Supply chain privacy data collaboration method based on block chain channel

Abstract

The invention discloses a supply chain privacy data collaboration method based on a block chain channel, and belongs to the technical field of block chain privacy protection. The system comprises a channel management module, a data classification module, an authority management module and a data verification module. The method comprises the following steps: establishing an independent private data channel for a core enterprise and each supplier in an alliance chain network; dividing the supply chain data into global shared data and channel private data according to the data sensitivity; dynamic authority control based on roles and business scenes is realized through an intelligent contract; and data credibility verification under privacy protection is realized by adopting a zero-knowledge proof technology. According to the method, through a channel isolation mechanism, on the premise of ensuring that a core enterprise is globally visible to a supply chain, commercial confidentials such as production cost and process parameters of suppliers are effectively protected, the contradiction between privacy protection and data transparency in supply chain collaboration is solved, and the security and credibility of multi-level supply chain collaboration are remarkably improved.

Description

Technical Field

[0001] This invention relates to the field of blockchain privacy protection technology, specifically a supply chain privacy data collaboration method based on a blockchain channel. Background Technology

[0002] In complex supply chain collaborative manufacturing environments, core enterprises need to share production data with multi-tiered suppliers to achieve efficient collaboration, but at the same time face significant privacy protection challenges. Traditional solutions have the following problems: First, existing supply chain collaboration platforms mostly adopt a completely transparent data sharing model, which exposes suppliers' commercially sensitive information (such as production costs, process parameters, production schedules, etc.) to competitors, seriously affecting suppliers' enthusiasm for participating in collaboration.

[0003] Secondly, while some encryption solutions protect data privacy, they sacrifice data availability and verifiability. Core enterprises cannot effectively verify the authenticity and timeliness of data provided by suppliers, making it difficult to achieve truly trustworthy collaboration.

[0004] Furthermore, traditional access control mechanisms, based on static permission settings, cannot adapt to the dynamically changing business needs in supply chain collaboration. When temporary quality issues arise, it is necessary to quickly authorize third-party testing agencies to access relevant data, and existing systems struggle to achieve fine-grained dynamic permission management.

[0005] Although there are some privacy protection schemes based on zero-knowledge proofs, these schemes have high computational complexity, making it difficult to meet the real-time requirements of industrial manufacturing scenarios, and their implementation costs are high, making them unsuitable for deployment in resource-constrained edge environments.

[0006] The information disclosed in this background section is intended only to enhance the understanding of the overall background of the invention and should not be construed as an admission or in any way implying that the information constitutes prior art known to those skilled in the art. Summary of the Invention

[0007] The technical problem to be solved by this invention is to overcome the above-mentioned technical defects and provide a supply chain privacy data collaboration method based on blockchain channels. It aims to resolve the contradiction between privacy protection and data transparency in the existing supply chain collaboration system, and effectively protect the trade secrets of suppliers at all levels while ensuring that the core enterprise has full visibility over the supply chain.

[0008] To address the aforementioned problems, the technical solution of this invention is a supply chain privacy data collaboration system based on a blockchain channel, comprising: The channel management module is used to create and manage multiple private data channels in the consortium blockchain network. Each private channel contains a core enterprise node and one or more supplier nodes. The data classification module is used to divide supply chain data into globally shared data and private collaborative data according to the sensitivity of the data and business needs. The permission management module implements dynamic access control policies based on smart contracts, and supports fine-grained permission management based on roles, time, and business scenarios. The data verification module uses zero-knowledge proof technology to allow suppliers to prove the authenticity of data to core enterprises without disclosing specific sensitive information.

[0009] Preferably, the channel management module includes: The channel creation unit is responsible for establishing private data channels between the core enterprise and various suppliers based on business relationships. The channel maintenance unit monitors the channel status and handles dynamic changes to channel members; The channel audit unit records channel operation logs and ensures compliance.

[0010] Preferably, the data classification module divides the supply chain data into: Global data includes basic order information, delivery status, and quality certification marks. Channel private data: including detailed production process parameters, cost structure, and production capacity information.

[0011] Preferably, the permission management module includes: The identity authentication unit verifies the digital identity and permission level of the participants; The strategy execution unit executes access control according to the rules defined in the smart contract; The dynamic authorization unit supports granting and revoking temporary permissions based on business scenarios.

