies from the regulatory agency node device;

Use Pedersen commitment to randomly calculate the first commitment parameter and the second commitment parameter;

Sending the first commitment parameter and the second commitment parameter to the regulatory agency node device, and receiving a second public parameter replies from the regulatory agency node device;

The target certification parameter is calculated based on the first calculation number, the second signature parameter, the first public parameter, and the second public parameter.

According to an optional embodiment of the present invention, when the supervisory authority node device receives the signature parameter application of the core enterprise node device, sending multiple signature parameters includes:

Generate a first candidate parameter, a second candidate parameter, and a third candidate parameter; sign the first candidate parameter to obtain a first signature parameter, sign the second candidate parameter to obtain a second signature parameter, and perform a signature on the first candidate parameter; Signing the three candidate parameters to obtain the third signature parameter; when receiving the signature parameter application of the core enterprise node device, send the first signature parameter, the second signature parameter, and the third signature parameter; or

Generate the first candidate parameter, the second candidate parameter and the third candidate parameter; use the Bulletproof range to prove the calculation of the second proof parameter based on the first candidate parameter, the second candidate parameter and the third candidate parameter; use the private key Sign the second certification parameter and save the signature and the corresponding first candidate parameter, the second candidate parameter, and the third candidate parameter; when a signature parameter request from the core enterprise node device is received Sending the first candidate parameter as the first signature parameter, the second candidate parameter as the second signature parameter, and the third candidate parameter as the third signature parameter to the core enterprise node device, And send the signature of the second certification parameter to the core enterprise node device.

According to an optional embodiment of the present invention, the first-level supplier node device is further configured to:

Splitting the UTXO in the transaction data into a first UTXO and a second UTXO, wherein the sum of the amount in the first UTXO and the amount in the second UTXO is equal to the amount in the UTXO;

Perform transactions with other blockchain entity node devices based on the first UTXO and the second UTXO;

Perform range proof on the first UTXO and the second UTXO based on Bulletproof.

According to an optional embodiment of the present invention, the first-level supplier node device or the other blockchain entity node device is also used to pay the core enterprise node device to the core enterprise node device when the payable is due In response to the successful redemption of the payable, the UTXO held is invalidated and signed or returned to the core enterprise node device.

According to an optional embodiment of the present invention, the system further includes:

At least one risk assessment agency node device, used to read transaction data stored on the blockchain supply chain platform, use a pre-trained risk assessment model to perform risk assessment on the transaction data, and send the risk assessment result to The other blockchain entity node devices.

The second aspect of the present invention provides a dynamic supervision method for block chain supply chain transaction hiding, and the method includes:

When the supervisory authority node device receives the signature parameter request of the core enterprise node device, sending the first signature parameter, the second signature parameter, and the third signature parameter to the core enterprise node device;

The core enterprise node device uses Pedersen's commitment to encrypt the payables promised by the core enterprise to the primary supplier to obtain confidential transactions;

The core enterprise node device uses the Bulletproof range certificate to calculate the proof parameter based on the multiple signature parameters and the generated random number;

The core enterprise node device signs the confidential transaction and the certification parameters and uploads the signed transaction data to the blockchain supply chain platform;

The first-level supplier node device uses the blockchain supply chain platform to receive the transaction data, decrypt it, and output it to the first-level supplier;

The regulatory agency node device obtains the transaction data from the blockchain supply chain platform; obtains the confidential transaction and certification parameters in the transaction data, and determines the payable in the confidential transaction based on the certification parameters In order to achieve the supervision of the said payables.

According to an optional embodiment of the present invention, when the supervisory authority node device receives the signature parameter request of the core enterprise node device, it sends the first signature parameter, the second signature parameter, and the third signature parameter to the core enterprise node device include:

Generate a first candidate parameter, a second candidate parameter, and a third candidate parameter; sign the first candidate parameter to obtain a first signature parameter, sign the second candidate parameter to obtain a second signature parameter, and perform a signature on the first candidate parameter; Signing the three candidate parameters to obtain the third signature parameter; when receiving the signature parameter application of the core enterprise node device, send the first signature parameter, the second signature parameter, and the third signature parameter; or

Generate the first candidate parameter, the second candidate parameter, and the third candidate parameter; use the Bulletproof range to prove the calculation of the proof parameter based on the first candidate parameter, the second candidate parameter, and the third candidate parameter; The certification parameter is signed and the signature and the corresponding first candidate parameter, the second candidate parameter, and the third candidate parameter are saved; when a signature parameter request from the core enterprise node device is received, the The first candidate parameter is used as the first signature parameter, the second candidate parameter is used as the second signature parameter, and the third candidate parameter is used as the third signature parameter and sent to the core enterprise node device.

According to an optional embodiment of the present invention, the method further includes:

The UTXO in the transaction data is split into a first UTXO and a second UTXO through the first-level supplier node device, wherein the sum of the amount in the first UTXO and the amount in the second UTXO is equal to the The amount in UTXO;

Perform transactions with other blockchain entity node devices based on the first UTXO and the second UTXO;

Perform range proof on the first UTXO and the second UTXO based on Bulletproof.

According to an optional embodiment of the present invention, the method further includes:

Read transaction data stored on the blockchain supply chain platform through at least one risk assessment agency node device, use a pre-trained risk assessment model to perform risk assessment on the transaction data, and send the risk assessment result to the Other blockchain entity node equipment.

The blockchain supply chain transaction hidden dynamic supervision system and method according to the embodiment of the present invention, by introducing the concepts of Pedersen commitment and Bulletproof scope proof, encrypts the plaintext payables of core enterprises into confidential transactions and puts them on the chain. Only both parties can Decrypt the amount in the transaction data, protect the transaction privacy from being leaked, and protect the business secrets of the blockchain entity. After obtaining the confidential transaction and Bulletproof scope certificate, the supervisory authority will supervise the confidential transaction through the Bulletproof scope certificate.

Description of the drawings

FIG. 1 is a schematic diagram of the architecture of a dynamic supervision system for block chain supply chain transaction hiding according to an embodiment of the present invention;

2 is a schematic diagram of the architecture of a dynamic supervision system for block chain supply chain transaction hiding according to an embodiment of the present invention;

3 is a schematic flowchart of a method for dynamic supervision of transaction hiding in a blockchain supply chain according to an embodiment of the present invention;

FIG. 4 is a schematic diagram of the structure of a blockchain node device according to an embodiment of the present invention.

