WO2022000134A1

WO2022000134A1 - Business data protection method and system based on supply chain management

Info

Publication number: WO2022000134A1
Application number: PCT/CN2020/098563
Authority: WO
Inventors: 李宝珠; 朱浩冰; 吕伟康; 周英
Original assignee: 天津理工大学; 深圳前海益链网络科技有限公司; 天津工业大学
Priority date: 2020-06-28
Filing date: 2020-06-28
Publication date: 2022-01-06

Abstract

A business data protection method and system based on supply chain management. The method comprises: deploying locally a responding service server (101); acquiring requested data in response to a service data request (102); performing an operation on data required by the service request to calculate so as to obtain operation data (103); encrypting the request data and the operation data to generate a private key ciphertext (104); and writing the private key ciphertext into a local server file or a database (105). The method and system can solve the problem of secure storage of a user's private key and address, prevents the threat of account information stored in a centralized system being stolen, and improves the safety guarantee of the user's account information.

Description

A business data protection method and system based on supply chain management

technical field

The invention relates to the field of supply chain management, in particular to a business data protection method and system based on supply chain management.

Background technique

The authority involved in supply chain management is intricate. The private key management and storage system of each merchant in the supply chain are basically centralized, and the private key is easy to be stolen. As a kind of distributed ledger, blockchain is an Internet database. technology, which is characterized by decentralization, openness and transparency. It was originally the underlying technology of Bitcoin and is now widely used in finance and other fields.

Inventory of the top ten data leakage incidents in 2018: Facebook, A station, Yuantong, SF Express and other data were stolen. Facebook: 87 million user data leaked; ACFUN: 9 million user data leaked; Huazhu’s multiple hotel chains: 240 million check-in records leaked; Marriott Starwood: 500 million customer user information leaked; YTO: 1 billion user information data Sold; SF Express: 300 million user information data was sold; 55.5 million CVs leaked; Under Armour: 150 million user information leaked; MyHeritage: 92 million user information leaked; Panera Bread: 37 million user information Leaks; these incidents are caused by the inherent security of the centralized system. The user's private key and address are stored in a centralized system. Once the system is compromised, the account security of all users will be affected. threaten.

SUMMARY OF THE INVENTION

The purpose of the present invention is to provide a commercial data protection method and system based on supply chain management, which can solve the problem of safe storage of user private keys and addresses, and avoid the situation that account information is threatened due to storage in a centralized system, The security of user account information is more secure.

For achieving the above object, the present invention provides the following scheme:

A supply chain management-based approach to business data protection, including:

Localized deployment of the responding business server;

Respond to business data requests and obtain request data;

Perform operations on the data that needs to be calculated in the business request, and obtain the operation data;

Encrypting the request data and the operation data to generate a private key ciphertext;

Write the ciphertext of the private key into the local server file or database.

Optionally, after writing the private key ciphertext into the local server file or database, the method further includes:

In response to the supplier's product transaction request, obtain the key file or data from the user's local server;

Parse the key file or the data in the file, and determine the private key ciphertext;

Decrypt the private key ciphertext according to the password input by the user, and obtain the private key for transaction.

Optionally, the local server file includes file header information, version information, account information, address information, generation time information, and data encryption technology identification information.

Optionally, the localized deployment of the responding business server specifically includes:

Compile the background responder into a shared library of xx.so and deploy it to the client's own server.

Optionally, encrypting the request data and the operation data to generate a private key ciphertext specifically includes:

Perform RSA asymmetric encryption on the request data and the operation data to generate a private key ciphertext.

Optionally, writing the private key ciphertext into a local server file or database specifically includes:

After the private key ciphertext is encoded by custom rules and/or base64, it is written into a local server file or database through a program call.

A business data protection system based on supply chain management, including:

The localized deployment module is used for localized deployment of the responding business server;

The data request response module is used to respond to the business data request and obtain the request data;

The operation data acquisition module is used to operate the data that needs to be calculated in the business request, and obtain the operation data;

an encryption module for encrypting the request data and the operation data to generate a private key ciphertext;

The ciphertext writing module is used to write the ciphertext of the private key into a local server file or database.

Optionally, also include:

The product transaction request response module is used to obtain the key file or data from the user's local server in response to the supplier's product transaction request;

A private key ciphertext determination module, used for parsing the key file or the data in the file to determine the private key ciphertext;

The decryption module is configured to decrypt the private key ciphertext according to the password input by the user, and obtain the private key for transaction.

