Extensible system for credible management of academic / educational certificate

Abstract

The invention relates to an extensible system for credible management of academic / educational credentials, and belongs to the field of block chain technology and credible management of academic / educational credentials. The system comprises a user layer, an application layer, a contract layer, an under-chain storage layer, a block chain bottom layer and a management layer. The user layer supports a user to perform user registration, identity verification, certificate service and identity management; the application layer provides a certificate management operation function, an intelligent contract operation function, role and authority management and an API interface; the block chain bottom layer is based on an FISCO-BCOS platform, an alliance chain architecture is adopted, and a z-PBFT consensus mechanism is used; the management layer relates to monitoring and management of nodes in the block chain network, dynamic adding or exiting of the nodes and log management. According to the method, the block chain storage cost is effectively reduced, the expansibility and performance of the system are improved, the credibility and integrity of the data are considered, and the method is suitable for a large-scale distributed academic / educational certificate credibility management scene.

Description

Technical Field

[0001] The present invention belongs to the fields of blockchain technology and trusted management of degrees / academic qualifications, and relates to an extensible system for trusted management of degree / academic qualification certificates. Background Art

[0002] At present, degree and academic qualification certificates have become important proofs of personal ability and educational background, and are also regarded by enterprises as indispensable reference bases in the process of recruitment and employment. However, the existing degree and academic qualification certificate management and verification systems have many deficiencies in terms of data security, traceability, and verification efficiency, which are mainly manifested in the following aspects:

[0003] (1) Insufficient data security and traceability:

[0004] Traditional paper certificates are easily forged, tampered with, and lost, making it difficult to guarantee their authenticity and integrity.

[0005] The storage and management of electronic certificates often rely on centralized institutions, posing risks of data leakage and tampering.

[0006] The existing certificate verification system lacks a unified platform and standard, making it difficult to achieve cross-institutional and cross-regional certificate verification.

[0007] (2) Low verification efficiency:

[0008] The traditional certificate verification process is cumbersome, requiring manual checking and querying, with low efficiency.

[0009] The existing electronic certificate verification systems often need to rely on third-party institutions, increasing the verification cost and time.

[0010] (3) Insufficient scalability:

[0011] The existing certificate management systems are difficult to adapt to the management and verification requirements of large-scale certificate data.

[0012] The lack of system scalability makes it difficult to meet the growing certificate management needs.

[0013] (4) High storage cost:

[0014] Blockchain nodes need to store all block data, resulting in a significant increase in storage overhead.

[0015] Although some systems attempt to dump data to off-chain storage, there are problems with data security and access efficiency.

[0016] (5) Insufficient node management:

[0017] The existing systems lack an evaluation mechanism for the differentiated performance of nodes and cannot dynamically adjust their roles and permissions according to node characteristics.

[0018] This limits the flexibility of the nodes and the overall scalability of the system.

[0019] To address the above problems, in recent years, blockchain technology has gradually become an important technical means for solving the problem of degree / diploma certificate authentication due to its characteristics of decentralization, immutability, and traceability.

[0020] Through blockchain technology, a secure, trustworthy, and transparent degree / diploma certificate management system can be constructed, thereby enhancing the trust among universities, employers, and certificate holders.

[0021] Currently, degree / diploma certificate management systems based on blockchain have attracted the attention of researchers at home and abroad. For example:

[0022] The blockchain-based digital certificate verification platform SmartCert: This platform realizes the on-chain storage and verification of certificate information through blockchain technology, aiming to reduce the risk of forged certificates.

[0023] Decentralized applications (DApps) based on Ethereum such as DIUcerts: Realize the secure storage and verification functions of certificates through the immutability of the public chain.

[0024] The emergence of these technologies has significantly improved the security and trustworthiness of certificate authentication, providing technical support for solving the problem of degree / diploma certificate forgery.

[0025] Although the existing blockchain-based degree / diploma certificate management systems have achieved certain results, there are still some deficiencies:

[0026] Insufficient scalability: As the volume of certificate data grows, the existing systems show obvious performance bottlenecks in storing and processing large-scale certificate data, and it is difficult to adapt to the high-concurrency business requirements.