Detailed ways

In order to make the objectives, technical solutions and advantages of the present invention clearer, the following further describes the present invention in detail with reference to the accompanying drawings and embodiments. It should be understood that the specific embodiments described here are only used to explain the present invention, but not used to limit the present invention. Based on the embodiments of the present invention, all other embodiments obtained by those of ordinary skill in the art without creative work shall fall within the protection scope of the present invention.

The terms "first" and "second" in the specification and claims of this application and the above-mentioned drawings are used to distinguish similar objects, and are not necessarily used to describe a specific sequence or sequence. It should be understood that the data used in this way can be interchanged under appropriate circumstances so that the embodiments described herein can be implemented in a sequence other than the content illustrated or described herein. In addition, the terms "including" and "having" and any variations of them are intended to cover non-exclusive inclusions. For example, a process, method, system, product, or device that includes a series of steps or units is not necessarily limited to those clearly listed. Those steps or units may include other steps or units that are not clearly listed or are inherent to these processes, methods, products, or equipment.

In addition, the technical solutions between the various embodiments can be combined with each other, but it must be based on what can be achieved by a person of ordinary skill in the art. When the combination of technical solutions is contradictory or cannot be achieved, it should be considered that such a combination of technical solutions does not exist. , Is not within the protection scope of the present invention.

Example one

As shown in FIG. 1, it is a schematic diagram of the architecture of a dynamic supervision system for blockchain supply chain transaction hiding according to an embodiment of the present invention.

The block chain supply chain transaction hidden dynamic supervision system 1 can include, but is not limited to: block chain supply chain platform 10, core enterprise node equipment 11, first-tier supplier node equipment 12, other block chain entity node equipment 13 and supervision Institutional node equipment 14.

In an optional embodiment, the other block chain entity node device 13 may include one or a combination of the following: a secondary supplier node device 13, a bank node device 13, and a factor node device 13. The core enterprises, primary suppliers, secondary suppliers, banks, and factoring companies are all referred to as blockchain entities. The core enterprise node equipment 11, the first-level supplier node equipment 12, the second-level supplier node equipment 13, the bank node equipment 13, and the factoring company node equipment 13 are referred to as blockchain entity node equipment.

Before accessing the blockchain supply chain platform 10, the blockchain entity first applies for a digital certificate from a certificate authority (CA). After the CA determines the identity of the applicant, it assigns a public key to the applicant, and at the same time associates the distributed public key with the applicant's identity information and signs it to form a digital certificate and send it to the applicant. Subsequently, when the blockchain entity is connected to the blockchain supply chain platform 10, the blockchain supply chain platform 10 uses the public key of the CA to verify the signature on the digital certificate of the connected blockchain entity, and when the verification passes , The digital certificate is considered valid and the blockchain entity is allowed to access the blockchain supply chain platform 10. When the verification fails, the digital certificate is considered invalid and the blockchain entity is denied access to the blockchain supply chain Platform 10. The content of the digital certificate includes: information of the electronic visa authority, public key user information, public key, signature, validity period, and so on.

In some embodiments, the core enterprise node device 11 is used to apply to the regulatory agency node device 14 for multiple signature parameters and generate random numbers; Pedersen promises to encrypt the payables promised by the core enterprise to the first-tier suppliers to obtain confidential transactions Use Bulletproof range proof to calculate proof parameters based on the multiple signature parameters and the random number; sign the confidential transaction and the proof parameters and upload the signed transaction data to the blockchain supply chain platform 10.

The core enterprise purchases the products of the first-tier supplier and promises to pay, the first-tier supplier can purchase the products of the second-tier supplier based on a part of the said payables, and the second-tier supplier can further split the payables promised by the first-tier supplier Purchase products from other second-tier suppliers after distribution, and so on. Factors can purchase payables held by primary and secondary suppliers. The bank can provide loans based on the supplier's payables.

In order to avoid the disclosure of transaction privacy, after the core company purchases the products of the first-tier supplier and promises to pay, the core company encrypts the payables through the core company node device 11 to obtain confidential transactions, ensuring that the core company and the first-tier supplier Privacy of transactions between.

The core enterprise may apply for the first signature parameter ρ, the second signature parameter s _L, and the third signature parameter s _{R from the} node device of the regulatory agency before proceeding with the proof of the transaction data range.

Since the signature parameters have nothing to do with the transaction data proof value, you can apply for multiple signature parameters in advance and save them locally, and finally use these signature parameters offline and generate proof parameters. The signature parameter refers to a plurality of candidate parameters selected by a regulatory agency node device, and parameters obtained after signing the multiple candidate parameters; or, a plurality of candidate parameters selected by a regulatory agency node device based on multiple candidate parameters The parameter calculates the proof parameter, signs the proof parameter and saves the signature. At this time, the candidate parameter corresponding to the signature is used as the signature parameter.

In an optional embodiment, the core enterprise node device 11 may calculate the first calculation number and the second calculation number based on the transaction data, and generate the first random number and the second random number.

The core enterprise node device may use a random number generation algorithm to generate random numbers in advance. For example, a first random number r and a second random number α are generated.

Wherein, the second random number α is a number within _{Z p.} The Z _p is an integer modulo p additive group.

In an optional embodiment of the present invention, the calculation of the first calculation number and the second calculation number based on the transaction data includes:

Perform binary expansion on the transaction data;

Calculating the quotient of each binary number in the expanded transaction data and 2 ⁿ to obtain the first calculated number;

The difference between the first calculation number and the unit array is calculated to obtain the second calculation number.

The first calculation number a _L is an n-dimensional array composed of binary numbers 0 or 1, and the ^{product of each number in the n-dimensional array and 2 n} corresponds to the data at the same position in the transaction data .

Exemplarily, assuming an n-dimensional array a _L = {0,1,1,...0,1,0}, then {0*2 ⁰ , 1*2 ¹ , 1*2 ² ,..., 0*2 ^{n- 2} , 1*2 ^n-1 }=v, where v is the payable.

In an optional embodiment of the present invention, the second calculated number

1 ^{n is} an n-dimensional array composed of binary numbers 1.

Exemplarily, suppose an n-dimensional array a _L ={0,1,1,...0,1,0}, then a _R ={-1,0,0,...-1,0,-1}.

