Article related information protection method, device, equipment, medium and product

Abstract

The invention discloses an article related information protection method and device, equipment, a medium and a product. The method comprises the following steps: acquiring an actual transportation route of an article from a starting node or a previous node to a target node; determining an encryption sequence of a plurality of encryption algorithms according to the speed of the article on different segmented routes of the actual transportation route; wherein the segmented route and the encryption algorithm have a corresponding relation; and performing multiple encryption on the first article related information of the article about the target node according to the encryption sequence to obtain first encrypted information. According to the invention, the related information of the article can be subjected to multiple encryption through multiple encryption algorithms based on the transportation route information of the article, and the security of the information in the transportation process is improved.

Description

Technical Field

[0001] The present application relates to the field of logistics information management technology, and in particular to a method, device, equipment, medium and product for protecting item-related information. Background Art

[0002] The supply chain refers to the entire process from producing parts, making intermediate products and final products, and finally delivering them to consumers. The suppliers, manufacturers, distributors, and consumers involved are connected through upstream and downstream members. During the transportation of items in the supply chain, the exposed information of the items is prone to information leakage. Therefore, the information related to the items needs to be encrypted during transportation.

[0003] However, since items often need to go through multiple transfers in the supply chain, the single encryption method used in existing technologies has poor encryption effect during multiple transfers of items, and the security of item-related information cannot be guaranteed. Summary of the invention

[0004] To solve the above technical problems, the present application provides a method, device, equipment, medium and product for protecting item-related information, which can multiplexly encrypt item-related information using multiple encryption algorithms based on the item's transportation route information, thereby improving the security of information during transportation.

[0005] The present application embodiment provides a method for protecting item-related information, including: Obtaining an actual transportation route of the item from the aforementioned node to the target node; the aforementioned node is a starting node or a previous node of the target node; Determining the encryption order of a plurality of encryption algorithms according to the speed of the item on different segmented routes of the actual transportation route; wherein the segmented routes and the encryption algorithms have a corresponding relationship; The first item-related information of the item about the target node is multiple-encrypted according to the encryption order to obtain first encrypted information.

[0006] As an improvement to the above solution, the encryption order of several encryption algorithms is determined according to the speed of the item on different segmented routes of the actual transportation route, including: Divide the actual transport route into a plurality of segment routes, and calculate the speed of the item on each segment route; Sorting the plurality of segmented routes according to the speed to obtain a sequence of the plurality of segmented routes; According to the corresponding relationship and the order of the plurality of segmented routes, the encryption order of the plurality of encryption algorithms is obtained.

[0007] As an improvement of the above solution, after obtaining the first encrypted information, the method further includes: Uploading and storing the first encrypted information and its corresponding first multiple decryption algorithm to a private chain built based on the node of the item; Confirming the next node of the target node, and granting the decryption authority of the target node to the next node; The link address of the private chain is set as an identification code, so that when the item reaches the next node and the next node has the decryption authority of the target node, the private chain is accessed by scanning the identification code to obtain the first encryption information and the first multiple decryption algorithm.

[0008] As an improvement of the above solution, before the first item-related information of the item about the target node is multiple-encrypted in the encryption order to obtain the first encrypted information, the method further includes: In the case of having the decryption authority granted by the previous node, scanning the identification code of the item to obtain a private chain address, and obtaining the second encryption information of the item with respect to the previous node and the corresponding second multiple decryption algorithm through the private chain address; Decrypting the second encrypted information according to the second multiple decryption algorithm to obtain second item-related information of the item with respect to the previous node; The second item related information is stored in the information base of the target node.

[0009] As an improvement of the above solution, the method further includes: After the user signs for the item, for each node, it is determined whether the item-related information stored in its information database about the previous node is consistent with the decrypted information uploaded to the private chain by the previous node; If so, all encrypted information stored in the private chain is deleted, and the information of the item stored in the information base of each node is encrypted according to the several encryption algorithms.

[0010] As an improvement to the above solution, the first item-related information includes at least one of the following: Basic information about the item; Logistics information of the item from the previous node to the destination node; The logistics information of the item from the starting node to the leaving the target node.

[0011] As an improvement of the above solution, before obtaining the transportation route of the item from the aforementioned node to the target node, the method further includes: Use several authentication units as alliance chain nodes to build an alliance chain and deploy smart contracts for the alliance chain; the smart contracts are used to generate DID identities for users; The DID identity authentication is performed on the user to which the item belongs through the alliance chain, and when the DID identity authentication is passed, the transportation of the item is initiated.

[0012] The present application also provides an article-related information protection device, including: A route acquisition module, used to acquire an actual transportation route of the item from the aforementioned node to the target node; the aforementioned node is a starting node or a node previous to the target node; An encryption sequence module, used to determine the encryption sequence of a plurality of encryption algorithms according to the speed of the item on different segmented routes of the actual transportation route; wherein the segmented routes and the encryption algorithms have a corresponding relationship; The multiple encryption module is used to multiple-encrypt the first item-related information of the item about the target node in the encryption order to obtain the first encrypted information.