[0027] High storage cost: Blockchain nodes need to store all block data, resulting in a significant increase in storage overhead.

[0028] Insufficient node management: The existing systems lack an evaluation mechanism for the differential performance of nodes and cannot dynamically adjust their roles and permissions according to node characteristics, which limits the flexibility of nodes and the overall scalability of the system.

[0029] Therefore, the present invention aims to provide a scalable system for trustworthy management of degree / diploma certificates to address the deficiencies of the existing systems and construct an efficient and scalable degree / diploma certificate management system. Summary of the Invention

[0030] In view of this, the purpose of the present invention is to provide a scalable system for trustworthy management of degree / diploma certificates.

[0031] To achieve the above object, the present invention provides the following technical solutions:

[0032] An extensible system for trusted management of degree / academic certificates, including a user layer for user registration, identity authentication, certificate services, and identity management;

[0033] An application layer that provides certificate management operation functions, smart contract operation functions, role and permission management, and API interfaces;

[0034] A contract layer, including a certificate CRUD contract module, a certificate permission management contract module, and a consensus node management contract module, for performing create, read, update, and delete operations on certificate data, permission control, and dynamic node management;

[0035] An off-chain storage layer, including a structured database and a distributed file system, for storing certificate metadata and cold certificate data;

[0036] The blockchain underlying layer, based on a consortium chain architecture, adopts a sub-region and sub-layer consensus mechanism for transaction processing and data storage;

[0037] A management layer for monitoring blockchain nodes, dynamically joining / leaving, and log management;

[0038] The user layer, application layer, contract layer, off-chain storage layer, blockchain underlying layer, and management layer are interconnected through data interfaces and protocols.

[0039] Further, the off-chain storage layer includes:

[0040] A MySQL database for storing user information, certificate metadata, and operation logs;

[0041] An IPFS private network for storing compressed cold certificate data and associating it with blockchain data through a hash value.

[0042] Further, the sub-region and sub-layer consensus mechanism of the blockchain underlying layer is the z-PBFT algorithm, including:

[0043] A main region node cluster for global consensus aggregation;

[0044] Multiple sub-region node clusters that complete in-region consensus through a local consensus mechanism;

[0045] The main region and sub-region node clusters are connected through a hierarchical communication protocol.

[0046] Further, the collaborative operation between the IPFS private network and the blockchain includes:

[0047] (1) Screening cold certificate data based on access frequency and compressing it;

[0048] (2) Upload the compressed data to IPFS and generate a unique hash value;

[0049] (3) Update the hash value of the corresponding record in the blockchain;

[0050] (4) Implement on-chain query and off-chain data recovery through the hash value.

[0051] Furthermore, the management layer includes:

[0052] The node monitoring module, which detects the running status, storage capacity, and network connection of the nodes in real time;

[0053] The dynamic node management module, which controls the joining, exiting, and role assignment of nodes through smart contracts;

[0054] The log management module, which records all operation and event logs.

[0055] Furthermore, the certificate permission management contract module in the contract layer divides permissions based on roles, including education department administrators, universities, and user roles, and restricts their operation scope to preset permissions.

[0056] Furthermore, in the z-PBFT algorithm, the local consensus of the secondary regional node cluster adopts an improved PBFT mechanism to optimize the consensus efficiency by reducing the communication rounds.

[0057] Furthermore, the API interface in the application layer supports external system integration and ensures the security of data transmission through encryption technology.

[0058] Furthermore, the identity authentication in the user layer includes ID card scanning and a multi-verification mechanism to ensure the authenticity of the user's identity.

[0059] Furthermore, the blockchain underlying layer is based on the FISCO-BCOS platform, adopts a consortium chain architecture, and integrates the JAVA SDK module and the RPC service module to support cross-layer data interaction.