In an optional embodiment, the core enterprise node device 11 is used to use Pedersen's commitment to encrypt the payables promised by the core enterprise to the primary supplier to obtain confidential transactions.

Pedersen promised to hide a transaction data in an encrypted ciphertext. The core enterprise node device can then choose to decrypt the promised value. Once the promise is issued, the core enterprise node device cannot find another value that still has the same promise calculation result.

Confidential transactions refer to the use of Pedersen promises to hide transaction data, so that only both parties to the transaction can see the transaction data, while others cannot see the transaction data, and both parties cannot forge the transaction data.

^{In specific implementation, Pedersen promises UTXO=g v} h ^r in the confidential transaction obtained based on the payment and the first random number encryption, where v is the payment, v∈[0, 2 ⁿ -1], r is the first random number.

The first system parameter g and the second system parameter h are the basis of discrete logarithms, and are a system parameter that is published worldwide.

The core enterprise node device 11 uses Bulletproof range certification to calculate a first certification parameter based on the first random number, the second random number, and the first calculation number.

Bulletproof is the most efficient range proof algorithm currently used to prove that the value of a promise is ^{between [0, 2 n} -1].

In an optional embodiment of the present invention, the first certification parameter

Wherein, g and h are all public system parameters, α is the second random number, a _L is the first calculation number, and a _R is the second calculation number.

It should be noted that the system parameters g and h in this embodiment are different from the first system parameter g and the second system parameter h.

The core enterprise node device 11 uses the Bulletproof range proof to calculate a second proof parameter based on the first signature parameter, the second signature parameter, and the third signature parameter.

In an optional embodiment of the present invention, the second certification parameter

Where ρ is the first signature parameter, s _L is the second signature parameter, and s _R is the third signature parameter.

The core enterprise node device 11 calculates a target certification parameter based on the first calculation number and the second signature parameter.

Specifically, the core enterprise node device 11 calculating target certification parameters based on the first calculation number and the second signature parameter includes:

Sending the first certification parameter A and the second certification parameter S to the regulatory agency node device 14 and receiving the first public parameter z replies from the regulatory agency node device;

Use Pedersen commitment to randomly calculate the first commitment parameter

And the second commitment parameter

Sending the first commitment parameter and the second commitment parameter to the transaction data supervisor node device and receiving the second public parameter x returned by the transaction data supervisor node device;

Based on the first calculation number, the second signature parameter, the first public parameter, and the second public parameter, the target proof parameter P=a _L -z·1 ⁿ +s _L ·x is calculated, where z Is the first public parameter, and x is the second public parameter.

In this optional embodiment, the core enterprise node device sends the first certification parameter to the supervisory authority node device

The second proof parameter

The node device of the regulatory agency dynamically selects a random number z as the first public number and publicly responds to the node device of the core enterprise, where the random number

The core enterprise node device 11 generates a fifth random number τ ₁ and a sixth random number τ ₂ , and the fifth random number τ ₁ and the sixth random number τ ₂ are both _{numbers within Z p} .

The core enterprise node device 11 may use the Pedersen commitment to calculate the first commitment based on the fifth random number, the first system parameter g, and the second system parameter h

Use the Pedersen promise to calculate the second promise based on the sixth random number, the first system parameter g, and the second system parameter h

The core enterprise node device 11 sends the first promise and the second promise to the supervisory authority node device 14. The regulatory agency node device 14 dynamically selects a random number x as the second public number and publicly responds to the core enterprise node device, where the random number

The core enterprise node device 11 sends the confidential transaction, the first certification parameter, the second certification parameter, and the target certification parameter to the regulatory agency node device 14, so that the regulatory agency node device 14 is based on the The target proof parameter, the first public parameter, and the second public parameter determine the payable in the confidential transaction, so as to realize the supervision of the payable.

In some embodiments, the primary supplier node device 12 is configured to use the blockchain supply chain platform 10 to receive the transaction data, decrypt it, and output it to the primary supplier.

The first-level supplier, as the recipient of the payable by the core enterprise, receives the verification parameters sent by the core enterprise node device 11 through the first-level supplier node device 12. The core enterprise can inform the primary supplier of the payment and the first random number r through key agreement and other methods.

In an optional embodiment, the first-level supplier node device 12 is also used to split the UTXO in the transaction data into a first UTXO and a second UTXO, based on the first UTXO and the second UTXO. UTXO conducts transactions with other blockchain entity node devices.

The primary supplier node device 12 sends the transaction data to the blockchain supply chain platform 10 for storage.

In this optional embodiment, the sum of the amount in the first UTXO and the amount in the second UTXO is equal to the amount in the UTXO.

The primary supplier can split the UTXO in the transaction data and trade it to secondary suppliers, factoring companies, or mortgage loans through banks. The secondary supplier, factor or bank can further split and trade the UTXO after receiving the split. Once the split UTXO is used, the original UTXO is no longer available, but the transaction data about the original UTXO will still be recorded on the blockchain supply chain platform for traceability and inquiries.

In an optional embodiment, the first-tier supplier node device 12 is also used to perform range certification on the first UTXO and the second UTXO based on Bulletproof.

In this optional embodiment, when a sum of UTXO0 is split into UTXO1 and UTXO2, additive homomorphism can be used to obtain UTXO0=UTXO1+UTXO2, and the Bulletproof algorithm can be used to prove that the split UTXO1 and UTXO2 The amount is a legal value, that is, the amount in UTXO is a positive number within a certain range.

Exemplary, assuming

The holder of the UTXO can split it into UTXO ₁ and UTXO ₂ . Use additive homomorphism to get:

It can be seen that x ₀ = x ₁ + x ₂ , which ensures that the sum of the amounts in the two UTXOs is equal to the amount hidden by the original UTXOs. At the same time, the Bulletproof algorithm is used to generate a range proof, which is used to prove _{that the amount in UTXO 1} and UTXO ₂ is within a reasonable range. For example, the range of the amount can be set to [0, 2^32-1]. The process of generating range proof by the Bulletproof algorithm is the prior art, and the present invention will not go into details.

It should be noted that in the above embodiment, the splitting of UTXO into two sub-UTXOs is taken as an example. In fact, the first-tier supplier node device can also split UTXO into 3 or more parts for more flexibility. Deal with secondary suppliers.