[0013] An embodiment of the present application also provides an item-related information protection device, including a processor and a memory, wherein a computer program is stored in the memory, and the computer program is configured to be executed by the processor, and when the processor executes the computer program, any of the above-mentioned item-related information protection methods is implemented.

[0014] An embodiment of the present application further provides a computer-readable storage medium, wherein the computer-readable storage medium stores a computer program, wherein when the computer program is running, the device where the computer-readable storage medium is located is controlled to execute any of the above-mentioned methods for protecting item-related information.

[0015] An embodiment of the present application further provides a computer program product, including a computer program, which, when executed by a processor, implements any of the above-mentioned methods for protecting item-related information.

[0016] Compared with the prior art, the beneficial effects of the method, device, equipment, medium and product for protecting item-related information provided by the embodiments of the present application are: By determining the encryption order based on the speed of different sections of the item transportation route, multiple encryption algorithms are used to encrypt item-related information multiple times, solving the problem of a single encryption method and improving the security of item-related information in logistics transportation. The encryption order can be re-determined and encrypted at each transfer node according to the actual logistics speed, greatly improving the encryption effect of item-related information; by setting an identification code, the node needs to scan the identification code to access the private chain to obtain item-related information, further reducing the risk of data leakage and ensuring the security of item-related information; After the transportation of items is completed, the private chain data is cleared to avoid data bloat and improve data processing efficiency. At the same time, the item-related information is stored in the information base of each node in a staggered manner, and the item-related information stored in the information base of each node is encrypted, thus realizing diversified and secure data storage; By using the logistics nodes of the items as private chain nodes, building a private chain for the transportation of items, and establishing a consortium chain with several certification units, the identity of the user of the item is authenticated through the consortium chain, and the transportation of the item can be started when the verification is passed. This allows each node in the supply chain to quickly and securely verify the identity without going through a centralized organization, reducing the time cost of identity authentication, and ensuring the security of operations while reducing the risk of key data leakage. BRIEF DESCRIPTION OF THE DRAWINGS

[0017] Figure 1 It is a flowchart of a method for protecting item-related information provided by an embodiment of the present application; Figure 2 This is a schematic diagram of the structure of an item-related information protection device provided in an embodiment of the present application; Figure 3 It is a structural schematic diagram of an item-related information protection device provided in an embodiment of the present application. DETAILED DESCRIPTION

[0018] The following will be combined with the drawings in the embodiments of the present application to clearly and completely describe the technical solutions in the embodiments of the present application. Obviously, the described embodiments are only part of the embodiments of the present application, not all of the embodiments. Based on the embodiments in the present application, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of this application.

[0019] See also Figure 1 , Figure 1 1 is a flow chart of a method for protecting item-related information provided by an embodiment of the present application. The method for protecting item-related information includes: S1: Obtaining the actual transportation route of the item from the aforementioned node to the target node; the aforementioned node is the starting node or the previous node of the target node; S2: determining the encryption order of a plurality of encryption algorithms according to the speed of the item on different segmented routes of the actual transportation route; wherein the segmented routes and the encryption algorithms have a corresponding relationship; S3: Multiple-encrypt the first item-related information of the item about the target node in the encryption order to obtain first encrypted information.

[0020] Specifically, when items need to be transported in the supply chain, the starting node, the ending node, and several transit nodes of the item transportation route are obtained according to the expected transportation route generated by the item order information. When the items are transported between nodes, there is a risk of data leakage of the item-related information. Therefore, the embodiment of the present application performs multiple encryption on the item-related information before the item leaves the node and starts to be transported to ensure the security of the item-related information.

[0021] In one specific example, after the item arrives at the target node, the actual transportation route of the item from the starting node to the target node is obtained from the item transportation end. In another specific example, after the item arrives at the target node, the actual transportation route of the item from the previous node of the target node to the target node is obtained from the item transportation end. The item transportation end records the coordinate information of the actual transportation route during the transportation of the item and the time information of obtaining the corresponding coordinate information. The target node can be the terminal node of the item transportation route and any node among several transfer nodes.

[0022] As one of the optional embodiments, the encryption order of several encryption algorithms is determined according to the speed of the item on different segmented routes of the actual transportation route, including: Divide the actual transportation route into a plurality of segment routes, and calculate the speed of the item on each segment route; Sorting the plurality of segmented routes according to the speed to obtain a sequence of the plurality of segmented routes; According to the corresponding relationship and the order of the plurality of segmented routes, the encryption order of the plurality of encryption algorithms is obtained.

[0023] Specifically, the item transport end stores a preset password book, or obtains a preset password book from a private chain, the password book consists of N encryption algorithms, N ≥ 2; the N encryption algorithms in the password book are arranged in an initial order, for example: the encryption algorithms in the password book are A1, A2, ..., A N .

[0024] The actual transportation route is divided into M segments, and M segmented routes are obtained, namely S1, S2, ..., S M , where M can be equal to, greater than or less than N, and is not specifically limited here. Then establish encryption algorithms A1, A2, ..., AN The corresponding relationship with the segmented routes S1, S2, …, S M is used to associate the arrangement orders of the two, so that the encryption order of multiple encryptions can be determined according to the sorting of the segmented routes. Among them, the corresponding relationship between the two can be one-to-one, one-to-many, or many-to-one, which is not specifically limited herein.