[0060] The beneficial effects of the present invention are as follows:

[0061] A scalable system for trusted management of degree / academic certificates provided by the present invention has the following beneficial effects through modular design, off-chain storage optimization based on IPFS, smart contract optimization, and dynamic node management mechanism:

[0062] (1) Improve data security:

[0063] Decentralized storage: The system adopts blockchain technology to achieve distributed storage of certificate data, avoiding security risks caused by centralized data storage.

[0064] Tamper-proof: The tamper-proof nature of blockchain technology ensures the authenticity and integrity of certificate data, effectively preventing certificate forgery and tampering.

[0065] Permission control: The system strictly controls access to certificate data through smart contracts and permission management mechanisms to prevent data leakage.

[0066] (2)Enhanced data traceability:

[0067] On-chain record: The system stores certificate information on the blockchain, forming a complete record of the certificate lifecycle to achieve certificate traceability.

[0068] Audit log: The system records detailed logs of all operations and events, facilitating auditing and traceability.

[0069] (3)Improved verification efficiency:

[0070] Automated verification: The system supports automated certificate verification, eliminating the need for manual checking and querying and significantly improving verification efficiency.

[0071] Cross-institutional verification: The system provides a unified certificate verification platform to enable cross-institutional and cross-regional certificate verification.

[0072] (4)Enhanced system scalability:

[0073] Modular design: The system adopts a modular design, facilitating functional expansion and system upgrade.

[0074] Dynamic node management: The system supports the dynamic addition and removal of nodes and can be flexibly expanded according to system requirements.

[0075] (5)Reduced storage costs:

[0076] IPFS-based off-chain storage: The system stores "cold certificate data" in the IPFS private network, reducing the storage pressure on blockchain nodes and lowering storage costs.

[0077] (6)Improved system performance:

[0078] Smart contract optimization: The system optimizes smart contracts to improve transaction processing speed and efficiency.

[0079] z-PBFT consensus mechanism: The system adopts the z-PBFT consensus mechanism to improve system consensus efficiency and performance.

[0080] (7)Enhanced user experience:

[0081] Friendly user interface: The system provides a simple and user-friendly interface for users to manage and verify certificates.

[0082] Flexible API Interface: The system provides open API interfaces, facilitating integration with other systems.

[0083] In summary, the present invention provides an efficient, secure, and scalable trusted management system for degree / academic certificate, effectively solving the deficiencies of existing systems and providing technical support for building a more perfect degree / academic certificate management system.

[0084] Other advantages, objectives, and features of the present invention will be described to some extent in the subsequent specification, and to some extent, will be obvious to those skilled in the art based on the study of the following text, or can be taught from the practice of the present invention. The objectives and other advantages of the present invention can be realized and obtained through the following specification. Brief Description of the Drawings

[0085] In order to make the objectives, technical solutions, and advantages of the present invention clearer, the present invention will be described in detail preferably with reference to the accompanying drawings, where:

[0086] Figure 1 This is the system diagram of the present invention. Detailed Embodiments

[0087] The following specific examples illustrate the embodiments of the present invention. Those skilled in the art can easily understand other advantages and effects of the present invention from the content disclosed in this specification. The present invention can also be implemented or applied through other different specific embodiments. Various details in this specification can also be modified or changed based on different viewpoints and applications without departing from the spirit of the present invention. It should be noted that the drawings provided in the following embodiments only illustrate the basic concept of the present invention schematically. Without conflict, the following embodiments and the features in the embodiments can be combined with each other.

[0088] Among them, the drawings are only for illustrative purposes, showing only schematic diagrams, not physical diagrams, and should not be construed as a limitation to the present invention; in order to better illustrate the embodiments of the present invention, some components in the drawings will be omitted, enlarged, or reduced, and do not represent the dimensions of actual products; for those skilled in the art, it is understandable that some well-known structures and their descriptions in the drawings may be omitted.