[0012] Preferably, the data verification module includes: The proof generation unit uses zero-knowledge proof technology to generate proofs of data authenticity. Verify the execution unit to validate the proof's validity without exposing the original data; The result recording unit records the verification result on the blockchain as a trusted credential.

[0013] This invention also discloses a supply chain privacy data collaboration method based on a blockchain channel, applied to the aforementioned system, comprising the following steps; Step 1: Establish independent private data channels between the core enterprise and each supplier in the consortium blockchain network; Step 2: Classify supply chain data into globally shared data and channel-private data based on data sensitivity; Step 3: Implement dynamic access control based on roles and business scenarios through smart contracts; Step 4: Employ zero-knowledge proof technology to achieve trusted data verification under privacy protection.

[0014] Preferably, the establishment of the private data channel includes: the core enterprise initiating a channel creation request and specifying participating suppliers, verifying the identity and permissions of the participants, initializing the channel configuration and distributing access credentials, and establishing a channel audit log recording mechanism.

[0015] Preferably, the data classification processing includes: analyzing the business sensitivity and privacy requirements of the data, setting corresponding access policies for different types of data, and implementing isolated storage and transmission of global data and private data.

[0016] Preferably, the dynamic access control includes: role-based access control based on the RBAC model, support for time-limited temporary access authorization, automatic adjustment of permission levels according to business scenarios, and real-time monitoring and recording of all data access behaviors.

[0017] Preferably, the privacy-preserving data verification includes: the supplier using a zero-knowledge proof tool to generate a data authenticity certificate; the core enterprise verifying the validity of the certificate through a verification contract; returning a verification conclusion without disclosing any sensitive data content; and recording the verification result on the blockchain for subsequent auditing.

[0018] The advantages of this invention compared to existing technologies are: 1. This invention achieves a balance between privacy protection and data transparency, protecting suppliers' trade secrets while ensuring core enterprises' overall visibility into the supply chain.

[0019] 2. This invention achieves dynamic, fine-grained access control through smart contracts, which can adapt to the complex permission management needs in supply chain collaboration.

[0020] 3. This invention employs a lightweight zero-knowledge proof scheme, which protects privacy while ensuring data verifiability, and has low computational overhead.

[0021] 4. This invention supports the dynamic joining and leaving of supply chain members, and has good scalability and flexibility. Attached Figure Description

[0022] Figure 1 This is a schematic diagram of the system architecture of the present invention; Figure 2 This is a flowchart of the private data channel establishment process of the system of the present invention; Figure 3 This is a flowchart of the data classification and access control system of the present invention; Figure 4 This is a flowchart of the privacy protection data verification process of the system of the present invention. Detailed Implementation

[0023] To make the content of this invention easier to understand, the technical solutions in the embodiments of this invention will be clearly and completely described below with reference to the accompanying drawings.

[0024] A supply chain privacy data collaboration system based on blockchain channels includes: 1. Channel Management Module: The channel management module is used to create and manage multiple private data channels in the consortium blockchain network. Each private channel contains a core enterprise node and one or more supplier nodes. The channel management module includes: The channel creation unit is responsible for establishing private data channels between the core enterprise and various suppliers based on business relationships. The channel maintenance unit monitors the channel status and handles dynamic changes to channel members; The channel audit unit records channel operation logs and ensures compliance.

[0025] 2. Data Classification Module: This module is used to classify supply chain data into globally shared data and private collaborative data based on the sensitivity of the data and business needs. The data classification module divides supply chain data into: Global data includes basic order information, delivery status, and quality certification marks. Channel private data: including detailed production process parameters, cost structure, and production capacity information.

[0026] 3. Access Control Module: The access control module implements dynamic access control policies based on smart contracts, supporting fine-grained access control based on roles, time, and business scenarios. The access control module includes: The identity authentication unit verifies the digital identity and permission level of the participants; The strategy execution unit executes access control according to the rules defined in the smart contract; The dynamic authorization unit supports granting and revoking temporary permissions based on business scenarios.

[0027] 4. Data Verification Module: The data verification module uses zero-knowledge proof technology to allow suppliers to prove the authenticity of data to core enterprises without disclosing specific sensitive information.