[0025] Exemplarily, taking the establishment of a one-to-one corresponding relationship as an example, when M = N, a one-to-one mapping relationship can be established between M segmented routes and N encryption algorithms; when M > N, N segmented routes can be selected from M segmented routes, and a one-to-one mapping relationship can be established between the selected N segmented routes and N encryption algorithms; when M < N, M encryption algorithms can be selected from N encryption algorithms, and a one-to-one mapping relationship can be established between M segmented routes and the selected M encryption algorithms.

[0026] Further, according to the coordinate information and time information recorded by the item transportation end, the speed of the item on each segmented route is calculated, and then all the segmented routes are sorted according to the magnitude order of the speeds to obtain a sorting result. And according to this sorting result and the corresponding relationship between the segmented routes and the encryption algorithms, the encryption order of several encryption algorithms is obtained. Furthermore, when the item is about to leave the target node, the several encryption algorithms are used to perform multiple encryptions on the first item-related information of the item with respect to the target node according to the encryption order to obtain the first encrypted information, and then the item transportation is carried out.

[0027] Among them, performing multiple encryptions on the first item-related information according to the encryption order specifically means: using the encryption algorithm at the first position in the encryption order to encrypt the first item-related information to obtain the first-level encrypted information, and then using the encryption algorithm at the second position in the encryption order to encrypt the first-level encrypted information to obtain the second-level encrypted information, and so on. If N encryption algorithms are used, the encryption operation is repeated N times according to the encryption order to obtain the final encrypted information, that is, the first encrypted information.

[0028] It should be noted that before the item starts to be transported at the starting node, since the item does not have an actual transportation route at this time, the item-related information is initially encrypted to obtain the initial encrypted information, and then the item transportation is carried out. Among them, the initial encryption is performed according to a preset encryption algorithm, or the initial order of the N encryption algorithms in the password book is used as the encryption order to perform multiple encryptions on the item-related information at the starting node.

[0029] As one of the optional embodiments, after obtaining the first encrypted information, the method further includes: Uploading and storing the first encrypted information and its corresponding first multiple decryption algorithm to a private chain built based on the nodes of the item; Confirming the next node of the target node, and granting the decryption authority of the target node to the next node; The link address of the private chain is set as an identification code, so that when the item reaches the next node and the next node has the decryption authority of the target node, the private chain is accessed by scanning the identification code to obtain the first encryption information and the first multiple decryption algorithm.

[0030] Specifically, the embodiment of the present application uses the nodes in the supply chain as separate nodes to build a private chain, and also builds a terminal APP (Application) corresponding to the private chain. When an item passes through a node, the node stores the item-related information on the chain, ensuring that the item-related information is authentic and valid.

[0031] After obtaining the first encrypted information of the item, the first encrypted information and its corresponding first multiple decryption algorithm (composed of decryption algorithms corresponding to several encryption algorithms and their decryption order) are uploaded to the private chain for storage; at the same time, the next node of the target node is confirmed according to the expected transportation route of the item, and the next node is granted the decryption authority of the target node, that is, the decryption authority for the first encrypted information, so that when the item is transported to the next node, the next node can decrypt the first encrypted information.

[0032] In addition, the embodiment of the present application places an identification code on the packaging of the item, and the identification code includes but is not limited to a QR code, a barcode, and a digital code. The identification code serves as a port for data connection with the private chain. Before the item leaves the target node, the private chain address corresponding to the first encrypted information is embedded in the identification code, and then the item is transported. When the item arrives at the next node of the target node, if the next node has the decryption authority of the target node, the private chain is accessed by scanning the identification code, the first encrypted information and the corresponding first multiple decryption algorithm are obtained, and then the next node can decrypt the first encrypted information to obtain the first item related information.

[0033] For example, by scanning the identification code, the next node can obtain the private chain address of the identification code and then access the private chain to obtain the first encrypted information and the corresponding first multiple decryption algorithm only when the next node has the decryption authority of the target node; or, by scanning the identification code to access the private chain, the next node can obtain the first encrypted information and the corresponding first multiple decryption algorithm when the next node has the decryption authority of the target node; or, by scanning the identification code to access the private chain, the first encrypted information is obtained, and if the next node has the decryption authority of the target node, the next node also obtains the first multiple decryption algorithm from the private chain. It can be set according to actual needs and is not specifically limited here.

[0034] The embodiment of the present application can avoid leakage of information about the item and its corresponding user during the transportation of the item by setting an identification code, thereby ensuring the security of information related to the item.

[0035] As one of the optional embodiments, before the first item-related information of the item about the target node is multiple-encrypted in the encryption order to obtain the first encrypted information, the method further includes: In the case of having the decryption authority granted by the previous node, scanning the identification code of the item to obtain a private chain address, and obtaining the second encryption information of the item with respect to the previous node and the corresponding second multiple decryption algorithm through the private chain address; Decrypting the second encrypted information according to the second multiple decryption algorithm to obtain second item-related information of the item with respect to the previous node; The second item related information is stored in the information base of the target node.