[0089] In the accompanying drawings of the embodiments of the present invention, the same or similar reference numerals correspond to the same or similar components; in the description of the present invention, it should be understood that if there are terms such as "upper", "lower", "left", "right", "front", "rear", etc. indicating the orientation or positional relationship, they are based on the orientation or positional relationship shown in the accompanying drawings. This is only for the convenience of describing the present invention and simplifying the description, rather than indicating or implying that the device or element referred to must have a specific orientation, be constructed and operated in a specific orientation. Therefore, the terms describing the positional relationship in the accompanying drawings are only for illustrative purposes and should not be construed as a limitation of the present invention. For those of ordinary skill in the art, the specific meanings of the above terms can be understood according to specific circumstances.

[0090] The present invention discloses an extensible system for the trusted management of academic degree / academic certificate, which solves the problems raised in the above-mentioned background technology.

[0091] To achieve the above object, the present invention provides the following technical solution: An extensible system for the trusted management of academic degree / academic certificate, including:

[0092] a. User layer, for user registration, identity authentication, certificate service and identity management;

[0093] b. Application layer, providing certificate management operation function, smart contract operation function, role and permission management, and API interface;

[0094] c. Contract layer, providing certificate CRUD operation, certificate table permission management and node management;

[0095] d. Off-chain storage layer, providing IPFS file system and MySQL database;

[0096] e. Blockchain bottom layer, based on the FISCO-BCOS platform, adopting the consortium chain architecture and combining with the z-PBFT consensus mechanism;

[0097] f. Management layer, for monitoring and management of nodes in the blockchain network, dynamic joining or exiting of nodes, and log management;

[0098] The user layer includes: User registration: The user fills in personal information to complete registration; Certificate service: Providing application, review, verification, and download services for academic degree / academic certificate, and supporting the trusted storage of certificates; Identity management: Dynamically managing and maintaining the user identity through the identity management function; The application layer includes: Certificate management operation: Providing life cycle management of certificates; Smart contract operation function: Providing an interface for users to interact with the blockchain; Role and permission management: Implementing permission division, and each user can only perform operations within the scope of their role permissions; API interface: Providing open API interfaces for external system integration.

[0099] The contract layer includes: CertificateCRUD contract module: providing functions for creating, reading, updating, and deleting (CRUD) certificate data; CertificatePermission contract module: a permission control module based on the certificate table; Consensus contract module: providing flexible identity management for consensus nodes.

[0100] The off-chain storage layer includes: MySQL database for storing structured data in the system; IPFS file system: providing a blockchain storage optimization solution based on the IPFS file system. By storing "cold certificate data" in the IPFS private network, the storage pressure on blockchain nodes is reduced. The steps include: ① Cold data screening and compression: Analyze the access frequency of degree / academic certificate data in the blockchain, screen out the certificate data that is no longer frequently accessed, and perform compression processing on it to generate compressed certificate data (CTB_comp); ② IPFS upload and storage: The compressed "cold certificate data" is uploaded to the IPFS private network and a unique IPFS hash value (IPFS_Addr) is generated; ③ On-chain data update: The system updates the records corresponding to the cold certificate data in the blockchain to the hash value (IPFS_Addr) stored in IPFS; ④ On-chain and off-chain collaborative query: When a user queries the certificate data stored in IPFS, the system queries through the IPFS hash address stored on the blockchain and restores the complete data from the IPFS private network.

[0101] The blockchain underlying layer includes: Consortium chain architecture module: Based on the FISCO-BCOS platform, adopting the consortium chain design; z-PBFT consensus module: Adopting a PBFT-like algorithm z-PBFT with a hierarchical design based on regional grouping; P2P network module: Responsible for communication between consortium chain nodes; Transaction and block processing module: Used for receiving, verifying, and packing transactions; JAVASDK module: Providing development interfaces; RPC service module: Providing remote call interfaces and cross-layer data interaction; Distributed storage module: Providing basic distributed storage services.

[0102] The management layer includes: Monitoring and management of nodes in the blockchain network: The node monitoring module monitors the status of each node in the blockchain network in real time; Dynamic joining or exiting of nodes: Providing flexible joining and exiting of nodes in the blockchain consortium chain, and nodes can be dynamically expanded or exited according to the system's requirements; Log management: Responsible for recording detailed logs of all operations and events in the system.