[0028] The data validation module includes: The proof generation unit uses zero-knowledge proof technology to generate proofs of data authenticity. Verify the execution unit to validate the proof's validity without exposing the original data; The result recording unit records the verification result on the blockchain as a trusted credential.

[0029] A blockchain-based supply chain privacy data collaboration method, applying the aforementioned system, includes the following steps; Step 1: Establish independent private data channels between the core enterprise and each supplier in the consortium blockchain network; Step 2: Classify supply chain data into globally shared data and channel-private data based on data sensitivity; Step 3: Implement dynamic access control based on roles and business scenarios through smart contracts; Step 4: Employ zero-knowledge proof technology to achieve trusted data verification under privacy protection.

[0030] Establishing a private data channel includes: the core enterprise initiating a channel creation request and specifying participating suppliers, verifying the identity and permissions of the participants, initializing the channel configuration and distributing access credentials, and establishing a channel audit log recording mechanism.

[0031] Data classification and processing includes: analyzing the business sensitivity and privacy requirements of data, setting corresponding access policies for different types of data, and achieving isolated storage and transmission of global data and private data.

[0032] Dynamic access control includes: role-based access management based on the RBAC model, support for time-limited temporary access authorization, automatic adjustment of permission levels according to business scenarios, and real-time monitoring and recording of all data access behaviors.

[0033] Privacy-preserving data verification includes: suppliers using zero-knowledge proof tools to generate data authenticity proofs; core enterprises verifying the validity of the proofs through verification contracts; returning verification conclusions without disclosing any sensitive data content; and recording the verification results on the blockchain for subsequent auditing. Example

[0034] System Architecture Implementation refer to Figure 1 The implementation of this system includes the following core components: 1. Blockchain Network Layer Hyperledger Fabric is used as the underlying blockchain platform; Deploy multiple organizational nodes, including core enterprises and multi-tiered suppliers; Configure a Kafka-based sorting service to ensure transaction order consistency.

[0035] 2. Channel Management Layer Establish an independent private data channel for each supplier; Configure channel policies, and define member permissions and access rules; Achieve data isolation and secure communication between channels.

[0036] 3. Smart Contract Layer Deploy channel management contracts to handle channel creation and maintenance; Deploy access control contracts to implement dynamic access policies; Deploy data verification contracts to support privacy-preserving data verification.

[0037] Channel establishment process refer to Figure 2 The establishment of a private data channel includes the following steps: S201: The core enterprise initiates a channel creation request, specifying the participating supplier members; S202: The system verifies the identity and permissions of the participants; S203: Initialize the channel configuration on the blockchain, including access policies and encryption parameters; S204: Distribute digital certificates and access keys to channel members; S205: Establishment complete, channel is now operational.

[0038] Data Collaboration Implementation refer to Figure 3 The specific implementation process of data collaboration: 1. Data classification and processing The supplier nodes categorize and label the generated data. Global data is submitted directly to the main chain; Private data is transmitted through a designated channel.

[0039] 2. Permission verification The smart contract verifies the requester's access permissions; Check context information such as access time and business scenario; Dynamically adjust permission levels.

[0040] 3. Data Access Authorize users to access sensitive data through private channels; Record all data access activities to the audit log; Real-time monitoring of abnormal access patterns.

[0041] Privacy protection verification refer to Figure 4 To achieve data verification while protecting privacy, the following scheme is adopted: 1. Proof generation Suppliers use zero-knowledge proof tools to generate proof of data authenticity; The proof process does not reveal the original data content; Generate lightweight verification evidence.

[0042] 2. Verify execution The core enterprise submits a verification request to the smart contract; The contract call verification algorithm checks the validity of the proof; Returns the verification result without exposing the specific data.

[0043] 3. Application of Results The verification result is recorded on the blockchain as a trusted credential. Support business decisions based on verification results; It provides a reliable foundation for applications such as supply chain finance.

[0044] V. Typical Application Scenarios Scenario 1: Multi-level supplier collaboration Tier 1 suppliers share detailed production data with core enterprises through private channels; Tier 2 suppliers collaborate with Tier 1 suppliers through independent channels; Core enterprises can only see the aggregated status information.

[0045] Scenario 2: Quality Traceability Collaboration When a quality issue arises, a third-party testing agency is temporarily authorized; the testing agency accesses relevant data through a temporary channel; access is immediately revoked after the issue is resolved.