[0036] Specifically, when the item arrives at the target node from the previous node, the identification code on the item packaging is scanned, and with the decryption authority granted by the previous node, the second encrypted information of the item and the corresponding second multiple decryption algorithm are obtained through the private chain address corresponding to the identification code, and the second multiple decryption algorithm is used to decrypt the second encrypted information to obtain the second item-related information of the item about the previous node; the second item-related information is stored in the information library of the target node.

[0037] In an embodiment of the present application, the item-related information of each node will be stored in the information base of the next node after encryption and decryption, that is, the item-related information is stored in a staggered manner, thereby realizing collaborative supervision between different nodes, which is conducive to data rights confirmation and can realize distributed data storage.

[0038] As an optional embodiment, the method further includes: After the user signs for the item, for each node, it is determined whether the item-related information stored in its information database about the previous node is consistent with the decrypted information uploaded to the private chain by the previous node; If so, all encrypted information stored in the private chain is deleted, and the information of the item stored in the information base of each node is encrypted according to the several encryption algorithms.

[0039] Specifically, the item starts from the starting node and passes through several transfer nodes. When the item arrives at each transfer node, each node will re-encrypt the item-related information using a new encryption sequence and then transport it to the next node until it reaches the end node. When the item arrives at the end node, the user can grant the end node permission to allow the end node to obtain the user's receipt information so that the user can sign for the item.

[0040] After the user signs for the item, the item-related information uploaded by each node stored on the private chain and the item-related information stored in the information base of each node are queried in turn, and the item-related information stored in the information base of each node is judged respectively whether the item-related information about the previous node stored in the information base of each node is consistent with the decrypted information of the encrypted information uploaded by the previous node in the private chain, that is, whether the encrypted information uploaded by the starting node on the private chain is consistent with the item-related information in the information base of the second node after decryption, and whether the encrypted information uploaded by the second node on the private chain is consistent with the item-related information in the information base of the third node after decryption, and so on, and the item information stored on the private chain is compared one by one. If the item information on the private chain is consistent with the item information in the information base, the item information (i.e., encrypted information) on the private chain is deleted to avoid data bloat and improve data processing efficiency.

[0041] Furthermore, after clearing the item information in the private chain, several encryption algorithms in the code book are used to finally encrypt the item-related information in each information database, so as to store the verified item data in an encrypted package, thereby ensuring the authenticity of the data storage and effectively avoiding the occurrence of unauthorized data tampering.

[0042] It should be noted that the final encryption specifically includes: obtaining the actual transportation route of the item from the starting node to the ending node, and obtaining the corresponding encryption sequence in the same manner as step S2, and multiple encryption of the item-related information in each information library according to the encryption sequence; or, for the information library of each node, obtaining the actual transportation route from the previous node of the node to the node, and obtaining the corresponding encryption sequence in the same manner as step S2, and multiple encryption of the item-related information in the information library of the node according to the encryption sequence. Among them, the multiple decryption algorithms corresponding to the final encrypted information are stored in the private chain.

[0043] As one of the optional embodiments, the first item-related information includes at least one of the following: Basic information about the item; Logistics information of the item from the previous node to the destination node; The logistics information of the item from the starting node to the leaving the target node.

[0044] Specifically, the logistics information of the item from the previous node to the target node includes: the actual transportation route information of the item from the previous node to the target node, and the process information of the item at the target node, and the process information includes but is not limited to the relevant information of the processing, packaging and other processes of the item at the target node. When the first item-related information is the logistics information of the item from the previous node to the target node, the item-related information about the target node does not include the actual transportation route information and process information of the node before the target node.

[0045] The logistics information of the item from the starting node to the target node includes: the actual transportation route information of the item from the starting node to the target node, and the process information of the item at the target node. When the first item-related information is the logistics information of the item from the starting node to the target node, each time new information (including the actual transportation route information between nodes and the process information at the nodes) is generated, the new information is added to the original information to update the item-related information.

[0046] As one of the optional embodiments, before obtaining the transportation route of the item from the aforementioned node to the target node, the method further includes: Use several authentication units as alliance chain nodes to build an alliance chain and deploy smart contracts for the alliance chain; the smart contracts are used to generate DID identities for users; The DID identity authentication is performed on the user to which the item belongs through the alliance chain, and when the DID identity authentication is passed, the transportation of the item is initiated.

[0047] Specifically, after building a private chain and the corresponding terminal APP, introduce several certification units to sign smart contracts, build a consortium chain, configure consensus mechanisms (such as Byzantine Fault Tolerance algorithm PBFT, etc.), network authority management and data privacy policies, and ensure that all certification units join the consortium chain as authoritative nodes. Among them, certification units include but are not limited to official certification units such as banks, schools, and supermarkets.