[0103] I. System and Module Implementation

[0104] As Figure 1As shown in the figure, the system adopts a hierarchical modular design, including a user layer, an application layer, a contract layer, an off-chain storage layer, the underlying blockchain layer, and a management layer. Each layer is interconnected through standardized data interfaces and protocols.

[0105] 1. Implementation of the user layer

[0106] User registration: The user inputs information such as name, ID number, and contact information through the front-end interface and uploads a scanned copy of the ID card. The system calls OCR technology to automatically extract the ID card information and completes the identity verification in combination with the live detection technology.

[0107] Identity verification: A multi-verification mechanism is adopted, including SMS verification codes, face recognition, and blockchain digital signatures. After successful verification, the user obtains a unique digital identity identifier (DID), which is stored in the underlying blockchain layer.

[0108] Certificate service: The user can submit a certificate application through the interface. After the university reviews it, a digital certificate is generated. The certificate data is hashed and stored on the chain. The user can query, download, or share the certificate online.

[0109] Identity management: Dynamically adjust user permissions based on smart contracts. For example, the administrator of the education department can grant the certificate issuance permission to the university node. The user can apply to update personal information, and the system automatically triggers contract verification and updates the on-chain record.

[0110] 2. Implementation of the application layer

[0111] Certificate management function: Provide RESTful API interfaces to support the creation (`POST / certificate`), query (`GET / certificate / {id}`), verification (`POST / verify`), and revocation (`DELETE / certificate / {id}`) of certificates. During verification, the system compares the on-chain hash value with the hash value of the certificate submitted by the user and returns the verification result.

[0112] Smart contract operation: Interact with the blockchain through Web3.js or Java SDK. For example, the university calls the `deployContract()` method to deploy a certificate issuance contract, and the user calls the `invokeContract()` method to trigger certificate query.

[0113] Role and permission management: Based on the RBAC model, three types of roles are defined:

[0114] Administrator of the education department: Has global certificate review and node management permissions;

[0115] University: Can issue and revoke certificates of its own school;

[0116] Users: Only their own certificates can be queried and downloaded.

[0117] The permission rules are written into the smart contract, and the role permissions are automatically verified before performing operations.

[0118] API interface security: The OAuth 2.0 protocol is used for identity authentication, TLS 1.3 encryption is used for data transmission, and sensitive fields (such as DID) are encrypted through the national cipher SM4 algorithm.

[0119] 3. Implementation of the contract layer

[0120] Certificate CRUD contract: Written in Solidity, the core functions include:

[0121]

[0122] Supports conditional queries, such as retrieving certificates by time range.

[0123] Permission management contract: Defines the mapping table of roles and operations. For example, when a university node calls `grantRole()`, it needs to be signed and confirmed by the administrator of the education department.

[0124] Consensus node management contract: Dynamically adjusts the node roles. When a new node joins, it needs to pledge a certain amount of margin and pass the vote of the existing nodes (≥2 / 3 consent), and the contract automatically updates the node list.

[0125] 4. Implementation of the off-chain storage layer

[0126] MySQL database: Designs the following table structures:

[0127] `users` table: Stores user DID, public key, and registration time;

[0128] `cert_metadata` table: Records certificate ID, hash value, issuing agency, and validity period;

[0129] `logs` table: Records operation logs, including timestamp, operation type, and executor IP.

[0130] IPFS private network:

[0131] (1) Cold data screening: Counts the certificate access frequency daily, and marks the data that has not been accessed for more than 30 days as cold data.

[0132] (2) Data compression: Uses the Zstandard algorithm to compress the cold data (compression ratio ≥70%), generating a `.ctb` file.

[0133] (3) IPFS upload: Uploads to the private node cluster through the `ipfs add CTB_comp` command, and returns the CID hash value.

[0134] (4) On-chain update: Call the `updateCID(string memory _oldHash, string memory _newCID)` of the smart contract to replace the original hash with the CID.