It should be noted that, in this embodiment, when the first-level supplier node device splits the UTXO into multiple sub-UTXOs, it can also initiate a supervisable confidential transaction based on the sub-UTXO, and initiate a supervisable confidential transaction with the core enterprise node device Similarly, the first-tier supplier node device also needs to first apply for the first signature parameter, the second signature parameter, and the third signature parameter from the regulatory agency node device, and then initiate a supervisable secret transaction according to the method of the core enterprise node device to initiate a supervisable secret transaction. Confidential transactions. Similarly, other supplier node devices (including primary, secondary, tertiary or even lower-level supplier node devices) can also initiate supervisable confidential transactions according to the aforementioned method after obtaining UTXO, so that the entire system Confidential transactions in are all under the supervision of the node device of the regulatory agency.

In an optional embodiment, the first-level supplier node device 12 or the other blockchain entity node device 13 is also used to pay the core enterprise node device when the payable is due The payable, in response to the successful redemption of the payable, invalidate the UTXO held or return it to the core enterprise node device.

The due time stamp of the payment is marked in the UTXO.

When the blockchain entities holding UTXOs (for example, primary suppliers, secondary suppliers, factoring companies, banks, etc.) determine through their respective node devices that the payables are due, they can use the blockchain supply chain The transaction data recorded on the platform 10 redeem the payables to the core enterprise node device 11.

When the core enterprise receives the information of redemption of the payable through the core enterprise node device 11, it confirms whether the payable is due. After confirming that the due payment is due, the debt is redeemed. After receiving the debt, the blockchain entity signs, indicating that the debt has been received. When or after receiving the debt, the blockchain entity holding the UTXO invalidates the UTXO signature or returns it to the core enterprise to form a complete transaction data record on the blockchain supply chain platform 10.

The regulatory agency node device 14 is configured to send multiple signature parameters when receiving a signature parameter application from the core enterprise node device.

In an optional embodiment, when the supervisory authority node device receives the signature parameter application of the core enterprise node device, sending multiple signature parameters includes:

Generate a first candidate parameter, a second candidate parameter, and a third candidate parameter; sign the first candidate parameter to obtain a first signature parameter, sign the second candidate parameter to obtain a second signature parameter, and perform a signature on the first candidate parameter; The three candidate parameters are signed to obtain the third signature parameter; upon receiving the signature parameter application of the core enterprise node device, the first signature parameter, the second signature parameter, and the third signature parameter are sent.

In this optional embodiment, the regulatory agency node device respectively signs the first candidate parameter, the second candidate parameter, and the third candidate parameter, and sends the first candidate parameter, the second candidate parameter, and the third candidate parameter and their respective Sign to the core enterprise node device.

In an alternative embodiment, when the supervisory authority node device receives the signature parameter application of the core enterprise node device, sending multiple signature parameters includes:

Generate the first candidate parameter, the second candidate parameter and the third candidate parameter; use the Bulletproof range to prove the calculation of the second proof parameter based on the first candidate parameter, the second candidate parameter and the third candidate parameter; use the private key Sign the second certification parameter and save the signature and the corresponding first candidate parameter, the second candidate parameter, and the third candidate parameter; when a signature parameter request from the core enterprise node device is received Sending the first candidate parameter as the first signature parameter, the second candidate parameter as the second signature parameter, and the third candidate parameter as the third signature parameter to the core enterprise node device, And send the signature of the second certification parameter to the core enterprise node device.

In this optional embodiment, the regulatory agency node device sets the second certification parameter

The signature of and multiple signature parameters are sent to the core enterprise node device, and the core enterprise node device verifies the signature of the second certification parameter to determine the authenticity of the three signature parameters. Since only the second proof parameter needs to be signed, there is no need to sign the first candidate parameter, the second candidate parameter, and the third candidate parameter, which reduces the number of signatures; and sends multiple unsigned candidate parameters as multiple signature parameters For core enterprise node devices, the amount of information transmission is reduced, and the efficiency of sending signature parameters is improved.

Wherein, the first signature parameter p, the second signature parameter s _L, and the third signature parameter s _R are all numbers within the range of _{Z p.} These signature parameters are all dynamically generated one-time random numbers.

The supervisory authority node device 14 uses Bulletproof range proof to calculate proof parameters based on the first signature parameter, the second signature parameter, and the third signature parameter.

In an optional embodiment of the present invention, the second certification parameter

Among them, h is the base of discrete logarithm, which is a system parameter publicly disclosed worldwide, g and h are public system parameters, ρ is the first signature parameter, and s _L is the second signature parameter. s _R is the third signature parameter.

The supervisory authority node device 14 uses a private key to sign the certification parameter and saves the signature and the corresponding first signature parameter, the second signature parameter, and the third signature parameter.

The regulatory agency node device 14 uses digital signature technology to sign the certification parameters. Digital signature technology is based on asymmetric encryption algorithm and message digest algorithm to achieve the authentication of the source and integrity of the message, and at the same time, it is a guarantee that the signer cannot deny. There are two roles in a digital signature system, one is the signer of the message and the other is the authenticator of the message. The signer of the message can sign the information digest of a message according to his private key, and the authenticator of the message verifies the information digest of a message according to his public key. If the verification is passed, it can be proved that the source of the message is the signer of the message, the information digest of the message is the same and the signer cannot deny it.

The supervisory authority node device 14 is further configured to send the first signature parameter, the second signature parameter, and the third signature parameter to the core enterprise node device when a signature parameter request from the core enterprise node device is received. Signature parameters.

Before the transaction data sender performs the transaction data range certification, it applies to the regulatory agency node device for signature parameters through the core enterprise node device, and the regulatory agency node device sends the signed certification parameters to the first signature parameter, the second signature parameter, and The third signature parameter is sent to the supervisory authority node device.

In an optional embodiment of the present invention, the supervisory authority node device 14 is further configured to reply to the first certification parameter and the second certification parameter sent by the core enterprise node device. One public parameter.

In this optional embodiment, the core enterprise node device sends the first certification parameter to the supervisory authority node device

And the second proof parameter

The node device of the regulatory agency dynamically selects a random number z as the first public number and publicly responds to the node device of the core enterprise, where the random number

In an optional embodiment of the present invention, the regulatory agency node device 14 is further configured to reply to the second public parameter when the first commitment parameter and the second commitment parameter sent by the core enterprise node device are received.