[0048] When a user registers a terminal APP, the alliance chain generates the user's DID (Distributed Identity), i.e., distributed digital identity, by mutual verification between several associated authentication units based on the user's relevant attributes in several authentication units. Among them, the relevant attributes are data corresponding to the user's real identity information, such as the user's degree certificate in a certain school, the registered member information in a certain supermarket, etc. The authenticity of the user's identity can be verified by comparing the degree certificate and the registered member information. The DID identity is that the authentication unit conducts a qualification review of the user based on the user's relevant attributes, and issues at least one electronic certificate to the user after the review is passed. The electronic certificate is encrypted and distributed to each node in the supply chain. Each electronic certificate carries a mark representing the certificate type. When a verification demand event occurs, the authorized encrypted electronic certificate is sent to the certificate verifier (i.e., the authentication unit). After the encrypted electronic certificate is decrypted by the certificate verifier, the original electronic certificate is verified to obtain the verification result.

[0049] When a user sends a purchase request from the APP, the user's identity is authenticated through the alliance chain. Each authentication unit issues a statement based on the user's DID identity. When a verified statement is received, the item transportation is initiated.

[0050] This application constructs a private chain for the transportation of items by using the logistics nodes of the items as private chain nodes, and builds an alliance chain with several certification units. The identity of the user to whom the item belongs is authenticated through the alliance chain, and the transportation of the item can be started when the verification is passed. This allows each node in the supply chain to quickly and securely verify the identity without going through a centralized organization, reducing the time cost of identity authentication, and ensuring the security of operations while reducing the risk of key data leakage.

[0051] As an optional embodiment, the method further includes: Obtaining an expected transportation route of the item from the aforementioned node to the target node; Calculating the similarity between the actual transportation route and the expected transportation route; When the similarity is less than a preset threshold, an early warning message of item transportation error is output.

[0052] Specifically, the route required for transporting the item to the consumer is generated based on the order information of the item, that is, the expected transportation route of the item from the starting node to the ending node. The order information and the expected transportation route information are both basic information of the item.

[0053] When the item transport end carries the item along the expected transport route, the path matching algorithm is used to calculate the similarity between the actual transport route and the expected transport route based on the coordinate information of the actual transport route recorded by the item transport end and the time information corresponding to the coordinate information, so as to issue an item transport error warning. The similarity is calculated according to the following formula:

[0054] in, represents the i-th point on the actual transportation route, represents the i-th point on the expected transportation route, Represents the distance between two points. Indicates the total number of points on the route.

[0055] When the calculated similarity is less than the preset threshold, an early warning message of item transportation error is output to ensure the smooth delivery of items.

[0056] The present application solves the problem of single encryption method by determining the encryption order based on the speed of different sections in the item transportation route and adopting multiple encryption algorithms to perform multiple encryption on the item related information, thereby improving the security of the item related information in the logistics transportation. The encryption order can be re-determined and encrypted at each transfer node according to the actual logistics speed, which greatly improves the encryption effect of the item related information. By setting the identification code, the node needs to scan the identification code to access the private chain to obtain the item related information, which further reduces the risk of data leakage and ensures the security of the item related information. After the item transportation is completed, the private chain data is cleared to avoid data bloat and improve data processing efficiency. At the same time, the item related information is stored in the information base of each node in a dislocated manner, and the item related information stored in the information base of each node is encrypted, thereby realizing diversified and secure storage of data. By using the logistics node of the item as the private chain node, a private chain is constructed for the transportation of the item, and a consortium chain is established with several certification units. The user to whom the item belongs is authenticated through the consortium chain, so that the item transportation can be started when the authentication is passed. Each node in the supply chain can quickly and securely authenticate the identity without going through a centralized organization, thereby reducing the time cost of identity authentication, and ensuring the security of the operation while reducing the risk of key data leakage.

[0057] Correspondingly, the present application also provides an item-related information protection device, which can implement all processes of the item-related information protection method in the above embodiment.

[0058] See also Figure 2 , Figure 2 1 is a schematic diagram of a device for protecting item-related information provided by an embodiment of the present application. The device for protecting item-related information includes: The route acquisition module 201 is used to acquire the actual transportation route of the item from the aforementioned node to the target node; the aforementioned node is the starting node or the previous node of the target node; An encryption sequence module 202, used to determine the encryption sequence of a plurality of encryption algorithms according to the speed of the item on different segmented routes of the actual transportation route; wherein the segmented routes and the encryption algorithms have a corresponding relationship; The multiple encryption module 203 is used to multiple-encrypt the first item-related information of the item about the target node in the encryption order to obtain first encrypted information.

[0059] Preferably, the encryption sequence module 202 is specifically used for: Divide the actual transportation route into a plurality of segment routes, and calculate the speed of the item on each segment route; Sorting the plurality of segmented routes according to the speed to obtain a sequence of the plurality of segmented routes; According to the corresponding relationship and the order of the plurality of segmented routes, the encryption order of the plurality of encryption algorithms is obtained.

[0060] Preferably, the article-related information protection device further comprises: An information uploading module, used for uploading and storing the first encrypted information and its corresponding first multiple decryption algorithm to a private chain built based on the node of the item; A decryption authority module, used to confirm the next node of the target node and grant the next node the decryption authority of the target node; An identification code module is used to set the link address of the private chain as an identification code, so that when the item reaches the next node and the next node has the decryption authority of the target node, the private chain is accessed by scanning the identification code to obtain the first encryption information and the first multiple decryption algorithm.