[0135] (5) Data recovery: When the user queries, the system pulls the compressed package from IPFS according to the CID, and returns the complete certificate after decompression.

[0136] 5. Underlying implementation of the blockchain

[0137] Construction of the consortium chain: Based on FISCO-BCOS 3.0, deploy at least 4 consensus nodes (physical machines or cloud servers) with the following configurations:

[0138] Node A (main area): 8-core CPU / 32GB memory / 1TB SSD;

[0139] Nodes B-D (sub-areas): 4-core CPU / 16GB memory / 500GB SSD.

[0140] z-PBFT consensus mechanism:

[0141] (1) Local consensus in the sub-area: Nodes in the sub-area adopt an optimized PBFT protocol, merging the three stages of pre-prepare, prepare, and commit into two stages to reduce the number of communication rounds.

[0142] (2) Global aggregation in the main area: The sub-area sends the consensus result to the main area, and the main node generates a global block after verification.

[0143] (3) Fault tolerance mechanism: Allow up to 1 / 3 of the nodes in the sub-area to fail, and the main area nodes adopt a hot standby solution.

[0144] Cross-layer interaction: Encapsulate functions such as transaction submission and event listening through the `BlockchainService` class of the Java SDK; the RPC module provides the ` / blockchain / query` interface to support external systems to query on-chain data.

[0145] 6. Implementation of the management layer

[0146] Node monitoring: Deploy a Prometheus + Grafana monitoring platform to collect node CPU, memory, and network traffic metrics in real time, and trigger enterprise WeChat alerts when anomalies occur.

[0147] Dynamic node management:

[0148] Node Joining: A new node submits a joining request. The management layer calls `ConsensusContract.addNode(address_node)`. After existing nodes vote and pass, the contract updates the node list.

[0149] Node Exiting: A node initiates an exit application. The contract freezes its permissions and automatically removes it after 72 hours.

[0150] Log Management: Adopts the ELK (Elasticsearch + Logstash + Kibana) stack to centrally store logs, supporting keyword retrieval and audit tracing.

[0151] II. Key Process Examples

[0152] 1. Certificate Issuance Process

[0153] (1) The user submits an application to the university.

[0154] (2) After the university reviews and approves, it generates a PDF certificate and calculates its SHA-256 hash value.

[0155] (3) Calls `CertificateCRUD.createCertificate(hash,universityAddress)` to upload to the blockchain.

[0156] (4) The original certificate is uploaded to IPFS, and the hash value is written back to the MySQL metadata table.

[0157] 2. Certificate Verification Process

[0158] (1) The user uploads the certificate file, and the system calculates its hash value.

[0159] (2) Calls `CertificateCRUD.verifyCertificate(hash)` to query the blockchain record.

[0160] (3) If it exists and the status is valid, it returns verification success; otherwise, it returns the reason for failure.

[0161] 3. Cold Data Migration Process

[0162] (1) A scheduled task scans MySQL and marks certificates with access frequencies below the threshold.

[0163] (2) Compresses the data and uploads it to IPFS to obtain the CID.

[0164] (3) Calls the smart contract to update the blockchain record, replacing the original hash with the CID.

[0165] (4) Deletes the original data from MySQL and only retains the CID index.

[0166] After deploying this system in an educational institution, the following effects are achieved:

[0167] Storage cost reduction: The amount of data on the chain is reduced by 62%, and the annual storage cost is decreased by 45%;

[0168] Query efficiency improvement: The certificate verification response time is shortened from an average of 12 seconds to 1.5 seconds;

[0169] Enhanced scalability: It supports dynamic expansion to 100 nodes, and the peak TPS reaches 2,300;

[0170] Security compliance: It passes the third-level information security protection certification and can resist DDoS attacks of 100,000 times per second.

[0171] Figure 1 This is a diagram of the system, showing the connection relationships and data flows of each layer of modules. The user layer interacts with the application layer through the API gateway; the contract layer and the blockchain underlying layer are integrated through the SDK; the off-chain storage layer is associated with the blockchain through CID; the management layer monitors the node status and dynamically adjusts the configuration.