In this optional embodiment, the core enterprise node device sends the first promise and the second promise to the supervisory authority node device. The regulatory agency node device dynamically selects a random number x as the second public number and publicly responds to the core enterprise node device, where the random number

It can be seen that the random number y is a one-time random number dynamically and randomly generated when the regulatory agency node device 14 receives the first certification parameter and the second certification parameter sent by the core enterprise node device, and the random number x is the A one-time random number dynamically and randomly generated when the regulatory agency node device 14 receives the first commitment parameter and the second commitment parameter.

The regulatory agency node device 14 is also used to obtain the transaction data from the blockchain supply chain platform; obtain confidential transactions and certification parameters in the transaction data, and determine the confidentiality based on the certification parameters Payables in the transaction to achieve the supervision of said payables.

In an optional embodiment of the present invention, the supervisory authority node device 14 determining the payable in the confidential transaction based on the certification parameter to implement the supervision of the payable includes:

Bring the first public parameter, the second public parameter, and the second signature parameter into the target certification parameter, and calculate a target random number;

Calculating transaction data in the confidential transaction according to the target random number;

Wherein, the target random number is an n-dimensional array composed of 0 or 1, and the ^{product of each number in the n-dimensional array and 2n} corresponds to the data at the same position in the payable.

In this optional embodiment, the supervisory authority node device can calculate the transaction data v in the certificate according to the signature in the certificate and the parameter P in the certificate. Since a _L is the binary form of transaction data v, P, x, and z are all public values, so the regulator node device can calculate the value of a _{L according to the value of the random number s L} possessed, and then calculate the payable v .

In this embodiment, multiple signature parameters are selected by the regulatory agency node device and the certification parameters are calculated. After signing the calculated certification parameters, the signed multiple signature parameters can be sent to the core enterprise node device, so that the core enterprise node The device calculates the certification parameters based on multiple signature parameters. Since the supervisory authority node equipment and the core enterprise node equipment use the same multiple signature parameters to calculate the same proof parameters, when the confidential transaction is reversed on the blockchain network, the supervisory authority node equipment can supervise the core enterprise node equipment Proof parameters, thus realizing the supervision of confidential transactions.

The blockchain supply chain platform 10 is used to store the transaction data; verify the correctness of the transaction data and the legitimacy of the signature of the regulatory agency node device.

It should be noted that the blockchain supply chain platform 10, the core enterprise node equipment 11, the first-tier supplier node equipment 12, and the regulatory agency node equipment 14 in the blockchain supply chain transaction hidden dynamic supervision system 1 must If it exists, the other blockchain entity node device 13 optionally exists. That is, the secondary supplier node equipment, bank node equipment, and factor node equipment may optionally exist in the blockchain supply chain transaction hidden dynamic supervision system 1.

Allows regulatory agencies to dynamically supervise, do not need to review every transaction, and supervise by pre-distributed one-time random numbers, with perfect forward security characteristics.

Example two

As shown in FIG. 2, it is a schematic diagram of another architecture of the blockchain supply chain transaction hiding dynamic supervision system according to an embodiment of the present invention.

The blockchain supply chain transaction hidden dynamic supervision system 1 includes the blockchain supply chain platform 10, core enterprise node equipment 11, first-tier supplier node equipment 12, and other blockchain entity node equipment 13, which are described in Figure 1. The regulatory agency node device 14 may also include at least one risk assessment agency node device 15.

Wherein, the at least one risk assessment agency node device 15 is used to read transaction data stored on the blockchain supply chain platform 10, use a pre-trained risk assessment model to perform risk assessment on the transaction data, and The risk assessment result is sent to the other blockchain entity node device 13.

At least one risk assessment agency node device 15 can obtain the historical transaction data recorded on the blockchain supply chain platform 10 in advance, and train a risk assessment model based on the historical transaction data to evaluate the value of the payment in each transaction data.

When at least one risk assessment agency node device 15 reads the newly recorded transaction data on the blockchain supply chain platform 10, it uses a risk assessment model to evaluate the value of the payable in the newly recorded transaction data, and evaluate the risk The result is sent to potential purchasers of UTXO (that is, the payable of the core enterprise) corresponding to the transaction data. The potential purchasers may include, but are not limited to, secondary suppliers, factoring companies, banks, etc.

After secondary suppliers, factoring companies, banks, etc. obtain the risk assessment results, they can choose to trade with UTXO holders and finally complete the payment process of the payables.

In some embodiments, the blockchain supply chain platform 10 may be a blockchain system based on any UTXO model and a blockchain system supporting the UTXO account model.

In some embodiments, the blockchain supply chain system 1 may further include: a data decryption module, a UTXO amount range certification module, a blockchain wallet, a lightweight wallet, a statistical analysis tool, an entity list, etc.

It should be noted that before transactions of all blockchain entities are put on the chain, one-time signature parameters dynamically selected by the regulatory agency and proof parameters based on random number calculations need to be obtained and signed in advance, and the blockchain entity generates Bulletproof based on the one-time signature parameters. Prove that it has the characteristics of forward security. In addition to verifying the correctness of transaction data, the blockchain supply chain platform also verifies the legitimacy of the signature of the regulatory agency. Since the signature parameter is a one-time number dynamically generated by the regulatory agency, when the regulatory agency's key is leaked, it will not cause a wide range of transaction data to be leaked.

The blockchain supply chain privacy transaction dynamic supervision system described in this embodiment introduces the concepts of Pedersen commitment and Bulletproof scope proof, encrypts the plaintext payables of core enterprises into confidential transactions and uploads them to the chain. Only both parties to the transaction can decrypt the transaction data The amount in the transaction privacy is protected from being leaked, and the business secrets of the blockchain entity are protected. After obtaining the confidential transaction and Bulletproof scope certificate, the supervisory authority will supervise the confidential transaction through the Bulletproof scope certificate.

Example three

Refer to FIG. 3, which is a schematic flowchart of a method for dynamic supervision of transaction hiding in a blockchain supply chain disclosed in an embodiment of the present invention.

The block chain supply chain transaction concealment dynamic supervision method is applied to a block chain supply chain network. The block chain supply chain transaction concealment dynamic supervision method specifically includes the following steps. According to different needs, the steps in the flowchart The order can be changed, and some steps can be omitted.