[0061] Preferably, the article-related information protection device further comprises: An information acquisition module, configured to scan the identification code of the item, obtain the private chain address, and obtain the second encryption information of the item with respect to the previous node and the corresponding second multiple decryption algorithm through the private chain address, when the decryption authority is granted by the previous node; An information decryption module, configured to decrypt the second encrypted information according to the second multiple decryption algorithm to obtain the second item-related information of the item with respect to the previous node; An information storage module is used to store the second item related information in the information base of the target node.

[0062] Preferably, the article-related information protection device further comprises: The information verification module is used to determine, for each node, whether the item-related information about the previous node stored in its information base is consistent with the decrypted information uploaded to the private chain by the previous node after the user signs for the item; if so, delete all encrypted information stored in the private chain, and encrypt the information of the item stored in the information base of each node according to the several encryption algorithms.

[0063] Preferably, the first item-related information includes at least one of the following: Basic information about the item; Logistics information of the item from the previous node to the destination node; The logistics information of the item from the starting node to the leaving the target node.

[0064] Preferably, the article-related information protection device further comprises: The alliance chain module is used to use several authentication units as alliance chain nodes, build an alliance chain, and deploy smart contracts for the alliance chain; the smart contracts are used to generate DID identities for users; The identity authentication module is used to perform DID identity authentication on the user to which the item belongs through the alliance chain, and when the DID identity authentication is passed, the transportation of the item is initiated.

[0065] In specific implementation, the working principle, control process and technical effect achieved by the item-related information protection device provided in the embodiment of the present application are the same as those of the item-related information protection method in the above-mentioned embodiment, and will not be repeated here.

[0066] See also Figure 3 , Figure 3 3 is a schematic diagram of the structure of an item-related information protection device provided in an embodiment of the present application, and the item-related information protection device includes: a processor 301, a memory 302, and a computer program stored in the memory 302 and executable on the processor 301. When the processor 301 executes the computer program, the steps in the above-mentioned item-related information protection method embodiment are implemented. Alternatively, when the processor 301 executes the computer program, the functions of each module / unit in the above-mentioned device embodiments are implemented.

[0067] Exemplarily, the computer program may be divided into one or more modules / units, which are stored in the memory 302 and executed by the processor 301 to complete the present application. The one or more modules / units may be a series of computer program instruction segments capable of completing specific functions, which are used to describe the execution process of the computer program in the item-related information protection device.

[0068] The item-related information protection device may include, but is not limited to, a processor 301 and a memory 302. Those skilled in the art may understand that the schematic diagram is only an example of the item-related information protection device and does not constitute a limitation on the item-related information protection device. The item-related information protection device may include more or fewer components than shown in the diagram, or may combine certain components, or may include different components. For example, the item-related information protection device may also include an input / output device, a network access device, a bus, etc.

[0069] The processor 301 may be a central processing unit (CPU), or other general-purpose processors, digital signal processors (DSP), application-specific integrated circuits (ASIC), field-programmable gate arrays (FPGA) or other programmable logic devices, discrete gate or transistor logic devices, discrete hardware components, etc. A general-purpose processor may be a microprocessor or any conventional processor, etc. The processor 301 is the control center of the item-related information protection device, and uses various interfaces and lines to connect various parts of the entire item-related information protection device.

[0070] The memory 302 can be used to store the computer program and / or module. The processor 301 realizes various functions of the item-related information protection device by running or executing the computer program and / or module stored in the memory 302 and calling the data stored in the memory 302. The memory 302 can mainly include a program storage area and a data storage area, wherein the program storage area can store an operating system, at least one application required for a function, etc.; the data storage area can store data created according to the use of the mobile phone, etc. In addition, the memory 302 can include a high-speed random access memory, and can also include a non-volatile memory, such as a hard disk, a memory, a plug-in hard disk, a smart memory card (Smart MediaCard, SMC), a secure digital (Secure Digital, SD) card, a flash card (Flash Card), at least one disk storage device, a flash memory device, or other volatile solid-state storage devices.

[0071] Wherein, if the module / unit integrated in the article-related information protection device is implemented in the form of a software functional unit and sold or used as an independent product, it can be stored in a computer-readable storage medium. Based on this understanding, the present application implements all or part of the processes in the above-mentioned embodiment method, and can also instruct the relevant hardware to complete it through a computer program. The computer program can be stored in a computer-readable storage medium. When the computer program is executed by the processor 301, the steps of the above-mentioned method embodiments can be implemented. Wherein, the computer program includes computer program code, and the computer program code can be in source code form, object code form, executable file or some intermediate form, etc.

[0072] An embodiment of the present application further provides a computer-readable storage medium, which includes a stored computer program, wherein when the computer program is running, the device where the computer-readable storage medium is located is controlled to execute the method for protecting item-related information described in any of the above embodiments.

[0073] An embodiment of the present application also provides a computer program product, including a computer program / instruction, which, when executed by a processor of the computer program / instruction, implements the method for protecting item-related information described in any of the above embodiments.

