Traceable and trustworthy system for digital product passport (DPP) of internet of things (IOT) product using cyber-physical coupled tokens and method thereof

Abstract

A traceable and trustworthy system and method for digital product passports applied to IoT products using virtual-real coupled tokens are disclosed. This system deploys product smart contracts and digital product passport smart contracts on a blockchain. When an IoT product is manufactured, its login information (including the product's public key) is encrypted and embedded as additional information along with the product's private key. During initial login, a primary login function is executed to generate a digital token based on the additional information. When a secondary delivery is desired for a logged-in IoT product, a secondary delivery function is executed to set delivery conditions. Upon fulfillment of these conditions, ownership of the digital token is transferred. During notarization, the digital data of the IoT product is signed to generate a notarized value, which is then written into the digital product passport smart contract for verification. This achieves the technical effect of improving the traceability and trustworthiness of virtual-real coupled products.

Claims

1. A traceable and trusted system for digital product passports applied to IoT products using virtual-real coupled tokens, the system comprising: a product issuer host, which includes: a deployment module for deploying a product smart contract on a blockchain, the product smart contract including a primary login function and a first- and second-level delivery function, wherein the primary login function includes a product issuer public key; and a production module connected to the deployment module, used for, when producing an IoT product, the product issuer host encrypts a login message corresponding to the IoT product with a product issuer private key to form encrypted product content, and embeds the encrypted product content and a product private key together as additional information into the IoT product, wherein... The login message includes a product public key corresponding to the product private key; a primary login host, connected to the blockchain, the primary login host includes: a login module, used to execute the primary login function to generate a digital token for the corresponding IoT product according to the additional message when the IoT product has not performed primary login, and to decrypt the encrypted content of the IoT product encrypted with the product issuer's private key using the product issuer's public key to obtain the product public key included in the login message; when the product public key matches the login message of the product issuer host, the ownership of the digital token is transferred to the primary login host, and the product public key is recorded as the verification basis for secondary delivery; A delivery module, connected to the login module, is configured to, when performing secondary delivery on an IoT product that has already been logged into with the digital token, first execute the secondary delivery function to set a delivery condition, the delivery condition including a receiving end message and a pending question, the pending question requiring the use of the product private key and a receiving end private key; a secondary delivery receiving end host, connected to the blockchain, is configured to, upon receiving the IoT product, answer the pending question using the receiving end private key and the product private key in the additional message, when the answer is correct, indicating that the delivery condition is met, thereby transferring ownership of the digital token of the IoT product to the secondary delivery receiving end. A storage host, connected to the blockchain, has write permissions to a digital product passport smart contract pre-deployed on the blockchain. During storage, it uses the product's private key to sign N digital data points of the IoT product, generating N corresponding storage values, which are then written into the digital product passport smart contract as storage records. The digital product passport smart contract includes a contract address, a unique identifier for the IoT product, and its corresponding N storage values, where N is a positive integer. A verification host, connected to the blockchain, recalculates N new storage values ​​based on the N digital data points during verification. These new storage values ​​are compared one by one with the existing N storage values. If all comparisons match, the unique identifier is checked against the IoT product. If they match, the N digital data points of the IoT product pass verification.

2. The traceable and trusted system for digital product passports of IoT products, as described in Request 1, wherein the digital tokens include non-fungible tokens (NFTs) and are generated through the primary login host, which serves as public key infrastructure (PKI).

3. As requested in Item 1, the application of virtual-real coupled tokens to a traceable and trusted digital product passport system for IoT products, wherein the digital data includes the additional information, the address of the primary login host and the address of the secondary delivery receiving host, and a Uniform Resource Identifier (URI) associated with the IoT product, at least one of the three.

4. As in Request 1, the application of virtual-real coupled tokens in a traceable and trusted digital product passport system for Internet of Things products, wherein the digital product passport smart contract includes a conversion method for the digital data, the conversion method including at least one of encoding and hash algorithms, for first encoding and hashing the digital data and then signing it to generate the stored value.

5. A traceable and trustworthy method for applying virtual-real coupled tokens to digital product passports in Internet of Things (IoT) products, comprising the following steps: A product issuer host deploys a product smart contract on a blockchain. The product smart contract includes a primary login function and a first- and second-level delivery function. The primary login function contains a product issuer public key. When producing an IoT product, the product issuer host encrypts a login message corresponding to the IoT product using a product issuer private key to form encrypted product content. The encrypted product content and the product private key are then embedded into the IoT product as an additional message. The login message contains a product public key corresponding to the product private key. When the IoT product has not undergone primary login, a primary login host executes the primary login function to generate a digital token for the IoT product based on the additional message. The primary login host decrypts the encrypted product content encrypted with the product issuer private key using the product issuer public key to obtain the product public key contained in the login message. When the product public key matches the login message of the product issuer host, ownership of the digital token is transferred to the primary login host, and the product public key is recorded as the verification basis for second-level delivery. When a secondary delivery is to be performed on an IoT product that has been logged into with the digital token, the primary login host first executes the secondary delivery function to set a delivery condition. The delivery condition includes a receiving end message and a pending question. The pending question needs to be answered using the product's private key and a receiving end private key. When the IoT product is received, the primary and secondary delivery receiving end hosts then answer the pending question using the receiving end private key and the product's private key in the additional message. A correct answer indicates that the delivery condition has been met, and ownership of the digital token of the IoT product is transferred to the secondary delivery receiving end. During evidence preservation, only one host with write permissions is allowed to sign N digital data points of the IoT product using the product's private key to generate N corresponding evidence preservation values. These values ​​are then written into a digital product passport smart contract pre-deployed on the blockchain as evidence preservation records. The digital product passport smart contract includes a contract address of the product smart contract, a unique identifier of the IoT product, and its corresponding N evidence preservation values, where N is a positive integer. During verification, a verification host recalculates N new evidence preservation values ​​based on the N digital data points and compares them one by one with the N existing evidence preservation values. If all comparisons match, the unique identifier is then checked to see if it matches the IoT product. If it does, the N digital data points of the IoT product pass verification.

6. A traceable and trusted method for applying virtual-real coupled tokens to digital product passports of IoT products, as described in Request 5, wherein the digital tokens include non-fungible tokens (NFTs) and are generated through the primary login host, which serves as a public key infrastructure (PKI).

7. A traceable and trustworthy method for applying virtual-real coupled tokens to digital product passports of IoT products, as described in Request 5, wherein the digital data includes the additional information, the address of the primary login host and the address of the secondary delivery receiver host, and a Uniform Resource Identifier (URI) associated with the IoT product, at least one of the three.

8. The traceable and trustworthy method for applying virtual-real coupled tokens to digital product passports of Internet of Things products, as described in Request 5, wherein the digital product passport smart contract includes a conversion method for the digital data, the conversion method including at least one of encoding and hash algorithms, for first encoding and hashing the digital data and then signing it to generate the stored value.

Images