S31: When the supervisory authority node device receives the signature parameter request of the core enterprise node device, it sends the first signature parameter, the second signature parameter, and the third signature parameter to the core enterprise node device.

In an optional embodiment, when the supervisory authority node device receives the signature parameter request of the core enterprise node device, it sends the first signature parameter, the second signature parameter, and the third signature parameter to the core enterprise node device. include:

Generate a first candidate parameter, a second candidate parameter, and a third candidate parameter; sign the first candidate parameter to obtain a first signature parameter, sign the second candidate parameter to obtain a second signature parameter, and perform a signature on the first candidate parameter; The three candidate parameters are signed to obtain the third signature parameter; upon receiving the signature parameter application of the core enterprise node device, the first signature parameter, the second signature parameter, and the third signature parameter are sent.

In an optional embodiment, the first candidate parameter, the second candidate parameter, and the third candidate parameter are generated; the Bulletproof range proof is based on the first candidate parameter, the second candidate parameter, and the third candidate parameter Calculate the certification parameters; use the private key to sign the certification parameters and save the signature and the corresponding first candidate parameter, the second candidate parameter, and the third candidate parameter; when the core enterprise node device is received When requesting signature parameters, send the first candidate parameter as the first signature parameter, the second candidate parameter as the second signature parameter, and the third candidate parameter as the third signature parameter. Core enterprise node equipment.

S32, the core enterprise node device uses Pedersen's commitment to encrypt the payables promised by the core enterprise to the first-tier supplier to obtain confidential transactions.

S33, the core enterprise node device uses Bulletproof range proof to calculate proof parameters based on the multiple signature parameters and the generated random numbers.

S34. The core enterprise node device signs the confidential transaction and the certification parameters and uploads the signed transaction data to the blockchain supply chain platform.

S35: The first-level supplier node device uses the blockchain supply chain platform to receive the transaction data, decrypt it, and output it to the first-level supplier.

S36. The regulatory agency node device obtains the transaction data from the blockchain supply chain platform; obtains the confidential transaction and certification parameters in the transaction data, and determines the confidential transaction in the confidential transaction based on the certification parameters. Payables to achieve the supervision of said payables.

In an optional embodiment, the method further includes:

The UTXO in the transaction data is split into a first UTXO and a second UTXO through the first-level supplier node device, wherein the sum of the amount in the first UTXO and the amount in the second UTXO is equal to the The amount in UTXO;

Perform transactions with other blockchain entity node devices based on the first UTXO and the second UTXO;

Perform range proof on the first UTXO and the second UTXO based on Bulletproof.

In an optional embodiment, the method further includes:

Read transaction data stored on the blockchain supply chain platform through at least one risk assessment agency node device, use a pre-trained risk assessment model to perform risk assessment on the transaction data, and send the risk assessment result to the Other blockchain entity node equipment.

For the specific process of each embodiment in the method for dynamic supervision of privacy transactions in a blockchain supply chain described in the third embodiment, please refer to the corresponding descriptions in the first and second embodiments, and the present invention will not elaborate on it.

It should be noted that before transactions of all blockchain entities are put on the chain, they need to obtain and sign in advance the one-time signature parameters dynamically generated by the regulatory agency and the proof parameters calculated based on random numbers. The blockchain entity generates Bulletproof based on the one-time signature parameters. Prove that it has the characteristics of forward security. In addition to verifying the correctness of transaction data, the blockchain supply chain platform also verifies the legitimacy of the signature of the regulatory agency. Since the signature parameter is a one-time number dynamically generated by the regulatory agency, when the regulatory agency's key is leaked, it will not cause a wide range of transaction data to be leaked.

The blockchain supply chain privacy transaction dynamic supervision method described in this embodiment introduces the concepts of Pedersen commitment and Bulletproof scope proof, encrypts the plaintext payables of core companies into confidential transactions and uploads them to the chain. Only both parties to the transaction can decrypt the transaction data The amount in the transaction privacy is protected from being leaked, and the business secrets of the blockchain entity are protected. After obtaining the confidential transaction and Bulletproof scope certificate, the supervisory authority will supervise the confidential transaction through the Bulletproof scope certificate.

Example four

FIG. 4 is a schematic diagram of the internal structure of a blockchain node device disclosed in an embodiment of the present invention.

In this embodiment, the blockchain node device 4 may include a memory 41, a processor 42, a bus 43, and a transceiver 44.

The blockchain node device 4 may be a core enterprise node device, a regulatory agency node device, or a first-tier supplier node device, other blockchain entities (for example, a second-tier supplier, bank, factor) Node equipment, etc. When the blockchain node device 4 is a core enterprise node device, the function of the core enterprise node device described in Embodiment 1 or Embodiment 2 is performed; when the blockchain node device 4 is a regulatory agency node device , Execute the function of the regulatory agency node device described in the first embodiment or the second embodiment; when the blockchain node device 4 is the first-tier supplier node device, execute the function described in the first embodiment or the second embodiment The function of the first-level supplier node device; when the blockchain node device 4 is another blockchain entity node device, the function of the other blockchain entity node device described in the first embodiment or the second embodiment is performed.

The memory 41 includes at least one type of readable storage medium, and the readable storage medium includes flash memory, hard disk, multimedia card, card-type memory (for example, SD or DX memory, etc.), magnetic memory, magnetic disk, optical disk, and the like. The memory 41 may be an internal storage unit of the blockchain node device 4 in some embodiments, for example, the hard disk of the blockchain node device 4. In other embodiments, the memory 41 may also be an external storage device of the blockchain node device 4, for example, a plug-in hard disk equipped on the blockchain node device 4, a smart memory card (Smart Media Card, SMC). ), Secure Digital (SD) card, Flash Card, etc. Further, the memory 41 may also include not only the internal storage unit of the blockchain node device 4, but also an external storage device. The memory 41 can be used not only to store application programs and various data installed in the blockchain node device 4, but also to temporarily store data that has been output or will be output.

The processor 42 may be a central processing unit (CPU), controller, microcontroller, or microprocessor in some embodiments, and is used to run program codes or process data stored in the memory 41.

The bus 43 may be a peripheral component interconnect standard (PCI) bus or an extended industry standard architecture (EISA) bus, etc. The bus can be divided into address bus, data bus, control bus and so on. For ease of representation, only one thick line is used in FIG. 4 to represent it, but it does not mean that there is only one bus or one type of bus.