[0172] The above embodiments are only examples. When actually implemented, the technical parameters and deployment plans can be adjusted according to specific requirements. The core of the present invention lies in constructing a highly scalable and low-cost certificate trusted management system through hierarchical design, dynamic node management, and off-chain storage optimization.

[0173] Finally, it should be noted that the above embodiments are only used to illustrate the technical solutions of the present invention and not to limit them. Although the present invention has been described in detail with reference to the preferred embodiments, those of ordinary skill in the art should understand that the technical solutions of the present invention can be modified or equivalently replaced without departing from the purpose and scope of the present technical solution, and they should all be covered within the scope of the claims of the present invention.

Claims

1. A scalable system for trusted management of degree / education certificates, characterized by: The system includes: User layer, used for user registration, identity authentication, certificate services and identity management; The application layer provides certificate management and operation functions, smart contract operation functions, role and permission management, and API interfaces; The contract layer includes the certificate CRUD contract module, the certificate authority management contract module and the consensus node management contract module, which are used for adding, deleting, modifying and checking certificate data, authority control and node dynamic management; The off-chain storage layer, including structured databases and distributed file systems, is used to store certificate metadata and cold certificate data; The underlying blockchain is based on the alliance chain architecture and adopts a regional and hierarchical consensus mechanism for transaction processing and data storage; Management layer, used for monitoring, dynamic joining / exiting, and log management of blockchain nodes; The user layer, application layer, contract layer, off-chain storage layer, blockchain bottom layer and management layer are interconnected through data interfaces and protocols.

2. The scalable system for trusted management of degree / education certificates according to claim 1 is characterized in that: The off-chain storage layer includes: MySQL database, used to store user information, certificate metadata, and operation logs; The IPFS private network is used to store compressed cold certificate data and associate it with blockchain data through hash values.

3. The scalable system for trusted management of degree / education certificates according to claim 1 is characterized in that: The underlying regional hierarchical consensus mechanism of the blockchain is the z-PBFT algorithm, which includes: The main regional node cluster is used for global consensus aggregation; Multiple sub-region node clusters achieve intra-region consensus through local consensus mechanism; The primary region and secondary region node clusters are connected via a layered communication protocol.

4. The scalable system for trusted management of degree / education certificates according to claim 2 is characterized in that: The collaborative operation of the IPFS private network and the blockchain includes: (1) Filter cold certificate data based on access frequency and compress it; (2) Upload the compressed data to IPFS and generate a unique hash value; (3) Update the hash value of the corresponding record in the blockchain; (4) Realize on-chain query and off-chain data recovery through hash value.

5. The scalable system for trusted management of degree / education certificates according to claim 1 is characterized in that: The management layer includes: Node monitoring module, real-time detection of node operation status, storage capacity and network connection; Dynamic node management module, which controls node joining, exiting and role allocation through smart contracts; Log management module records all operations and event logs.

6. The scalable system for trusted management of degree / education certificates according to claim 1, characterized in that: The certificate authority management contract module of the contract layer divides permissions based on roles, including education department administrators, colleges and universities, and user roles, and limits their operating scope to preset permissions.

7. The scalable system for trusted management of degree / education certificates according to claim 3 is characterized by: The local consensus of the sub-region node cluster in the z-PBFT algorithm adopts an improved PBFT mechanism to optimize the consensus efficiency by reducing the communication rounds.

8. The scalable system for trusted management of degree / education certificates according to claim 1 is characterized by: The API interface of the application layer supports external system integration and ensures the security of data transmission through encryption technology.

9. The scalable system for trusted management of degree / education certificates according to claim 1, characterized in that: The user-level identity authentication includes ID card scanning and multiple verification mechanisms to ensure the authenticity of the user's identity.

10. The scalable system for trusted management of degree / education certificates according to claim 1, characterized in that: The underlying blockchain is based on the FISCO-BCOS platform, adopts a consortium chain architecture, and integrates JAVA SDK modules and RPC service modules to support cross-level data interaction.

Images