[0074] The method in this application can be implemented in whole or in part by software, hardware, firmware or any combination thereof. When implemented using software, it can be implemented in whole or in part in the form of a computer program product. The computer program product includes one or more computer programs or instructions. When the computer program or instruction is loaded and executed on a computer, the process or function described in this application is executed in whole or in part. The computer can be a general-purpose computer, a special-purpose computer, a computer network, a network device, a user device, a core network device or other programmable device.

[0075] The computer program or instructions may be stored in a computer-readable storage medium, or transmitted from one computer-readable storage medium to another computer-readable storage medium, for example, the computer program or instructions may be transmitted from one website, computer, server or data center to another website, computer, server or data center by wired or wireless means. The computer-readable storage medium may be any available medium that can be accessed by a computer or a data storage device such as a server or data center that integrates one or more available media. The available medium may be a magnetic medium, such as a floppy disk, a hard disk, or a magnetic tape; it may also be an optical medium, such as a digital video disk; it may also be a semiconductor medium, such as a solid-state drive. The computer-readable storage medium may be a volatile or non-volatile storage medium, or may include both volatile and non-volatile types of storage media.

[0076] The computer programs / instructions described herein can be downloaded from a computer-readable storage medium to each computing / processing device, or downloaded to an external computer or external storage device via a network, such as the Internet, a local area network, a wide area network, and / or a wireless network. The network can include copper transmission cables, optical fiber transmission, wireless transmission, routers, firewalls, switches, gateway computers, and / or edge servers. The network adapter card or network interface in each computing / processing device receives computer-readable program instructions from the network and forwards the computer-readable program instructions for storage in a computer-readable storage medium in each computing / processing device.

[0077] The computer program instructions for performing the operation of the present application can be assembly instructions, instruction set architecture instructions, machine instructions, machine-related instructions, microcode, firmware instructions, state setting data, or source code or object code written in any combination of one or more programming languages, and the programming languages ​​include object-oriented programming languages ​​and conventional procedural programming languages. Computer-readable program instructions can be executed completely on the user's computer, partially on the user's computer, as an independent software package, partially on the user's computer and partially on the remote computer, or completely on the remote computer or server. In the case of a remote computer, the remote computer can be connected to the user's computer through any type of network, including a local area network or a wide area network, or can be connected to an external computer (for example, using an Internet service provider to connect through the Internet). In some embodiments, by using the state information of computer-readable program instructions to personalize electronic circuits, such as programmable logic circuits, field programmable gate arrays or programmable logic arrays, the electronic circuit can execute computer-readable program instructions, thereby realizing various aspects of the present application.

[0078] Various aspects of the present application are described herein with reference to flowcharts and / or block diagrams according to embodiments of the present application. It should be understood that each block of the flowcharts and / or block diagrams and the combination of each block in the flowcharts and / or block diagrams can be implemented by computer-readable program instructions.

[0079] These computer-readable program instructions can be provided to a processor of a general-purpose computer, a special-purpose computer, or other programmable data processing device, thereby producing a machine, so that when these instructions are executed by the processor of the computer or other programmable data processing device, a device that implements the functions / actions specified in one or more boxes in the flowchart and / or block diagram is generated. These computer-readable program instructions can also be stored in a computer-readable storage medium, and these instructions cause the computer, programmable data processing device, and / or other equipment to work in a specific manner, so that the computer-readable medium storing the instructions includes a manufactured product, which includes instructions for implementing various aspects of the functions / actions specified in one or more boxes in the flowchart and / or block diagram.

[0080] Computer-readable program instructions may also be loaded onto a computer, other programmable data processing apparatus, or other device so that a series of operating steps are performed on the computer, other programmable data processing apparatus, or other device to produce a computer-implemented process, thereby causing the instructions executed on the computer, other programmable data processing apparatus, or other device to implement the functions / actions specified in one or more boxes in the flowchart and / or block diagram.

[0081] Each square frame in the flow chart or block diagram can represent a part of a module, a program segment or an instruction, and a part of the module, program segment or an instruction comprises one or more executable instructions for realizing the logical function of the regulation. In some implementations as replacement, the function marked in the square frame can also occur in a sequence different from that marked in the accompanying drawings. For example, two continuous square frames can actually be executed substantially in parallel, and they can also be executed in the opposite order sometimes, depending on the function involved. It should also be noted that each square frame in the block diagram and / or the flow chart, and the combination of the square frames in the block diagram and / or the flow chart can be realized by a dedicated hardware-based system that performs the function or action of the regulation, or can be realized by a combination of dedicated hardware and computer instructions. It is well known to those skilled in the art that it is equivalent to realize by hardware, realize by software, and realize by the combination of software and hardware.