Further, the blockchain node device 4 may also include a network interface, and the network interface may optionally include a wired interface and/or a wireless interface (such as a WI-FI interface, a Bluetooth interface, etc.), which is usually used in the block The link node device 4 establishes a communication connection with other dispatch servers.

Optionally, the blockchain node device 4 may also include a user interface. The user interface may include a display (Display) and an input unit, such as a keyboard (Keyboard). Optionally, the user interface may also include a standard wired interface, wireless interface. Optionally, in some embodiments, the display may be an LED display, a liquid crystal display, a touch-sensitive liquid crystal display, an organic light-emitting diode (OLED) touch device, and the like. The display may also be called a display screen or a display unit, which is used to display the messages processed in the dispatch server and to display a visualized user interface.

FIG. 4 only shows the blockchain node device 4 with components 41-44. Those skilled in the art can understand that the structure shown in FIG. 4 does not constitute a limitation on the blockchain node device 4. It may be a bus-type structure or a star-shaped structure. The blockchain node device 4 may also include fewer or more components than shown in the figure, or a combination of certain components, or a different component arrangement. Other existing or future electronic products that can be adapted to the present invention should also be included in the protection scope of the present invention, and are included here by reference.

In the above-mentioned embodiments, it may be implemented in whole or in part by application programs, hardware, firmware, or any combination thereof. When implemented using an application program, it can be implemented in the form of a computer program product in whole or in part.

The computer program product includes one or more computer instructions. When the computer program instructions are loaded and executed on the computer, the processes or functions described in the embodiments of the present invention are generated in whole or in part. The computer may be a general-purpose computer, a special-purpose computer, a computer network, or other programmable devices. The computer instructions may be stored in a computer-readable storage medium or transmitted from one computer-readable storage medium to another computer-readable storage medium. For example, the computer instructions may be transmitted from a website, computer, server, or data center. Transmission to another website site, computer, server or data center via wired (for example, coaxial cable, optical fiber, digital subscriber line) or wireless (for example, infrared, wireless, microwave, etc.). The computer-readable storage medium may be any available medium that can be stored by a computer or a data storage device such as a server or a data center integrated with one or more available media. The usable medium may be a magnetic medium (for example, a floppy disk, a hard disk, and a magnetic tape), an optical medium (for example, a DVD), or a semiconductor medium (for example, a solid state disk (SSD)).

Those skilled in the art can clearly understand that, for the convenience and conciseness of the description, the specific working process of the above-described system, device, and unit can refer to the corresponding process in the foregoing method embodiment, which will not be repeated here.

In the several embodiments provided in this application, it should be understood that the disclosed system, device, and method may be implemented in other ways. For example, the device embodiments described above are merely illustrative. For example, the division of the units is only a logical function division, and there may be other divisions in actual implementation, for example, multiple units or components may be combined It can be integrated into another system, or some features can be ignored or not implemented. In addition, the displayed or discussed mutual coupling or direct coupling or communication connection may be indirect coupling or communication connection through some interfaces, devices or units, and may be in electrical, mechanical or other forms.

The units described as separate components may or may not be physically separated, and the components displayed as units may or may not be physical units, that is, they may be located in one place, or they may be distributed on multiple network units. Some or all of the units may be selected according to actual needs to achieve the purpose of the solution in this embodiment.

In addition, the functional units in the various embodiments of the present application may be integrated into one processing unit, or each unit may exist alone physically, or two or more units may be integrated into one unit. The above-mentioned integrated unit can be implemented in the form of hardware or application program functional unit.

If the integrated unit is implemented in the form of an application function unit and sold or used as an independent product, it can be stored in a computer readable storage medium. Based on this understanding, the technical solution of the present application essentially or the part that contributes to the prior art or all or part of the technical solution can be embodied in the form of an application product, and the computer application product is stored in a storage The medium includes several instructions to make a dispatch server (which may be a personal computer, a server, or a network device, etc.) execute all or part of the steps of the methods described in the various embodiments of the present application. The aforementioned storage media include: U disk, hard disk, Read-Only Memory (Read-Only Memory, ROM), magnetic disk or optical disk and other media that can store program codes.

It should be noted that the sequence numbers of the above-mentioned embodiments of the present invention are only for description, and do not represent the advantages and disadvantages of the embodiments.

The above are only preferred embodiments of the present invention, and do not limit the scope of the present invention. Any equivalent structure or equivalent process transformation made by using the content of the description and drawings of the present invention, or directly or indirectly applied to other related technical fields , The same reason is included in the scope of patent protection of the present invention.

Claims (11)

1. A block chain supply chain transaction hidden dynamic supervision system, characterized in that, the system includes:

   The supervisory authority node device is used to send multiple signature parameters when receiving a signature parameter application from the core enterprise node device;

   The core enterprise node device is used to use Pedersen's commitment to encrypt the payables promised by the core enterprise to the first-tier supplier to obtain confidential transactions; use Bulletproof range certification to calculate the certification parameters based on the multiple signature parameters and the generated random numbers; Sign the confidential transaction and the certification parameters and upload the signed transaction data to the blockchain supply chain platform;

   A first-level supplier node device, configured to use the blockchain supply chain platform to receive the transaction data, decrypt it, and output it to the first-level supplier;

   The regulatory agency node device is also used to obtain the transaction data from the blockchain supply chain platform; obtain confidential transactions and certification parameters in the transaction data, and determine the confidential transaction based on the certification parameters Payables in to achieve the supervision of said payables;

   The blockchain supply chain platform is used to store the transaction data; verify the correctness of the transaction data and the legitimacy of the signature of the regulatory agency node device.
2. The block chain supply chain transaction hidden dynamic supervision system of claim 1, wherein the multiple signature parameters include a first signature parameter, a second signature parameter, and a third signature parameter, and the random number includes the first signature parameter. A random number and a second random number;

   The use of Pedersen's commitment to encrypt the payables promised by the core enterprise to the first-tier suppliers to obtain confidential transactions includes:

   Use Pedersen to promise to obtain confidential transactions based on the payable and the first random number encryption;

   The core enterprise node equipment uses the Bulletproof range to prove that the calculation proof parameters based on the multiple signature parameters and the generated random numbers include:

   Calculating the first calculation number and the second calculation number based on the transaction data;

   Use Bulletproof range proof to calculate the first proof parameter based on the first calculation number, the second calculation number, and the second random number;