Optionally, the localized deployment module specifically includes:

The localization deployment unit is used to compile the background responder into a shared library of xx.so and deploy it to the client's own server.

Optionally, the encryption module specifically includes:

An encryption unit, configured to perform RSA asymmetric encryption on the request data and the operation data to generate a private key ciphertext.

According to the specific embodiments provided by the present invention, the present invention discloses the following technical effects:

The present invention provides a business data protection method based on supply chain management. By deploying a responding business server locally, responding to a business data request, encrypting the request and the post-operation data to generate a private key ciphertext; The ciphertext is written into the local server file or database, which solves the problem of safe storage of user private keys and addresses, avoids the threat of account information theft due to storage in a centralized system, and ensures the security of user account information. .

Instruction drawings

The present invention will be further described below in conjunction with the accompanying drawings:

Fig. 1 is the flow chart of the commercial data protection method based on supply chain management of the present invention;

FIG. 2 is a structural diagram of a commercial data protection system based on supply chain management of the present invention.

detailed description

The technical solutions in the embodiments of the present invention are described in detail below with reference to the drawings in the embodiments of the present invention. Obviously, the described embodiments are only a part of the embodiments of the present invention, rather than all the embodiments; Embodiments, all other embodiments obtained by those of ordinary skill in the art without creative efforts fall within the protection scope of the present invention.

The purpose of the present invention is to provide a commercial data protection method and system based on supply chain management, which can solve the problem of safe storage of user private keys and addresses, and avoid the threat of account information being stolen due to being stored in a centralized system. , which is more secure for the security of user account information.

In order to make the above objects, features and advantages of the present invention more clearly understood, the present invention will be described in further detail below with reference to the accompanying drawings and specific embodiments.

Fig. 1 is a flow chart of the commercial data protection method based on supply chain management of the present invention. As shown in Figure 1, a business data protection method based on supply chain management includes:

Step 101: Perform localized deployment on the responding business server, specifically including:

Compile the background response program into a shared library of xx.so and deploy it to the client's own server instead of the platform server, which not only protects the platform code, but also eliminates the risk of the client's commercial privacy data being used by third parties from the network level.

Step 102: In response to the service data request, the request data is obtained.

Step 103: Compute the data to be calculated by the service request, and obtain the operation data.

Step 104: Encrypt the request data and the operation data to generate a private key ciphertext, which specifically includes:

Perform RSA asymmetric encryption on the request data and the operation data to generate a private key ciphertext. The ciphertext of the private key is in the hands of the customer, and the data cannot be parsed without the ciphertext of the private key, and the risk of data theft is guaranteed on a single machine.

Step 105: Write the private key ciphertext into a local server file or database, specifically including:

After the private key ciphertext is encoded by custom rules and/or base64, it is written into a local server file or database through a program call. The local server file includes file header information, version information, account information, address information, generation time information, and data encryption technology identification information.

When the customer needs to read/view data, first call the program to parse the file/read the database, read the data after parsing, decode the data through custom rules/or base64, and obtain the private key ciphertext after decoding. Through the private key ciphertext, you can have permission to read customer data.

As a preferred implementation manner, after writing the private key ciphertext into the local server file or database, it further includes:

Step 106: In response to the supplier's product transaction request, obtain the key file or data from the user's local server;

Step 107: Parse the key file or the data in the file, and determine the private key ciphertext;

Step 108: Decrypt the ciphertext of the private key according to the password input by the user, and obtain the private key for transaction.

FIG. 2 is a structural diagram of a commercial data protection system based on supply chain management of the present invention. As shown in Figure 2, a business data protection system based on supply chain management includes:

The localized deployment module 201 is configured to perform localized deployment on the responding service server.

The data request response module 202 is used for responding to the service data request to obtain the request data.

The operation data acquisition module 203 performs operation on the data required to be calculated by the service request, and acquires operation data.

The encryption module 204 is configured to encrypt the request data and the operation data to generate a private key ciphertext.

The ciphertext writing module 205 is used for writing the ciphertext of the private key into a local server file or database.

As a preferred embodiment, the commercial data protection system based on supply chain management includes a localization deployment module 201 , a data request response module 202 , an operation data acquisition module 203 , an encryption module 204 and a ciphertext writing module 205 . In addition, it also includes:

The product transaction request response module 206 is configured to obtain the key file or data from the user's local server in response to the supplier's product transaction request.