[0082] The embodiments of the present application provide a method, device, equipment, medium and product for protecting item-related information, which have the following beneficial effects: by determining the encryption order based on the speed of different sections in the item transportation route, multiple encryption algorithms are used to perform multiple encryption on the item-related information, thereby solving the problem of a single encryption method and improving the security of item-related information in logistics transportation; the encryption order can be re-determined according to the actual logistics speed at each transfer node for encryption, thereby greatly improving the encryption effect of item-related information; by setting an identification code, the node needs to scan the identification code to access the private chain in order to obtain item-related information, thereby further reducing the risk of data leakage and ensuring the security of item-related information; by After completion, the private chain data is cleared to avoid data bloat and improve data processing efficiency. At the same time, the item-related information is stored in the information base of each node in a staggered manner, and the item-related information stored in the information base of each node is encrypted, thereby realizing diversified and secure storage of data. By taking the logistics node of the item as the private chain node, a private chain is constructed for the transportation of items, and an alliance chain is established with several certification units. The identity of the user to whom the item belongs is authenticated through the alliance chain, so that the transportation of the item can be started when the authentication is passed. This enables each node in the supply chain to quickly and securely authenticate its identity without going through a centralized organization, reducing the time cost of identity authentication, and ensuring the security of operations while reducing the risk of key data leakage.

[0083] The above is a preferred embodiment of the present application. It should be pointed out that for ordinary technicians in this technical field, several improvements and modifications can be made without departing from the principles of the present application. These improvements and modifications are also considered to be within the scope of protection of the present application.

Claims

1. A method for protecting item-related information, characterized in that: include: Obtain the actual transportation route of the item from the aforementioned node to the target node; The aforementioned node is the starting node or the previous node of the target node; Determining the encryption order of several encryption algorithms according to the speed of the item on different segmented routes of the actual transportation route; wherein the segmented routes and the encryption algorithms have a corresponding relationship; The first item-related information of the item about the target node is multiple-encrypted according to the encryption order to obtain first encrypted information.

2. The method for protecting item-related information according to claim 1, characterized in that: The step of determining the encryption order of the plurality of encryption algorithms according to the speed of the item on different segmented routes of the actual transportation route comprises: Divide the actual transportation route into a plurality of segment routes, and calculate the speed of the item on each segment route; Sorting the plurality of segmented routes according to the speed to obtain a sequence of the plurality of segmented routes; According to the corresponding relationship and the order of the plurality of segmented routes, the encryption order of the plurality of encryption algorithms is obtained.

3. The method for protecting item-related information according to claim 1, wherein: After obtaining the first encrypted information, the method further includes: Uploading and storing the first encrypted information and its corresponding first multiple decryption algorithm to a private chain built based on the node of the item; Confirming the next node of the target node, and granting the decryption authority of the target node to the next node; The link address of the private chain is set as an identification code, so that when the item reaches the next node and the next node has the decryption authority of the target node, the private chain is accessed by scanning the identification code to obtain the first encryption information and the first multiple decryption algorithm.

4. The method for protecting item-related information according to claim 3, characterized in that: Before the step of multiple-encrypting the first item-related information of the item about the target node in the encryption order to obtain the first encrypted information, the method further comprises: In the case of having the decryption authority granted by the previous node, scanning the identification code of the item to obtain a private chain address, and obtaining the second encryption information of the item with respect to the previous node and the corresponding second multiple decryption algorithm through the private chain address; Decrypting the second encrypted information according to the second multiple decryption algorithm to obtain second item-related information of the item with respect to the previous node; The second item related information is stored in the information base of the target node.

5. The method for protecting item-related information according to claim 4, characterized in that: The method further comprises: After the user signs for the item, for each node, it is determined whether the item-related information stored in its information database about the previous node is consistent with the decrypted information uploaded to the private chain by the previous node; If so, all encrypted information stored in the private chain is deleted, and the information of the item stored in the information base of each node is encrypted according to the several encryption algorithms.

6. The method for protecting item-related information according to claim 1, wherein: Before obtaining the transportation route of the item from the aforementioned node to the target node, the method further includes: Use several authentication units as alliance chain nodes to build an alliance chain and deploy smart contracts for the alliance chain; the smart contracts are used to generate DID identities for users; The DID identity authentication is performed on the user to which the item belongs through the alliance chain, and when the DID identity authentication is passed, the transportation of the item is initiated.

7. A device for protecting information related to an item, characterized in that: include: A route acquisition module is used to obtain the actual transportation route of the item from the aforementioned node to the target node; The aforementioned node is the starting node or the previous node of the target node; An encryption sequence module, used to determine the encryption sequence of a plurality of encryption algorithms according to the speed of the item on different segmented routes of the actual transportation route; wherein the segmented routes and the encryption algorithms have a corresponding relationship; The multiple encryption module is used to multiple-encrypt the first item-related information of the item about the target node in the encryption order to obtain the first encrypted information.

8. An item-related information protection device, characterized in that: The invention comprises a processor and a memory, wherein a computer program is stored in the memory and the computer program is configured to be executed by the processor, and when the processor executes the computer program, the method for protecting item-related information as claimed in any one of claims 1 to 6 is implemented.

9. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores a computer program, wherein when the device where the computer-readable storage medium is located executes the computer program, the method for protecting item-related information according to any one of claims 1 to 6 is implemented.

10. A computer program product, comprising a computer program, characterized in that When the computer program is executed by a processor, the method for protecting item-related information as claimed in any one of claims 1 to 6 is implemented.

Images