   Using the Bulletproof range proof to calculate a second proof parameter based on the first signature parameter, the second signature parameter, and the third signature parameter;

   The target certification parameter is calculated based on the first calculation number and the second signature parameter.
3. The block chain supply chain transaction hidden dynamic supervision system according to claim 2, wherein the calculation of the target proof parameter based on the first calculation number and the second signature parameter comprises:

   Sending the first certification parameter and the second certification parameter to the regulatory agency node device, and receiving the first public parameter replies from the regulatory agency node device;

   Use Pedersen commitment to randomly calculate the first commitment parameter and the second commitment parameter;

   Sending the first commitment parameter and the second commitment parameter to the regulatory agency node device, and receiving a second public parameter replies from the regulatory agency node device;

   The target certification parameter is calculated based on the first calculation number, the second signature parameter, the first public parameter, and the second public parameter.
4. The blockchain supply chain transaction concealment dynamic supervision system according to claim 3, wherein when the supervisory authority node device receives the signature parameter application of the core enterprise node device, sending multiple signature parameters comprises:

   Generate a first candidate parameter, a second candidate parameter, and a third candidate parameter; sign the first candidate parameter to obtain a first signature parameter, sign the second candidate parameter to obtain a second signature parameter, and perform a signature on the first candidate parameter; Signing the three candidate parameters to obtain the third signature parameter; upon receiving the signature parameter application of the core enterprise node device, sending the first signature parameter, the second signature parameter, and the third signature parameter; or

   Generate the first candidate parameter, the second candidate parameter and the third candidate parameter; use the Bulletproof range to prove the calculation of the second proof parameter based on the first candidate parameter, the second candidate parameter and the third candidate parameter; use the private key Sign the second certification parameter and save the signature and the corresponding first candidate parameter, the second candidate parameter, and the third candidate parameter; when a signature parameter request from the core enterprise node device is received Sending the first candidate parameter as the first signature parameter, the second candidate parameter as the second signature parameter, and the third candidate parameter as the third signature parameter to the core enterprise node device, And send the signature of the second certification parameter to the core enterprise node device.
5. The block chain supply chain transaction hidden dynamic supervision system of claim 1, wherein the first-level supplier node device is also used for:

   Splitting the UTXO in the transaction data into a first UTXO and a second UTXO, wherein the sum of the amount in the first UTXO and the amount in the second UTXO is equal to the amount in the UTXO;

   Perform transactions with other blockchain entity node devices based on the first UTXO and the second UTXO;

   Perform range proof on the first UTXO and the second UTXO based on Bulletproof.
6. The block chain supply chain transaction hidden dynamic supervision system according to claim 5, wherein the first-level supplier node device or the other block chain entity node device is also used when the payable reaches After the period, the payable is redeemed to the core enterprise node device, and in response to the successful redemption of the payable, the UTXO held is invalidated or returned to the core enterprise node device.
7. The block chain supply chain transaction hidden dynamic supervision system according to claim 5 or 6, characterized in that, the system further comprises:

   At least one risk assessment agency node device, used to read transaction data stored on the blockchain supply chain platform, use a pre-trained risk assessment model to perform risk assessment on the transaction data, and send the risk assessment result to The other blockchain entity node devices.
8. A block chain supply chain transaction hidden dynamic supervision method, characterized in that, the method includes:

   When the supervisory authority node device receives the signature parameter request of the core enterprise node device, sending the first signature parameter, the second signature parameter, and the third signature parameter to the core enterprise node device;

   The core enterprise node device uses Pedersen's commitment to encrypt the payables promised by the core enterprise to the primary supplier to obtain confidential transactions;

   The core enterprise node device uses the Bulletproof range proof to calculate the proof parameter based on the multiple signature parameters and the generated random number;

   The core enterprise node device signs the confidential transaction and the certification parameters and uploads the signed transaction data to the blockchain supply chain platform;

   The first-level supplier node device uses the blockchain supply chain platform to receive the transaction data, decrypt it, and output it to the first-level supplier;

   The regulatory agency node device obtains the transaction data from the blockchain supply chain platform; obtains the confidential transaction and certification parameters in the transaction data, and determines the payable in the confidential transaction based on the certification parameters In order to achieve the supervision of the said payables.
9. The blockchain supply chain transaction hidden dynamic supervision method according to claim 8, wherein when the supervisory authority node device receives the signature parameter request of the core enterprise node device, it sends the first node device to the core enterprise node device. The signature parameters, the second signature parameters, and the third signature parameters include:

   Generate a first candidate parameter, a second candidate parameter, and a third candidate parameter; sign the first candidate parameter to obtain a first signature parameter, sign the second candidate parameter to obtain a second signature parameter, and perform a signature on the first candidate parameter; Signing the three candidate parameters to obtain the third signature parameter; when receiving the signature parameter application of the core enterprise node device, send the first signature parameter, the second signature parameter, and the third signature parameter; or

   Generate the first candidate parameter, the second candidate parameter, and the third candidate parameter; use the Bulletproof range to prove the calculation of the proof parameter based on the first candidate parameter, the second candidate parameter, and the third candidate parameter; The certification parameter is signed and the signature and the corresponding first candidate parameter, the second candidate parameter, and the third candidate parameter are saved; when a signature parameter request from the core enterprise node device is received, the The first candidate parameter is used as the first signature parameter, the second candidate parameter is used as the second signature parameter, and the third candidate parameter is used as the third signature parameter and sent to the core enterprise node device.
10. The method for dynamic supervision of block chain supply chain transaction concealment according to claim 8 or 9, characterized in that the method further comprises:

    The UTXO in the transaction data is split into a first UTXO and a second UTXO through the first-level supplier node device, wherein the sum of the amount in the first UTXO and the amount in the second UTXO is equal to the The amount in UTXO;

    Perform transactions with other blockchain entity node devices based on the first UTXO and the second UTXO;

    Perform range proof on the first UTXO and the second UTXO based on Bulletproof.
11. The method for dynamic supervision of block chain supply chain transaction concealment according to claim 8 or 9, characterized in that the method further comprises:

    Read transaction data stored on the blockchain supply chain platform through at least one risk assessment agency node device, use a pre-trained risk assessment model to perform risk assessment on the transaction data, and send the risk assessment result to the Other blockchain entity node equipment.

Images