The private key ciphertext determining module 207 is configured to parse the key file or the data in the file, and determine the private key ciphertext;

The decryption module 208 is configured to decrypt the ciphertext of the private key according to the password input by the user, and obtain the private key for transaction.

The localized deployment module 201 specifically includes:

The encryption module 204 specifically includes:

Example 1:

The data structure stored in the file in the embodiment of the present invention includes file header information (head), address information (address), file version information (vertion), account information (id), file generation time information (time), and data encryption technology identification information (DID); detailed as follows:

(1) Generation of private key and address:

(2) Generate a key by encrypting the private key with a password

(3) Write the corresponding string to the file:

(4) Store the file on the local server.

(5) When receiving a transaction request from a supply chain merchant, parse the file, read the private key ciphertext and address from the file, enter the ciphertext password to decrypt the private key ciphertext, and then conduct the transaction.

The supply chain-based commercial data protection method and system provided by the present invention encrypts the private key through the generated private key and address, generates the private key ciphertext, and generates the private key ciphertext according to the address, file header information, private key ciphertext, version Information, account information, file generation time information, and data encryption technology identification information are written into the file, and the file is stored on the local server for use in transactions, which greatly improves the security of supplier transactions and ensures the security of user account information. ; Solve the problem of secure storage of private keys and addresses of upstream and downstream merchants in the supply chain.

The embodiments of the present invention have been described in detail above in conjunction with the accompanying drawings, but the present invention is not limited to the above-mentioned embodiments, and within the scope of knowledge possessed by those of ordinary skill in the art, it can also be done without departing from the purpose of the present invention. various changes.

Claims

A business data protection method based on supply chain management, characterized by comprising:

Localized deployment of the responding business server;

Respond to business data requests and obtain request data;

Perform operations on the data that needs to be calculated in the business request, and obtain the operation data;

Encrypting the request data and the operation data to generate a private key ciphertext;

Write the ciphertext of the private key into the local server file or database.
The business data protection method based on supply chain management according to claim 1, wherein after the writing the private key ciphertext into a local server file or database, the method further comprises:

In response to the supplier's product transaction request, obtain the key file or data from the user's local server;

Parse the key file or the data in the file, and determine the private key ciphertext;

Decrypt the private key ciphertext according to the password input by the user, and obtain the private key for transaction.
The business data protection method based on supply chain management according to claim 1, wherein the local server file includes file header information, version information, account information, address information, generation time information and data encryption technology identification information.
The business data protection method based on supply chain management according to claim 1, wherein the localized deployment of the responding business server specifically includes:

Compile the background responder into a shared library of xx.so and deploy it to the client's own server.
The method for protecting commercial data based on supply chain management according to claim 1, wherein the encrypting the request data and the operation data to generate a private key ciphertext specifically includes:

Perform RSA asymmetric encryption on the request data and the operation data to generate a private key ciphertext.
The business data protection method based on supply chain management according to claim 1, wherein the writing the private key ciphertext into a local server file or database specifically includes:

After the private key ciphertext is encoded by custom rules and/or base64, it is written into a local server file or database through a program call.
A business data protection system based on supply chain management, characterized by comprising:

The localized deployment module is used for localized deployment of the responding business server;

The data request response module is used to respond to the business data request and obtain the request data;

The operation data acquisition module performs operation on the data to be calculated by the business request, and obtains the operation data;

an encryption module for encrypting the request data and the operation data to generate a private key ciphertext;

The ciphertext writing module is used to write the ciphertext of the private key into a local server file or database.
The commercial data protection system based on supply chain management according to claim 7, further comprising:

The product transaction request response module is used to obtain the key file or data from the user's local server in response to the supplier's product transaction request;

A private key ciphertext determination module, used for parsing the key file or the data in the file to determine the private key ciphertext;

The decryption module is used for decrypting the private key ciphertext according to the password input by the user, and obtaining the private key for transaction.
The commercial data protection system based on supply chain management according to claim 7, wherein the localized deployment module specifically includes:

The localization deployment unit is used to compile the background responder into a shared library of xx.so and deploy it to the client's own server.
The commercial data protection system based on supply chain management according to claim 7, wherein the encryption module specifically includes:

An encryption unit, configured to perform RSA asymmetric encryption on the request data and the operation data to generate a private key ciphertext.