[0046] Through the above implementation methods, the present invention can effectively solve the privacy protection problem in supply chain collaboration, ensuring the security of the business secrets of all participants while ensuring the efficiency of business collaboration.

[0047] The present invention and its embodiments have been described above. This description is not restrictive, and the accompanying drawings are only one embodiment of the present invention. In conclusion, if those skilled in the art are inspired by this description and design similar structures and embodiments without departing from the spirit of the present invention, such designs should fall within the protection scope of the present invention.

Claims

1. A supply chain privacy data collaboration system based on blockchain channels, characterized in that, include: The channel management module is used to create and manage multiple private data channels in the consortium blockchain network. Each private channel contains a core enterprise node and one or more supplier nodes. The data classification module is used to divide supply chain data into globally shared data and private collaborative data according to the sensitivity of the data and business needs. The permission management module implements dynamic access control policies based on smart contracts, and supports fine-grained permission management based on roles, time, and business scenarios. The data verification module uses zero-knowledge proof technology to allow suppliers to prove the authenticity of data to core enterprises without disclosing specific sensitive information.

2. The supply chain privacy data collaboration system based on blockchain channels according to claim 1, characterized in that: The channel management module includes: a channel creation unit, responsible for establishing private data channels between the core enterprise and various suppliers based on business relationships; and a channel maintenance unit, which monitors the channel status and handles dynamic changes in channel members. The channel audit unit records channel operation logs and ensures compliance.

3. The supply chain privacy data collaboration system based on a blockchain channel according to claim 1, characterized in that: The data classification module divides supply chain data into: global data, including basic order information, delivery status, and quality qualification marks; and channel private data, including detailed production process parameters, cost composition, and production capacity information.

4. The supply chain privacy data collaboration system based on a blockchain channel according to claim 1, characterized in that: The permission management module includes: an identity authentication unit, which verifies the digital identity and permission level of the participants; a policy execution unit, which executes access control according to the rules defined in the smart contract; and a dynamic authorization unit, which supports the granting and revocation of temporary permissions based on business scenarios.

5. A supply chain privacy data collaboration system based on a blockchain channel according to claim 1, characterized in that: The data verification module includes: a proof generation unit that uses zero-knowledge proof technology to generate a proof of data authenticity; a verification execution unit that verifies the validity of the proof without exposing the original data; and a result recording unit that records the verification result to the blockchain as a trusted credential.

6. A supply chain privacy data collaboration method based on a blockchain channel, applied to the system described in any one of claims 1-5, characterized in that, Includes the following steps; Step 1: Establish independent private data channels between the core enterprise and each supplier in the consortium blockchain network; Step 2: Classify supply chain data into globally shared data and channel-private data based on data sensitivity; Step 3: Implement dynamic access control based on roles and business scenarios through smart contracts; Step 4: Employ zero-knowledge proof technology to achieve trusted data verification under privacy protection.

7. A supply chain privacy data collaboration method based on a blockchain channel according to claim 6, characterized in that: The establishment of the private data channel includes: the core enterprise initiating a channel creation request and specifying participating suppliers, verifying the identity and permissions of the participants, initializing the channel configuration and distributing access credentials, and establishing a channel audit log recording mechanism.

8. A supply chain privacy data collaboration method based on a blockchain channel according to claim 6, characterized in that: The data classification and processing includes: analyzing the business sensitivity and privacy requirements of the data, setting corresponding access policies for different types of data, and implementing isolated storage and transmission of global data and private data.

9. A supply chain privacy data collaboration method based on a blockchain channel according to claim 6, characterized in that: The dynamic access control includes: role-based access control based on the RBAC model, support for time-limited temporary access authorization, automatic adjustment of permission levels according to business scenarios, and real-time monitoring and recording of all data access behaviors.

10. A supply chain privacy data collaboration method based on a blockchain channel according to claim 6, characterized in that: The privacy-preserving data verification includes: the supplier using a zero-knowledge proof tool to generate a data authenticity certificate; the core enterprise verifying the validity of the certificate through a verification contract; returning the verification conclusion without disclosing any sensitive data content; and recording the verification result on the blockchain for subsequent auditing.

Images